Custom foo [{"family":"inet6","match":"-m hl --hl-lt 7","target":"REJECT --reject-with icmpv6-no-route"},{"target":"LED --led-trigger-id foo"}] (custom-chain) Dnat 1 {"in":["_fw","A"]} (zone) inet/nat/OUTPUT -j REDIRECT inet/nat/PREROUTING -i eth0 -j REDIRECT Dnat 2 {"in":"B"} (zone) inet/nat/PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT Filter 1 {"conn-limit":1,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 inet/filter/limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-0 -m limit --limit 1/second -j LOG inet/filter/logdrop-0 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-0 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-0 inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 inet6/filter/limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-0 -m limit --limit 1/second -j LOG inet6/filter/logdrop-0 -j DROP Filter 2 {"action":"pass","conn-limit":1,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 inet/filter/limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1 -m limit --limit 1/second -j LOG inet/filter/logdrop-1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-1 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1 inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 inet6/filter/limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1 -j DROP Filter 3 {"conn-limit":1,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 inet/filter/limit-2 -m limit --limit 1/second -j LOG inet/filter/limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-2 -m limit --limit 1/second -j LOG inet/filter/logdrop-2 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-2 inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 inet6/filter/limit-2 -m limit --limit 1/second -j LOG inet6/filter/limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-2 -m limit --limit 1/second -j LOG inet6/filter/logdrop-2 -j DROP Filter 4 {"action":"pass","conn-limit":1,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 inet/filter/limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-3 -m limit --limit 1/second -j LOG inet/filter/logdrop-3 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-3 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-3 inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 inet6/filter/limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-3 -m limit --limit 1/second -j LOG inet6/filter/logdrop-3 -j DROP Filter 5 {"conn-limit":1,"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 inet/filter/limit-4 -j TEE --gateway 10.0.0.1 inet/filter/limit-4 -j TEE --gateway 10.0.0.2 inet/filter/limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-4 -m limit --limit 1/second -j LOG inet/filter/logdrop-4 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-4 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-4 inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 inet6/filter/limit-4 -j TEE --gateway fc00::2 inet6/filter/limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-4 -m limit --limit 1/second -j LOG inet6/filter/logdrop-4 -j DROP Filter 6 {"action":"pass","conn-limit":1,"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-5 -m limit --limit 1/second -j LOG inet/filter/logdrop-5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-5 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-5 inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 inet6/filter/limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-5 -m limit --limit 1/second -j LOG inet6/filter/logdrop-5 -j DROP Filter 7 {"conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 inet/filter/limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-6 -m limit --limit 1/second -j LOG inet/filter/logdrop-6 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-6 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-6 inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 inet6/filter/limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-6 -m limit --limit 1/second -j LOG inet6/filter/logdrop-6 -j DROP Filter 8 {"action":"pass","conn-limit":1,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 inet/filter/limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-7 -m limit --limit 1/second -j LOG inet/filter/logdrop-7 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-7 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-7 inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 inet6/filter/limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-7 -m limit --limit 1/second -j LOG inet6/filter/logdrop-7 -j DROP Filter 9 {"conn-limit":1,"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 inet/filter/limit-8 -m limit --limit 12/minute -j ULOG inet/filter/limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-8 -m limit --limit 1/second -j LOG inet/filter/logdrop-8 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-8 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-8 inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 inet6/filter/limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-8 -m limit --limit 1/second -j LOG inet6/filter/logdrop-8 -j DROP Filter 10 {"action":"pass","conn-limit":1,"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 inet/filter/limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-9 -m limit --limit 1/second -j LOG inet/filter/logdrop-9 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-9 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-9 inet6/filter/limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 inet6/filter/logdrop-9 -m limit --limit 1/second -j LOG inet6/filter/logdrop-9 -j DROP Filter 11 {"conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-10 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-10 inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 12 {"action":"pass","conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-11 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-11 inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 13 {"conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 inet/filter/limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-12 -m limit --limit 1/second -j LOG inet/filter/limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-12 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-12 inet6/filter/limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-12 -m limit --limit 1/second -j LOG inet6/filter/limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 14 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 inet/filter/limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-13 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-13 inet6/filter/limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 15 {"conn-limit":{"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 inet/filter/limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-14 -j TEE --gateway 10.0.0.1 inet/filter/limit-14 -j TEE --gateway 10.0.0.2 inet/filter/limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-14 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-14 inet6/filter/limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-14 -j TEE --gateway fc00::2 inet6/filter/limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 16 {"action":"pass","conn-limit":{"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-15 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-15 inet6/filter/limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 17 {"conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 inet/filter/limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-16 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-16 inet6/filter/limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 18 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 inet/filter/limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-17 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-17 inet6/filter/limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 19 {"conn-limit":{"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 inet/filter/limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-18 -m limit --limit 12/minute -j ULOG inet/filter/limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-18 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-18 inet6/filter/limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 20 {"action":"pass","conn-limit":{"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 inet/filter/limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-19 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-19 inet6/filter/limit-19 -m recent --name limit-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 21 {"conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 inet/filter/limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-20 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-20 inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 22 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 inet/filter/limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-21 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-21 inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 23 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-22 -m limit --limit 1/second -j LOG inet/filter/limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-22 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-22 inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-22 -m limit --limit 1/second -j LOG inet6/filter/limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 24 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-23 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-23 inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 25 {"conn-limit":{"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 inet/filter/limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-24 -j TEE --gateway 10.0.0.1 inet/filter/limit-24 -j TEE --gateway 10.0.0.2 inet/filter/limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-24 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-24 inet6/filter/limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-24 -j TEE --gateway fc00::2 inet6/filter/limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 26 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-25 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-25 inet6/filter/limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 27 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 inet/filter/limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-26 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-26 inet6/filter/limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 28 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 inet/filter/limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-27 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-27 inet6/filter/limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 29 {"conn-limit":{"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 inet/filter/limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-28 -m limit --limit 12/minute -j ULOG inet/filter/limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-28 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-28 inet6/filter/limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 30 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 inet/filter/limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-29 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-29 inet6/filter/limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 31 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 inet/filter/limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-30 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-30 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-30 inet6/filter/limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-30 -j ACCEPT Filter 32 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 inet/filter/limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-31 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-31 inet6/filter/limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 33 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 inet/filter/limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-32 -m limit --limit 1/second -j LOG inet/filter/limit-32 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-32 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-32 inet6/filter/limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-32 -m limit --limit 1/second -j LOG inet6/filter/limit-32 -j ACCEPT Filter 34 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 inet/filter/limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-33 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-33 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-33 inet6/filter/limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-33 -m limit --limit 1/second -j LOG Filter 35 {"conn-limit":{"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 inet/filter/limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-34 -j TEE --gateway 10.0.0.1 inet/filter/limit-34 -j TEE --gateway 10.0.0.2 inet/filter/limit-34 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-34 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-34 inet6/filter/limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-34 -j TEE --gateway fc00::2 inet6/filter/limit-34 -j ACCEPT Filter 36 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 inet/filter/limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-35 -j TEE --gateway 10.0.0.1 inet/filter/limit-35 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-35 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-35 inet6/filter/limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-35 -j TEE --gateway fc00::2 Filter 37 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-36 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 inet6/filter/limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-36 -j ACCEPT Filter 38 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 inet6/filter/limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 39 {"conn-limit":{"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-38 -m limit --limit 12/minute -j ULOG inet/filter/limit-38 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 inet6/filter/limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-38 -j ACCEPT Filter 40 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-39 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 inet6/filter/limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 41 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 inet6/filter/limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 42 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 inet6/filter/limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 43 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-42 -m limit --limit 1/second -j LOG inet/filter/limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 inet6/filter/limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-42 -m limit --limit 1/second -j LOG inet6/filter/limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 44 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 inet/filter/limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 inet6/filter/limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 45 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-44 -j TEE --gateway 10.0.0.1 inet/filter/limit-44 -j TEE --gateway 10.0.0.2 inet/filter/limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 inet6/filter/limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-44 -j TEE --gateway fc00::2 inet6/filter/limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 46 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 inet6/filter/limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 47 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 inet6/filter/limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 48 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 inet/filter/limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 inet6/filter/limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 49 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-48 -m limit --limit 12/minute -j ULOG inet/filter/limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 inet6/filter/limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 50 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 inet/filter/limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 inet6/filter/limit-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 51 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/limit-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-50 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 inet6/filter/limit-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-50 -j ACCEPT Filter 52 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/limit-51 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 inet6/filter/limit-51 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 53 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/limit-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-52 -m limit --limit 1/second -j LOG inet/filter/limit-52 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 inet6/filter/limit-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-52 -m limit --limit 1/second -j LOG inet6/filter/limit-52 -j ACCEPT Filter 54 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 inet/filter/limit-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-53 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 inet6/filter/limit-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-53 -m limit --limit 1/second -j LOG Filter 55 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-54 -j TEE --gateway 10.0.0.1 inet/filter/limit-54 -j TEE --gateway 10.0.0.2 inet/filter/limit-54 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 inet6/filter/limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-54 -j TEE --gateway fc00::2 inet6/filter/limit-54 -j ACCEPT Filter 56 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 inet/filter/limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-55 -j TEE --gateway 10.0.0.1 inet/filter/limit-55 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 inet6/filter/limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-55 -j TEE --gateway fc00::2 Filter 57 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-56 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 inet6/filter/limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-56 -j ACCEPT Filter 58 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 inet6/filter/limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 59 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-58 -m limit --limit 12/minute -j ULOG inet/filter/limit-58 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 inet6/filter/limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-58 -j ACCEPT Filter 60 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 inet/filter/limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-59 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 inet6/filter/limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 61 {"conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-60 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-60 inet6/filter/limit-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 62 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 inet/filter/limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-61 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-61 inet6/filter/limit-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-61 -m recent --name user:C --rsource --mask fe00:: --set Filter 63 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-62 -m limit --limit 1/second -j LOG inet/filter/limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-62 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-62 inet6/filter/limit-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-62 -m limit --limit 1/second -j LOG inet6/filter/limit-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 64 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-63 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-63 inet6/filter/limit-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 65 {"conn-limit":{"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-64 -j TEE --gateway 10.0.0.1 inet/filter/limit-64 -j TEE --gateway 10.0.0.2 inet/filter/limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-64 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-64 inet6/filter/limit-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-64 -j TEE --gateway fc00::2 inet6/filter/limit-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 66 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 inet/filter/limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-65 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-65 inet6/filter/limit-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 67 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-66 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-66 inet6/filter/limit-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 68 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-67 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-67 inet6/filter/limit-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-67 -m recent --name user:C --rsource --mask fe00:: --set Filter 69 {"conn-limit":{"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-68 -m limit --limit 12/minute -j ULOG inet/filter/limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-68 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-68 inet6/filter/limit-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 70 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-69 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-69 inet6/filter/limit-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 71 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/limit-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-70 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-70 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-70 inet6/filter/limit-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-70 -j ACCEPT Filter 72 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/limit-71 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-71 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-71 inet6/filter/limit-71 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 73 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/limit-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-72 -m limit --limit 1/second -j LOG inet/filter/limit-72 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-72 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-72 inet6/filter/limit-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-72 -m limit --limit 1/second -j LOG inet6/filter/limit-72 -j ACCEPT Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 inet/filter/limit-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-73 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-73 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-73 inet6/filter/limit-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-73 -m limit --limit 1/second -j LOG Filter 75 {"conn-limit":{"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/limit-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-74 -j TEE --gateway 10.0.0.1 inet/filter/limit-74 -j TEE --gateway 10.0.0.2 inet/filter/limit-74 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-74 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-74 inet6/filter/limit-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-74 -j TEE --gateway fc00::2 inet6/filter/limit-74 -j ACCEPT Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/limit-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-75 -j TEE --gateway 10.0.0.1 inet/filter/limit-75 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-75 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-75 inet6/filter/limit-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-75 -j TEE --gateway fc00::2 Filter 77 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/limit-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-76 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-76 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-76 inet6/filter/limit-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-76 -j ACCEPT Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 inet/filter/limit-77 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-77 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-77 inet6/filter/limit-77 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 79 {"conn-limit":{"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/limit-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-78 -m limit --limit 12/minute -j ULOG inet/filter/limit-78 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-78 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-78 inet6/filter/limit-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-78 -j ACCEPT Filter 80 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 inet/filter/limit-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-79 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-79 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-79 inet6/filter/limit-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 81 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-80 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-80 inet6/filter/limit-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 82 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-81 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-81 inet6/filter/limit-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-81 -m recent --name user:C --rdest --mask fe00:: --set Filter 83 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-82 -m limit --limit 1/second -j LOG inet/filter/limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-82 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-82 inet6/filter/limit-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-82 -m limit --limit 1/second -j LOG inet6/filter/limit-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 84 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 inet/filter/limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-83 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-83 inet6/filter/limit-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-84 -j TEE --gateway 10.0.0.1 inet/filter/limit-84 -j TEE --gateway 10.0.0.2 inet/filter/limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-84 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-84 inet6/filter/limit-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-84 -j TEE --gateway fc00::2 inet6/filter/limit-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 inet/filter/limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-85 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-85 inet6/filter/limit-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-86 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-86 inet6/filter/limit-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-87 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-87 inet6/filter/limit-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-87 -m recent --name user:C --rdest --mask fe00:: --set Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-88 -m limit --limit 12/minute -j ULOG inet/filter/limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-88 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-88 inet6/filter/limit-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 inet/filter/limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-89 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-89 inet6/filter/limit-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 91 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/limit-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-90 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-90 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-90 inet6/filter/limit-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-90 -j ACCEPT Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 inet/filter/limit-91 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-91 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-91 inet6/filter/limit-91 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 93 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/limit-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-92 -m limit --limit 1/second -j LOG inet/filter/limit-92 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-92 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-92 inet6/filter/limit-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-92 -m limit --limit 1/second -j LOG inet6/filter/limit-92 -j ACCEPT Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/limit-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-93 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-93 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-93 inet6/filter/limit-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-93 -m limit --limit 1/second -j LOG Filter 95 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/limit-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-94 -j TEE --gateway 10.0.0.1 inet/filter/limit-94 -j TEE --gateway 10.0.0.2 inet/filter/limit-94 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-94 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-94 inet6/filter/limit-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-94 -j TEE --gateway fc00::2 inet6/filter/limit-94 -j ACCEPT Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 inet/filter/limit-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-95 -j TEE --gateway 10.0.0.1 inet/filter/limit-95 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-95 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-95 inet6/filter/limit-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-95 -j TEE --gateway fc00::2 Filter 97 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/limit-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-96 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-96 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-96 inet6/filter/limit-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-96 -j ACCEPT Filter 98 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 inet/filter/limit-97 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-97 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-97 inet6/filter/limit-97 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 99 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/limit-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-98 -m limit --limit 12/minute -j ULOG inet/filter/limit-98 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-98 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-98 inet6/filter/limit-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-98 -j ACCEPT Filter 100 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/limit-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-99 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-99 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-99 inet6/filter/limit-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 101 {"conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-10 -m limit --limit 1/second -j LOG inet/filter/logdrop-10 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-100 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-100 inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-10 -m limit --limit 1/second -j LOG inet6/filter/logdrop-10 -j DROP Filter 102 {"action":"pass","conn-limit":{},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-11 -m limit --limit 1/second -j LOG inet/filter/logdrop-11 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-101 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-101 inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-11 -m limit --limit 1/second -j LOG inet6/filter/logdrop-11 -j DROP Filter 103 {"conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 inet/filter/limit-102 -m limit --limit 1/second -j LOG inet/filter/limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-12 -m limit --limit 1/second -j LOG inet/filter/logdrop-12 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-102 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-102 inet6/filter/limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 inet6/filter/limit-102 -m limit --limit 1/second -j LOG inet6/filter/limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-12 -m limit --limit 1/second -j LOG inet6/filter/logdrop-12 -j DROP Filter 104 {"action":"pass","conn-limit":{},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 inet/filter/limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-13 -m limit --limit 1/second -j LOG inet/filter/logdrop-13 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-103 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-103 inet6/filter/limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 inet6/filter/limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-13 -m limit --limit 1/second -j LOG inet6/filter/logdrop-13 -j DROP Filter 105 {"conn-limit":{},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 inet/filter/limit-104 -j TEE --gateway 10.0.0.1 inet/filter/limit-104 -j TEE --gateway 10.0.0.2 inet/filter/limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-14 -m limit --limit 1/second -j LOG inet/filter/logdrop-14 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-104 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-104 inet6/filter/limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 inet6/filter/limit-104 -j TEE --gateway fc00::2 inet6/filter/limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-14 -m limit --limit 1/second -j LOG inet6/filter/logdrop-14 -j DROP Filter 106 {"action":"pass","conn-limit":{},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 inet/filter/limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-15 -m limit --limit 1/second -j LOG inet/filter/logdrop-15 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-105 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-105 inet6/filter/limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 inet6/filter/limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-15 -m limit --limit 1/second -j LOG inet6/filter/logdrop-15 -j DROP Filter 107 {"conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 inet/filter/limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-16 -m limit --limit 1/second -j LOG inet/filter/logdrop-16 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-106 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-106 inet6/filter/limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 inet6/filter/limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-16 -m limit --limit 1/second -j LOG inet6/filter/logdrop-16 -j DROP Filter 108 {"action":"pass","conn-limit":{},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 inet/filter/limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-17 -m limit --limit 1/second -j LOG inet/filter/logdrop-17 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-107 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-107 inet6/filter/limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 inet6/filter/limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-17 -m limit --limit 1/second -j LOG inet6/filter/logdrop-17 -j DROP Filter 109 {"conn-limit":{},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 inet/filter/limit-108 -m limit --limit 12/minute -j ULOG inet/filter/limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-18 -m limit --limit 1/second -j LOG inet/filter/logdrop-18 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-108 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-108 inet6/filter/limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 inet6/filter/limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-18 -m limit --limit 1/second -j LOG inet6/filter/logdrop-18 -j DROP Filter 110 {"action":"pass","conn-limit":{},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 inet/filter/limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 inet/filter/limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-19 -m limit --limit 1/second -j LOG inet/filter/logdrop-19 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-109 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-109 inet6/filter/limit-109 -m recent --name limit-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 inet6/filter/logdrop-19 -m limit --limit 1/second -j LOG inet6/filter/logdrop-19 -j DROP Filter 111 {"conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 inet/filter/limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-20 -m limit --limit 1/second -j LOG inet/filter/logdrop-20 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-110 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-110 inet6/filter/limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 inet6/filter/limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG inet6/filter/logdrop-20 -j DROP Filter 112 {"action":"pass","conn-limit":{"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 inet/filter/limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-21 -m limit --limit 1/second -j LOG inet/filter/logdrop-21 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-111 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-111 inet6/filter/limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 inet6/filter/limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-21 -m limit --limit 1/second -j LOG inet6/filter/logdrop-21 -j DROP Filter 113 {"conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 inet/filter/limit-112 -m limit --limit 1/second -j LOG inet/filter/limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-22 -m limit --limit 1/second -j LOG inet/filter/logdrop-22 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-112 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-112 inet6/filter/limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 inet6/filter/limit-112 -m limit --limit 1/second -j LOG inet6/filter/limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-22 -m limit --limit 1/second -j LOG inet6/filter/logdrop-22 -j DROP Filter 114 {"action":"pass","conn-limit":{"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 inet/filter/limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 inet/filter/limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-23 -m limit --limit 1/second -j LOG inet/filter/logdrop-23 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-113 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-113 inet6/filter/limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 inet6/filter/limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-23 -m limit --limit 1/second -j LOG inet6/filter/logdrop-23 -j DROP Filter 115 {"conn-limit":{"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 inet/filter/limit-114 -j TEE --gateway 10.0.0.1 inet/filter/limit-114 -j TEE --gateway 10.0.0.2 inet/filter/limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-24 -m limit --limit 1/second -j LOG inet/filter/logdrop-24 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-114 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-114 inet6/filter/limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 inet6/filter/limit-114 -j TEE --gateway fc00::2 inet6/filter/limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG inet6/filter/logdrop-24 -j DROP Filter 116 {"action":"pass","conn-limit":{"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 inet/filter/limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-25 -m limit --limit 1/second -j LOG inet/filter/logdrop-25 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-115 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-115 inet6/filter/limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 inet6/filter/limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-25 -m limit --limit 1/second -j LOG inet6/filter/logdrop-25 -j DROP Filter 117 {"conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 inet/filter/limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-26 -m limit --limit 1/second -j LOG inet/filter/logdrop-26 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-116 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-116 inet6/filter/limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 inet6/filter/limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-26 -m limit --limit 1/second -j LOG inet6/filter/logdrop-26 -j DROP Filter 118 {"action":"pass","conn-limit":{"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 inet/filter/limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-27 -m limit --limit 1/second -j LOG inet/filter/logdrop-27 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-117 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-117 inet6/filter/limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 inet6/filter/limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-27 -m limit --limit 1/second -j LOG inet6/filter/logdrop-27 -j DROP Filter 119 {"conn-limit":{"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 inet/filter/limit-118 -m limit --limit 12/minute -j ULOG inet/filter/limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-28 -m limit --limit 1/second -j LOG inet/filter/logdrop-28 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-118 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-118 inet6/filter/limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 inet6/filter/limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-28 -m limit --limit 1/second -j LOG inet6/filter/logdrop-28 -j DROP Filter 120 {"action":"pass","conn-limit":{"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 inet/filter/limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-29 -m limit --limit 1/second -j LOG inet/filter/logdrop-29 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-119 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-119 inet6/filter/limit-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 inet6/filter/logdrop-29 -m limit --limit 1/second -j LOG inet6/filter/logdrop-29 -j DROP Filter 121 {"conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 inet/filter/limit-120 -j ACCEPT inet/filter/logdrop-30 -m limit --limit 1/second -j LOG inet/filter/logdrop-30 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-120 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-120 inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 inet6/filter/limit-120 -j ACCEPT inet6/filter/logdrop-30 -m limit --limit 1/second -j LOG inet6/filter/logdrop-30 -j DROP Filter 122 {"action":"pass","conn-limit":{"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 inet/filter/logdrop-31 -m limit --limit 1/second -j LOG inet/filter/logdrop-31 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-121 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-121 inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 inet6/filter/logdrop-31 -m limit --limit 1/second -j LOG inet6/filter/logdrop-31 -j DROP Filter 123 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 inet/filter/limit-122 -m limit --limit 1/second -j LOG inet/filter/limit-122 -j ACCEPT inet/filter/logdrop-32 -m limit --limit 1/second -j LOG inet/filter/logdrop-32 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-122 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-122 inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 inet6/filter/limit-122 -m limit --limit 1/second -j LOG inet6/filter/limit-122 -j ACCEPT inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG inet6/filter/logdrop-32 -j DROP Filter 124 {"action":"pass","conn-limit":{"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 inet/filter/limit-123 -m limit --limit 1/second -j LOG inet/filter/logdrop-33 -m limit --limit 1/second -j LOG inet/filter/logdrop-33 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-123 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-123 inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 inet6/filter/limit-123 -m limit --limit 1/second -j LOG inet6/filter/logdrop-33 -m limit --limit 1/second -j LOG inet6/filter/logdrop-33 -j DROP Filter 125 {"conn-limit":{"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 inet/filter/limit-124 -j TEE --gateway 10.0.0.1 inet/filter/limit-124 -j TEE --gateway 10.0.0.2 inet/filter/limit-124 -j ACCEPT inet/filter/logdrop-34 -m limit --limit 1/second -j LOG inet/filter/logdrop-34 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-124 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-124 inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 inet6/filter/limit-124 -j TEE --gateway fc00::2 inet6/filter/limit-124 -j ACCEPT inet6/filter/logdrop-34 -m limit --limit 1/second -j LOG inet6/filter/logdrop-34 -j DROP Filter 126 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 inet/filter/limit-125 -j TEE --gateway 10.0.0.1 inet/filter/limit-125 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-35 -m limit --limit 1/second -j LOG inet/filter/logdrop-35 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-125 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-125 inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 inet6/filter/limit-125 -j TEE --gateway fc00::2 inet6/filter/logdrop-35 -m limit --limit 1/second -j LOG inet6/filter/logdrop-35 -j DROP Filter 127 {"conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 inet/filter/limit-126 -j ACCEPT inet/filter/logdrop-36 -m limit --limit 1/second -j LOG inet/filter/logdrop-36 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-126 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-126 inet6/filter/limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 inet6/filter/limit-126 -j ACCEPT inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG inet6/filter/logdrop-36 -j DROP Filter 128 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 inet/filter/limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-37 inet/filter/logdrop-37 -m limit --limit 1/second -j LOG inet/filter/logdrop-37 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-127 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-127 inet6/filter/limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-37 inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG inet6/filter/logdrop-37 -j DROP Filter 129 {"conn-limit":{"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-38 inet/filter/limit-128 -m limit --limit 12/minute -j ULOG inet/filter/limit-128 -j ACCEPT inet/filter/logdrop-38 -m limit --limit 1/second -j LOG inet/filter/logdrop-38 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-128 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-128 inet6/filter/limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-38 inet6/filter/limit-128 -j ACCEPT inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG inet6/filter/logdrop-38 -j DROP Filter 130 {"action":"pass","conn-limit":{"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-39 inet/filter/limit-129 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-39 -m limit --limit 1/second -j LOG inet/filter/logdrop-39 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-129 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-129 inet6/filter/limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-39 inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG inet6/filter/logdrop-39 -j DROP Filter 131 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-40 inet/filter/limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-40 -m limit --limit 1/second -j LOG inet/filter/logdrop-40 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-130 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-130 inet6/filter/limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 inet6/filter/limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG inet6/filter/logdrop-40 -j DROP Filter 132 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 inet/filter/limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-41 inet/filter/limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-41 -m limit --limit 1/second -j LOG inet/filter/logdrop-41 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-131 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-131 inet6/filter/limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 inet6/filter/limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG inet6/filter/logdrop-41 -j DROP Filter 133 {"conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-42 inet/filter/limit-132 -m limit --limit 1/second -j LOG inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-42 -m limit --limit 1/second -j LOG inet/filter/logdrop-42 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-132 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-132 inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 inet6/filter/limit-132 -m limit --limit 1/second -j LOG inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG inet6/filter/logdrop-42 -j DROP Filter 134 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-43 inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-43 -m limit --limit 1/second -j LOG inet/filter/logdrop-43 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-133 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-133 inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-43 inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG inet6/filter/logdrop-43 -j DROP Filter 135 {"conn-limit":{"addr":"dest","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-44 inet/filter/limit-134 -j TEE --gateway 10.0.0.1 inet/filter/limit-134 -j TEE --gateway 10.0.0.2 inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-44 -m limit --limit 1/second -j LOG inet/filter/logdrop-44 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-134 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-134 inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-44 inet6/filter/limit-134 -j TEE --gateway fc00::2 inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG inet6/filter/logdrop-44 -j DROP Filter 136 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-45 inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-45 -m limit --limit 1/second -j LOG inet/filter/logdrop-45 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-135 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-135 inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-45 inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG inet6/filter/logdrop-45 -j DROP Filter 137 {"conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-46 inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-46 -m limit --limit 1/second -j LOG inet/filter/logdrop-46 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-136 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-136 inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-46 inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG inet6/filter/logdrop-46 -j DROP Filter 138 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-47 inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-47 -m limit --limit 1/second -j LOG inet/filter/logdrop-47 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-137 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-137 inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-47 inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG inet6/filter/logdrop-47 -j DROP Filter 139 {"conn-limit":{"addr":"dest","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-48 inet/filter/limit-138 -m limit --limit 12/minute -j ULOG inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-48 -m limit --limit 1/second -j LOG inet/filter/logdrop-48 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-138 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-138 inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-48 inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG inet6/filter/logdrop-48 -j DROP Filter 140 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-49 inet/filter/limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-49 -m limit --limit 1/second -j LOG inet/filter/logdrop-49 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-139 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-139 inet6/filter/limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG inet6/filter/logdrop-49 -j DROP Filter 141 {"conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-50 inet/filter/limit-140 -j ACCEPT inet/filter/logdrop-50 -m limit --limit 1/second -j LOG inet/filter/logdrop-50 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-140 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-140 inet6/filter/limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-50 inet6/filter/limit-140 -j ACCEPT inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG inet6/filter/logdrop-50 -j DROP Filter 142 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-51 inet/filter/logdrop-51 -m limit --limit 1/second -j LOG inet/filter/logdrop-51 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-141 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-141 inet6/filter/limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-51 inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG inet6/filter/logdrop-51 -j DROP Filter 143 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-52 inet/filter/limit-142 -m limit --limit 1/second -j LOG inet/filter/limit-142 -j ACCEPT inet/filter/logdrop-52 -m limit --limit 1/second -j LOG inet/filter/logdrop-52 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-142 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-142 inet6/filter/limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-52 inet6/filter/limit-142 -m limit --limit 1/second -j LOG inet6/filter/limit-142 -j ACCEPT inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG inet6/filter/logdrop-52 -j DROP Filter 144 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 inet/filter/limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-53 inet/filter/limit-143 -m limit --limit 1/second -j LOG inet/filter/logdrop-53 -m limit --limit 1/second -j LOG inet/filter/logdrop-53 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-143 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-143 inet6/filter/limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-53 inet6/filter/limit-143 -m limit --limit 1/second -j LOG inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG inet6/filter/logdrop-53 -j DROP Filter 145 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 inet/filter/limit-144 -j TEE --gateway 10.0.0.1 inet/filter/limit-144 -j TEE --gateway 10.0.0.2 inet/filter/limit-144 -j ACCEPT inet/filter/logdrop-54 -m limit --limit 1/second -j LOG inet/filter/logdrop-54 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-144 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-144 inet6/filter/limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-54 inet6/filter/limit-144 -j TEE --gateway fc00::2 inet6/filter/limit-144 -j ACCEPT inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG inet6/filter/logdrop-54 -j DROP Filter 146 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 inet/filter/limit-145 -j TEE --gateway 10.0.0.1 inet/filter/limit-145 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-55 -m limit --limit 1/second -j LOG inet/filter/logdrop-55 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-145 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-145 inet6/filter/limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-55 inet6/filter/limit-145 -j TEE --gateway fc00::2 inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG inet6/filter/logdrop-55 -j DROP Filter 147 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 inet/filter/limit-146 -j ACCEPT inet/filter/logdrop-56 -m limit --limit 1/second -j LOG inet/filter/logdrop-56 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-146 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-146 inet6/filter/limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-56 inet6/filter/limit-146 -j ACCEPT inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG inet6/filter/logdrop-56 -j DROP Filter 148 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 inet/filter/logdrop-57 -m limit --limit 1/second -j LOG inet/filter/logdrop-57 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-147 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-147 inet6/filter/limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-57 inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG inet6/filter/logdrop-57 -j DROP Filter 149 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 inet/filter/limit-148 -m limit --limit 12/minute -j ULOG inet/filter/limit-148 -j ACCEPT inet/filter/logdrop-58 -m limit --limit 1/second -j LOG inet/filter/logdrop-58 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-148 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-148 inet6/filter/limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-58 inet6/filter/limit-148 -j ACCEPT inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG inet6/filter/logdrop-58 -j DROP Filter 150 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 inet/filter/limit-149 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-59 -m limit --limit 1/second -j LOG inet/filter/logdrop-59 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-149 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-149 inet6/filter/limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-59 inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG inet6/filter/logdrop-59 -j DROP Filter 151 {"conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-60 inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-60 -m limit --limit 1/second -j LOG inet/filter/logdrop-60 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-150 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-150 inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-60 inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG inet6/filter/logdrop-60 -j DROP Filter 152 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-61 inet/filter/limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-61 -m limit --limit 1/second -j LOG inet/filter/logdrop-61 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-151 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-151 inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-61 inet6/filter/limit-151 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG inet6/filter/logdrop-61 -j DROP Filter 153 {"conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-62 inet/filter/limit-152 -m limit --limit 1/second -j LOG inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-62 -m limit --limit 1/second -j LOG inet/filter/logdrop-62 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-152 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-152 inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-62 inet6/filter/limit-152 -m limit --limit 1/second -j LOG inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG inet6/filter/logdrop-62 -j DROP Filter 154 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-63 inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-63 -m limit --limit 1/second -j LOG inet/filter/logdrop-63 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-153 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-153 inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-63 inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG inet6/filter/logdrop-63 -j DROP Filter 155 {"conn-limit":{"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 inet/filter/limit-154 -j TEE --gateway 10.0.0.1 inet/filter/limit-154 -j TEE --gateway 10.0.0.2 inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-64 -m limit --limit 1/second -j LOG inet/filter/logdrop-64 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-154 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-154 inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 inet6/filter/limit-154 -j TEE --gateway fc00::2 inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG inet6/filter/logdrop-64 -j DROP Filter 156 {"action":"pass","conn-limit":{"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-65 -m limit --limit 1/second -j LOG inet/filter/logdrop-65 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-155 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-155 inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 inet6/filter/limit-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG inet6/filter/logdrop-65 -j DROP Filter 157 {"conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 inet/filter/limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-66 -m limit --limit 1/second -j LOG inet/filter/logdrop-66 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-156 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-156 inet6/filter/limit-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 inet6/filter/limit-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG inet6/filter/logdrop-66 -j DROP Filter 158 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 inet/filter/limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-67 -m limit --limit 1/second -j LOG inet/filter/logdrop-67 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-157 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-157 inet6/filter/limit-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 inet6/filter/limit-157 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG inet6/filter/logdrop-67 -j DROP Filter 159 {"conn-limit":{"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 inet/filter/limit-158 -m limit --limit 12/minute -j ULOG inet/filter/limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-68 -m limit --limit 1/second -j LOG inet/filter/logdrop-68 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-158 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-158 inet6/filter/limit-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 inet6/filter/limit-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG inet6/filter/logdrop-68 -j DROP Filter 160 {"action":"pass","conn-limit":{"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 inet/filter/limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-69 -m limit --limit 1/second -j LOG inet/filter/logdrop-69 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-159 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-159 inet6/filter/limit-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG inet6/filter/logdrop-69 -j DROP Filter 161 {"conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/limit-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-70 inet/filter/limit-160 -j ACCEPT inet/filter/logdrop-70 -m limit --limit 1/second -j LOG inet/filter/logdrop-70 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-160 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-160 inet6/filter/limit-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-70 inet6/filter/limit-160 -j ACCEPT inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG inet6/filter/logdrop-70 -j DROP Filter 162 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/limit-161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-71 inet/filter/logdrop-71 -m limit --limit 1/second -j LOG inet/filter/logdrop-71 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-161 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-161 inet6/filter/limit-161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-71 inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG inet6/filter/logdrop-71 -j DROP Filter 163 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/limit-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 inet/filter/limit-162 -m limit --limit 1/second -j LOG inet/filter/limit-162 -j ACCEPT inet/filter/logdrop-72 -m limit --limit 1/second -j LOG inet/filter/logdrop-72 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-162 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-162 inet6/filter/limit-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 inet6/filter/limit-162 -m limit --limit 1/second -j LOG inet6/filter/limit-162 -j ACCEPT inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG inet6/filter/logdrop-72 -j DROP Filter 164 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 inet/filter/limit-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 inet/filter/limit-163 -m limit --limit 1/second -j LOG inet/filter/logdrop-73 -m limit --limit 1/second -j LOG inet/filter/logdrop-73 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-163 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-163 inet6/filter/limit-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 inet6/filter/limit-163 -m limit --limit 1/second -j LOG inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG inet6/filter/logdrop-73 -j DROP Filter 165 {"conn-limit":{"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/limit-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 inet/filter/limit-164 -j TEE --gateway 10.0.0.1 inet/filter/limit-164 -j TEE --gateway 10.0.0.2 inet/filter/limit-164 -j ACCEPT inet/filter/logdrop-74 -m limit --limit 1/second -j LOG inet/filter/logdrop-74 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-164 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-164 inet6/filter/limit-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 inet6/filter/limit-164 -j TEE --gateway fc00::2 inet6/filter/limit-164 -j ACCEPT inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG inet6/filter/logdrop-74 -j DROP Filter 166 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/limit-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 inet/filter/limit-165 -j TEE --gateway 10.0.0.1 inet/filter/limit-165 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-75 -m limit --limit 1/second -j LOG inet/filter/logdrop-75 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-165 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-165 inet6/filter/limit-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 inet6/filter/limit-165 -j TEE --gateway fc00::2 inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG inet6/filter/logdrop-75 -j DROP Filter 167 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/limit-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 inet/filter/limit-166 -j ACCEPT inet/filter/logdrop-76 -m limit --limit 1/second -j LOG inet/filter/logdrop-76 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-166 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-166 inet6/filter/limit-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 inet6/filter/limit-166 -j ACCEPT inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG inet6/filter/logdrop-76 -j DROP Filter 168 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 inet/filter/limit-167 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 inet/filter/logdrop-77 -m limit --limit 1/second -j LOG inet/filter/logdrop-77 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-167 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-167 inet6/filter/limit-167 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG inet6/filter/logdrop-77 -j DROP Filter 169 {"conn-limit":{"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/limit-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 inet/filter/limit-168 -m limit --limit 12/minute -j ULOG inet/filter/limit-168 -j ACCEPT inet/filter/logdrop-78 -m limit --limit 1/second -j LOG inet/filter/logdrop-78 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 inet6/filter/limit-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 inet6/filter/limit-168 -j ACCEPT inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG inet6/filter/logdrop-78 -j DROP Filter 170 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 inet/filter/limit-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 inet/filter/limit-169 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-79 -m limit --limit 1/second -j LOG inet/filter/logdrop-79 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 inet6/filter/limit-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG inet6/filter/logdrop-79 -j DROP Filter 171 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-80 inet/filter/limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-80 -m limit --limit 1/second -j LOG inet/filter/logdrop-80 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 inet6/filter/limit-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-80 inet6/filter/limit-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG inet6/filter/logdrop-80 -j DROP Filter 172 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-81 inet/filter/limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-81 -m limit --limit 1/second -j LOG inet/filter/logdrop-81 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 inet6/filter/limit-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-81 inet6/filter/limit-171 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG inet6/filter/logdrop-81 -j DROP Filter 173 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-82 inet/filter/limit-172 -m limit --limit 1/second -j LOG inet/filter/limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-82 -m limit --limit 1/second -j LOG inet/filter/logdrop-82 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 inet6/filter/limit-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-82 inet6/filter/limit-172 -m limit --limit 1/second -j LOG inet6/filter/limit-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG inet6/filter/logdrop-82 -j DROP Filter 174 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 inet/filter/limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-83 inet/filter/limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-83 -m limit --limit 1/second -j LOG inet/filter/logdrop-83 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 inet6/filter/limit-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-83 inet6/filter/limit-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG inet6/filter/logdrop-83 -j DROP Filter 175 {"conn-limit":{"addr":"dest","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-84 inet/filter/limit-174 -j TEE --gateway 10.0.0.1 inet/filter/limit-174 -j TEE --gateway 10.0.0.2 inet/filter/limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-84 -m limit --limit 1/second -j LOG inet/filter/logdrop-84 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 inet6/filter/limit-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-84 inet6/filter/limit-174 -j TEE --gateway fc00::2 inet6/filter/limit-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG inet6/filter/logdrop-84 -j DROP Filter 176 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-85 inet/filter/limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-85 -m limit --limit 1/second -j LOG inet/filter/logdrop-85 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 inet6/filter/limit-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-85 inet6/filter/limit-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG inet6/filter/logdrop-85 -j DROP Filter 177 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-86 inet/filter/limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-86 -m limit --limit 1/second -j LOG inet/filter/logdrop-86 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 inet6/filter/limit-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-86 inet6/filter/limit-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG inet6/filter/logdrop-86 -j DROP Filter 178 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-87 inet/filter/limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-87 -m limit --limit 1/second -j LOG inet/filter/logdrop-87 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 inet6/filter/limit-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-87 inet6/filter/limit-177 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG inet6/filter/logdrop-87 -j DROP Filter 179 {"conn-limit":{"addr":"dest","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-88 inet/filter/limit-178 -m limit --limit 12/minute -j ULOG inet/filter/limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-88 -m limit --limit 1/second -j LOG inet/filter/logdrop-88 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 inet6/filter/limit-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-88 inet6/filter/limit-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG inet6/filter/logdrop-88 -j DROP Filter 180 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-89 inet/filter/limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-89 -m limit --limit 1/second -j LOG inet/filter/logdrop-89 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 inet6/filter/limit-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-89 inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG inet6/filter/logdrop-89 -j DROP Filter 181 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/limit-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 inet/filter/limit-180 -j ACCEPT inet/filter/logdrop-90 -m limit --limit 1/second -j LOG inet/filter/logdrop-90 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 inet6/filter/limit-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-90 inet6/filter/limit-180 -j ACCEPT inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG inet6/filter/logdrop-90 -j DROP Filter 182 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 inet/filter/limit-181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-91 inet/filter/logdrop-91 -m limit --limit 1/second -j LOG inet/filter/logdrop-91 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-181 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-181 inet6/filter/limit-181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-91 inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG inet6/filter/logdrop-91 -j DROP Filter 183 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/limit-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-92 inet/filter/limit-182 -m limit --limit 1/second -j LOG inet/filter/limit-182 -j ACCEPT inet/filter/logdrop-92 -m limit --limit 1/second -j LOG inet/filter/logdrop-92 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 inet6/filter/limit-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-92 inet6/filter/limit-182 -m limit --limit 1/second -j LOG inet6/filter/limit-182 -j ACCEPT inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG inet6/filter/logdrop-92 -j DROP Filter 184 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/limit-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-93 inet/filter/limit-183 -m limit --limit 1/second -j LOG inet/filter/logdrop-93 -m limit --limit 1/second -j LOG inet/filter/logdrop-93 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 inet6/filter/limit-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-93 inet6/filter/limit-183 -m limit --limit 1/second -j LOG inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG inet6/filter/logdrop-93 -j DROP Filter 185 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/limit-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-94 inet/filter/limit-184 -j TEE --gateway 10.0.0.1 inet/filter/limit-184 -j TEE --gateway 10.0.0.2 inet/filter/limit-184 -j ACCEPT inet/filter/logdrop-94 -m limit --limit 1/second -j LOG inet/filter/logdrop-94 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 inet6/filter/limit-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-94 inet6/filter/limit-184 -j TEE --gateway fc00::2 inet6/filter/limit-184 -j ACCEPT inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG inet6/filter/logdrop-94 -j DROP Filter 186 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 inet/filter/limit-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-95 inet/filter/limit-185 -j TEE --gateway 10.0.0.1 inet/filter/limit-185 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-95 -m limit --limit 1/second -j LOG inet/filter/logdrop-95 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-185 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-185 inet6/filter/limit-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-95 inet6/filter/limit-185 -j TEE --gateway fc00::2 inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG inet6/filter/logdrop-95 -j DROP Filter 187 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/limit-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 inet/filter/limit-186 -j ACCEPT inet/filter/logdrop-96 -m limit --limit 1/second -j LOG inet/filter/logdrop-96 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 inet6/filter/limit-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-96 inet6/filter/limit-186 -j ACCEPT inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG inet6/filter/logdrop-96 -j DROP Filter 188 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/limit-187 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 inet/filter/logdrop-97 -m limit --limit 1/second -j LOG inet/filter/logdrop-97 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 inet6/filter/limit-187 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-97 inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG inet6/filter/logdrop-97 -j DROP Filter 189 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/limit-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 inet/filter/limit-188 -m limit --limit 12/minute -j ULOG inet/filter/limit-188 -j ACCEPT inet/filter/logdrop-98 -m limit --limit 1/second -j LOG inet/filter/logdrop-98 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 inet6/filter/limit-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-98 inet6/filter/limit-188 -j ACCEPT inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG inet6/filter/logdrop-98 -j DROP Filter 190 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/limit-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 inet/filter/limit-189 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-99 -m limit --limit 1/second -j LOG inet/filter/logdrop-99 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 inet6/filter/limit-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-99 inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG inet6/filter/logdrop-99 -j DROP Filter 191 {"conn-limit":{"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-100 inet/filter/limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-100 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-100 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-100 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 inet6/filter/limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-100 inet6/filter/limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-100 -j TEE --gateway fc00::2 inet6/filter/logdrop-100 -j DROP Filter 192 {"action":"pass","conn-limit":{"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-101 inet/filter/limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-101 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-101 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-101 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 inet6/filter/limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-101 inet6/filter/limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-101 -j TEE --gateway fc00::2 inet6/filter/logdrop-101 -j DROP Filter 193 {"conn-limit":{"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-102 inet/filter/limit-192 -m limit --limit 1/second -j LOG inet/filter/limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-102 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-102 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-102 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 inet6/filter/limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-102 inet6/filter/limit-192 -m limit --limit 1/second -j LOG inet6/filter/limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-102 -j TEE --gateway fc00::2 inet6/filter/logdrop-102 -j DROP Filter 194 {"action":"pass","conn-limit":{"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 inet/filter/limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-103 inet/filter/limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-103 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-103 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-103 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 inet6/filter/limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-103 inet6/filter/limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-103 -j TEE --gateway fc00::2 inet6/filter/logdrop-103 -j DROP Filter 195 {"conn-limit":{"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 inet/filter/limit-194 -j TEE --gateway 10.0.0.1 inet/filter/limit-194 -j TEE --gateway 10.0.0.2 inet/filter/limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-104 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-104 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-104 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 inet6/filter/limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 inet6/filter/limit-194 -j TEE --gateway fc00::2 inet6/filter/limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-104 -j TEE --gateway fc00::2 inet6/filter/logdrop-104 -j DROP Filter 196 {"action":"pass","conn-limit":{"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 inet/filter/limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-105 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-105 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-105 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 inet6/filter/limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 inet6/filter/limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-105 -j TEE --gateway fc00::2 inet6/filter/logdrop-105 -j DROP Filter 197 {"conn-limit":{"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 inet/filter/limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-106 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-106 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-106 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 inet6/filter/limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 inet6/filter/limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-106 -j TEE --gateway fc00::2 inet6/filter/logdrop-106 -j DROP Filter 198 {"action":"pass","conn-limit":{"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 inet/filter/limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 inet/filter/limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-107 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-107 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-107 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 inet6/filter/limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 inet6/filter/limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-107 -j TEE --gateway fc00::2 inet6/filter/logdrop-107 -j DROP Filter 199 {"conn-limit":{"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 inet/filter/limit-198 -m limit --limit 12/minute -j ULOG inet/filter/limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-108 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-108 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-108 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 inet6/filter/limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 inet6/filter/limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-108 -j TEE --gateway fc00::2 inet6/filter/logdrop-108 -j DROP Filter 200 {"action":"pass","conn-limit":{"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 inet/filter/limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-109 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-109 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-109 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 inet6/filter/limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 inet6/filter/logdrop-109 -j TEE --gateway fc00::2 inet6/filter/logdrop-109 -j DROP Filter 201 {"conn-limit":{"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 inet/filter/limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-110 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-110 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-110 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 inet6/filter/limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 inet6/filter/limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-110 -j TEE --gateway fc00::2 inet6/filter/logdrop-110 -j DROP Filter 202 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 inet/filter/limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-111 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-111 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-111 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 inet6/filter/limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 inet6/filter/limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-111 -j TEE --gateway fc00::2 inet6/filter/logdrop-111 -j DROP Filter 203 {"conn-limit":{"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-112 inet/filter/limit-202 -m limit --limit 1/second -j LOG inet/filter/limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-112 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-112 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-112 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 inet6/filter/limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-112 inet6/filter/limit-202 -m limit --limit 1/second -j LOG inet6/filter/limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-112 -j TEE --gateway fc00::2 inet6/filter/logdrop-112 -j DROP Filter 204 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-113 inet/filter/limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-113 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-113 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-113 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 inet6/filter/limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-113 inet6/filter/limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-113 -j TEE --gateway fc00::2 inet6/filter/logdrop-113 -j DROP Filter 205 {"conn-limit":{"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 inet/filter/limit-204 -j TEE --gateway 10.0.0.1 inet/filter/limit-204 -j TEE --gateway 10.0.0.2 inet/filter/limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-114 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-114 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-114 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 inet6/filter/limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 inet6/filter/limit-204 -j TEE --gateway fc00::2 inet6/filter/limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-114 -j TEE --gateway fc00::2 inet6/filter/logdrop-114 -j DROP Filter 206 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 inet/filter/limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 inet/filter/limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-115 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-115 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-115 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 inet6/filter/limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 inet6/filter/limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-115 -j TEE --gateway fc00::2 inet6/filter/logdrop-115 -j DROP Filter 207 {"conn-limit":{"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 inet/filter/limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-116 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-116 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-116 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 inet6/filter/limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 inet6/filter/limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-116 -j TEE --gateway fc00::2 inet6/filter/logdrop-116 -j DROP Filter 208 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 inet/filter/limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-117 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-117 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-117 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 inet6/filter/limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 inet6/filter/limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-117 -j TEE --gateway fc00::2 inet6/filter/logdrop-117 -j DROP Filter 209 {"conn-limit":{"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 inet/filter/limit-208 -m limit --limit 12/minute -j ULOG inet/filter/limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-118 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-118 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-118 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 inet6/filter/limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 inet6/filter/limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-118 -j TEE --gateway fc00::2 inet6/filter/logdrop-118 -j DROP Filter 210 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 inet/filter/limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 inet/filter/limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-119 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-119 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-119 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 inet6/filter/limit-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 inet6/filter/logdrop-119 -j TEE --gateway fc00::2 inet6/filter/logdrop-119 -j DROP Filter 211 {"conn-limit":{"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/limit-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-120 inet/filter/limit-210 -j ACCEPT inet/filter/logdrop-120 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-120 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-120 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 inet6/filter/limit-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-120 inet6/filter/limit-210 -j ACCEPT inet6/filter/logdrop-120 -j TEE --gateway fc00::2 inet6/filter/logdrop-120 -j DROP Filter 212 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/limit-211 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-121 inet/filter/logdrop-121 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-121 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-121 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 inet6/filter/limit-211 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-121 inet6/filter/logdrop-121 -j TEE --gateway fc00::2 inet6/filter/logdrop-121 -j DROP Filter 213 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/limit-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-122 inet/filter/limit-212 -m limit --limit 1/second -j LOG inet/filter/limit-212 -j ACCEPT inet/filter/logdrop-122 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-122 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-122 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 inet6/filter/limit-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-122 inet6/filter/limit-212 -m limit --limit 1/second -j LOG inet6/filter/limit-212 -j ACCEPT inet6/filter/logdrop-122 -j TEE --gateway fc00::2 inet6/filter/logdrop-122 -j DROP Filter 214 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/limit-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-123 inet/filter/limit-213 -m limit --limit 1/second -j LOG inet/filter/logdrop-123 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-123 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-123 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 inet6/filter/limit-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-123 inet6/filter/limit-213 -m limit --limit 1/second -j LOG inet6/filter/logdrop-123 -j TEE --gateway fc00::2 inet6/filter/logdrop-123 -j DROP Filter 215 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 inet/filter/limit-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-124 inet/filter/limit-214 -j TEE --gateway 10.0.0.1 inet/filter/limit-214 -j TEE --gateway 10.0.0.2 inet/filter/limit-214 -j ACCEPT inet/filter/logdrop-124 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-124 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-124 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 inet6/filter/limit-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-124 inet6/filter/limit-214 -j TEE --gateway fc00::2 inet6/filter/limit-214 -j ACCEPT inet6/filter/logdrop-124 -j TEE --gateway fc00::2 inet6/filter/logdrop-124 -j DROP Filter 216 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 inet/filter/limit-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-125 inet/filter/limit-215 -j TEE --gateway 10.0.0.1 inet/filter/limit-215 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-125 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-125 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-125 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 inet6/filter/limit-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-125 inet6/filter/limit-215 -j TEE --gateway fc00::2 inet6/filter/logdrop-125 -j TEE --gateway fc00::2 inet6/filter/logdrop-125 -j DROP Filter 217 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 inet/filter/limit-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-126 inet/filter/limit-216 -j ACCEPT inet/filter/logdrop-126 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-126 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-126 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 inet6/filter/limit-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-126 inet6/filter/limit-216 -j ACCEPT inet6/filter/logdrop-126 -j TEE --gateway fc00::2 inet6/filter/logdrop-126 -j DROP Filter 218 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 inet/filter/limit-217 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-127 inet/filter/logdrop-127 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-127 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-127 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-217 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-217 inet6/filter/limit-217 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-127 inet6/filter/logdrop-127 -j TEE --gateway fc00::2 inet6/filter/logdrop-127 -j DROP Filter 219 {"conn-limit":{"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 inet/filter/limit-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 inet/filter/limit-218 -m limit --limit 12/minute -j ULOG inet/filter/limit-218 -j ACCEPT inet/filter/logdrop-128 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-128 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-128 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 inet6/filter/limit-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-128 inet6/filter/limit-218 -j ACCEPT inet6/filter/logdrop-128 -j TEE --gateway fc00::2 inet6/filter/logdrop-128 -j DROP Filter 220 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 inet/filter/limit-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 inet/filter/limit-219 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-129 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-129 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-129 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 inet6/filter/limit-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-129 inet6/filter/logdrop-129 -j TEE --gateway fc00::2 inet6/filter/logdrop-129 -j DROP Filter 221 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 inet/filter/limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 inet/filter/limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-130 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-130 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-130 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 inet6/filter/limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 inet6/filter/limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-130 -j TEE --gateway fc00::2 inet6/filter/logdrop-130 -j DROP Filter 222 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 inet/filter/limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 inet/filter/limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-131 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-131 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-131 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-221 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-221 inet6/filter/limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 inet6/filter/limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-131 -j TEE --gateway fc00::2 inet6/filter/logdrop-131 -j DROP Filter 223 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 inet/filter/limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 inet/filter/limit-222 -m limit --limit 1/second -j LOG inet/filter/limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-132 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-132 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-132 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-222 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-222 inet6/filter/limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 inet6/filter/limit-222 -m limit --limit 1/second -j LOG inet6/filter/limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-132 -j TEE --gateway fc00::2 inet6/filter/logdrop-132 -j DROP Filter 224 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 inet/filter/limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 inet/filter/limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-133 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-133 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-133 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-223 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-223 inet6/filter/limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 inet6/filter/limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-133 -j TEE --gateway fc00::2 inet6/filter/logdrop-133 -j DROP Filter 225 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 inet/filter/limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 inet/filter/limit-224 -j TEE --gateway 10.0.0.1 inet/filter/limit-224 -j TEE --gateway 10.0.0.2 inet/filter/limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-134 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-134 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-134 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-224 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-224 inet6/filter/limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 inet6/filter/limit-224 -j TEE --gateway fc00::2 inet6/filter/limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-134 -j TEE --gateway fc00::2 inet6/filter/logdrop-134 -j DROP Filter 226 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 inet/filter/limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 inet/filter/limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-135 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-135 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-135 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-225 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-225 inet6/filter/limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 inet6/filter/limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-135 -j TEE --gateway fc00::2 inet6/filter/logdrop-135 -j DROP Filter 227 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 inet/filter/limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 inet/filter/limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-136 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-136 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-136 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-226 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-226 inet6/filter/limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 inet6/filter/limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-136 -j TEE --gateway fc00::2 inet6/filter/logdrop-136 -j DROP Filter 228 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 inet/filter/limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 inet/filter/limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-137 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-137 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-137 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-227 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-227 inet6/filter/limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 inet6/filter/limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-137 -j TEE --gateway fc00::2 inet6/filter/logdrop-137 -j DROP Filter 229 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 inet/filter/limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 inet/filter/limit-228 -m limit --limit 12/minute -j ULOG inet/filter/limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-138 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-138 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-138 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-228 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-228 inet6/filter/limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 inet6/filter/limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-138 -j TEE --gateway fc00::2 inet6/filter/logdrop-138 -j DROP Filter 230 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 inet/filter/limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 inet/filter/limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-139 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-139 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-139 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-229 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-229 inet6/filter/limit-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 inet6/filter/logdrop-139 -j TEE --gateway fc00::2 inet6/filter/logdrop-139 -j DROP Filter 231 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 inet/filter/limit-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-140 inet/filter/limit-230 -j ACCEPT inet/filter/logdrop-140 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-140 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-140 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-230 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-230 inet6/filter/limit-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-140 inet6/filter/limit-230 -j ACCEPT inet6/filter/logdrop-140 -j TEE --gateway fc00::2 inet6/filter/logdrop-140 -j DROP Filter 232 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 inet/filter/limit-231 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-141 inet/filter/logdrop-141 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-141 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-141 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-231 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-231 inet6/filter/limit-231 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-141 inet6/filter/logdrop-141 -j TEE --gateway fc00::2 inet6/filter/logdrop-141 -j DROP Filter 233 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 inet/filter/limit-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-142 inet/filter/limit-232 -m limit --limit 1/second -j LOG inet/filter/limit-232 -j ACCEPT inet/filter/logdrop-142 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-142 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-142 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-232 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-232 inet6/filter/limit-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-142 inet6/filter/limit-232 -m limit --limit 1/second -j LOG inet6/filter/limit-232 -j ACCEPT inet6/filter/logdrop-142 -j TEE --gateway fc00::2 inet6/filter/logdrop-142 -j DROP Filter 234 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 inet/filter/limit-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-143 inet/filter/limit-233 -m limit --limit 1/second -j LOG inet/filter/logdrop-143 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-143 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-143 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-233 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-233 inet6/filter/limit-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-143 inet6/filter/limit-233 -m limit --limit 1/second -j LOG inet6/filter/logdrop-143 -j TEE --gateway fc00::2 inet6/filter/logdrop-143 -j DROP Filter 235 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 inet/filter/limit-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 inet/filter/limit-234 -j TEE --gateway 10.0.0.1 inet/filter/limit-234 -j TEE --gateway 10.0.0.2 inet/filter/limit-234 -j ACCEPT inet/filter/logdrop-144 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-144 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-144 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-234 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-234 inet6/filter/limit-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 inet6/filter/limit-234 -j TEE --gateway fc00::2 inet6/filter/limit-234 -j ACCEPT inet6/filter/logdrop-144 -j TEE --gateway fc00::2 inet6/filter/logdrop-144 -j DROP Filter 236 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 inet/filter/limit-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 inet/filter/limit-235 -j TEE --gateway 10.0.0.1 inet/filter/limit-235 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-145 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-145 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-145 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-235 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-235 inet6/filter/limit-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 inet6/filter/limit-235 -j TEE --gateway fc00::2 inet6/filter/logdrop-145 -j TEE --gateway fc00::2 inet6/filter/logdrop-145 -j DROP Filter 237 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 inet/filter/limit-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 inet/filter/limit-236 -j ACCEPT inet/filter/logdrop-146 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-146 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-146 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-236 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-236 inet6/filter/limit-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 inet6/filter/limit-236 -j ACCEPT inet6/filter/logdrop-146 -j TEE --gateway fc00::2 inet6/filter/logdrop-146 -j DROP Filter 238 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 inet/filter/limit-237 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 inet/filter/logdrop-147 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-147 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-147 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-237 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-237 inet6/filter/limit-237 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 inet6/filter/logdrop-147 -j TEE --gateway fc00::2 inet6/filter/logdrop-147 -j DROP Filter 239 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 inet/filter/limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 inet/filter/limit-238 -m limit --limit 12/minute -j ULOG inet/filter/limit-238 -j ACCEPT inet/filter/logdrop-148 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-148 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-148 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-238 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-238 inet6/filter/limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 inet6/filter/limit-238 -j ACCEPT inet6/filter/logdrop-148 -j TEE --gateway fc00::2 inet6/filter/logdrop-148 -j DROP Filter 240 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 inet/filter/limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 inet/filter/limit-239 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-149 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-149 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-149 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-239 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-239 inet6/filter/limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 inet6/filter/logdrop-149 -j TEE --gateway fc00::2 inet6/filter/logdrop-149 -j DROP Filter 241 {"conn-limit":{"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 inet/filter/limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 inet/filter/limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-150 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-150 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-150 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-240 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-240 inet6/filter/limit-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 inet6/filter/limit-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-150 -j TEE --gateway fc00::2 inet6/filter/logdrop-150 -j DROP Filter 242 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 inet/filter/limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 inet/filter/limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-151 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-151 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-151 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-241 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-241 inet6/filter/limit-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 inet6/filter/limit-241 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-151 -j TEE --gateway fc00::2 inet6/filter/logdrop-151 -j DROP Filter 243 {"conn-limit":{"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 inet/filter/limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 inet/filter/limit-242 -m limit --limit 1/second -j LOG inet/filter/limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-152 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-152 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-152 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-242 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-242 inet6/filter/limit-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 inet6/filter/limit-242 -m limit --limit 1/second -j LOG inet6/filter/limit-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-152 -j TEE --gateway fc00::2 inet6/filter/logdrop-152 -j DROP Filter 244 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 inet/filter/limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 inet/filter/limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-153 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-153 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-153 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-243 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-243 inet6/filter/limit-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 inet6/filter/limit-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-153 -j TEE --gateway fc00::2 inet6/filter/logdrop-153 -j DROP Filter 245 {"conn-limit":{"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 inet/filter/limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 inet/filter/limit-244 -j TEE --gateway 10.0.0.1 inet/filter/limit-244 -j TEE --gateway 10.0.0.2 inet/filter/limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-154 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-154 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-154 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-244 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-244 inet6/filter/limit-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 inet6/filter/limit-244 -j TEE --gateway fc00::2 inet6/filter/limit-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-154 -j TEE --gateway fc00::2 inet6/filter/logdrop-154 -j DROP Filter 246 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 inet/filter/limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 inet/filter/limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-155 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-155 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-155 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-245 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-245 inet6/filter/limit-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 inet6/filter/limit-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-155 -j TEE --gateway fc00::2 inet6/filter/logdrop-155 -j DROP Filter 247 {"conn-limit":{"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 inet/filter/limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 inet/filter/limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-156 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-156 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-156 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-246 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-246 inet6/filter/limit-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 inet6/filter/limit-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-156 -j TEE --gateway fc00::2 inet6/filter/logdrop-156 -j DROP Filter 248 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 inet/filter/limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-157 inet/filter/limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-157 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-157 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-157 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-247 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-247 inet6/filter/limit-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-157 inet6/filter/limit-247 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-157 -j TEE --gateway fc00::2 inet6/filter/logdrop-157 -j DROP Filter 249 {"conn-limit":{"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 inet/filter/limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-158 inet/filter/limit-248 -m limit --limit 12/minute -j ULOG inet/filter/limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-158 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-158 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-158 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-248 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-248 inet6/filter/limit-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-158 inet6/filter/limit-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-158 -j TEE --gateway fc00::2 inet6/filter/logdrop-158 -j DROP Filter 250 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 inet/filter/limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-159 inet/filter/limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-159 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-159 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-159 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-249 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-249 inet6/filter/limit-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-159 inet6/filter/logdrop-159 -j TEE --gateway fc00::2 inet6/filter/logdrop-159 -j DROP Filter 251 {"conn-limit":{"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 inet/filter/limit-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 inet/filter/limit-250 -j ACCEPT inet/filter/logdrop-160 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-160 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-160 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-250 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-250 inet6/filter/limit-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 inet6/filter/limit-250 -j ACCEPT inet6/filter/logdrop-160 -j TEE --gateway fc00::2 inet6/filter/logdrop-160 -j DROP Filter 252 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 inet/filter/limit-251 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 inet/filter/logdrop-161 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-161 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-161 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-251 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-251 inet6/filter/limit-251 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 inet6/filter/logdrop-161 -j TEE --gateway fc00::2 inet6/filter/logdrop-161 -j DROP Filter 253 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 inet/filter/limit-252 -m limit --limit 1/second -j LOG inet/filter/limit-252 -j ACCEPT inet/filter/logdrop-162 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-162 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-162 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-252 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-252 inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 inet6/filter/limit-252 -m limit --limit 1/second -j LOG inet6/filter/limit-252 -j ACCEPT inet6/filter/logdrop-162 -j TEE --gateway fc00::2 inet6/filter/logdrop-162 -j DROP Filter 254 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 inet/filter/limit-253 -m limit --limit 1/second -j LOG inet/filter/logdrop-163 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-163 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-163 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-253 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-253 inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-163 inet6/filter/limit-253 -m limit --limit 1/second -j LOG inet6/filter/logdrop-163 -j TEE --gateway fc00::2 inet6/filter/logdrop-163 -j DROP Filter 255 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 inet/filter/limit-254 -j TEE --gateway 10.0.0.1 inet/filter/limit-254 -j TEE --gateway 10.0.0.2 inet/filter/limit-254 -j ACCEPT inet/filter/logdrop-164 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-164 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-164 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-254 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-254 inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-164 inet6/filter/limit-254 -j TEE --gateway fc00::2 inet6/filter/limit-254 -j ACCEPT inet6/filter/logdrop-164 -j TEE --gateway fc00::2 inet6/filter/logdrop-164 -j DROP Filter 256 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 inet/filter/limit-255 -j TEE --gateway 10.0.0.1 inet/filter/limit-255 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-165 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-165 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-165 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-255 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-255 inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-165 inet6/filter/limit-255 -j TEE --gateway fc00::2 inet6/filter/logdrop-165 -j TEE --gateway fc00::2 inet6/filter/logdrop-165 -j DROP Filter 257 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 inet/filter/limit-256 -j ACCEPT inet/filter/logdrop-166 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-166 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-166 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-256 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-256 inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-166 inet6/filter/limit-256 -j ACCEPT inet6/filter/logdrop-166 -j TEE --gateway fc00::2 inet6/filter/logdrop-166 -j DROP Filter 258 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 inet/filter/logdrop-167 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-167 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-167 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-257 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-257 inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-167 inet6/filter/logdrop-167 -j TEE --gateway fc00::2 inet6/filter/logdrop-167 -j DROP Filter 259 {"conn-limit":{"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 inet/filter/limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 inet/filter/limit-258 -m limit --limit 12/minute -j ULOG inet/filter/limit-258 -j ACCEPT inet/filter/logdrop-168 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-168 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-168 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-258 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-258 inet6/filter/limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 inet6/filter/limit-258 -j ACCEPT inet6/filter/logdrop-168 -j TEE --gateway fc00::2 inet6/filter/logdrop-168 -j DROP Filter 260 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 inet/filter/limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 inet/filter/limit-259 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-169 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-169 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-169 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-259 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-259 inet6/filter/limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 inet6/filter/logdrop-169 -j TEE --gateway fc00::2 inet6/filter/logdrop-169 -j DROP Filter 261 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 inet/filter/limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-170 inet/filter/limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-170 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-170 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-170 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-260 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-260 inet6/filter/limit-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-170 inet6/filter/limit-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-170 -j TEE --gateway fc00::2 inet6/filter/logdrop-170 -j DROP Filter 262 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 inet/filter/limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-171 inet/filter/limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-171 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-171 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-171 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-261 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-261 inet6/filter/limit-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-171 inet6/filter/limit-261 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-171 -j TEE --gateway fc00::2 inet6/filter/logdrop-171 -j DROP Filter 263 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 inet/filter/limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-172 inet/filter/limit-262 -m limit --limit 1/second -j LOG inet/filter/limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-172 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-172 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-172 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-262 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-262 inet6/filter/limit-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-172 inet6/filter/limit-262 -m limit --limit 1/second -j LOG inet6/filter/limit-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-172 -j TEE --gateway fc00::2 inet6/filter/logdrop-172 -j DROP Filter 264 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 inet/filter/limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-173 inet/filter/limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-173 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-173 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-173 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-263 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-263 inet6/filter/limit-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-173 inet6/filter/limit-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-173 -j TEE --gateway fc00::2 inet6/filter/logdrop-173 -j DROP Filter 265 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-174 inet/filter/limit-264 -j TEE --gateway 10.0.0.1 inet/filter/limit-264 -j TEE --gateway 10.0.0.2 inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-174 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-174 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-174 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-264 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-264 inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-174 inet6/filter/limit-264 -j TEE --gateway fc00::2 inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-174 -j TEE --gateway fc00::2 inet6/filter/logdrop-174 -j DROP Filter 266 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-175 inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-175 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-175 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-175 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-265 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-265 inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-175 inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-175 -j TEE --gateway fc00::2 inet6/filter/logdrop-175 -j DROP Filter 267 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-176 inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-176 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-176 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-176 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-266 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-266 inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-176 inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-176 -j TEE --gateway fc00::2 inet6/filter/logdrop-176 -j DROP Filter 268 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-177 inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-177 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-177 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-177 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-267 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-267 inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-177 inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-177 -j TEE --gateway fc00::2 inet6/filter/logdrop-177 -j DROP Filter 269 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-178 inet/filter/limit-268 -m limit --limit 12/minute -j ULOG inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-178 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-178 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-178 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-268 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-268 inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-178 inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-178 -j TEE --gateway fc00::2 inet6/filter/logdrop-178 -j DROP Filter 270 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-179 inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-179 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-179 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-179 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-269 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-269 inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-179 inet6/filter/logdrop-179 -j TEE --gateway fc00::2 inet6/filter/logdrop-179 -j DROP Filter 271 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 inet/filter/limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-180 inet/filter/limit-270 -j ACCEPT inet/filter/logdrop-180 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-180 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-180 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-270 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-270 inet6/filter/limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-180 inet6/filter/limit-270 -j ACCEPT inet6/filter/logdrop-180 -j TEE --gateway fc00::2 inet6/filter/logdrop-180 -j DROP Filter 272 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 inet/filter/limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-181 inet/filter/logdrop-181 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-181 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-181 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-271 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-271 inet6/filter/limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-181 inet6/filter/logdrop-181 -j TEE --gateway fc00::2 inet6/filter/logdrop-181 -j DROP Filter 273 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 inet/filter/limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-182 inet/filter/limit-272 -m limit --limit 1/second -j LOG inet/filter/limit-272 -j ACCEPT inet/filter/logdrop-182 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-182 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-182 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-272 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-272 inet6/filter/limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-182 inet6/filter/limit-272 -m limit --limit 1/second -j LOG inet6/filter/limit-272 -j ACCEPT inet6/filter/logdrop-182 -j TEE --gateway fc00::2 inet6/filter/logdrop-182 -j DROP Filter 274 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 inet/filter/limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-183 inet/filter/limit-273 -m limit --limit 1/second -j LOG inet/filter/logdrop-183 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-183 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-183 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-273 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-273 inet6/filter/limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-183 inet6/filter/limit-273 -m limit --limit 1/second -j LOG inet6/filter/logdrop-183 -j TEE --gateway fc00::2 inet6/filter/logdrop-183 -j DROP Filter 275 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 inet/filter/limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-184 inet/filter/limit-274 -j TEE --gateway 10.0.0.1 inet/filter/limit-274 -j TEE --gateway 10.0.0.2 inet/filter/limit-274 -j ACCEPT inet/filter/logdrop-184 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-184 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-184 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-274 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-274 inet6/filter/limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-184 inet6/filter/limit-274 -j TEE --gateway fc00::2 inet6/filter/limit-274 -j ACCEPT inet6/filter/logdrop-184 -j TEE --gateway fc00::2 inet6/filter/logdrop-184 -j DROP Filter 276 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 inet/filter/limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-185 inet/filter/limit-275 -j TEE --gateway 10.0.0.1 inet/filter/limit-275 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-185 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-185 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-185 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-275 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-275 inet6/filter/limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-185 inet6/filter/limit-275 -j TEE --gateway fc00::2 inet6/filter/logdrop-185 -j TEE --gateway fc00::2 inet6/filter/logdrop-185 -j DROP Filter 277 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 inet/filter/limit-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-186 inet/filter/limit-276 -j ACCEPT inet/filter/logdrop-186 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-186 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-186 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-276 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-276 inet6/filter/limit-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-186 inet6/filter/limit-276 -j ACCEPT inet6/filter/logdrop-186 -j TEE --gateway fc00::2 inet6/filter/logdrop-186 -j DROP Filter 278 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 inet/filter/limit-277 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-187 inet/filter/logdrop-187 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-187 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-187 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-277 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-277 inet6/filter/limit-277 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-187 inet6/filter/logdrop-187 -j TEE --gateway fc00::2 inet6/filter/logdrop-187 -j DROP Filter 279 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 inet/filter/limit-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-188 inet/filter/limit-278 -m limit --limit 12/minute -j ULOG inet/filter/limit-278 -j ACCEPT inet/filter/logdrop-188 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-188 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-188 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-278 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-278 inet6/filter/limit-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-188 inet6/filter/limit-278 -j ACCEPT inet6/filter/logdrop-188 -j TEE --gateway fc00::2 inet6/filter/logdrop-188 -j DROP Filter 280 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 inet/filter/limit-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-189 inet/filter/limit-279 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-189 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-189 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-189 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-279 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-279 inet6/filter/limit-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-189 inet6/filter/logdrop-189 -j TEE --gateway fc00::2 inet6/filter/logdrop-189 -j DROP Filter 281 {"conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-280 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-280 inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 282 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-281 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-281 inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 283 {"conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-282 -m limit --limit 1/second -j LOG inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-282 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-282 inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-282 -m limit --limit 1/second -j LOG inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 284 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-283 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-283 inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 285 {"conn-limit":{"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-284 -j TEE --gateway 10.0.0.1 inet/filter/limit-284 -j TEE --gateway 10.0.0.2 inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-284 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-284 inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-284 -j TEE --gateway fc00::2 inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 286 {"action":"pass","conn-limit":{"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-285 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-285 inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 287 {"conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 inet/filter/limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-286 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-286 inet6/filter/limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 288 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 inet/filter/limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-287 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-287 inet6/filter/limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 289 {"conn-limit":{"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 inet/filter/limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-288 -m limit --limit 12/minute -j ULOG inet/filter/limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-288 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-288 inet6/filter/limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 290 {"action":"pass","conn-limit":{"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 inet/filter/limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-289 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-289 inet6/filter/limit-289 -m recent --name limit-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 291 {"conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-290 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-290 inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 292 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-291 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-291 inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 293 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-292 -m limit --limit 1/second -j LOG inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-292 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-292 inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-292 -m limit --limit 1/second -j LOG inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 294 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-293 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-293 inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 295 {"conn-limit":{"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 inet/filter/limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-294 -j TEE --gateway 10.0.0.1 inet/filter/limit-294 -j TEE --gateway 10.0.0.2 inet/filter/limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-294 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-294 inet6/filter/limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-294 -j TEE --gateway fc00::2 inet6/filter/limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 296 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-295 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-295 inet6/filter/limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 297 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 inet/filter/limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-296 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-296 inet6/filter/limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 298 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 inet/filter/limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-297 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-297 inet6/filter/limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 299 {"conn-limit":{"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 inet/filter/limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-298 -m limit --limit 12/minute -j ULOG inet/filter/limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-298 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-298 inet6/filter/limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 300 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 inet/filter/limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-299 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-299 inet6/filter/limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 301 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 inet/filter/limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-300 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-300 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-300 inet6/filter/limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-300 -j ACCEPT Filter 302 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 inet/filter/limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-301 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-301 inet6/filter/limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 303 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 inet/filter/limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-302 -m limit --limit 1/second -j LOG inet/filter/limit-302 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-302 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-302 inet6/filter/limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-302 -m limit --limit 1/second -j LOG inet6/filter/limit-302 -j ACCEPT Filter 304 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 inet/filter/limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-303 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-303 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-303 inet6/filter/limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-303 -m limit --limit 1/second -j LOG Filter 305 {"conn-limit":{"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 inet/filter/limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-304 -j TEE --gateway 10.0.0.1 inet/filter/limit-304 -j TEE --gateway 10.0.0.2 inet/filter/limit-304 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-304 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-304 inet6/filter/limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-304 -j TEE --gateway fc00::2 inet6/filter/limit-304 -j ACCEPT Filter 306 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 inet/filter/limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-305 -j TEE --gateway 10.0.0.1 inet/filter/limit-305 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-305 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-305 inet6/filter/limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-305 -j TEE --gateway fc00::2 Filter 307 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 inet/filter/limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-306 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-306 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-306 inet6/filter/limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-306 -j ACCEPT Filter 308 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 inet/filter/limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-307 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-307 inet6/filter/limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 309 {"conn-limit":{"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 inet/filter/limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-308 -m limit --limit 12/minute -j ULOG inet/filter/limit-308 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-308 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-308 inet6/filter/limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-308 -j ACCEPT Filter 310 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 inet/filter/limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-309 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-309 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-309 inet6/filter/limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 311 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 inet/filter/limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-310 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-310 inet6/filter/limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 312 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 inet/filter/limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-311 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-311 inet6/filter/limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 313 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 inet/filter/limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-312 -m limit --limit 1/second -j LOG inet/filter/limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-312 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-312 inet6/filter/limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-312 -m limit --limit 1/second -j LOG inet6/filter/limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 314 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 inet/filter/limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-313 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-313 inet6/filter/limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 315 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 inet/filter/limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-314 -j TEE --gateway 10.0.0.1 inet/filter/limit-314 -j TEE --gateway 10.0.0.2 inet/filter/limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-314 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-314 inet6/filter/limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-314 -j TEE --gateway fc00::2 inet6/filter/limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 316 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 inet/filter/limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-315 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-315 inet6/filter/limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 317 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 inet/filter/limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-316 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-316 inet6/filter/limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 318 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 inet/filter/limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-317 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-317 inet6/filter/limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 319 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 inet/filter/limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-318 -m limit --limit 12/minute -j ULOG inet/filter/limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-318 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-318 inet6/filter/limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 320 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 inet/filter/limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-319 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-319 inet6/filter/limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 321 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 inet/filter/limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-320 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-320 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-320 inet6/filter/limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-320 -j ACCEPT Filter 322 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 inet/filter/limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-321 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-321 inet6/filter/limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 323 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 inet/filter/limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-322 -m limit --limit 1/second -j LOG inet/filter/limit-322 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-322 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-322 inet6/filter/limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-322 -m limit --limit 1/second -j LOG inet6/filter/limit-322 -j ACCEPT Filter 324 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 inet/filter/limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-323 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-323 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-323 inet6/filter/limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-323 -m limit --limit 1/second -j LOG Filter 325 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 inet/filter/limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-324 -j TEE --gateway 10.0.0.1 inet/filter/limit-324 -j TEE --gateway 10.0.0.2 inet/filter/limit-324 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-324 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-324 inet6/filter/limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-324 -j TEE --gateway fc00::2 inet6/filter/limit-324 -j ACCEPT Filter 326 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 inet/filter/limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-325 -j TEE --gateway 10.0.0.1 inet/filter/limit-325 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-325 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-325 inet6/filter/limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-325 -j TEE --gateway fc00::2 Filter 327 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 inet/filter/limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-326 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-326 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-326 inet6/filter/limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-326 -j ACCEPT Filter 328 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 inet/filter/limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-327 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-327 inet6/filter/limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 329 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-328 -m limit --limit 12/minute -j ULOG inet/filter/limit-328 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-328 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-328 inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-328 -j ACCEPT Filter 330 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-329 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-329 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-329 inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 331 {"conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 inet/filter/limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-330 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-330 inet6/filter/limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 332 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 inet/filter/limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-331 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-331 inet6/filter/limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-331 -m recent --name user:C --rsource --mask fe00:: --set Filter 333 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 inet/filter/limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-332 -m limit --limit 1/second -j LOG inet/filter/limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 inet6/filter/limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-332 -m limit --limit 1/second -j LOG inet6/filter/limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 334 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 inet/filter/limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-333 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-333 inet6/filter/limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 335 {"conn-limit":{"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 inet/filter/limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-334 -j TEE --gateway 10.0.0.1 inet/filter/limit-334 -j TEE --gateway 10.0.0.2 inet/filter/limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-334 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-334 inet6/filter/limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-334 -j TEE --gateway fc00::2 inet6/filter/limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 336 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 inet/filter/limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-335 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-335 inet6/filter/limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 337 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 inet/filter/limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 inet6/filter/limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 338 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 inet/filter/limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-337 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-337 inet6/filter/limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-337 -m recent --name user:C --rsource --mask fe00:: --set Filter 339 {"conn-limit":{"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 inet/filter/limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-338 -m limit --limit 12/minute -j ULOG inet/filter/limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-338 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-338 inet6/filter/limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 340 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 inet/filter/limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-339 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-339 inet6/filter/limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 341 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 inet/filter/limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-340 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 inet6/filter/limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-340 -j ACCEPT Filter 342 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 inet/filter/limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-341 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-341 inet6/filter/limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 343 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 inet/filter/limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-342 -m limit --limit 1/second -j LOG inet/filter/limit-342 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-342 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-342 inet6/filter/limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-342 -m limit --limit 1/second -j LOG inet6/filter/limit-342 -j ACCEPT Filter 344 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 inet/filter/limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-343 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-343 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-343 inet6/filter/limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-343 -m limit --limit 1/second -j LOG Filter 345 {"conn-limit":{"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 inet/filter/limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-344 -j TEE --gateway 10.0.0.1 inet/filter/limit-344 -j TEE --gateway 10.0.0.2 inet/filter/limit-344 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 inet6/filter/limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-344 -j TEE --gateway fc00::2 inet6/filter/limit-344 -j ACCEPT Filter 346 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 inet/filter/limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-345 -j TEE --gateway 10.0.0.1 inet/filter/limit-345 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-345 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-345 inet6/filter/limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-345 -j TEE --gateway fc00::2 Filter 347 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 inet/filter/limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-346 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-346 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-346 inet6/filter/limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-346 -j ACCEPT Filter 348 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 inet/filter/limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-347 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-347 inet6/filter/limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 349 {"conn-limit":{"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 inet/filter/limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-348 -m limit --limit 12/minute -j ULOG inet/filter/limit-348 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 inet6/filter/limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-348 -j ACCEPT Filter 350 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 inet/filter/limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-349 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-349 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-349 inet6/filter/limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 351 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 inet/filter/limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-350 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-350 inet6/filter/limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 352 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 inet/filter/limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-351 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-351 inet6/filter/limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-351 -m recent --name user:C --rdest --mask fe00:: --set Filter 353 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 inet/filter/limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-352 -m limit --limit 1/second -j LOG inet/filter/limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 inet6/filter/limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-352 -m limit --limit 1/second -j LOG inet6/filter/limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 354 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 inet/filter/limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-353 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-353 inet6/filter/limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 355 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 inet/filter/limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-354 -j TEE --gateway 10.0.0.1 inet/filter/limit-354 -j TEE --gateway 10.0.0.2 inet/filter/limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-354 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-354 inet6/filter/limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-354 -j TEE --gateway fc00::2 inet6/filter/limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 356 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-355 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-355 inet6/filter/limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 357 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 inet/filter/limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 inet6/filter/limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 358 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 inet/filter/limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-357 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-357 inet6/filter/limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-357 -m recent --name user:C --rdest --mask fe00:: --set Filter 359 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-358 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 inet/filter/limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-358 -m limit --limit 12/minute -j ULOG inet/filter/limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-358 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-358 inet6/filter/limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 360 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-359 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 inet/filter/limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-359 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-359 inet6/filter/limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 361 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-360 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 inet/filter/limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-360 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-360 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-360 inet6/filter/limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-360 -j ACCEPT Filter 362 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-361 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 inet/filter/limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-361 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-361 inet6/filter/limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 363 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-362 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 inet/filter/limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-362 -m limit --limit 1/second -j LOG inet/filter/limit-362 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-362 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-362 inet6/filter/limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-362 -m limit --limit 1/second -j LOG inet6/filter/limit-362 -j ACCEPT Filter 364 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-363 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 inet/filter/limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-363 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-363 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-363 inet6/filter/limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-363 -m limit --limit 1/second -j LOG Filter 365 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-364 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 inet/filter/limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-364 -j TEE --gateway 10.0.0.1 inet/filter/limit-364 -j TEE --gateway 10.0.0.2 inet/filter/limit-364 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-364 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-364 inet6/filter/limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-364 -j TEE --gateway fc00::2 inet6/filter/limit-364 -j ACCEPT Filter 366 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-365 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 inet/filter/limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-365 -j TEE --gateway 10.0.0.1 inet/filter/limit-365 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-365 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-365 inet6/filter/limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-365 -j TEE --gateway fc00::2 Filter 367 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-366 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 inet/filter/limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-366 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-366 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-366 inet6/filter/limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-366 -j ACCEPT Filter 368 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-367 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 inet/filter/limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-367 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-367 inet6/filter/limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 369 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-368 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 inet/filter/limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-368 -m limit --limit 12/minute -j ULOG inet/filter/limit-368 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-368 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-368 inet6/filter/limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-368 -j ACCEPT Filter 370 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-369 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 inet/filter/limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-369 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-369 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-369 inet6/filter/limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 371 {"conn-limit":{"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-370 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 inet/filter/limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-190 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-190 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-370 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-370 inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 inet6/filter/limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-190 -j DROP Filter 372 {"action":"pass","conn-limit":{"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-371 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 inet/filter/limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-191 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-191 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-371 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-371 inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 inet6/filter/limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-191 -j DROP Filter 373 {"conn-limit":{"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-372 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 inet/filter/limit-372 -m limit --limit 1/second -j LOG inet/filter/limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-192 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-192 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-372 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-372 inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 inet6/filter/limit-372 -m limit --limit 1/second -j LOG inet6/filter/limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-192 -j DROP Filter 374 {"action":"pass","conn-limit":{"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-373 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 inet/filter/limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-193 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-193 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-373 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-373 inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 inet6/filter/limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-193 -j DROP Filter 375 {"conn-limit":{"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-374 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 inet/filter/limit-374 -j TEE --gateway 10.0.0.1 inet/filter/limit-374 -j TEE --gateway 10.0.0.2 inet/filter/limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-194 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-194 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-374 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-374 inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 inet6/filter/limit-374 -j TEE --gateway fc00::2 inet6/filter/limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-194 -j DROP Filter 376 {"action":"pass","conn-limit":{"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-375 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-195 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-195 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-375 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-375 inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 inet6/filter/limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-195 -j DROP Filter 377 {"conn-limit":{"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-376 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 inet/filter/limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 inet/filter/limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-196 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-196 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-376 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-376 inet6/filter/limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 inet6/filter/limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-196 -j DROP Filter 378 {"action":"pass","conn-limit":{"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-377 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-377 inet/filter/limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 inet/filter/limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-197 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-197 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-377 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-377 inet6/filter/limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 inet6/filter/limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-197 -j DROP Filter 379 {"conn-limit":{"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-378 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 inet/filter/limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 inet/filter/limit-378 -m limit --limit 12/minute -j ULOG inet/filter/limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-198 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-198 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-378 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 inet6/filter/limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 inet6/filter/limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-198 -j DROP Filter 380 {"action":"pass","conn-limit":{"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-379 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 inet/filter/limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 inet/filter/limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-199 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-199 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-379 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-379 inet6/filter/limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 inet6/filter/logdrop-199 -j DROP Filter 381 {"conn-limit":{"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-380 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-200 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-200 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-380 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-380 inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-200 -j DROP Filter 382 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-381 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-381 inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-201 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-201 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-381 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-381 inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-201 -j DROP Filter 383 {"conn-limit":{"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-382 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 inet/filter/limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 inet/filter/limit-382 -m limit --limit 1/second -j LOG inet/filter/limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-202 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-202 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-382 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 inet6/filter/limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 inet6/filter/limit-382 -m limit --limit 1/second -j LOG inet6/filter/limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-202 -j DROP Filter 384 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-383 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 inet/filter/limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-203 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-203 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-383 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-383 inet6/filter/limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 inet6/filter/limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-203 -j DROP Filter 385 {"conn-limit":{"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-384 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 inet/filter/limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 inet/filter/limit-384 -j TEE --gateway 10.0.0.1 inet/filter/limit-384 -j TEE --gateway 10.0.0.2 inet/filter/limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-204 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-204 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-384 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-384 inet6/filter/limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 inet6/filter/limit-384 -j TEE --gateway fc00::2 inet6/filter/limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-204 -j DROP Filter 386 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-385 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-205 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-205 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-385 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-385 inet6/filter/limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 inet6/filter/limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-205 -j DROP Filter 387 {"conn-limit":{"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-386 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 inet/filter/limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 inet/filter/limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-206 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-206 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-386 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-386 inet6/filter/limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 inet6/filter/limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-206 -j DROP Filter 388 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-387 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 inet/filter/limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 inet/filter/limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-207 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-207 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-387 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-387 inet6/filter/limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 inet6/filter/limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-207 -j DROP Filter 389 {"conn-limit":{"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-388 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 inet/filter/limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 inet/filter/limit-388 -m limit --limit 12/minute -j ULOG inet/filter/limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-208 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-208 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-388 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-388 inet6/filter/limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 inet6/filter/limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-208 -j DROP Filter 390 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-389 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-389 inet/filter/limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 inet/filter/limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-209 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-209 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-389 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-389 inet6/filter/limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 inet6/filter/logdrop-209 -j DROP Filter 391 {"conn-limit":{"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-390 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 inet/filter/limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 inet/filter/limit-390 -j ACCEPT inet/filter/logdrop-210 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-210 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-390 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 inet6/filter/limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 inet6/filter/limit-390 -j ACCEPT inet6/filter/logdrop-210 -j DROP Filter 392 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-391 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 inet/filter/limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 inet/filter/logdrop-211 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-211 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-391 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-391 inet6/filter/limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 inet6/filter/logdrop-211 -j DROP Filter 393 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-392 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 inet/filter/limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 inet/filter/limit-392 -m limit --limit 1/second -j LOG inet/filter/limit-392 -j ACCEPT inet/filter/logdrop-212 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-212 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-392 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-392 inet6/filter/limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 inet6/filter/limit-392 -m limit --limit 1/second -j LOG inet6/filter/limit-392 -j ACCEPT inet6/filter/logdrop-212 -j DROP Filter 394 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-393 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-393 inet/filter/limit-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-213 inet/filter/limit-393 -m limit --limit 1/second -j LOG inet/filter/logdrop-213 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-213 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-393 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-393 inet6/filter/limit-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-213 inet6/filter/limit-393 -m limit --limit 1/second -j LOG inet6/filter/logdrop-213 -j DROP Filter 395 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-394 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 inet/filter/limit-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-214 inet/filter/limit-394 -j TEE --gateway 10.0.0.1 inet/filter/limit-394 -j TEE --gateway 10.0.0.2 inet/filter/limit-394 -j ACCEPT inet/filter/logdrop-214 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-214 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-394 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 inet6/filter/limit-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-214 inet6/filter/limit-394 -j TEE --gateway fc00::2 inet6/filter/limit-394 -j ACCEPT inet6/filter/logdrop-214 -j DROP Filter 396 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-395 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 inet/filter/limit-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-215 inet/filter/limit-395 -j TEE --gateway 10.0.0.1 inet/filter/limit-395 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-215 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-215 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-395 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-395 inet6/filter/limit-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-215 inet6/filter/limit-395 -j TEE --gateway fc00::2 inet6/filter/logdrop-215 -j DROP Filter 397 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-396 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 inet/filter/limit-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-216 inet/filter/limit-396 -j ACCEPT inet/filter/logdrop-216 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-216 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-396 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-396 inet6/filter/limit-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-216 inet6/filter/limit-396 -j ACCEPT inet6/filter/logdrop-216 -j DROP Filter 398 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-397 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 inet/filter/limit-397 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-217 inet/filter/logdrop-217 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-217 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-397 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-397 inet6/filter/limit-397 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-217 inet6/filter/logdrop-217 -j DROP Filter 399 {"conn-limit":{"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-398 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 inet/filter/limit-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-218 inet/filter/limit-398 -m limit --limit 12/minute -j ULOG inet/filter/limit-398 -j ACCEPT inet/filter/logdrop-218 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-218 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-398 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-398 inet6/filter/limit-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-218 inet6/filter/limit-398 -j ACCEPT inet6/filter/logdrop-218 -j DROP Filter 400 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-399 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 inet/filter/limit-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-219 inet/filter/limit-399 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-219 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-219 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-399 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-399 inet6/filter/limit-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-219 inet6/filter/logdrop-219 -j DROP Filter 401 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-400 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 inet/filter/limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-220 inet/filter/limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-220 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-220 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-400 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-400 inet6/filter/limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-220 inet6/filter/limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-220 -j DROP Filter 402 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-401 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-401 inet/filter/limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-221 inet/filter/limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-221 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-221 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-401 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-401 inet6/filter/limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-221 inet6/filter/limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-221 -j DROP Filter 403 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-402 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 inet/filter/limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-222 inet/filter/limit-402 -m limit --limit 1/second -j LOG inet/filter/limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-222 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-222 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-402 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 inet6/filter/limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-222 inet6/filter/limit-402 -m limit --limit 1/second -j LOG inet6/filter/limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-222 -j DROP Filter 404 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-403 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 inet/filter/limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-223 inet/filter/limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-223 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-223 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-403 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-403 inet6/filter/limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-223 inet6/filter/limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-223 -j DROP Filter 405 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-404 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 inet/filter/limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-224 inet/filter/limit-404 -j TEE --gateway 10.0.0.1 inet/filter/limit-404 -j TEE --gateway 10.0.0.2 inet/filter/limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-224 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-224 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-404 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-404 inet6/filter/limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-224 inet6/filter/limit-404 -j TEE --gateway fc00::2 inet6/filter/limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-224 -j DROP Filter 406 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-405 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-405 inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-225 inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-225 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-225 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-405 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-405 inet6/filter/limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-225 inet6/filter/limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-225 -j DROP Filter 407 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-406 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 inet/filter/limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-226 inet/filter/limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-226 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-226 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-406 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 inet6/filter/limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-226 inet6/filter/limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-226 -j DROP Filter 408 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-407 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 inet/filter/limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-227 inet/filter/limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-227 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-227 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-407 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-407 inet6/filter/limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-227 inet6/filter/limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-227 -j DROP Filter 409 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-408 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 inet/filter/limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 inet/filter/limit-408 -m limit --limit 12/minute -j ULOG inet/filter/limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-228 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-228 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-408 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-408 inet6/filter/limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 inet6/filter/limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-228 -j DROP Filter 410 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-409 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 inet/filter/limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 inet/filter/limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-229 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-229 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-409 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-409 inet6/filter/limit-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 inet6/filter/logdrop-229 -j DROP Filter 411 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-410 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 inet/filter/limit-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-230 inet/filter/limit-410 -j ACCEPT inet/filter/logdrop-230 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-230 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-410 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-410 inet6/filter/limit-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-230 inet6/filter/limit-410 -j ACCEPT inet6/filter/logdrop-230 -j DROP Filter 412 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-411 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 inet/filter/limit-411 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-231 inet/filter/logdrop-231 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-231 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-411 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-411 inet6/filter/limit-411 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-231 inet6/filter/logdrop-231 -j DROP Filter 413 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-412 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 inet/filter/limit-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-232 inet/filter/limit-412 -m limit --limit 1/second -j LOG inet/filter/limit-412 -j ACCEPT inet/filter/logdrop-232 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-232 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-412 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-412 inet6/filter/limit-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-232 inet6/filter/limit-412 -m limit --limit 1/second -j LOG inet6/filter/limit-412 -j ACCEPT inet6/filter/logdrop-232 -j DROP Filter 414 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-413 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-413 inet/filter/limit-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-233 inet/filter/limit-413 -m limit --limit 1/second -j LOG inet/filter/logdrop-233 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-233 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-413 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-413 inet6/filter/limit-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-233 inet6/filter/limit-413 -m limit --limit 1/second -j LOG inet6/filter/logdrop-233 -j DROP Filter 415 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-414 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 inet/filter/limit-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-234 inet/filter/limit-414 -j TEE --gateway 10.0.0.1 inet/filter/limit-414 -j TEE --gateway 10.0.0.2 inet/filter/limit-414 -j ACCEPT inet/filter/logdrop-234 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-234 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-414 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 inet6/filter/limit-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-234 inet6/filter/limit-414 -j TEE --gateway fc00::2 inet6/filter/limit-414 -j ACCEPT inet6/filter/logdrop-234 -j DROP Filter 416 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-415 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 inet/filter/limit-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-235 inet/filter/limit-415 -j TEE --gateway 10.0.0.1 inet/filter/limit-415 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-235 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-235 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-415 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-415 inet6/filter/limit-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-235 inet6/filter/limit-415 -j TEE --gateway fc00::2 inet6/filter/logdrop-235 -j DROP Filter 417 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-416 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 inet/filter/limit-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-236 inet/filter/limit-416 -j ACCEPT inet/filter/logdrop-236 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-236 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-416 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-416 inet6/filter/limit-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-236 inet6/filter/limit-416 -j ACCEPT inet6/filter/logdrop-236 -j DROP Filter 418 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-417 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-417 inet/filter/limit-417 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-237 inet/filter/logdrop-237 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-237 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-417 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-417 inet6/filter/limit-417 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-237 inet6/filter/logdrop-237 -j DROP Filter 419 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-418 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 inet/filter/limit-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-238 inet/filter/limit-418 -m limit --limit 12/minute -j ULOG inet/filter/limit-418 -j ACCEPT inet/filter/logdrop-238 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-238 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-418 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-418 inet6/filter/limit-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-238 inet6/filter/limit-418 -j ACCEPT inet6/filter/logdrop-238 -j DROP Filter 420 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-419 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 inet/filter/limit-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-239 inet/filter/limit-419 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-239 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-239 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-419 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-419 inet6/filter/limit-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-239 inet6/filter/logdrop-239 -j DROP Filter 421 {"conn-limit":{"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-420 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 inet/filter/limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-240 inet/filter/limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-240 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-240 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-420 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-420 inet6/filter/limit-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-240 inet6/filter/limit-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-240 -j DROP Filter 422 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-421 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 inet/filter/limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-241 inet/filter/limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-241 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-241 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-421 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-421 inet6/filter/limit-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-241 inet6/filter/limit-421 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-241 -j DROP Filter 423 {"conn-limit":{"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-422 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 inet/filter/limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-242 inet/filter/limit-422 -m limit --limit 1/second -j LOG inet/filter/limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-242 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-242 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-422 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-422 inet6/filter/limit-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-242 inet6/filter/limit-422 -m limit --limit 1/second -j LOG inet6/filter/limit-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-242 -j DROP Filter 424 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-423 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 inet/filter/limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-243 inet/filter/limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-243 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-243 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-423 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-423 inet6/filter/limit-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-243 inet6/filter/limit-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-243 -j DROP Filter 425 {"conn-limit":{"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-424 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 inet/filter/limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-244 inet/filter/limit-424 -j TEE --gateway 10.0.0.1 inet/filter/limit-424 -j TEE --gateway 10.0.0.2 inet/filter/limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-244 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-244 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-424 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-424 inet6/filter/limit-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-244 inet6/filter/limit-424 -j TEE --gateway fc00::2 inet6/filter/limit-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-244 -j DROP Filter 426 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-425 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 inet/filter/limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-245 inet/filter/limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-245 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-245 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-425 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-425 inet6/filter/limit-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-245 inet6/filter/limit-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-245 -j DROP Filter 427 {"conn-limit":{"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-426 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 inet/filter/limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-246 inet/filter/limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-246 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-246 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-426 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-426 inet6/filter/limit-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-246 inet6/filter/limit-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-246 -j DROP Filter 428 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-427 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 inet/filter/limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-247 inet/filter/limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-247 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-247 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-427 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-427 inet6/filter/limit-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-247 inet6/filter/limit-427 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-247 -j DROP Filter 429 {"conn-limit":{"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-428 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 inet/filter/limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-248 inet/filter/limit-428 -m limit --limit 12/minute -j ULOG inet/filter/limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-248 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-248 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-428 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-428 inet6/filter/limit-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-248 inet6/filter/limit-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-248 -j DROP Filter 430 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-429 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 inet/filter/limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-249 inet/filter/limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-249 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-249 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-429 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-429 inet6/filter/limit-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-249 inet6/filter/logdrop-249 -j DROP Filter 431 {"conn-limit":{"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-430 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 inet/filter/limit-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 inet/filter/limit-430 -j ACCEPT inet/filter/logdrop-250 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-250 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-430 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-430 inet6/filter/limit-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-250 inet6/filter/limit-430 -j ACCEPT inet6/filter/logdrop-250 -j DROP Filter 432 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-431 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-431 inet/filter/limit-431 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 inet/filter/logdrop-251 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-251 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-431 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-431 inet6/filter/limit-431 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-251 inet6/filter/logdrop-251 -j DROP Filter 433 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-432 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 inet/filter/limit-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 inet/filter/limit-432 -m limit --limit 1/second -j LOG inet/filter/limit-432 -j ACCEPT inet/filter/logdrop-252 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-252 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-432 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-432 inet6/filter/limit-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-252 inet6/filter/limit-432 -m limit --limit 1/second -j LOG inet6/filter/limit-432 -j ACCEPT inet6/filter/logdrop-252 -j DROP Filter 434 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-433 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 inet/filter/limit-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-253 inet/filter/limit-433 -m limit --limit 1/second -j LOG inet/filter/logdrop-253 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-253 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-433 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-433 inet6/filter/limit-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-253 inet6/filter/limit-433 -m limit --limit 1/second -j LOG inet6/filter/logdrop-253 -j DROP Filter 435 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-434 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 inet/filter/limit-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-254 inet/filter/limit-434 -j TEE --gateway 10.0.0.1 inet/filter/limit-434 -j TEE --gateway 10.0.0.2 inet/filter/limit-434 -j ACCEPT inet/filter/logdrop-254 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-254 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-434 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-434 inet6/filter/limit-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-254 inet6/filter/limit-434 -j TEE --gateway fc00::2 inet6/filter/limit-434 -j ACCEPT inet6/filter/logdrop-254 -j DROP Filter 436 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-435 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-435 inet/filter/limit-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-255 inet/filter/limit-435 -j TEE --gateway 10.0.0.1 inet/filter/limit-435 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-255 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-255 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-435 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-435 inet6/filter/limit-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-255 inet6/filter/limit-435 -j TEE --gateway fc00::2 inet6/filter/logdrop-255 -j DROP Filter 437 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-436 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 inet/filter/limit-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-256 inet/filter/limit-436 -j ACCEPT inet/filter/logdrop-256 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-256 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-436 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-436 inet6/filter/limit-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-256 inet6/filter/limit-436 -j ACCEPT inet6/filter/logdrop-256 -j DROP Filter 438 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-437 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 inet/filter/limit-437 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-257 inet/filter/logdrop-257 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-257 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-437 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-437 inet6/filter/limit-437 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-257 inet6/filter/logdrop-257 -j DROP Filter 439 {"conn-limit":{"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-438 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 inet/filter/limit-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 inet/filter/limit-438 -m limit --limit 12/minute -j ULOG inet/filter/limit-438 -j ACCEPT inet/filter/logdrop-258 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-258 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-438 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-438 inet6/filter/limit-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-258 inet6/filter/limit-438 -j ACCEPT inet6/filter/logdrop-258 -j DROP Filter 440 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-439 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 inet/filter/limit-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 inet/filter/limit-439 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-259 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-259 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-439 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-439 inet6/filter/limit-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-259 inet6/filter/logdrop-259 -j DROP Filter 441 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-440 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 inet/filter/limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-260 inet/filter/limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-260 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-260 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-440 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-440 inet6/filter/limit-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-260 inet6/filter/limit-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-260 -j DROP Filter 442 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-441 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 inet/filter/limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-261 inet/filter/limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-261 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-261 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-441 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-441 inet6/filter/limit-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-261 inet6/filter/limit-441 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-261 -j DROP Filter 443 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-442 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 inet/filter/limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-262 inet/filter/limit-442 -m limit --limit 1/second -j LOG inet/filter/limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-262 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-262 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-442 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-442 inet6/filter/limit-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-262 inet6/filter/limit-442 -m limit --limit 1/second -j LOG inet6/filter/limit-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-262 -j DROP Filter 444 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-443 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-443 inet/filter/limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-263 inet/filter/limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-263 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-263 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-443 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-443 inet6/filter/limit-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-263 inet6/filter/limit-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-263 -j DROP Filter 445 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-444 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 inet/filter/limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 inet/filter/limit-444 -j TEE --gateway 10.0.0.1 inet/filter/limit-444 -j TEE --gateway 10.0.0.2 inet/filter/limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-264 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-264 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-444 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-444 inet6/filter/limit-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 inet6/filter/limit-444 -j TEE --gateway fc00::2 inet6/filter/limit-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-264 -j DROP Filter 446 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-445 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 inet/filter/limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 inet/filter/limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-265 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-265 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-445 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-445 inet6/filter/limit-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 inet6/filter/limit-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-265 -j DROP Filter 447 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-446 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 inet/filter/limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 inet/filter/limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-266 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-266 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-446 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-446 inet6/filter/limit-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 inet6/filter/limit-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-266 -j DROP Filter 448 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-447 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-447 inet/filter/limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 inet/filter/limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-267 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-267 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-447 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-447 inet6/filter/limit-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 inet6/filter/limit-447 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-267 -j DROP Filter 449 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-448 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 inet/filter/limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 inet/filter/limit-448 -m limit --limit 12/minute -j ULOG inet/filter/limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-268 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-268 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-448 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-448 inet6/filter/limit-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 inet6/filter/limit-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-268 -j DROP Filter 450 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-449 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 inet/filter/limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 inet/filter/limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-269 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-269 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-449 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-449 inet6/filter/limit-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 inet6/filter/logdrop-269 -j DROP Filter 451 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-450 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 inet/filter/limit-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 inet/filter/limit-450 -j ACCEPT inet/filter/logdrop-270 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-270 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-450 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-450 inet6/filter/limit-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 inet6/filter/limit-450 -j ACCEPT inet6/filter/logdrop-270 -j DROP Filter 452 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-451 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 inet/filter/limit-451 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 inet/filter/logdrop-271 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-271 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-451 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-451 inet6/filter/limit-451 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 inet6/filter/logdrop-271 -j DROP Filter 453 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-452 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 inet/filter/limit-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 inet/filter/limit-452 -m limit --limit 1/second -j LOG inet/filter/limit-452 -j ACCEPT inet/filter/logdrop-272 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-272 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-452 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-452 inet6/filter/limit-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 inet6/filter/limit-452 -m limit --limit 1/second -j LOG inet6/filter/limit-452 -j ACCEPT inet6/filter/logdrop-272 -j DROP Filter 454 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-453 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 inet/filter/limit-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 inet/filter/limit-453 -m limit --limit 1/second -j LOG inet/filter/logdrop-273 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-273 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-453 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-453 inet6/filter/limit-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 inet6/filter/limit-453 -m limit --limit 1/second -j LOG inet6/filter/logdrop-273 -j DROP Filter 455 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-454 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 inet/filter/limit-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 inet/filter/limit-454 -j TEE --gateway 10.0.0.1 inet/filter/limit-454 -j TEE --gateway 10.0.0.2 inet/filter/limit-454 -j ACCEPT inet/filter/logdrop-274 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-274 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-454 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-454 inet6/filter/limit-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 inet6/filter/limit-454 -j TEE --gateway fc00::2 inet6/filter/limit-454 -j ACCEPT inet6/filter/logdrop-274 -j DROP Filter 456 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-455 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-455 inet/filter/limit-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 inet/filter/limit-455 -j TEE --gateway 10.0.0.1 inet/filter/limit-455 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-275 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-275 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-455 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-455 inet6/filter/limit-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 inet6/filter/limit-455 -j TEE --gateway fc00::2 inet6/filter/logdrop-275 -j DROP Filter 457 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-456 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 inet/filter/limit-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 inet/filter/limit-456 -j ACCEPT inet/filter/logdrop-276 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-276 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-456 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-456 inet6/filter/limit-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 inet6/filter/limit-456 -j ACCEPT inet6/filter/logdrop-276 -j DROP Filter 458 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-457 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 inet/filter/limit-457 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-277 inet/filter/logdrop-277 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-277 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-457 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-457 inet6/filter/limit-457 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-277 inet6/filter/logdrop-277 -j DROP Filter 459 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-458 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 inet/filter/limit-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-278 inet/filter/limit-458 -m limit --limit 12/minute -j ULOG inet/filter/limit-458 -j ACCEPT inet/filter/logdrop-278 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-278 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-458 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-458 inet6/filter/limit-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-278 inet6/filter/limit-458 -j ACCEPT inet6/filter/logdrop-278 -j DROP Filter 460 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-459 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-459 inet/filter/limit-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-279 inet/filter/limit-459 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-279 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-279 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-459 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-459 inet6/filter/limit-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-279 inet6/filter/logdrop-279 -j DROP Filter 461 {"conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-460 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 inet/filter/limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-460 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-460 inet6/filter/limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 462 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-461 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 inet/filter/limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-461 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-461 inet6/filter/limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 463 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-462 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 inet/filter/limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-462 -m limit --limit 1/second -j LOG inet/filter/limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-462 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-462 inet6/filter/limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-462 -m limit --limit 1/second -j LOG inet6/filter/limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 464 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-463 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 inet/filter/limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-463 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-463 inet6/filter/limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 465 {"conn-limit":{"interval":5,"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-464 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 inet/filter/limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-464 -j TEE --gateway 10.0.0.1 inet/filter/limit-464 -j TEE --gateway 10.0.0.2 inet/filter/limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-464 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-464 inet6/filter/limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-464 -j TEE --gateway fc00::2 inet6/filter/limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 466 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-465 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-465 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-465 inet6/filter/limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 467 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-466 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 inet/filter/limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-466 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-466 inet6/filter/limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 468 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-467 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-467 inet/filter/limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-467 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-467 inet6/filter/limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 469 {"conn-limit":{"interval":5,"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-468 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 inet/filter/limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-468 -m limit --limit 12/minute -j ULOG inet/filter/limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-468 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-468 inet6/filter/limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 470 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-469 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 inet/filter/limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-469 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-469 inet6/filter/limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 471 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-470 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 inet/filter/limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-470 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-470 inet6/filter/limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 472 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-471 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-471 inet/filter/limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-471 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-471 inet6/filter/limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 473 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-472 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 inet/filter/limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-472 -m limit --limit 1/second -j LOG inet/filter/limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-472 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-472 inet6/filter/limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-472 -m limit --limit 1/second -j LOG inet6/filter/limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 474 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-473 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 inet/filter/limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-473 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-473 inet6/filter/limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 475 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-474 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 inet/filter/limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-474 -j TEE --gateway 10.0.0.1 inet/filter/limit-474 -j TEE --gateway 10.0.0.2 inet/filter/limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-474 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-474 inet6/filter/limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-474 -j TEE --gateway fc00::2 inet6/filter/limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 476 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-475 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-475 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-475 inet6/filter/limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 477 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-476 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 inet/filter/limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-476 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-476 inet6/filter/limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 478 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-477 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 inet/filter/limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-477 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-477 inet6/filter/limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 479 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-478 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-478 -m limit --limit 12/minute -j ULOG inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-478 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-478 inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 480 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-479 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-479 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-479 inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 481 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-480 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-480 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-480 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-480 inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-480 -j ACCEPT Filter 482 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-481 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-481 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-481 inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 483 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-482 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-482 -m limit --limit 1/second -j LOG inet/filter/limit-482 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-482 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-482 inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-482 -m limit --limit 1/second -j LOG inet6/filter/limit-482 -j ACCEPT Filter 484 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-483 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-483 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-483 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-483 inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-483 -m limit --limit 1/second -j LOG Filter 485 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-484 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-484 -j TEE --gateway 10.0.0.1 inet/filter/limit-484 -j TEE --gateway 10.0.0.2 inet/filter/limit-484 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-484 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-484 inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-484 -j TEE --gateway fc00::2 inet6/filter/limit-484 -j ACCEPT Filter 486 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-485 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-485 inet/filter/limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-485 -j TEE --gateway 10.0.0.1 inet/filter/limit-485 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-485 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-485 inet6/filter/limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-485 -j TEE --gateway fc00::2 Filter 487 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-486 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-486 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-486 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-486 inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-486 -j ACCEPT Filter 488 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-487 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-487 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-487 inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 489 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-488 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-488 -m limit --limit 12/minute -j ULOG inet/filter/limit-488 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-488 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-488 inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-488 -j ACCEPT Filter 490 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-489 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-489 inet/filter/limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-489 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-489 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-489 inet6/filter/limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 491 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-490 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-490 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-490 inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 492 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-491 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-491 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-491 inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 493 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-492 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-492 -m limit --limit 1/second -j LOG inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-492 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-492 inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-492 -m limit --limit 1/second -j LOG inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 494 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-493 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-493 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-493 inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 495 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-494 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-494 -j TEE --gateway 10.0.0.1 inet/filter/limit-494 -j TEE --gateway 10.0.0.2 inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-494 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-494 inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-494 -j TEE --gateway fc00::2 inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 496 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-495 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-495 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-495 inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 497 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-496 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-496 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-496 inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 498 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-497 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-497 inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-497 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-497 inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 499 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-498 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-498 -m limit --limit 12/minute -j ULOG inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-498 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-498 inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 500 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-499 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-499 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-499 inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 501 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-500 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-500 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-500 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-500 inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-500 -j ACCEPT Filter 502 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-501 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-501 inet/filter/limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-501 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-501 inet6/filter/limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 503 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-502 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 inet/filter/limit-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-502 -m limit --limit 1/second -j LOG inet/filter/limit-502 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-502 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-502 inet6/filter/limit-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-502 -m limit --limit 1/second -j LOG inet6/filter/limit-502 -j ACCEPT Filter 504 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-503 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 inet/filter/limit-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-503 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-503 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-503 inet6/filter/limit-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-503 -m limit --limit 1/second -j LOG Filter 505 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-504 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 inet/filter/limit-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-504 -j TEE --gateway 10.0.0.1 inet/filter/limit-504 -j TEE --gateway 10.0.0.2 inet/filter/limit-504 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-504 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-504 inet6/filter/limit-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-504 -j TEE --gateway fc00::2 inet6/filter/limit-504 -j ACCEPT Filter 506 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-505 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 inet/filter/limit-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-505 -j TEE --gateway 10.0.0.1 inet/filter/limit-505 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-505 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-505 inet6/filter/limit-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-505 -j TEE --gateway fc00::2 Filter 507 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-506 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 inet/filter/limit-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-506 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-506 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-506 inet6/filter/limit-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-506 -j ACCEPT Filter 508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-507 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 inet/filter/limit-507 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-507 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-507 inet6/filter/limit-507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 509 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-508 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 inet/filter/limit-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-508 -m limit --limit 12/minute -j ULOG inet/filter/limit-508 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-508 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-508 inet6/filter/limit-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-508 -j ACCEPT Filter 510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-509 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-509 inet/filter/limit-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-509 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-509 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-509 inet6/filter/limit-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 511 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-510 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-510 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-510 inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 512 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-511 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-511 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-511 inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --set Filter 513 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-512 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-512 -m limit --limit 1/second -j LOG inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-512 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-512 inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-512 -m limit --limit 1/second -j LOG inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 514 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-513 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-513 inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-513 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-513 inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 515 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-514 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 inet/filter/limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-514 -j TEE --gateway 10.0.0.1 inet/filter/limit-514 -j TEE --gateway 10.0.0.2 inet/filter/limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-514 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-514 inet6/filter/limit-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-514 -j TEE --gateway fc00::2 inet6/filter/limit-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 516 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-515 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 inet/filter/limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-515 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-515 inet6/filter/limit-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 517 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-516 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 inet/filter/limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-516 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-516 inet6/filter/limit-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 518 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-517 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 inet/filter/limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-517 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-517 inet6/filter/limit-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-517 -m recent --name user:C --rsource --mask fe00:: --set Filter 519 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-518 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 inet/filter/limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-518 -m limit --limit 12/minute -j ULOG inet/filter/limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-518 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-518 inet6/filter/limit-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 520 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-519 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 inet/filter/limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-519 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-519 inet6/filter/limit-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 521 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-520 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 inet/filter/limit-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-520 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-520 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-520 inet6/filter/limit-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-520 -j ACCEPT Filter 522 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-521 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-521 inet/filter/limit-521 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-521 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-521 inet6/filter/limit-521 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 523 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-522 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 inet/filter/limit-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-522 -m limit --limit 1/second -j LOG inet/filter/limit-522 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-522 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-522 inet6/filter/limit-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-522 -m limit --limit 1/second -j LOG inet6/filter/limit-522 -j ACCEPT Filter 524 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-523 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 inet/filter/limit-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-523 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-523 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-523 inet6/filter/limit-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-523 -m limit --limit 1/second -j LOG Filter 525 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-524 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 inet/filter/limit-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-524 -j TEE --gateway 10.0.0.1 inet/filter/limit-524 -j TEE --gateway 10.0.0.2 inet/filter/limit-524 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-524 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-524 inet6/filter/limit-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-524 -j TEE --gateway fc00::2 inet6/filter/limit-524 -j ACCEPT Filter 526 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-525 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-525 inet/filter/limit-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-525 -j TEE --gateway 10.0.0.1 inet/filter/limit-525 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-525 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-525 inet6/filter/limit-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-525 -j TEE --gateway fc00::2 Filter 527 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-526 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 inet/filter/limit-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-526 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-526 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-526 inet6/filter/limit-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-526 -j ACCEPT Filter 528 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-527 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 inet/filter/limit-527 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-527 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-527 inet6/filter/limit-527 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 529 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-528 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 inet/filter/limit-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-528 -m limit --limit 12/minute -j ULOG inet/filter/limit-528 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-528 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-528 inet6/filter/limit-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-528 -j ACCEPT Filter 530 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-529 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 inet/filter/limit-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-529 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-529 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-529 inet6/filter/limit-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 531 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-530 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 inet/filter/limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-530 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-530 inet6/filter/limit-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 532 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-531 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 inet/filter/limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-531 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-531 inet6/filter/limit-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-531 -m recent --name user:C --rdest --mask fe00:: --set Filter 533 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-532 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 inet/filter/limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-532 -m limit --limit 1/second -j LOG inet/filter/limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-532 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-532 inet6/filter/limit-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-532 -m limit --limit 1/second -j LOG inet6/filter/limit-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 534 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-533 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 inet/filter/limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-533 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-533 inet6/filter/limit-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 535 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-534 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 inet/filter/limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-534 -j TEE --gateway 10.0.0.1 inet/filter/limit-534 -j TEE --gateway 10.0.0.2 inet/filter/limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-534 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-534 inet6/filter/limit-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-534 -j TEE --gateway fc00::2 inet6/filter/limit-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 536 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-535 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 inet/filter/limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-535 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-535 inet6/filter/limit-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 537 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-536 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 inet/filter/limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-536 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-536 inet6/filter/limit-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 538 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-537 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 inet/filter/limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-537 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-537 inet6/filter/limit-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-537 -m recent --name user:C --rdest --mask fe00:: --set Filter 539 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-538 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 inet/filter/limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-538 -m limit --limit 12/minute -j ULOG inet/filter/limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-538 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-538 inet6/filter/limit-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 540 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-539 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-539 inet/filter/limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-539 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-539 inet6/filter/limit-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 541 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-540 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 inet/filter/limit-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-540 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-540 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 inet6/filter/limit-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-540 -j ACCEPT Filter 542 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-541 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 inet/filter/limit-541 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-541 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-541 inet6/filter/limit-541 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 543 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-542 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 inet/filter/limit-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-542 -m limit --limit 1/second -j LOG inet/filter/limit-542 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-542 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-542 inet6/filter/limit-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-542 -m limit --limit 1/second -j LOG inet6/filter/limit-542 -j ACCEPT Filter 544 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-543 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-543 inet/filter/limit-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-543 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-543 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-543 inet6/filter/limit-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-543 -m limit --limit 1/second -j LOG Filter 545 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-544 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 inet/filter/limit-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-544 -j TEE --gateway 10.0.0.1 inet/filter/limit-544 -j TEE --gateway 10.0.0.2 inet/filter/limit-544 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-544 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 inet6/filter/limit-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-544 -j TEE --gateway fc00::2 inet6/filter/limit-544 -j ACCEPT Filter 546 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-545 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 inet/filter/limit-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-545 -j TEE --gateway 10.0.0.1 inet/filter/limit-545 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-545 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-545 inet6/filter/limit-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-545 -j TEE --gateway fc00::2 Filter 547 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-546 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 inet/filter/limit-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-546 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-546 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-546 inet6/filter/limit-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-546 -j ACCEPT Filter 548 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-547 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 inet/filter/limit-547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-547 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-547 inet6/filter/limit-547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 549 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-548 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 inet/filter/limit-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-548 -m limit --limit 12/minute -j ULOG inet/filter/limit-548 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-548 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-548 inet6/filter/limit-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-548 -j ACCEPT Filter 550 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-549 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 inet/filter/limit-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-549 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-549 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-549 inet6/filter/limit-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 551 {"conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-550 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 inet/filter/limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-280 inet/filter/limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-280 -m limit --limit 1/second -j LOG inet/filter/logdrop-280 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-550 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-550 inet6/filter/limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-280 inet6/filter/limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG inet6/filter/logdrop-280 -j DROP Filter 552 {"action":"pass","conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-551 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-551 inet/filter/limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-281 inet/filter/limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-281 -m limit --limit 1/second -j LOG inet/filter/logdrop-281 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-551 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-551 inet6/filter/limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-281 inet6/filter/limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG inet6/filter/logdrop-281 -j DROP Filter 553 {"conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-552 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 inet/filter/limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-282 inet/filter/limit-552 -m limit --limit 1/second -j LOG inet/filter/limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-282 -m limit --limit 1/second -j LOG inet/filter/logdrop-282 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-552 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 inet6/filter/limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-282 inet6/filter/limit-552 -m limit --limit 1/second -j LOG inet6/filter/limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG inet6/filter/logdrop-282 -j DROP Filter 554 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-553 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 inet/filter/limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-283 inet/filter/limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-283 -m limit --limit 1/second -j LOG inet/filter/logdrop-283 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-553 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-553 inet6/filter/limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-283 inet6/filter/limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG inet6/filter/logdrop-283 -j DROP Filter 555 {"conn-limit":{"interval":5},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-554 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 inet/filter/limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-284 inet/filter/limit-554 -j TEE --gateway 10.0.0.1 inet/filter/limit-554 -j TEE --gateway 10.0.0.2 inet/filter/limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-284 -m limit --limit 1/second -j LOG inet/filter/logdrop-284 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-554 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-554 inet6/filter/limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-284 inet6/filter/limit-554 -j TEE --gateway fc00::2 inet6/filter/limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG inet6/filter/logdrop-284 -j DROP Filter 556 {"action":"pass","conn-limit":{"interval":5},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-555 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-555 inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-285 inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-285 -m limit --limit 1/second -j LOG inet/filter/logdrop-285 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-555 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-555 inet6/filter/limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-285 inet6/filter/limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG inet6/filter/logdrop-285 -j DROP Filter 557 {"conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-556 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 inet/filter/limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-286 inet/filter/limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-286 -m limit --limit 1/second -j LOG inet/filter/logdrop-286 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-556 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 inet6/filter/limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-286 inet6/filter/limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG inet6/filter/logdrop-286 -j DROP Filter 558 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-557 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 inet/filter/limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-287 inet/filter/limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-287 -m limit --limit 1/second -j LOG inet/filter/logdrop-287 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-557 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-557 inet6/filter/limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-287 inet6/filter/limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG inet6/filter/logdrop-287 -j DROP Filter 559 {"conn-limit":{"interval":5},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-558 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 inet/filter/limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 inet/filter/limit-558 -m limit --limit 12/minute -j ULOG inet/filter/limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-288 -m limit --limit 1/second -j LOG inet/filter/logdrop-288 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-558 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-558 inet6/filter/limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 inet6/filter/limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG inet6/filter/logdrop-288 -j DROP Filter 560 {"action":"pass","conn-limit":{"interval":5},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-559 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 inet/filter/limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 inet/filter/limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-289 -m limit --limit 1/second -j LOG inet/filter/logdrop-289 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-559 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-559 inet6/filter/limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG inet6/filter/logdrop-289 -j DROP Filter 561 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-560 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 inet/filter/limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 inet/filter/limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-290 -m limit --limit 1/second -j LOG inet/filter/logdrop-290 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-560 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-560 inet6/filter/limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 inet6/filter/limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG inet6/filter/logdrop-290 -j DROP Filter 562 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-561 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 inet/filter/limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 inet/filter/limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-291 -m limit --limit 1/second -j LOG inet/filter/logdrop-291 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-561 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-561 inet6/filter/limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 inet6/filter/limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG inet6/filter/logdrop-291 -j DROP Filter 563 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-562 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 inet/filter/limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 inet/filter/limit-562 -m limit --limit 1/second -j LOG inet/filter/limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-292 -m limit --limit 1/second -j LOG inet/filter/logdrop-292 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-562 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-562 inet6/filter/limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 inet6/filter/limit-562 -m limit --limit 1/second -j LOG inet6/filter/limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG inet6/filter/logdrop-292 -j DROP Filter 564 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-563 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-563 inet/filter/limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 inet/filter/limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-293 -m limit --limit 1/second -j LOG inet/filter/logdrop-293 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-563 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-563 inet6/filter/limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 inet6/filter/limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG inet6/filter/logdrop-293 -j DROP Filter 565 {"conn-limit":{"interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-564 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 inet/filter/limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 inet/filter/limit-564 -j TEE --gateway 10.0.0.1 inet/filter/limit-564 -j TEE --gateway 10.0.0.2 inet/filter/limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-294 -m limit --limit 1/second -j LOG inet/filter/logdrop-294 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-564 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 inet6/filter/limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 inet6/filter/limit-564 -j TEE --gateway fc00::2 inet6/filter/limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG inet6/filter/logdrop-294 -j DROP Filter 566 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-565 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-295 -m limit --limit 1/second -j LOG inet/filter/logdrop-295 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-565 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-565 inet6/filter/limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 inet6/filter/limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG inet6/filter/logdrop-295 -j DROP Filter 567 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-566 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 inet/filter/limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 inet/filter/limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-296 -m limit --limit 1/second -j LOG inet/filter/logdrop-296 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-566 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-566 inet6/filter/limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 inet6/filter/limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG inet6/filter/logdrop-296 -j DROP Filter 568 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-567 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-567 inet/filter/limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 inet/filter/limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-297 -m limit --limit 1/second -j LOG inet/filter/logdrop-297 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-567 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-567 inet6/filter/limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 inet6/filter/limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG inet6/filter/logdrop-297 -j DROP Filter 569 {"conn-limit":{"interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-568 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 inet/filter/limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 inet/filter/limit-568 -m limit --limit 12/minute -j ULOG inet/filter/limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-298 -m limit --limit 1/second -j LOG inet/filter/logdrop-298 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-568 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 inet6/filter/limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 inet6/filter/limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG inet6/filter/logdrop-298 -j DROP Filter 570 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-569 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 inet/filter/limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 inet/filter/limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-299 -m limit --limit 1/second -j LOG inet/filter/logdrop-299 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-569 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-569 inet6/filter/limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG inet6/filter/logdrop-299 -j DROP Filter 571 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-570 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 inet/filter/limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 inet/filter/limit-570 -j ACCEPT inet/filter/logdrop-300 -m limit --limit 1/second -j LOG inet/filter/logdrop-300 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-570 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-570 inet6/filter/limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 inet6/filter/limit-570 -j ACCEPT inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG inet6/filter/logdrop-300 -j DROP Filter 572 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-571 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 inet/filter/limit-571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 inet/filter/logdrop-301 -m limit --limit 1/second -j LOG inet/filter/logdrop-301 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-571 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-571 inet6/filter/limit-571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG inet6/filter/logdrop-301 -j DROP Filter 573 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-572 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 inet/filter/limit-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 inet/filter/limit-572 -m limit --limit 1/second -j LOG inet/filter/limit-572 -j ACCEPT inet/filter/logdrop-302 -m limit --limit 1/second -j LOG inet/filter/logdrop-302 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-572 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-572 inet6/filter/limit-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 inet6/filter/limit-572 -m limit --limit 1/second -j LOG inet6/filter/limit-572 -j ACCEPT inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG inet6/filter/logdrop-302 -j DROP Filter 574 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-573 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 inet/filter/limit-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 inet/filter/limit-573 -m limit --limit 1/second -j LOG inet/filter/logdrop-303 -m limit --limit 1/second -j LOG inet/filter/logdrop-303 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-573 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-573 inet6/filter/limit-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 inet6/filter/limit-573 -m limit --limit 1/second -j LOG inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG inet6/filter/logdrop-303 -j DROP Filter 575 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-574 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 inet/filter/limit-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 inet/filter/limit-574 -j TEE --gateway 10.0.0.1 inet/filter/limit-574 -j TEE --gateway 10.0.0.2 inet/filter/limit-574 -j ACCEPT inet/filter/logdrop-304 -m limit --limit 1/second -j LOG inet/filter/logdrop-304 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-574 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-574 inet6/filter/limit-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 inet6/filter/limit-574 -j TEE --gateway fc00::2 inet6/filter/limit-574 -j ACCEPT inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG inet6/filter/logdrop-304 -j DROP Filter 576 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-575 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-575 inet/filter/limit-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 inet/filter/limit-575 -j TEE --gateway 10.0.0.1 inet/filter/limit-575 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-305 -m limit --limit 1/second -j LOG inet/filter/logdrop-305 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-575 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-575 inet6/filter/limit-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 inet6/filter/limit-575 -j TEE --gateway fc00::2 inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG inet6/filter/logdrop-305 -j DROP Filter 577 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-576 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 inet/filter/limit-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 inet/filter/limit-576 -j ACCEPT inet/filter/logdrop-306 -m limit --limit 1/second -j LOG inet/filter/logdrop-306 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-576 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 inet6/filter/limit-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 inet6/filter/limit-576 -j ACCEPT inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG inet6/filter/logdrop-306 -j DROP Filter 578 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-577 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 inet/filter/limit-577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-307 inet/filter/logdrop-307 -m limit --limit 1/second -j LOG inet/filter/logdrop-307 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-577 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-577 inet6/filter/limit-577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-307 inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG inet6/filter/logdrop-307 -j DROP Filter 579 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-578 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 inet/filter/limit-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-308 inet/filter/limit-578 -m limit --limit 12/minute -j ULOG inet/filter/limit-578 -j ACCEPT inet/filter/logdrop-308 -m limit --limit 1/second -j LOG inet/filter/logdrop-308 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-578 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-578 inet6/filter/limit-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-308 inet6/filter/limit-578 -j ACCEPT inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG inet6/filter/logdrop-308 -j DROP Filter 580 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-579 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-579 inet/filter/limit-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-309 inet/filter/limit-579 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-309 -m limit --limit 1/second -j LOG inet/filter/logdrop-309 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-579 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-579 inet6/filter/limit-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-309 inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG inet6/filter/logdrop-309 -j DROP Filter 581 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-580 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 inet/filter/limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 inet/filter/limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-310 -m limit --limit 1/second -j LOG inet/filter/logdrop-310 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-580 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-580 inet6/filter/limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 inet6/filter/limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG inet6/filter/logdrop-310 -j DROP Filter 582 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-581 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 inet/filter/limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 inet/filter/limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-311 -m limit --limit 1/second -j LOG inet/filter/logdrop-311 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-581 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-581 inet6/filter/limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 inet6/filter/limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG inet6/filter/logdrop-311 -j DROP Filter 583 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-582 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 inet/filter/limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 inet/filter/limit-582 -m limit --limit 1/second -j LOG inet/filter/limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-312 -m limit --limit 1/second -j LOG inet/filter/logdrop-312 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-582 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-582 inet6/filter/limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 inet6/filter/limit-582 -m limit --limit 1/second -j LOG inet6/filter/limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG inet6/filter/logdrop-312 -j DROP Filter 584 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-583 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 inet/filter/limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-313 inet/filter/limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-313 -m limit --limit 1/second -j LOG inet/filter/logdrop-313 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-583 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-583 inet6/filter/limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-313 inet6/filter/limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG inet6/filter/logdrop-313 -j DROP Filter 585 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-584 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 inet/filter/limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-314 inet/filter/limit-584 -j TEE --gateway 10.0.0.1 inet/filter/limit-584 -j TEE --gateway 10.0.0.2 inet/filter/limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-314 -m limit --limit 1/second -j LOG inet/filter/logdrop-314 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-584 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-584 inet6/filter/limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-314 inet6/filter/limit-584 -j TEE --gateway fc00::2 inet6/filter/limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG inet6/filter/logdrop-314 -j DROP Filter 586 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-585 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 inet/filter/limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-315 inet/filter/limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-315 -m limit --limit 1/second -j LOG inet/filter/logdrop-315 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-585 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-585 inet6/filter/limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-315 inet6/filter/limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG inet6/filter/logdrop-315 -j DROP Filter 587 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-586 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 inet/filter/limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-316 inet/filter/limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-316 -m limit --limit 1/second -j LOG inet/filter/logdrop-316 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-586 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-586 inet6/filter/limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-316 inet6/filter/limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG inet6/filter/logdrop-316 -j DROP Filter 588 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-587 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 inet/filter/limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-317 inet/filter/limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-317 -m limit --limit 1/second -j LOG inet/filter/logdrop-317 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-587 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-587 inet6/filter/limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-317 inet6/filter/limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG inet6/filter/logdrop-317 -j DROP Filter 589 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-588 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 inet/filter/limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-318 inet/filter/limit-588 -m limit --limit 12/minute -j ULOG inet/filter/limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-318 -m limit --limit 1/second -j LOG inet/filter/logdrop-318 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-588 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-588 inet6/filter/limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-318 inet6/filter/limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG inet6/filter/logdrop-318 -j DROP Filter 590 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-589 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 inet/filter/limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-319 inet/filter/limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-319 -m limit --limit 1/second -j LOG inet/filter/logdrop-319 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-589 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-589 inet6/filter/limit-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-319 inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG inet6/filter/logdrop-319 -j DROP Filter 591 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-590 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 inet/filter/limit-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-320 inet/filter/limit-590 -j ACCEPT inet/filter/logdrop-320 -m limit --limit 1/second -j LOG inet/filter/logdrop-320 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-590 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-590 inet6/filter/limit-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-320 inet6/filter/limit-590 -j ACCEPT inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG inet6/filter/logdrop-320 -j DROP Filter 592 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-591 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 inet/filter/limit-591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-321 inet/filter/logdrop-321 -m limit --limit 1/second -j LOG inet/filter/logdrop-321 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-591 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-591 inet6/filter/limit-591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-321 inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG inet6/filter/logdrop-321 -j DROP Filter 593 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-592 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 inet/filter/limit-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-322 inet/filter/limit-592 -m limit --limit 1/second -j LOG inet/filter/limit-592 -j ACCEPT inet/filter/logdrop-322 -m limit --limit 1/second -j LOG inet/filter/logdrop-322 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-592 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-592 inet6/filter/limit-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-322 inet6/filter/limit-592 -m limit --limit 1/second -j LOG inet6/filter/limit-592 -j ACCEPT inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG inet6/filter/logdrop-322 -j DROP Filter 594 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-593 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-593 inet/filter/limit-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-323 inet/filter/limit-593 -m limit --limit 1/second -j LOG inet/filter/logdrop-323 -m limit --limit 1/second -j LOG inet/filter/logdrop-323 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-593 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-593 inet6/filter/limit-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-323 inet6/filter/limit-593 -m limit --limit 1/second -j LOG inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG inet6/filter/logdrop-323 -j DROP Filter 595 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-594 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 inet/filter/limit-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 inet/filter/limit-594 -j TEE --gateway 10.0.0.1 inet/filter/limit-594 -j TEE --gateway 10.0.0.2 inet/filter/limit-594 -j ACCEPT inet/filter/logdrop-324 -m limit --limit 1/second -j LOG inet/filter/logdrop-324 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-594 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-594 inet6/filter/limit-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-324 inet6/filter/limit-594 -j TEE --gateway fc00::2 inet6/filter/limit-594 -j ACCEPT inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG inet6/filter/logdrop-324 -j DROP Filter 596 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-595 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 inet/filter/limit-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 inet/filter/limit-595 -j TEE --gateway 10.0.0.1 inet/filter/limit-595 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-325 -m limit --limit 1/second -j LOG inet/filter/logdrop-325 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-595 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-595 inet6/filter/limit-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-325 inet6/filter/limit-595 -j TEE --gateway fc00::2 inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG inet6/filter/logdrop-325 -j DROP Filter 597 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-596 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 inet/filter/limit-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 inet/filter/limit-596 -j ACCEPT inet/filter/logdrop-326 -m limit --limit 1/second -j LOG inet/filter/logdrop-326 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-596 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-596 inet6/filter/limit-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-326 inet6/filter/limit-596 -j ACCEPT inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG inet6/filter/logdrop-326 -j DROP Filter 598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-597 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-597 inet/filter/limit-597 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 inet/filter/logdrop-327 -m limit --limit 1/second -j LOG inet/filter/logdrop-327 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-597 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-597 inet6/filter/limit-597 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-327 inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG inet6/filter/logdrop-327 -j DROP Filter 599 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-598 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 inet/filter/limit-598 -m limit --limit 12/minute -j ULOG inet/filter/limit-598 -j ACCEPT inet/filter/logdrop-328 -m limit --limit 1/second -j LOG inet/filter/logdrop-328 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-598 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-598 inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-328 inet6/filter/limit-598 -j ACCEPT inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG inet6/filter/logdrop-328 -j DROP Filter 600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-599 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 inet/filter/limit-599 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-329 -m limit --limit 1/second -j LOG inet/filter/logdrop-329 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-599 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-599 inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-329 inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG inet6/filter/logdrop-329 -j DROP Filter 601 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-600 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 inet/filter/limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 inet/filter/limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-330 -m limit --limit 1/second -j LOG inet/filter/logdrop-330 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-600 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-600 inet6/filter/limit-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 inet6/filter/limit-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG inet6/filter/logdrop-330 -j DROP Filter 602 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-601 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 inet/filter/limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 inet/filter/limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-331 -m limit --limit 1/second -j LOG inet/filter/logdrop-331 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-601 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-601 inet6/filter/limit-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 inet6/filter/limit-601 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG inet6/filter/logdrop-331 -j DROP Filter 603 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-602 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 inet/filter/limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 inet/filter/limit-602 -m limit --limit 1/second -j LOG inet/filter/limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-332 -m limit --limit 1/second -j LOG inet/filter/logdrop-332 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-602 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-602 inet6/filter/limit-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 inet6/filter/limit-602 -m limit --limit 1/second -j LOG inet6/filter/limit-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG inet6/filter/logdrop-332 -j DROP Filter 604 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-603 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 inet/filter/limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 inet/filter/limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-333 -m limit --limit 1/second -j LOG inet/filter/logdrop-333 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-603 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-603 inet6/filter/limit-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 inet6/filter/limit-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG inet6/filter/logdrop-333 -j DROP Filter 605 {"conn-limit":{"interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-604 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 inet/filter/limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 inet/filter/limit-604 -j TEE --gateway 10.0.0.1 inet/filter/limit-604 -j TEE --gateway 10.0.0.2 inet/filter/limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-334 -m limit --limit 1/second -j LOG inet/filter/logdrop-334 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-604 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-604 inet6/filter/limit-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 inet6/filter/limit-604 -j TEE --gateway fc00::2 inet6/filter/limit-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG inet6/filter/logdrop-334 -j DROP Filter 606 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-605 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-605 inet/filter/limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 inet/filter/limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-335 -m limit --limit 1/second -j LOG inet/filter/logdrop-335 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-605 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-605 inet6/filter/limit-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 inet6/filter/limit-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG inet6/filter/logdrop-335 -j DROP Filter 607 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-606 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 inet/filter/limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 inet/filter/limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-336 -m limit --limit 1/second -j LOG inet/filter/logdrop-336 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-606 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-606 inet6/filter/limit-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 inet6/filter/limit-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG inet6/filter/logdrop-336 -j DROP Filter 608 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-607 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 inet/filter/limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-337 inet/filter/limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-337 -m limit --limit 1/second -j LOG inet/filter/logdrop-337 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-607 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-607 inet6/filter/limit-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-337 inet6/filter/limit-607 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG inet6/filter/logdrop-337 -j DROP Filter 609 {"conn-limit":{"interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-608 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 inet/filter/limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-338 inet/filter/limit-608 -m limit --limit 12/minute -j ULOG inet/filter/limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-338 -m limit --limit 1/second -j LOG inet/filter/logdrop-338 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-608 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-608 inet6/filter/limit-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-338 inet6/filter/limit-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG inet6/filter/logdrop-338 -j DROP Filter 610 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-609 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-609 inet/filter/limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-339 inet/filter/limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-339 -m limit --limit 1/second -j LOG inet/filter/logdrop-339 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-609 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-609 inet6/filter/limit-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-339 inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG inet6/filter/logdrop-339 -j DROP Filter 611 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-610 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 inet/filter/limit-610 -j ACCEPT inet/filter/logdrop-340 -m limit --limit 1/second -j LOG inet/filter/logdrop-340 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-610 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-610 inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 inet6/filter/limit-610 -j ACCEPT inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG inet6/filter/logdrop-340 -j DROP Filter 612 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-611 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 inet/filter/logdrop-341 -m limit --limit 1/second -j LOG inet/filter/logdrop-341 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-611 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-611 inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG inet6/filter/logdrop-341 -j DROP Filter 613 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-612 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 inet/filter/limit-612 -m limit --limit 1/second -j LOG inet/filter/limit-612 -j ACCEPT inet/filter/logdrop-342 -m limit --limit 1/second -j LOG inet/filter/logdrop-342 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-612 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-612 inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 inet6/filter/limit-612 -m limit --limit 1/second -j LOG inet6/filter/limit-612 -j ACCEPT inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG inet6/filter/logdrop-342 -j DROP Filter 614 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-613 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-343 inet/filter/limit-613 -m limit --limit 1/second -j LOG inet/filter/logdrop-343 -m limit --limit 1/second -j LOG inet/filter/logdrop-343 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-613 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-613 inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-343 inet6/filter/limit-613 -m limit --limit 1/second -j LOG inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG inet6/filter/logdrop-343 -j DROP Filter 615 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-614 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-344 inet/filter/limit-614 -j TEE --gateway 10.0.0.1 inet/filter/limit-614 -j TEE --gateway 10.0.0.2 inet/filter/limit-614 -j ACCEPT inet/filter/logdrop-344 -m limit --limit 1/second -j LOG inet/filter/logdrop-344 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-614 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-614 inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-344 inet6/filter/limit-614 -j TEE --gateway fc00::2 inet6/filter/limit-614 -j ACCEPT inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG inet6/filter/logdrop-344 -j DROP Filter 616 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-615 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-345 inet/filter/limit-615 -j TEE --gateway 10.0.0.1 inet/filter/limit-615 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-345 -m limit --limit 1/second -j LOG inet/filter/logdrop-345 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-615 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-615 inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-345 inet6/filter/limit-615 -j TEE --gateway fc00::2 inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG inet6/filter/logdrop-345 -j DROP Filter 617 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-616 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-346 inet/filter/limit-616 -j ACCEPT inet/filter/logdrop-346 -m limit --limit 1/second -j LOG inet/filter/logdrop-346 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-616 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-616 inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-346 inet6/filter/limit-616 -j ACCEPT inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG inet6/filter/logdrop-346 -j DROP Filter 618 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-617 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-617 inet/filter/limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-347 inet/filter/logdrop-347 -m limit --limit 1/second -j LOG inet/filter/logdrop-347 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-617 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-617 inet6/filter/limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-347 inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG inet6/filter/logdrop-347 -j DROP Filter 619 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-618 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-348 inet/filter/limit-618 -m limit --limit 12/minute -j ULOG inet/filter/limit-618 -j ACCEPT inet/filter/logdrop-348 -m limit --limit 1/second -j LOG inet/filter/logdrop-348 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-618 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-618 inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-348 inet6/filter/limit-618 -j ACCEPT inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG inet6/filter/logdrop-348 -j DROP Filter 620 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-619 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-349 inet/filter/limit-619 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-349 -m limit --limit 1/second -j LOG inet/filter/logdrop-349 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-619 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-619 inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-349 inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG inet6/filter/logdrop-349 -j DROP Filter 621 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-620 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 inet/filter/limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-350 inet/filter/limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-350 -m limit --limit 1/second -j LOG inet/filter/logdrop-350 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-620 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-620 inet6/filter/limit-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-350 inet6/filter/limit-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG inet6/filter/logdrop-350 -j DROP Filter 622 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-621 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-621 inet/filter/limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-351 inet/filter/limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-351 -m limit --limit 1/second -j LOG inet/filter/logdrop-351 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-621 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-621 inet6/filter/limit-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-351 inet6/filter/limit-621 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG inet6/filter/logdrop-351 -j DROP Filter 623 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-622 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-352 inet/filter/limit-622 -m limit --limit 1/second -j LOG inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-352 -m limit --limit 1/second -j LOG inet/filter/logdrop-352 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-622 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-622 inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-352 inet6/filter/limit-622 -m limit --limit 1/second -j LOG inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG inet6/filter/logdrop-352 -j DROP Filter 624 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-623 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-353 inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-353 -m limit --limit 1/second -j LOG inet/filter/logdrop-353 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-623 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-623 inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-353 inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG inet6/filter/logdrop-353 -j DROP Filter 625 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-624 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-354 inet/filter/limit-624 -j TEE --gateway 10.0.0.1 inet/filter/limit-624 -j TEE --gateway 10.0.0.2 inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-354 -m limit --limit 1/second -j LOG inet/filter/logdrop-354 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-624 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-624 inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-354 inet6/filter/limit-624 -j TEE --gateway fc00::2 inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG inet6/filter/logdrop-354 -j DROP Filter 626 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-625 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-355 inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-355 -m limit --limit 1/second -j LOG inet/filter/logdrop-355 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-625 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-625 inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-355 inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG inet6/filter/logdrop-355 -j DROP Filter 627 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-626 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-356 inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-356 -m limit --limit 1/second -j LOG inet/filter/logdrop-356 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-626 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-626 inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-356 inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG inet6/filter/logdrop-356 -j DROP Filter 628 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-627 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-357 inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-357 -m limit --limit 1/second -j LOG inet/filter/logdrop-357 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-627 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-627 inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-357 inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG inet6/filter/logdrop-357 -j DROP Filter 629 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-628 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-358 inet/filter/limit-628 -m limit --limit 12/minute -j ULOG inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-358 -m limit --limit 1/second -j LOG inet/filter/logdrop-358 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-628 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-628 inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-358 inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG inet6/filter/logdrop-358 -j DROP Filter 630 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-629 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-629 inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-359 inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-359 -m limit --limit 1/second -j LOG inet/filter/logdrop-359 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-629 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-629 inet6/filter/limit-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-359 inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG inet6/filter/logdrop-359 -j DROP Filter 631 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-630 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-360 inet/filter/limit-630 -j ACCEPT inet/filter/logdrop-360 -m limit --limit 1/second -j LOG inet/filter/logdrop-360 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-630 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-630 inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-360 inet6/filter/limit-630 -j ACCEPT inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG inet6/filter/logdrop-360 -j DROP Filter 632 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-631 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-361 inet/filter/logdrop-361 -m limit --limit 1/second -j LOG inet/filter/logdrop-361 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-631 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-631 inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-361 inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG inet6/filter/logdrop-361 -j DROP Filter 633 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-632 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-362 inet/filter/limit-632 -m limit --limit 1/second -j LOG inet/filter/limit-632 -j ACCEPT inet/filter/logdrop-362 -m limit --limit 1/second -j LOG inet/filter/logdrop-362 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-632 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-632 inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-362 inet6/filter/limit-632 -m limit --limit 1/second -j LOG inet6/filter/limit-632 -j ACCEPT inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG inet6/filter/logdrop-362 -j DROP Filter 634 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-633 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-633 inet/filter/limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-363 inet/filter/limit-633 -m limit --limit 1/second -j LOG inet/filter/logdrop-363 -m limit --limit 1/second -j LOG inet/filter/logdrop-363 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-633 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-633 inet6/filter/limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-363 inet6/filter/limit-633 -m limit --limit 1/second -j LOG inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG inet6/filter/logdrop-363 -j DROP Filter 635 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-634 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 inet/filter/limit-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-364 inet/filter/limit-634 -j TEE --gateway 10.0.0.1 inet/filter/limit-634 -j TEE --gateway 10.0.0.2 inet/filter/limit-634 -j ACCEPT inet/filter/logdrop-364 -m limit --limit 1/second -j LOG inet/filter/logdrop-364 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-634 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-634 inet6/filter/limit-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-364 inet6/filter/limit-634 -j TEE --gateway fc00::2 inet6/filter/limit-634 -j ACCEPT inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG inet6/filter/logdrop-364 -j DROP Filter 636 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-635 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 inet/filter/limit-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-365 inet/filter/limit-635 -j TEE --gateway 10.0.0.1 inet/filter/limit-635 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-365 -m limit --limit 1/second -j LOG inet/filter/logdrop-365 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-635 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-635 inet6/filter/limit-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-365 inet6/filter/limit-635 -j TEE --gateway fc00::2 inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG inet6/filter/logdrop-365 -j DROP Filter 637 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-636 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 inet/filter/limit-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-366 inet/filter/limit-636 -j ACCEPT inet/filter/logdrop-366 -m limit --limit 1/second -j LOG inet/filter/logdrop-366 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-636 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-636 inet6/filter/limit-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-366 inet6/filter/limit-636 -j ACCEPT inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG inet6/filter/logdrop-366 -j DROP Filter 638 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-637 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 inet/filter/limit-637 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-367 inet/filter/logdrop-367 -m limit --limit 1/second -j LOG inet/filter/logdrop-367 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-637 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-637 inet6/filter/limit-637 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-367 inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG inet6/filter/logdrop-367 -j DROP Filter 639 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-638 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 inet/filter/limit-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-368 inet/filter/limit-638 -m limit --limit 12/minute -j ULOG inet/filter/limit-638 -j ACCEPT inet/filter/logdrop-368 -m limit --limit 1/second -j LOG inet/filter/logdrop-368 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-638 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-638 inet6/filter/limit-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-368 inet6/filter/limit-638 -j ACCEPT inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG inet6/filter/logdrop-368 -j DROP Filter 640 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-639 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 inet/filter/limit-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-369 inet/filter/limit-639 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-369 -m limit --limit 1/second -j LOG inet/filter/logdrop-369 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-639 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-639 inet6/filter/limit-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-369 inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG inet6/filter/logdrop-369 -j DROP Filter 641 {"conn-limit":{"interval":5,"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-640 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 inet/filter/limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-370 inet/filter/limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-370 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-370 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-370 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-640 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-640 inet6/filter/limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-370 inet6/filter/limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-370 -j TEE --gateway fc00::2 inet6/filter/logdrop-370 -j DROP Filter 642 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-641 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 inet/filter/limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-371 inet/filter/limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-371 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-371 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-371 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-641 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-641 inet6/filter/limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-371 inet6/filter/limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-371 -j TEE --gateway fc00::2 inet6/filter/logdrop-371 -j DROP Filter 643 {"conn-limit":{"interval":5,"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-642 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 inet/filter/limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-372 inet/filter/limit-642 -m limit --limit 1/second -j LOG inet/filter/limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-372 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-372 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-372 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-642 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-642 inet6/filter/limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-372 inet6/filter/limit-642 -m limit --limit 1/second -j LOG inet6/filter/limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-372 -j TEE --gateway fc00::2 inet6/filter/logdrop-372 -j DROP Filter 644 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-643 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 inet/filter/limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-373 inet/filter/limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-373 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-373 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-373 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-643 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-643 inet6/filter/limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-373 inet6/filter/limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-373 -j TEE --gateway fc00::2 inet6/filter/logdrop-373 -j DROP Filter 645 {"conn-limit":{"interval":5,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-644 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 inet/filter/limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-374 inet/filter/limit-644 -j TEE --gateway 10.0.0.1 inet/filter/limit-644 -j TEE --gateway 10.0.0.2 inet/filter/limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-374 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-374 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-374 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-644 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-644 inet6/filter/limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-374 inet6/filter/limit-644 -j TEE --gateway fc00::2 inet6/filter/limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-374 -j TEE --gateway fc00::2 inet6/filter/logdrop-374 -j DROP Filter 646 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-645 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 inet/filter/limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-375 inet/filter/limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-375 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-375 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-375 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-645 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-645 inet6/filter/limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-375 inet6/filter/limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-375 -j TEE --gateway fc00::2 inet6/filter/logdrop-375 -j DROP Filter 647 {"conn-limit":{"interval":5,"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-646 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 inet/filter/limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-376 inet/filter/limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-376 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-376 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-376 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-646 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-646 inet6/filter/limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-376 inet6/filter/limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-376 -j TEE --gateway fc00::2 inet6/filter/logdrop-376 -j DROP Filter 648 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-647 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-647 inet/filter/limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-377 inet/filter/limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-377 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-377 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-377 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-647 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-647 inet6/filter/limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-377 inet6/filter/limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-377 -j TEE --gateway fc00::2 inet6/filter/logdrop-377 -j DROP Filter 649 {"conn-limit":{"interval":5,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-648 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 inet/filter/limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-378 inet/filter/limit-648 -m limit --limit 12/minute -j ULOG inet/filter/limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-378 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-378 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-378 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-648 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-648 inet6/filter/limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-378 inet6/filter/limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-378 -j TEE --gateway fc00::2 inet6/filter/logdrop-378 -j DROP Filter 650 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-649 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 inet/filter/limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-379 inet/filter/limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-379 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-379 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-379 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-649 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-649 inet6/filter/limit-649 -m recent --name limit-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-379 inet6/filter/logdrop-379 -j TEE --gateway fc00::2 inet6/filter/logdrop-379 -j DROP Filter 651 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-650 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-380 inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-380 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-380 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-380 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-650 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-650 inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-380 inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-380 -j TEE --gateway fc00::2 inet6/filter/logdrop-380 -j DROP Filter 652 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-651 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-651 inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-381 inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-381 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-381 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-381 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-651 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-651 inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-381 inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-381 -j TEE --gateway fc00::2 inet6/filter/logdrop-381 -j DROP Filter 653 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-652 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 inet/filter/limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-382 inet/filter/limit-652 -m limit --limit 1/second -j LOG inet/filter/limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-382 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-382 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-382 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-652 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-652 inet6/filter/limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-382 inet6/filter/limit-652 -m limit --limit 1/second -j LOG inet6/filter/limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-382 -j TEE --gateway fc00::2 inet6/filter/logdrop-382 -j DROP Filter 654 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-653 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 inet/filter/limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-383 inet/filter/limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-383 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-383 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-383 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-653 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-653 inet6/filter/limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-383 inet6/filter/limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-383 -j TEE --gateway fc00::2 inet6/filter/logdrop-383 -j DROP Filter 655 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-654 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 inet/filter/limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-384 inet/filter/limit-654 -j TEE --gateway 10.0.0.1 inet/filter/limit-654 -j TEE --gateway 10.0.0.2 inet/filter/limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-384 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-384 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-384 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-654 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-654 inet6/filter/limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-384 inet6/filter/limit-654 -j TEE --gateway fc00::2 inet6/filter/limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-384 -j TEE --gateway fc00::2 inet6/filter/logdrop-384 -j DROP Filter 656 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-655 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-385 inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-385 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-385 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-385 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-655 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-655 inet6/filter/limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-385 inet6/filter/limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-385 -j TEE --gateway fc00::2 inet6/filter/logdrop-385 -j DROP Filter 657 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-656 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 inet/filter/limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-386 inet/filter/limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-386 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-386 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-386 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-656 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-656 inet6/filter/limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-386 inet6/filter/limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-386 -j TEE --gateway fc00::2 inet6/filter/logdrop-386 -j DROP Filter 658 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-657 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 inet/filter/limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-387 inet/filter/limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-387 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-387 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-387 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-657 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-657 inet6/filter/limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-387 inet6/filter/limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-387 -j TEE --gateway fc00::2 inet6/filter/logdrop-387 -j DROP Filter 659 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-658 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 inet/filter/limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-388 inet/filter/limit-658 -m limit --limit 12/minute -j ULOG inet/filter/limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-388 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-388 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-388 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-658 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-658 inet6/filter/limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-388 inet6/filter/limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-388 -j TEE --gateway fc00::2 inet6/filter/logdrop-388 -j DROP Filter 660 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-659 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-659 inet/filter/limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-389 inet/filter/limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-389 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-389 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-389 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-659 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-659 inet6/filter/limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-389 inet6/filter/logdrop-389 -j TEE --gateway fc00::2 inet6/filter/logdrop-389 -j DROP Filter 661 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-660 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 inet/filter/limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-390 inet/filter/limit-660 -j ACCEPT inet/filter/logdrop-390 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-390 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-390 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-660 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-660 inet6/filter/limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-390 inet6/filter/limit-660 -j ACCEPT inet6/filter/logdrop-390 -j TEE --gateway fc00::2 inet6/filter/logdrop-390 -j DROP Filter 662 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-661 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 inet/filter/limit-661 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-391 inet/filter/logdrop-391 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-391 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-391 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-661 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-661 inet6/filter/limit-661 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-391 inet6/filter/logdrop-391 -j TEE --gateway fc00::2 inet6/filter/logdrop-391 -j DROP Filter 663 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-662 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 inet/filter/limit-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-392 inet/filter/limit-662 -m limit --limit 1/second -j LOG inet/filter/limit-662 -j ACCEPT inet/filter/logdrop-392 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-392 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-392 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-662 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-662 inet6/filter/limit-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-392 inet6/filter/limit-662 -m limit --limit 1/second -j LOG inet6/filter/limit-662 -j ACCEPT inet6/filter/logdrop-392 -j TEE --gateway fc00::2 inet6/filter/logdrop-392 -j DROP Filter 664 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-663 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-663 inet/filter/limit-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-393 inet/filter/limit-663 -m limit --limit 1/second -j LOG inet/filter/logdrop-393 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-393 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-393 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-663 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-663 inet6/filter/limit-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-393 inet6/filter/limit-663 -m limit --limit 1/second -j LOG inet6/filter/logdrop-393 -j TEE --gateway fc00::2 inet6/filter/logdrop-393 -j DROP Filter 665 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-664 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 inet/filter/limit-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-394 inet/filter/limit-664 -j TEE --gateway 10.0.0.1 inet/filter/limit-664 -j TEE --gateway 10.0.0.2 inet/filter/limit-664 -j ACCEPT inet/filter/logdrop-394 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-394 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-394 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-664 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-664 inet6/filter/limit-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-394 inet6/filter/limit-664 -j TEE --gateway fc00::2 inet6/filter/limit-664 -j ACCEPT inet6/filter/logdrop-394 -j TEE --gateway fc00::2 inet6/filter/logdrop-394 -j DROP Filter 666 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-665 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 inet/filter/limit-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-395 inet/filter/limit-665 -j TEE --gateway 10.0.0.1 inet/filter/limit-665 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-395 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-395 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-395 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-665 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-665 inet6/filter/limit-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-395 inet6/filter/limit-665 -j TEE --gateway fc00::2 inet6/filter/logdrop-395 -j TEE --gateway fc00::2 inet6/filter/logdrop-395 -j DROP Filter 667 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-666 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 inet/filter/limit-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-396 inet/filter/limit-666 -j ACCEPT inet/filter/logdrop-396 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-396 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-396 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-666 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-666 inet6/filter/limit-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-396 inet6/filter/limit-666 -j ACCEPT inet6/filter/logdrop-396 -j TEE --gateway fc00::2 inet6/filter/logdrop-396 -j DROP Filter 668 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-667 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 inet/filter/limit-667 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-397 inet/filter/logdrop-397 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-397 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-397 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-667 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-667 inet6/filter/limit-667 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-397 inet6/filter/logdrop-397 -j TEE --gateway fc00::2 inet6/filter/logdrop-397 -j DROP Filter 669 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-668 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 inet/filter/limit-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-398 inet/filter/limit-668 -m limit --limit 12/minute -j ULOG inet/filter/limit-668 -j ACCEPT inet/filter/logdrop-398 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-398 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-398 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-668 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-668 inet6/filter/limit-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-398 inet6/filter/limit-668 -j ACCEPT inet6/filter/logdrop-398 -j TEE --gateway fc00::2 inet6/filter/logdrop-398 -j DROP Filter 670 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-669 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 inet/filter/limit-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-399 inet/filter/limit-669 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-399 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-399 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-399 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-669 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-669 inet6/filter/limit-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-399 inet6/filter/logdrop-399 -j TEE --gateway fc00::2 inet6/filter/logdrop-399 -j DROP Filter 671 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-670 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 inet/filter/limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-400 inet/filter/limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-400 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-400 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-400 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-670 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-670 inet6/filter/limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-400 inet6/filter/limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-400 -j TEE --gateway fc00::2 inet6/filter/logdrop-400 -j DROP Filter 672 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-671 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-671 inet/filter/limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-401 inet/filter/limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-401 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-401 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-401 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-671 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-671 inet6/filter/limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-401 inet6/filter/limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-401 -j TEE --gateway fc00::2 inet6/filter/logdrop-401 -j DROP Filter 673 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-672 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 inet/filter/limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 inet/filter/limit-672 -m limit --limit 1/second -j LOG inet/filter/limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-402 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-402 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-402 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-672 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-672 inet6/filter/limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 inet6/filter/limit-672 -m limit --limit 1/second -j LOG inet6/filter/limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-402 -j TEE --gateway fc00::2 inet6/filter/logdrop-402 -j DROP Filter 674 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-673 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 inet/filter/limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 inet/filter/limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-403 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-403 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-403 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-673 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-673 inet6/filter/limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 inet6/filter/limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-403 -j TEE --gateway fc00::2 inet6/filter/logdrop-403 -j DROP Filter 675 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-674 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 inet/filter/limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 inet/filter/limit-674 -j TEE --gateway 10.0.0.1 inet/filter/limit-674 -j TEE --gateway 10.0.0.2 inet/filter/limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-404 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-404 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-404 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-674 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-674 inet6/filter/limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 inet6/filter/limit-674 -j TEE --gateway fc00::2 inet6/filter/limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-404 -j TEE --gateway fc00::2 inet6/filter/logdrop-404 -j DROP Filter 676 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-675 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-675 inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-405 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-405 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-405 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-675 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-675 inet6/filter/limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 inet6/filter/limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-405 -j TEE --gateway fc00::2 inet6/filter/logdrop-405 -j DROP Filter 677 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-676 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 inet/filter/limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 inet/filter/limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-406 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-406 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-406 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-676 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-676 inet6/filter/limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 inet6/filter/limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-406 -j TEE --gateway fc00::2 inet6/filter/logdrop-406 -j DROP Filter 678 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-677 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 inet/filter/limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 inet/filter/limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-407 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-407 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-407 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-677 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-677 inet6/filter/limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 inet6/filter/limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-407 -j TEE --gateway fc00::2 inet6/filter/logdrop-407 -j DROP Filter 679 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-678 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 inet/filter/limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 inet/filter/limit-678 -m limit --limit 12/minute -j ULOG inet/filter/limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-408 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-408 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-408 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-678 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-678 inet6/filter/limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 inet6/filter/limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-408 -j TEE --gateway fc00::2 inet6/filter/logdrop-408 -j DROP Filter 680 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-679 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 inet/filter/limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 inet/filter/limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-409 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-409 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-409 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-679 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-679 inet6/filter/limit-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 inet6/filter/logdrop-409 -j TEE --gateway fc00::2 inet6/filter/logdrop-409 -j DROP Filter 681 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-680 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 inet/filter/limit-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-410 inet/filter/limit-680 -j ACCEPT inet/filter/logdrop-410 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-410 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-410 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-680 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-680 inet6/filter/limit-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-410 inet6/filter/limit-680 -j ACCEPT inet6/filter/logdrop-410 -j TEE --gateway fc00::2 inet6/filter/logdrop-410 -j DROP Filter 682 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-681 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 inet/filter/limit-681 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-411 inet/filter/logdrop-411 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-411 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-411 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-681 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-681 inet6/filter/limit-681 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-411 inet6/filter/logdrop-411 -j TEE --gateway fc00::2 inet6/filter/logdrop-411 -j DROP Filter 683 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-682 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 inet/filter/limit-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-412 inet/filter/limit-682 -m limit --limit 1/second -j LOG inet/filter/limit-682 -j ACCEPT inet/filter/logdrop-412 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-412 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-412 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-682 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-682 inet6/filter/limit-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-412 inet6/filter/limit-682 -m limit --limit 1/second -j LOG inet6/filter/limit-682 -j ACCEPT inet6/filter/logdrop-412 -j TEE --gateway fc00::2 inet6/filter/logdrop-412 -j DROP Filter 684 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-683 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-683 inet/filter/limit-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-413 inet/filter/limit-683 -m limit --limit 1/second -j LOG inet/filter/logdrop-413 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-413 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-413 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-683 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-683 inet6/filter/limit-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-413 inet6/filter/limit-683 -m limit --limit 1/second -j LOG inet6/filter/logdrop-413 -j TEE --gateway fc00::2 inet6/filter/logdrop-413 -j DROP Filter 685 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-684 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 inet/filter/limit-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 inet/filter/limit-684 -j TEE --gateway 10.0.0.1 inet/filter/limit-684 -j TEE --gateway 10.0.0.2 inet/filter/limit-684 -j ACCEPT inet/filter/logdrop-414 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-414 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-414 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-684 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-684 inet6/filter/limit-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 inet6/filter/limit-684 -j TEE --gateway fc00::2 inet6/filter/limit-684 -j ACCEPT inet6/filter/logdrop-414 -j TEE --gateway fc00::2 inet6/filter/logdrop-414 -j DROP Filter 686 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-685 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 inet/filter/limit-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 inet/filter/limit-685 -j TEE --gateway 10.0.0.1 inet/filter/limit-685 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-415 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-415 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-415 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-685 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-685 inet6/filter/limit-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 inet6/filter/limit-685 -j TEE --gateway fc00::2 inet6/filter/logdrop-415 -j TEE --gateway fc00::2 inet6/filter/logdrop-415 -j DROP Filter 687 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-686 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 inet/filter/limit-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 inet/filter/limit-686 -j ACCEPT inet/filter/logdrop-416 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-416 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-416 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-686 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-686 inet6/filter/limit-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 inet6/filter/limit-686 -j ACCEPT inet6/filter/logdrop-416 -j TEE --gateway fc00::2 inet6/filter/logdrop-416 -j DROP Filter 688 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-687 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-687 inet/filter/limit-687 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 inet/filter/logdrop-417 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-417 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-417 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-687 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-687 inet6/filter/limit-687 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 inet6/filter/logdrop-417 -j TEE --gateway fc00::2 inet6/filter/logdrop-417 -j DROP Filter 689 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-688 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 inet/filter/limit-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 inet/filter/limit-688 -m limit --limit 12/minute -j ULOG inet/filter/limit-688 -j ACCEPT inet/filter/logdrop-418 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-418 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-418 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-688 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-688 inet6/filter/limit-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 inet6/filter/limit-688 -j ACCEPT inet6/filter/logdrop-418 -j TEE --gateway fc00::2 inet6/filter/logdrop-418 -j DROP Filter 690 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-689 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 inet/filter/limit-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 inet/filter/limit-689 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-419 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-419 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-419 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-689 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-689 inet6/filter/limit-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 inet6/filter/logdrop-419 -j TEE --gateway fc00::2 inet6/filter/logdrop-419 -j DROP Filter 691 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-690 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 inet/filter/limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-420 inet/filter/limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-420 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-420 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-420 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-690 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-690 inet6/filter/limit-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-420 inet6/filter/limit-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-420 -j TEE --gateway fc00::2 inet6/filter/logdrop-420 -j DROP Filter 692 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-691 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 inet/filter/limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-421 inet/filter/limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-421 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-421 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-421 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-691 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-691 inet6/filter/limit-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-421 inet6/filter/limit-691 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-421 -j TEE --gateway fc00::2 inet6/filter/logdrop-421 -j DROP Filter 693 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-692 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 inet/filter/limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-422 inet/filter/limit-692 -m limit --limit 1/second -j LOG inet/filter/limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-422 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-422 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-422 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-692 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-692 inet6/filter/limit-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-422 inet6/filter/limit-692 -m limit --limit 1/second -j LOG inet6/filter/limit-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-422 -j TEE --gateway fc00::2 inet6/filter/logdrop-422 -j DROP Filter 694 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-693 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 inet/filter/limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-423 inet/filter/limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-423 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-423 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-423 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-693 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-693 inet6/filter/limit-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-423 inet6/filter/limit-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-423 -j TEE --gateway fc00::2 inet6/filter/logdrop-423 -j DROP Filter 695 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-694 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 inet/filter/limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-424 inet/filter/limit-694 -j TEE --gateway 10.0.0.1 inet/filter/limit-694 -j TEE --gateway 10.0.0.2 inet/filter/limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-424 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-424 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-424 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-694 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-694 inet6/filter/limit-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-424 inet6/filter/limit-694 -j TEE --gateway fc00::2 inet6/filter/limit-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-424 -j TEE --gateway fc00::2 inet6/filter/logdrop-424 -j DROP Filter 696 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-695 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 inet/filter/limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-425 inet/filter/limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-425 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-425 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-425 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-695 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-695 inet6/filter/limit-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-425 inet6/filter/limit-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-425 -j TEE --gateway fc00::2 inet6/filter/logdrop-425 -j DROP Filter 697 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-696 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 inet/filter/limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-426 inet/filter/limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-426 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-426 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-426 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-696 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-696 inet6/filter/limit-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-426 inet6/filter/limit-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-426 -j TEE --gateway fc00::2 inet6/filter/logdrop-426 -j DROP Filter 698 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-697 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 inet/filter/limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-427 inet/filter/limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-427 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-427 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-427 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-697 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-697 inet6/filter/limit-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-427 inet6/filter/limit-697 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-427 -j TEE --gateway fc00::2 inet6/filter/logdrop-427 -j DROP Filter 699 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-698 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 inet/filter/limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-428 inet/filter/limit-698 -m limit --limit 12/minute -j ULOG inet/filter/limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-428 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-428 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-428 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-698 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-698 inet6/filter/limit-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-428 inet6/filter/limit-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-428 -j TEE --gateway fc00::2 inet6/filter/logdrop-428 -j DROP Filter 700 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-699 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 inet/filter/limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-429 inet/filter/limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-429 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-429 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-429 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-699 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-699 inet6/filter/limit-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-429 inet6/filter/logdrop-429 -j TEE --gateway fc00::2 inet6/filter/logdrop-429 -j DROP Filter 701 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-700 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 inet/filter/limit-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 inet/filter/limit-700 -j ACCEPT inet/filter/logdrop-430 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-430 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-430 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-700 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-700 inet6/filter/limit-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-430 inet6/filter/limit-700 -j ACCEPT inet6/filter/logdrop-430 -j TEE --gateway fc00::2 inet6/filter/logdrop-430 -j DROP Filter 702 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-701 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 inet/filter/limit-701 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 inet/filter/logdrop-431 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-431 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-431 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-701 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-701 inet6/filter/limit-701 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-431 inet6/filter/logdrop-431 -j TEE --gateway fc00::2 inet6/filter/logdrop-431 -j DROP Filter 703 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-702 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 inet/filter/limit-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 inet/filter/limit-702 -m limit --limit 1/second -j LOG inet/filter/limit-702 -j ACCEPT inet/filter/logdrop-432 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-432 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-432 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-702 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-702 inet6/filter/limit-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-432 inet6/filter/limit-702 -m limit --limit 1/second -j LOG inet6/filter/limit-702 -j ACCEPT inet6/filter/logdrop-432 -j TEE --gateway fc00::2 inet6/filter/logdrop-432 -j DROP Filter 704 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-703 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 inet/filter/limit-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-433 inet/filter/limit-703 -m limit --limit 1/second -j LOG inet/filter/logdrop-433 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-433 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-433 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-703 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-703 inet6/filter/limit-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-433 inet6/filter/limit-703 -m limit --limit 1/second -j LOG inet6/filter/logdrop-433 -j TEE --gateway fc00::2 inet6/filter/logdrop-433 -j DROP Filter 705 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-704 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 inet/filter/limit-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-434 inet/filter/limit-704 -j TEE --gateway 10.0.0.1 inet/filter/limit-704 -j TEE --gateway 10.0.0.2 inet/filter/limit-704 -j ACCEPT inet/filter/logdrop-434 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-434 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-434 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-704 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-704 inet6/filter/limit-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-434 inet6/filter/limit-704 -j TEE --gateway fc00::2 inet6/filter/limit-704 -j ACCEPT inet6/filter/logdrop-434 -j TEE --gateway fc00::2 inet6/filter/logdrop-434 -j DROP Filter 706 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-705 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 inet/filter/limit-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-435 inet/filter/limit-705 -j TEE --gateway 10.0.0.1 inet/filter/limit-705 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-435 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-435 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-435 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-705 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-705 inet6/filter/limit-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-435 inet6/filter/limit-705 -j TEE --gateway fc00::2 inet6/filter/logdrop-435 -j TEE --gateway fc00::2 inet6/filter/logdrop-435 -j DROP Filter 707 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-706 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 inet/filter/limit-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-436 inet/filter/limit-706 -j ACCEPT inet/filter/logdrop-436 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-436 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-436 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-706 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-706 inet6/filter/limit-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-436 inet6/filter/limit-706 -j ACCEPT inet6/filter/logdrop-436 -j TEE --gateway fc00::2 inet6/filter/logdrop-436 -j DROP Filter 708 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-707 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 inet/filter/limit-707 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-437 inet/filter/logdrop-437 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-437 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-437 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-707 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-707 inet6/filter/limit-707 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-437 inet6/filter/logdrop-437 -j TEE --gateway fc00::2 inet6/filter/logdrop-437 -j DROP Filter 709 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-708 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 inet/filter/limit-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 inet/filter/limit-708 -m limit --limit 12/minute -j ULOG inet/filter/limit-708 -j ACCEPT inet/filter/logdrop-438 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-438 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-438 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-708 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-708 inet6/filter/limit-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 inet6/filter/limit-708 -j ACCEPT inet6/filter/logdrop-438 -j TEE --gateway fc00::2 inet6/filter/logdrop-438 -j DROP Filter 710 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-709 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 inet/filter/limit-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 inet/filter/limit-709 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-439 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-439 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-439 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-709 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-709 inet6/filter/limit-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 inet6/filter/logdrop-439 -j TEE --gateway fc00::2 inet6/filter/logdrop-439 -j DROP Filter 711 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-710 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 inet/filter/limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-440 inet/filter/limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-440 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-440 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-440 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-710 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-710 inet6/filter/limit-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-440 inet6/filter/limit-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-440 -j TEE --gateway fc00::2 inet6/filter/logdrop-440 -j DROP Filter 712 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-711 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 inet/filter/limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-441 inet/filter/limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-441 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-441 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-441 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-711 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-711 inet6/filter/limit-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-441 inet6/filter/limit-711 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-441 -j TEE --gateway fc00::2 inet6/filter/logdrop-441 -j DROP Filter 713 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-712 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 inet/filter/limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-442 inet/filter/limit-712 -m limit --limit 1/second -j LOG inet/filter/limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-442 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-442 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-442 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-712 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-712 inet6/filter/limit-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-442 inet6/filter/limit-712 -m limit --limit 1/second -j LOG inet6/filter/limit-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-442 -j TEE --gateway fc00::2 inet6/filter/logdrop-442 -j DROP Filter 714 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-713 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 inet/filter/limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-443 inet/filter/limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-443 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-443 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-443 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-713 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-713 inet6/filter/limit-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-443 inet6/filter/limit-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-443 -j TEE --gateway fc00::2 inet6/filter/logdrop-443 -j DROP Filter 715 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-714 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 inet/filter/limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 inet/filter/limit-714 -j TEE --gateway 10.0.0.1 inet/filter/limit-714 -j TEE --gateway 10.0.0.2 inet/filter/limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-444 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-444 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-444 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-714 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-714 inet6/filter/limit-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 inet6/filter/limit-714 -j TEE --gateway fc00::2 inet6/filter/limit-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-444 -j TEE --gateway fc00::2 inet6/filter/logdrop-444 -j DROP Filter 716 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-715 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 inet/filter/limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 inet/filter/limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-445 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-445 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-445 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-715 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-715 inet6/filter/limit-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 inet6/filter/limit-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-445 -j TEE --gateway fc00::2 inet6/filter/logdrop-445 -j DROP Filter 717 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-716 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-716 inet/filter/limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 inet/filter/limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-446 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-446 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-446 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-716 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-716 inet6/filter/limit-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 inet6/filter/limit-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-446 -j TEE --gateway fc00::2 inet6/filter/logdrop-446 -j DROP Filter 718 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-717 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-717 inet/filter/limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 inet/filter/limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-447 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-447 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-447 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-717 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-717 inet6/filter/limit-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 inet6/filter/limit-717 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-447 -j TEE --gateway fc00::2 inet6/filter/logdrop-447 -j DROP Filter 719 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-718 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-718 inet/filter/limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 inet/filter/limit-718 -m limit --limit 12/minute -j ULOG inet/filter/limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-448 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-448 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-448 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-718 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-718 inet6/filter/limit-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 inet6/filter/limit-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-448 -j TEE --gateway fc00::2 inet6/filter/logdrop-448 -j DROP Filter 720 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-719 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-719 inet/filter/limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 inet/filter/limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-449 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-449 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-449 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-719 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-719 inet6/filter/limit-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 inet6/filter/logdrop-449 -j TEE --gateway fc00::2 inet6/filter/logdrop-449 -j DROP Filter 721 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-720 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-720 inet/filter/limit-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 inet/filter/limit-720 -j ACCEPT inet/filter/logdrop-450 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-450 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-450 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-720 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-720 inet6/filter/limit-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 inet6/filter/limit-720 -j ACCEPT inet6/filter/logdrop-450 -j TEE --gateway fc00::2 inet6/filter/logdrop-450 -j DROP Filter 722 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-721 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-721 inet/filter/limit-721 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 inet/filter/logdrop-451 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-451 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-451 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-721 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-721 inet6/filter/limit-721 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 inet6/filter/logdrop-451 -j TEE --gateway fc00::2 inet6/filter/logdrop-451 -j DROP Filter 723 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-722 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-722 inet/filter/limit-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 inet/filter/limit-722 -m limit --limit 1/second -j LOG inet/filter/limit-722 -j ACCEPT inet/filter/logdrop-452 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-452 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-452 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-722 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-722 inet6/filter/limit-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 inet6/filter/limit-722 -m limit --limit 1/second -j LOG inet6/filter/limit-722 -j ACCEPT inet6/filter/logdrop-452 -j TEE --gateway fc00::2 inet6/filter/logdrop-452 -j DROP Filter 724 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-723 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-723 inet/filter/limit-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 inet/filter/limit-723 -m limit --limit 1/second -j LOG inet/filter/logdrop-453 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-453 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-453 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-723 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-723 inet6/filter/limit-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 inet6/filter/limit-723 -m limit --limit 1/second -j LOG inet6/filter/logdrop-453 -j TEE --gateway fc00::2 inet6/filter/logdrop-453 -j DROP Filter 725 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-724 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-724 inet/filter/limit-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 inet/filter/limit-724 -j TEE --gateway 10.0.0.1 inet/filter/limit-724 -j TEE --gateway 10.0.0.2 inet/filter/limit-724 -j ACCEPT inet/filter/logdrop-454 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-454 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-454 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-724 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-724 inet6/filter/limit-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 inet6/filter/limit-724 -j TEE --gateway fc00::2 inet6/filter/limit-724 -j ACCEPT inet6/filter/logdrop-454 -j TEE --gateway fc00::2 inet6/filter/logdrop-454 -j DROP Filter 726 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-725 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-725 inet/filter/limit-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 inet/filter/limit-725 -j TEE --gateway 10.0.0.1 inet/filter/limit-725 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-455 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-455 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-455 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-725 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-725 inet6/filter/limit-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 inet6/filter/limit-725 -j TEE --gateway fc00::2 inet6/filter/logdrop-455 -j TEE --gateway fc00::2 inet6/filter/logdrop-455 -j DROP Filter 727 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-726 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-726 inet/filter/limit-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 inet/filter/limit-726 -j ACCEPT inet/filter/logdrop-456 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-456 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-456 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-726 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-726 inet6/filter/limit-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 inet6/filter/limit-726 -j ACCEPT inet6/filter/logdrop-456 -j TEE --gateway fc00::2 inet6/filter/logdrop-456 -j DROP Filter 728 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-727 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-727 inet/filter/limit-727 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-457 inet/filter/logdrop-457 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-457 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-457 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-727 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-727 inet6/filter/limit-727 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-457 inet6/filter/logdrop-457 -j TEE --gateway fc00::2 inet6/filter/logdrop-457 -j DROP Filter 729 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-728 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-728 inet/filter/limit-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-458 inet/filter/limit-728 -m limit --limit 12/minute -j ULOG inet/filter/limit-728 -j ACCEPT inet/filter/logdrop-458 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-458 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-458 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-728 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-728 inet6/filter/limit-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-458 inet6/filter/limit-728 -j ACCEPT inet6/filter/logdrop-458 -j TEE --gateway fc00::2 inet6/filter/logdrop-458 -j DROP Filter 730 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-729 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-729 inet/filter/limit-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-459 inet/filter/limit-729 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-459 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-459 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-459 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-729 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-729 inet6/filter/limit-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-459 inet6/filter/logdrop-459 -j TEE --gateway fc00::2 inet6/filter/logdrop-459 -j DROP Filter 731 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-730 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-730 inet/filter/limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-730 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-730 inet6/filter/limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 732 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-731 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-731 inet/filter/limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-731 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-731 inet6/filter/limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 733 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-732 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-732 inet/filter/limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-732 -m limit --limit 1/second -j LOG inet/filter/limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-732 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-732 inet6/filter/limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-732 -m limit --limit 1/second -j LOG inet6/filter/limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 734 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-733 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-733 inet/filter/limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-733 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-733 inet6/filter/limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 735 {"conn-limit":{"interval":5,"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-734 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-734 inet/filter/limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-734 -j TEE --gateway 10.0.0.1 inet/filter/limit-734 -j TEE --gateway 10.0.0.2 inet/filter/limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-734 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-734 inet6/filter/limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-734 -j TEE --gateway fc00::2 inet6/filter/limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 736 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-735 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-735 inet/filter/limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-735 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-735 inet6/filter/limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 737 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-736 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-736 inet/filter/limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-736 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-736 inet6/filter/limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 738 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-737 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-737 inet/filter/limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-737 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-737 inet6/filter/limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 739 {"conn-limit":{"interval":5,"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-738 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-738 inet/filter/limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-738 -m limit --limit 12/minute -j ULOG inet/filter/limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-738 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-738 inet6/filter/limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 740 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-739 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-739 inet/filter/limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-739 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-739 inet6/filter/limit-739 -m recent --name limit-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 741 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-740 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-740 inet/filter/limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-740 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-740 inet6/filter/limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 742 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-741 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-741 inet/filter/limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-741 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-741 inet6/filter/limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 743 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-742 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-742 inet/filter/limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-742 -m limit --limit 1/second -j LOG inet/filter/limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-742 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-742 inet6/filter/limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-742 -m limit --limit 1/second -j LOG inet6/filter/limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 744 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-743 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-743 inet/filter/limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-743 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-743 inet6/filter/limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 745 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-744 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-744 inet/filter/limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-744 -j TEE --gateway 10.0.0.1 inet/filter/limit-744 -j TEE --gateway 10.0.0.2 inet/filter/limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-744 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-744 inet6/filter/limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-744 -j TEE --gateway fc00::2 inet6/filter/limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 746 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-745 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-745 inet/filter/limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-745 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-745 inet6/filter/limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 747 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-746 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-746 inet/filter/limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-746 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-746 inet6/filter/limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 748 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-747 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-747 inet/filter/limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-747 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-747 inet6/filter/limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 749 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-748 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-748 inet/filter/limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-748 -m limit --limit 12/minute -j ULOG inet/filter/limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-748 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-748 inet6/filter/limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 750 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-749 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-749 inet/filter/limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-749 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-749 inet6/filter/limit-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 751 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-750 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-750 inet/filter/limit-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-750 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-750 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-750 inet6/filter/limit-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-750 -j ACCEPT Filter 752 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-751 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-751 inet/filter/limit-751 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-751 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-751 inet6/filter/limit-751 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 753 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-752 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-752 inet/filter/limit-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-752 -m limit --limit 1/second -j LOG inet/filter/limit-752 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-752 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-752 inet6/filter/limit-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-752 -m limit --limit 1/second -j LOG inet6/filter/limit-752 -j ACCEPT Filter 754 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-753 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-753 inet/filter/limit-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-753 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-753 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-753 inet6/filter/limit-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-753 -m limit --limit 1/second -j LOG Filter 755 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-754 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-754 inet/filter/limit-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-754 -j TEE --gateway 10.0.0.1 inet/filter/limit-754 -j TEE --gateway 10.0.0.2 inet/filter/limit-754 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-754 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-754 inet6/filter/limit-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-754 -j TEE --gateway fc00::2 inet6/filter/limit-754 -j ACCEPT Filter 756 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-755 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-755 inet/filter/limit-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-755 -j TEE --gateway 10.0.0.1 inet/filter/limit-755 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-755 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-755 inet6/filter/limit-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-755 -j TEE --gateway fc00::2 Filter 757 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-756 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-756 inet/filter/limit-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-756 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-756 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-756 inet6/filter/limit-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-756 -j ACCEPT Filter 758 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-757 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-757 inet/filter/limit-757 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-757 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-757 inet6/filter/limit-757 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 759 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-758 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-758 inet/filter/limit-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-758 -m limit --limit 12/minute -j ULOG inet/filter/limit-758 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-758 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-758 inet6/filter/limit-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-758 -j ACCEPT Filter 760 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-759 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-759 inet/filter/limit-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-759 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-759 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-759 inet6/filter/limit-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 761 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-760 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-760 inet/filter/limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-760 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-760 inet6/filter/limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 762 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-761 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-761 inet/filter/limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-761 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-761 inet6/filter/limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 763 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-762 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-762 inet/filter/limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-762 -m limit --limit 1/second -j LOG inet/filter/limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-762 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-762 inet6/filter/limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-762 -m limit --limit 1/second -j LOG inet6/filter/limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 764 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-763 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-763 inet/filter/limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-763 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-763 inet6/filter/limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 765 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-764 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-764 inet/filter/limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-764 -j TEE --gateway 10.0.0.1 inet/filter/limit-764 -j TEE --gateway 10.0.0.2 inet/filter/limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-764 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-764 inet6/filter/limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-764 -j TEE --gateway fc00::2 inet6/filter/limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 766 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-765 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-765 inet/filter/limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-765 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-765 inet6/filter/limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 767 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-766 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-766 inet/filter/limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-766 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-766 inet6/filter/limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 768 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-767 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-767 inet/filter/limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-767 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-767 inet6/filter/limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 769 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-768 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-768 inet/filter/limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-768 -m limit --limit 12/minute -j ULOG inet/filter/limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-768 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-768 inet6/filter/limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 770 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-769 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-769 inet/filter/limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-769 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-769 inet6/filter/limit-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 771 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-770 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-770 inet/filter/limit-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-770 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-770 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-770 inet6/filter/limit-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-770 -j ACCEPT Filter 772 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-771 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-771 inet/filter/limit-771 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-771 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-771 inet6/filter/limit-771 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 773 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-772 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-772 inet/filter/limit-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-772 -m limit --limit 1/second -j LOG inet/filter/limit-772 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-772 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-772 inet6/filter/limit-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-772 -m limit --limit 1/second -j LOG inet6/filter/limit-772 -j ACCEPT Filter 774 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-773 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-773 inet/filter/limit-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-773 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-773 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-773 inet6/filter/limit-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-773 -m limit --limit 1/second -j LOG Filter 775 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-774 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-774 inet/filter/limit-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-774 -j TEE --gateway 10.0.0.1 inet/filter/limit-774 -j TEE --gateway 10.0.0.2 inet/filter/limit-774 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-774 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-774 inet6/filter/limit-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-774 -j TEE --gateway fc00::2 inet6/filter/limit-774 -j ACCEPT Filter 776 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-775 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-775 inet/filter/limit-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-775 -j TEE --gateway 10.0.0.1 inet/filter/limit-775 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-775 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-775 inet6/filter/limit-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-775 -j TEE --gateway fc00::2 Filter 777 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-776 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-776 inet/filter/limit-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-776 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-776 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-776 inet6/filter/limit-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-776 -j ACCEPT Filter 778 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-777 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-777 inet/filter/limit-777 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-777 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-777 inet6/filter/limit-777 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 779 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-778 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-778 inet/filter/limit-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-778 -m limit --limit 12/minute -j ULOG inet/filter/limit-778 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-778 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-778 inet6/filter/limit-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-778 -j ACCEPT Filter 780 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-779 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-779 inet/filter/limit-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-779 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-779 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-779 inet6/filter/limit-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 781 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-780 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-780 inet/filter/limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-780 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-780 inet6/filter/limit-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 782 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-781 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-781 inet/filter/limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-781 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-781 inet6/filter/limit-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-781 -m recent --name user:C --rsource --mask fe00:: --set Filter 783 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-782 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-782 inet/filter/limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-782 -m limit --limit 1/second -j LOG inet/filter/limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-782 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-782 inet6/filter/limit-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-782 -m limit --limit 1/second -j LOG inet6/filter/limit-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 784 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-783 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-783 inet/filter/limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-783 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-783 inet6/filter/limit-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 785 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-784 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-784 inet/filter/limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-784 -j TEE --gateway 10.0.0.1 inet/filter/limit-784 -j TEE --gateway 10.0.0.2 inet/filter/limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-784 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-784 inet6/filter/limit-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-784 -j TEE --gateway fc00::2 inet6/filter/limit-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 786 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-785 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-785 inet/filter/limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-785 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-785 inet6/filter/limit-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 787 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-786 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-786 inet/filter/limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-786 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-786 inet6/filter/limit-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 788 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-787 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-787 inet/filter/limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-787 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-787 inet6/filter/limit-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-787 -m recent --name user:C --rsource --mask fe00:: --set Filter 789 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-788 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-788 inet/filter/limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-788 -m limit --limit 12/minute -j ULOG inet/filter/limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-788 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-788 inet6/filter/limit-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 790 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-789 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-789 inet/filter/limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-789 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-789 inet6/filter/limit-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 791 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-790 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-790 inet/filter/limit-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-790 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-790 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-790 inet6/filter/limit-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-790 -j ACCEPT Filter 792 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-791 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-791 inet/filter/limit-791 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-791 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-791 inet6/filter/limit-791 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 793 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-792 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-792 inet/filter/limit-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-792 -m limit --limit 1/second -j LOG inet/filter/limit-792 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-792 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-792 inet6/filter/limit-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-792 -m limit --limit 1/second -j LOG inet6/filter/limit-792 -j ACCEPT Filter 794 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-793 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-793 inet/filter/limit-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-793 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-793 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-793 inet6/filter/limit-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-793 -m limit --limit 1/second -j LOG Filter 795 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-794 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-794 inet/filter/limit-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-794 -j TEE --gateway 10.0.0.1 inet/filter/limit-794 -j TEE --gateway 10.0.0.2 inet/filter/limit-794 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-794 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-794 inet6/filter/limit-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-794 -j TEE --gateway fc00::2 inet6/filter/limit-794 -j ACCEPT Filter 796 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-795 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-795 inet/filter/limit-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-795 -j TEE --gateway 10.0.0.1 inet/filter/limit-795 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-795 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-795 inet6/filter/limit-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-795 -j TEE --gateway fc00::2 Filter 797 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-796 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-796 inet/filter/limit-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-796 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-796 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-796 inet6/filter/limit-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-796 -j ACCEPT Filter 798 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-797 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-797 inet/filter/limit-797 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-797 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-797 inet6/filter/limit-797 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 799 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-798 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-798 inet/filter/limit-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-798 -m limit --limit 12/minute -j ULOG inet/filter/limit-798 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-798 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-798 inet6/filter/limit-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-798 -j ACCEPT Filter 800 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-799 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-799 inet/filter/limit-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-799 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-799 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-799 inet6/filter/limit-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 801 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-800 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-800 inet/filter/limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-800 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-800 inet6/filter/limit-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 802 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-801 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-801 inet/filter/limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-801 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-801 inet6/filter/limit-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-801 -m recent --name user:C --rdest --mask fe00:: --set Filter 803 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-802 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-802 inet/filter/limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-802 -m limit --limit 1/second -j LOG inet/filter/limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-802 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-802 inet6/filter/limit-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-802 -m limit --limit 1/second -j LOG inet6/filter/limit-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 804 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-803 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-803 inet/filter/limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-803 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-803 inet6/filter/limit-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 805 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-804 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-804 inet/filter/limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-804 -j TEE --gateway 10.0.0.1 inet/filter/limit-804 -j TEE --gateway 10.0.0.2 inet/filter/limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-804 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-804 inet6/filter/limit-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-804 -j TEE --gateway fc00::2 inet6/filter/limit-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 806 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-805 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-805 inet/filter/limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-805 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-805 inet6/filter/limit-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 807 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-806 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-806 inet/filter/limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-806 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-806 inet6/filter/limit-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 808 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-807 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-807 inet/filter/limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-807 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-807 inet6/filter/limit-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-807 -m recent --name user:C --rdest --mask fe00:: --set Filter 809 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-808 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-808 inet/filter/limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-808 -m limit --limit 12/minute -j ULOG inet/filter/limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-808 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-808 inet6/filter/limit-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 810 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-809 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-809 inet/filter/limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-809 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-809 inet6/filter/limit-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 811 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-810 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-810 inet/filter/limit-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-810 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-810 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-810 inet6/filter/limit-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-810 -j ACCEPT Filter 812 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-811 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-811 inet/filter/limit-811 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-811 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-811 inet6/filter/limit-811 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 813 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-812 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-812 inet/filter/limit-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-812 -m limit --limit 1/second -j LOG inet/filter/limit-812 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-812 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-812 inet6/filter/limit-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-812 -m limit --limit 1/second -j LOG inet6/filter/limit-812 -j ACCEPT Filter 814 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-813 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-813 inet/filter/limit-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-813 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-813 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-813 inet6/filter/limit-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-813 -m limit --limit 1/second -j LOG Filter 815 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-814 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-814 inet/filter/limit-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-814 -j TEE --gateway 10.0.0.1 inet/filter/limit-814 -j TEE --gateway 10.0.0.2 inet/filter/limit-814 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-814 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-814 inet6/filter/limit-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-814 -j TEE --gateway fc00::2 inet6/filter/limit-814 -j ACCEPT Filter 816 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-815 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-815 inet/filter/limit-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-815 -j TEE --gateway 10.0.0.1 inet/filter/limit-815 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-815 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-815 inet6/filter/limit-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-815 -j TEE --gateway fc00::2 Filter 817 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-816 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-816 inet/filter/limit-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-816 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-816 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-816 inet6/filter/limit-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-816 -j ACCEPT Filter 818 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-817 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-817 inet/filter/limit-817 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-817 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-817 inet6/filter/limit-817 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 819 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-818 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-818 inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-818 -m limit --limit 12/minute -j ULOG inet/filter/limit-818 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-818 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-818 inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-818 -j ACCEPT Filter 820 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-819 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-819 inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-819 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-819 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-819 inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 821 {"conn-limit":{"interval":5,"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-820 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-820 inet/filter/limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 inet/filter/limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-460 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-460 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-820 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-820 inet6/filter/limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 inet6/filter/limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-460 -j DROP Filter 822 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-821 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-821 inet/filter/limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 inet/filter/limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-461 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-461 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-821 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-821 inet6/filter/limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 inet6/filter/limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-461 -j DROP Filter 823 {"conn-limit":{"interval":5,"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-822 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-822 inet/filter/limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 inet/filter/limit-822 -m limit --limit 1/second -j LOG inet/filter/limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-462 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-462 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-822 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-822 inet6/filter/limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 inet6/filter/limit-822 -m limit --limit 1/second -j LOG inet6/filter/limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-462 -j DROP Filter 824 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-823 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-823 inet/filter/limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 inet/filter/limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-463 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-463 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-823 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-823 inet6/filter/limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 inet6/filter/limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-463 -j DROP Filter 825 {"conn-limit":{"interval":5,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-824 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-824 inet/filter/limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-464 inet/filter/limit-824 -j TEE --gateway 10.0.0.1 inet/filter/limit-824 -j TEE --gateway 10.0.0.2 inet/filter/limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-464 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-464 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-824 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-824 inet6/filter/limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-464 inet6/filter/limit-824 -j TEE --gateway fc00::2 inet6/filter/limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-464 -j DROP Filter 826 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-825 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-825 inet/filter/limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-465 inet/filter/limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-465 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-465 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-825 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-825 inet6/filter/limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-465 inet6/filter/limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-465 -j DROP Filter 827 {"conn-limit":{"interval":5,"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-826 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-826 inet/filter/limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-466 inet/filter/limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-466 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-466 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-826 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-826 inet6/filter/limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-466 inet6/filter/limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-466 -j DROP Filter 828 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-827 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-827 inet/filter/limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-467 inet/filter/limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-467 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-467 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-827 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-827 inet6/filter/limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-467 inet6/filter/limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-467 -j DROP Filter 829 {"conn-limit":{"interval":5,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-828 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-828 inet/filter/limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-468 inet/filter/limit-828 -m limit --limit 12/minute -j ULOG inet/filter/limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-468 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-468 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-828 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-828 inet6/filter/limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-468 inet6/filter/limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-468 -j DROP Filter 830 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-829 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-829 inet/filter/limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-469 inet/filter/limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-469 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-469 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-829 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-829 inet6/filter/limit-829 -m recent --name limit-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-469 inet6/filter/logdrop-469 -j DROP Filter 831 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-830 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-830 inet/filter/limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-470 inet/filter/limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-470 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-470 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-830 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-830 inet6/filter/limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-470 inet6/filter/limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-470 -j DROP Filter 832 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-831 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-831 inet/filter/limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-471 inet/filter/limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-471 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-471 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-831 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-831 inet6/filter/limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-471 inet6/filter/limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-471 -j DROP Filter 833 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-832 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-832 inet/filter/limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 inet/filter/limit-832 -m limit --limit 1/second -j LOG inet/filter/limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-472 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-472 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-832 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-832 inet6/filter/limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 inet6/filter/limit-832 -m limit --limit 1/second -j LOG inet6/filter/limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-472 -j DROP Filter 834 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-833 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-833 inet/filter/limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 inet/filter/limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-473 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-473 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-833 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-833 inet6/filter/limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 inet6/filter/limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-473 -j DROP Filter 835 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-834 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-834 inet/filter/limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 inet/filter/limit-834 -j TEE --gateway 10.0.0.1 inet/filter/limit-834 -j TEE --gateway 10.0.0.2 inet/filter/limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-474 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-474 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-834 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-834 inet6/filter/limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 inet6/filter/limit-834 -j TEE --gateway fc00::2 inet6/filter/limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-474 -j DROP Filter 836 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-835 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-835 inet/filter/limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 inet/filter/limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-475 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-475 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-835 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-835 inet6/filter/limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 inet6/filter/limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-475 -j DROP Filter 837 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-836 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-836 inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-476 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-476 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-836 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-836 inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-476 -j DROP Filter 838 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-837 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-837 inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-477 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-477 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-837 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-837 inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-477 -j DROP Filter 839 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-838 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-838 inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 inet/filter/limit-838 -m limit --limit 12/minute -j ULOG inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-478 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-478 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-838 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-838 inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-478 -j DROP Filter 840 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-839 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-839 inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-479 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-479 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-839 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-839 inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 inet6/filter/logdrop-479 -j DROP Filter 841 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-840 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-840 inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 inet/filter/limit-840 -j ACCEPT inet/filter/logdrop-480 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-480 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-840 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-840 inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 inet6/filter/limit-840 -j ACCEPT inet6/filter/logdrop-480 -j DROP Filter 842 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-841 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-841 inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 inet/filter/logdrop-481 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-481 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-841 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-841 inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 inet6/filter/logdrop-481 -j DROP Filter 843 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-842 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-842 inet/filter/limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 inet/filter/limit-842 -m limit --limit 1/second -j LOG inet/filter/limit-842 -j ACCEPT inet/filter/logdrop-482 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-482 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-842 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-842 inet6/filter/limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 inet6/filter/limit-842 -m limit --limit 1/second -j LOG inet6/filter/limit-842 -j ACCEPT inet6/filter/logdrop-482 -j DROP Filter 844 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-843 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-843 inet/filter/limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 inet/filter/limit-843 -m limit --limit 1/second -j LOG inet/filter/logdrop-483 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-483 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-843 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-843 inet6/filter/limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 inet6/filter/limit-843 -m limit --limit 1/second -j LOG inet6/filter/logdrop-483 -j DROP Filter 845 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-844 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-844 inet/filter/limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 inet/filter/limit-844 -j TEE --gateway 10.0.0.1 inet/filter/limit-844 -j TEE --gateway 10.0.0.2 inet/filter/limit-844 -j ACCEPT inet/filter/logdrop-484 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-484 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-844 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-844 inet6/filter/limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 inet6/filter/limit-844 -j TEE --gateway fc00::2 inet6/filter/limit-844 -j ACCEPT inet6/filter/logdrop-484 -j DROP Filter 846 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-845 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-845 inet/filter/limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 inet/filter/limit-845 -j TEE --gateway 10.0.0.1 inet/filter/limit-845 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-485 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-485 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-845 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-845 inet6/filter/limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 inet6/filter/limit-845 -j TEE --gateway fc00::2 inet6/filter/logdrop-485 -j DROP Filter 847 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-846 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-846 inet/filter/limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 inet/filter/limit-846 -j ACCEPT inet/filter/logdrop-486 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-486 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-846 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-846 inet6/filter/limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 inet6/filter/limit-846 -j ACCEPT inet6/filter/logdrop-486 -j DROP Filter 848 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-847 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-847 inet/filter/limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 inet/filter/logdrop-487 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-487 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-847 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-847 inet6/filter/limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 inet6/filter/logdrop-487 -j DROP Filter 849 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-848 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-848 inet/filter/limit-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-488 inet/filter/limit-848 -m limit --limit 12/minute -j ULOG inet/filter/limit-848 -j ACCEPT inet/filter/logdrop-488 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-488 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-848 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-848 inet6/filter/limit-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-488 inet6/filter/limit-848 -j ACCEPT inet6/filter/logdrop-488 -j DROP Filter 850 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-849 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-849 inet/filter/limit-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-489 inet/filter/limit-849 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-489 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-489 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-849 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-849 inet6/filter/limit-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-489 inet6/filter/logdrop-489 -j DROP Filter 851 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-850 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-850 inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-490 inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-490 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-490 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-850 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-850 inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-490 inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-490 -j DROP Filter 852 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-851 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-851 inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-491 inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-491 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-491 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-851 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-851 inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-491 inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-491 -j DROP Filter 853 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-852 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-852 inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-492 inet/filter/limit-852 -m limit --limit 1/second -j LOG inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-492 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-492 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-852 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-852 inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-492 inet6/filter/limit-852 -m limit --limit 1/second -j LOG inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-492 -j DROP Filter 854 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-853 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-853 inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-493 inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-493 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-493 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-853 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-853 inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-493 inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-493 -j DROP Filter 855 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-854 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-854 inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-494 inet/filter/limit-854 -j TEE --gateway 10.0.0.1 inet/filter/limit-854 -j TEE --gateway 10.0.0.2 inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-494 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-494 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-854 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-854 inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-494 inet6/filter/limit-854 -j TEE --gateway fc00::2 inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-494 -j DROP Filter 856 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-855 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-855 inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-495 inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-495 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-495 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-855 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-855 inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-495 inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-495 -j DROP Filter 857 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-856 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-856 inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-496 inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-496 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-496 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-856 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-856 inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-496 inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-496 -j DROP Filter 858 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-857 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-857 inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-497 inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-497 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-497 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-857 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-857 inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-497 inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-497 -j DROP Filter 859 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-858 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-858 inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-498 inet/filter/limit-858 -m limit --limit 12/minute -j ULOG inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-498 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-498 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-858 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-858 inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-498 inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-498 -j DROP Filter 860 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-859 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-859 inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-499 inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-499 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-499 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-859 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-859 inet6/filter/limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-499 inet6/filter/logdrop-499 -j DROP Filter 861 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-860 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-860 inet/filter/limit-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 inet/filter/limit-860 -j ACCEPT inet/filter/logdrop-500 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-500 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-860 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-860 inet6/filter/limit-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-500 inet6/filter/limit-860 -j ACCEPT inet6/filter/logdrop-500 -j DROP Filter 862 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-861 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-861 inet/filter/limit-861 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 inet/filter/logdrop-501 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-501 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-861 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-861 inet6/filter/limit-861 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-501 inet6/filter/logdrop-501 -j DROP Filter 863 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-862 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-862 inet/filter/limit-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 inet/filter/limit-862 -m limit --limit 1/second -j LOG inet/filter/limit-862 -j ACCEPT inet/filter/logdrop-502 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-502 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-862 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-862 inet6/filter/limit-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-502 inet6/filter/limit-862 -m limit --limit 1/second -j LOG inet6/filter/limit-862 -j ACCEPT inet6/filter/logdrop-502 -j DROP Filter 864 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-863 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-863 inet/filter/limit-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 inet/filter/limit-863 -m limit --limit 1/second -j LOG inet/filter/logdrop-503 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-503 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-863 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-863 inet6/filter/limit-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-503 inet6/filter/limit-863 -m limit --limit 1/second -j LOG inet6/filter/logdrop-503 -j DROP Filter 865 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-864 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-864 inet/filter/limit-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-504 inet/filter/limit-864 -j TEE --gateway 10.0.0.1 inet/filter/limit-864 -j TEE --gateway 10.0.0.2 inet/filter/limit-864 -j ACCEPT inet/filter/logdrop-504 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-504 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-864 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-864 inet6/filter/limit-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-504 inet6/filter/limit-864 -j TEE --gateway fc00::2 inet6/filter/limit-864 -j ACCEPT inet6/filter/logdrop-504 -j DROP Filter 866 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-865 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-865 inet/filter/limit-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-505 inet/filter/limit-865 -j TEE --gateway 10.0.0.1 inet/filter/limit-865 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-505 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-505 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-865 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-865 inet6/filter/limit-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-505 inet6/filter/limit-865 -j TEE --gateway fc00::2 inet6/filter/logdrop-505 -j DROP Filter 867 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-866 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-866 inet/filter/limit-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-506 inet/filter/limit-866 -j ACCEPT inet/filter/logdrop-506 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-506 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-866 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-866 inet6/filter/limit-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-506 inet6/filter/limit-866 -j ACCEPT inet6/filter/logdrop-506 -j DROP Filter 868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-867 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-867 inet/filter/limit-867 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-507 inet/filter/logdrop-507 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-507 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-867 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-867 inet6/filter/limit-867 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-507 inet6/filter/logdrop-507 -j DROP Filter 869 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-868 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-868 inet/filter/limit-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-508 inet/filter/limit-868 -m limit --limit 12/minute -j ULOG inet/filter/limit-868 -j ACCEPT inet/filter/logdrop-508 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-508 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-868 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-868 inet6/filter/limit-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-508 inet6/filter/limit-868 -j ACCEPT inet6/filter/logdrop-508 -j DROP Filter 870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-869 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-869 inet/filter/limit-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-509 inet/filter/limit-869 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-509 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-509 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-869 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-869 inet6/filter/limit-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-509 inet6/filter/logdrop-509 -j DROP Filter 871 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-870 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-870 inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-510 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-510 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-870 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-870 inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-510 -j DROP Filter 872 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-871 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-871 inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-511 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-511 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-871 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-871 inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-511 -j DROP Filter 873 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-872 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-872 inet/filter/limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-512 inet/filter/limit-872 -m limit --limit 1/second -j LOG inet/filter/limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-512 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-512 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-872 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-872 inet6/filter/limit-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-512 inet6/filter/limit-872 -m limit --limit 1/second -j LOG inet6/filter/limit-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-512 -j DROP Filter 874 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-873 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-873 inet/filter/limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-513 inet/filter/limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-513 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-513 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-873 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-873 inet6/filter/limit-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-513 inet6/filter/limit-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-513 -j DROP Filter 875 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-874 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-874 inet/filter/limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-514 inet/filter/limit-874 -j TEE --gateway 10.0.0.1 inet/filter/limit-874 -j TEE --gateway 10.0.0.2 inet/filter/limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-514 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-514 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-874 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-874 inet6/filter/limit-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-514 inet6/filter/limit-874 -j TEE --gateway fc00::2 inet6/filter/limit-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-514 -j DROP Filter 876 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-875 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-875 inet/filter/limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-515 inet/filter/limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-515 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-515 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-875 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-875 inet6/filter/limit-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-515 inet6/filter/limit-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-515 -j DROP Filter 877 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-876 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-876 inet/filter/limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-516 inet/filter/limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-516 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-516 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-876 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-876 inet6/filter/limit-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-516 inet6/filter/limit-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-516 -j DROP Filter 878 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-877 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-877 inet/filter/limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-517 inet/filter/limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-517 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-517 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-877 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-877 inet6/filter/limit-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-517 inet6/filter/limit-877 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-517 -j DROP Filter 879 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-878 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-878 inet/filter/limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-518 inet/filter/limit-878 -m limit --limit 12/minute -j ULOG inet/filter/limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-518 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-518 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-878 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-878 inet6/filter/limit-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-518 inet6/filter/limit-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-518 -j DROP Filter 880 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-879 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-879 inet/filter/limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-519 inet/filter/limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-519 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-519 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-879 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-879 inet6/filter/limit-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-519 inet6/filter/logdrop-519 -j DROP Filter 881 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-880 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-880 inet/filter/limit-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-520 inet/filter/limit-880 -j ACCEPT inet/filter/logdrop-520 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-520 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-880 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-880 inet6/filter/limit-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-520 inet6/filter/limit-880 -j ACCEPT inet6/filter/logdrop-520 -j DROP Filter 882 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-881 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-881 inet/filter/limit-881 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-521 inet/filter/logdrop-521 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-521 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-881 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-881 inet6/filter/limit-881 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-521 inet6/filter/logdrop-521 -j DROP Filter 883 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-882 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-882 inet/filter/limit-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-522 inet/filter/limit-882 -m limit --limit 1/second -j LOG inet/filter/limit-882 -j ACCEPT inet/filter/logdrop-522 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-522 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-882 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-882 inet6/filter/limit-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-522 inet6/filter/limit-882 -m limit --limit 1/second -j LOG inet6/filter/limit-882 -j ACCEPT inet6/filter/logdrop-522 -j DROP Filter 884 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-883 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-883 inet/filter/limit-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-523 inet/filter/limit-883 -m limit --limit 1/second -j LOG inet/filter/logdrop-523 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-523 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-883 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-883 inet6/filter/limit-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-523 inet6/filter/limit-883 -m limit --limit 1/second -j LOG inet6/filter/logdrop-523 -j DROP Filter 885 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-884 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-884 inet/filter/limit-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-524 inet/filter/limit-884 -j TEE --gateway 10.0.0.1 inet/filter/limit-884 -j TEE --gateway 10.0.0.2 inet/filter/limit-884 -j ACCEPT inet/filter/logdrop-524 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-524 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-884 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-884 inet6/filter/limit-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-524 inet6/filter/limit-884 -j TEE --gateway fc00::2 inet6/filter/limit-884 -j ACCEPT inet6/filter/logdrop-524 -j DROP Filter 886 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-885 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-885 inet/filter/limit-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-525 inet/filter/limit-885 -j TEE --gateway 10.0.0.1 inet/filter/limit-885 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-525 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-525 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-885 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-885 inet6/filter/limit-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-525 inet6/filter/limit-885 -j TEE --gateway fc00::2 inet6/filter/logdrop-525 -j DROP Filter 887 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-886 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-886 inet/filter/limit-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-526 inet/filter/limit-886 -j ACCEPT inet/filter/logdrop-526 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-526 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-886 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-886 inet6/filter/limit-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-526 inet6/filter/limit-886 -j ACCEPT inet6/filter/logdrop-526 -j DROP Filter 888 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-887 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-887 inet/filter/limit-887 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-527 inet/filter/logdrop-527 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-527 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-887 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-887 inet6/filter/limit-887 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-527 inet6/filter/logdrop-527 -j DROP Filter 889 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-888 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-888 inet/filter/limit-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-528 inet/filter/limit-888 -m limit --limit 12/minute -j ULOG inet/filter/limit-888 -j ACCEPT inet/filter/logdrop-528 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-528 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-888 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-888 inet6/filter/limit-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-528 inet6/filter/limit-888 -j ACCEPT inet6/filter/logdrop-528 -j DROP Filter 890 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-889 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-889 inet/filter/limit-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-529 inet/filter/limit-889 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-529 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-529 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-889 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-889 inet6/filter/limit-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-529 inet6/filter/logdrop-529 -j DROP Filter 891 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-890 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-890 inet/filter/limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-530 inet/filter/limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-530 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-530 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-890 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-890 inet6/filter/limit-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-530 inet6/filter/limit-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-530 -j DROP Filter 892 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-891 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-891 inet/filter/limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-531 inet/filter/limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-531 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-531 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-891 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-891 inet6/filter/limit-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-531 inet6/filter/limit-891 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-531 -j DROP Filter 893 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-892 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-892 inet/filter/limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-532 inet/filter/limit-892 -m limit --limit 1/second -j LOG inet/filter/limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-532 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-532 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-892 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-892 inet6/filter/limit-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-532 inet6/filter/limit-892 -m limit --limit 1/second -j LOG inet6/filter/limit-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-532 -j DROP Filter 894 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-893 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-893 inet/filter/limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-533 inet/filter/limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-533 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-533 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-893 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-893 inet6/filter/limit-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-533 inet6/filter/limit-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-533 -j DROP Filter 895 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-894 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-894 inet/filter/limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-534 inet/filter/limit-894 -j TEE --gateway 10.0.0.1 inet/filter/limit-894 -j TEE --gateway 10.0.0.2 inet/filter/limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-534 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-534 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-894 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-894 inet6/filter/limit-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-534 inet6/filter/limit-894 -j TEE --gateway fc00::2 inet6/filter/limit-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-534 -j DROP Filter 896 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-895 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-895 inet/filter/limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-535 inet/filter/limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-535 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-535 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-895 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-895 inet6/filter/limit-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-535 inet6/filter/limit-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-535 -j DROP Filter 897 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-896 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-896 inet/filter/limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-536 inet/filter/limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-536 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-536 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-896 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-896 inet6/filter/limit-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-536 inet6/filter/limit-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-536 -j DROP Filter 898 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-897 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-897 inet/filter/limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-537 inet/filter/limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-537 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-537 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-897 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-897 inet6/filter/limit-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-537 inet6/filter/limit-897 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-537 -j DROP Filter 899 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-898 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-898 inet/filter/limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-538 inet/filter/limit-898 -m limit --limit 12/minute -j ULOG inet/filter/limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-538 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-538 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-898 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-898 inet6/filter/limit-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-538 inet6/filter/limit-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-538 -j DROP Filter 900 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-899 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-899 inet/filter/limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-539 inet/filter/limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-539 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-539 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-899 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-899 inet6/filter/limit-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-539 inet6/filter/logdrop-539 -j DROP Filter 901 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-900 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-900 inet/filter/limit-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 inet/filter/limit-900 -j ACCEPT inet/filter/logdrop-540 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-540 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-900 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-900 inet6/filter/limit-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-540 inet6/filter/limit-900 -j ACCEPT inet6/filter/logdrop-540 -j DROP Filter 902 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-901 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-901 inet/filter/limit-901 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 inet/filter/logdrop-541 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-541 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-901 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-901 inet6/filter/limit-901 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-541 inet6/filter/logdrop-541 -j DROP Filter 903 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-902 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-902 inet/filter/limit-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 inet/filter/limit-902 -m limit --limit 1/second -j LOG inet/filter/limit-902 -j ACCEPT inet/filter/logdrop-542 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-542 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-902 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-902 inet6/filter/limit-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-542 inet6/filter/limit-902 -m limit --limit 1/second -j LOG inet6/filter/limit-902 -j ACCEPT inet6/filter/logdrop-542 -j DROP Filter 904 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-903 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-903 inet/filter/limit-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 inet/filter/limit-903 -m limit --limit 1/second -j LOG inet/filter/logdrop-543 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-543 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-903 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-903 inet6/filter/limit-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-543 inet6/filter/limit-903 -m limit --limit 1/second -j LOG inet6/filter/logdrop-543 -j DROP Filter 905 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-904 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-904 inet/filter/limit-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-544 inet/filter/limit-904 -j TEE --gateway 10.0.0.1 inet/filter/limit-904 -j TEE --gateway 10.0.0.2 inet/filter/limit-904 -j ACCEPT inet/filter/logdrop-544 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-544 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-904 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-904 inet6/filter/limit-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-544 inet6/filter/limit-904 -j TEE --gateway fc00::2 inet6/filter/limit-904 -j ACCEPT inet6/filter/logdrop-544 -j DROP Filter 906 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-905 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-905 inet/filter/limit-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-545 inet/filter/limit-905 -j TEE --gateway 10.0.0.1 inet/filter/limit-905 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-545 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-545 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-905 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-905 inet6/filter/limit-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-545 inet6/filter/limit-905 -j TEE --gateway fc00::2 inet6/filter/logdrop-545 -j DROP Filter 907 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-906 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-906 inet/filter/limit-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-546 inet/filter/limit-906 -j ACCEPT inet/filter/logdrop-546 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-546 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-906 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-906 inet6/filter/limit-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-546 inet6/filter/limit-906 -j ACCEPT inet6/filter/logdrop-546 -j DROP Filter 908 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-907 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-907 inet/filter/limit-907 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-547 inet/filter/logdrop-547 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-547 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-907 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-907 inet6/filter/limit-907 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-547 inet6/filter/logdrop-547 -j DROP Filter 909 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-908 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-908 inet/filter/limit-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-548 inet/filter/limit-908 -m limit --limit 12/minute -j ULOG inet/filter/limit-908 -j ACCEPT inet/filter/logdrop-548 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-548 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-908 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-908 inet6/filter/limit-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-548 inet6/filter/limit-908 -j ACCEPT inet6/filter/logdrop-548 -j DROP Filter 910 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-909 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-909 inet/filter/limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-549 inet/filter/limit-909 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-549 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-549 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-909 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-909 inet6/filter/limit-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-549 inet6/filter/logdrop-549 -j DROP Filter 911 {"conn-limit":150,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-910 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-910 inet/filter/limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-910 -j ACCEPT inet/filter/limit-910 -m limit --limit 1/second -j LOG inet/filter/limit-910 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-910 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-910 inet6/filter/limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-910 -j ACCEPT inet6/filter/limit-910 -m limit --limit 1/second -j LOG inet6/filter/limit-910 -j DROP Filter 912 {"action":"pass","conn-limit":150,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-911 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-911 inet/filter/limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-911 -j RETURN inet/filter/limit-911 -m limit --limit 1/second -j LOG inet/filter/limit-911 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-911 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-911 inet6/filter/limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-911 -j RETURN inet6/filter/limit-911 -m limit --limit 1/second -j LOG inet6/filter/limit-911 -j DROP Filter 913 {"conn-limit":150,"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-912 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-912 inet/filter/limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-912 -j logaccept-0 inet/filter/limit-912 -m limit --limit 1/second -j LOG inet/filter/limit-912 -j DROP inet/filter/logaccept-0 -m limit --limit 1/second -j LOG inet/filter/logaccept-0 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-912 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-912 inet6/filter/limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-912 -j logaccept-0 inet6/filter/limit-912 -m limit --limit 1/second -j LOG inet6/filter/limit-912 -j DROP inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG inet6/filter/logaccept-0 -j ACCEPT Filter 914 {"conn-limit":150,"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-913 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-913 inet/filter/limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-913 -j logaccept-1 inet/filter/limit-913 -m limit --limit 1/second -j LOG inet/filter/limit-913 -j DROP inet/filter/logaccept-1 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-1 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-1 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-913 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-913 inet6/filter/limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-913 -j logaccept-1 inet6/filter/limit-913 -m limit --limit 1/second -j LOG inet6/filter/limit-913 -j DROP inet6/filter/logaccept-1 -j TEE --gateway fc00::2 inet6/filter/logaccept-1 -j ACCEPT Filter 915 {"conn-limit":150,"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-914 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-914 inet/filter/limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-914 -j ACCEPT inet/filter/limit-914 -m limit --limit 1/second -j LOG inet/filter/limit-914 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-914 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-914 inet6/filter/limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-914 -j ACCEPT inet6/filter/limit-914 -m limit --limit 1/second -j LOG inet6/filter/limit-914 -j DROP Filter 916 {"conn-limit":150,"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-915 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-915 inet/filter/limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-915 -j logaccept-2 inet/filter/limit-915 -m limit --limit 1/second -j LOG inet/filter/limit-915 -j DROP inet/filter/logaccept-2 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-2 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-915 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-915 inet6/filter/limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-915 -j logaccept-2 inet6/filter/limit-915 -m limit --limit 1/second -j LOG inet6/filter/limit-915 -j DROP inet6/filter/logaccept-2 -j ACCEPT Filter 917 {"conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-916 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-916 inet/filter/limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-916 -j ACCEPT inet/filter/limit-916 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-916 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-916 inet6/filter/limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-916 -j ACCEPT inet6/filter/limit-916 -j DROP Filter 918 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-917 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-917 inet/filter/limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-917 -j RETURN inet/filter/limit-917 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-917 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-917 inet6/filter/limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-917 -j RETURN inet6/filter/limit-917 -j DROP Filter 919 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-918 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-918 inet/filter/limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-918 -j logaccept-3 inet/filter/limit-918 -j DROP inet/filter/logaccept-3 -m limit --limit 1/second -j LOG inet/filter/logaccept-3 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-918 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-918 inet6/filter/limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-918 -j logaccept-3 inet6/filter/limit-918 -j DROP inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG inet6/filter/logaccept-3 -j ACCEPT Filter 920 {"conn-limit":{"count":150,"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-919 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-919 inet/filter/limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-919 -j logaccept-4 inet/filter/limit-919 -j DROP inet/filter/logaccept-4 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-4 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-4 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-919 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-919 inet6/filter/limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-919 -j logaccept-4 inet6/filter/limit-919 -j DROP inet6/filter/logaccept-4 -j TEE --gateway fc00::2 inet6/filter/logaccept-4 -j ACCEPT Filter 921 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-920 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-920 inet/filter/limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-920 -j ACCEPT inet/filter/limit-920 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-920 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-920 inet6/filter/limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-920 -j ACCEPT inet6/filter/limit-920 -j DROP Filter 922 {"conn-limit":{"count":150,"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-921 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-921 inet/filter/limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-921 -j logaccept-5 inet/filter/limit-921 -j DROP inet/filter/logaccept-5 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-5 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-921 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-921 inet6/filter/limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-921 -j logaccept-5 inet6/filter/limit-921 -j DROP inet6/filter/logaccept-5 -j ACCEPT Filter 923 {"conn-limit":{"count":150},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-922 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-922 inet/filter/limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-922 -j ACCEPT inet/filter/limit-922 -m limit --limit 1/second -j LOG inet/filter/limit-922 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-922 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-922 inet6/filter/limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-922 -j ACCEPT inet6/filter/limit-922 -m limit --limit 1/second -j LOG inet6/filter/limit-922 -j DROP Filter 924 {"action":"pass","conn-limit":{"count":150},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-923 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-923 inet/filter/limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-923 -j RETURN inet/filter/limit-923 -m limit --limit 1/second -j LOG inet/filter/limit-923 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-923 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-923 inet6/filter/limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-923 -j RETURN inet6/filter/limit-923 -m limit --limit 1/second -j LOG inet6/filter/limit-923 -j DROP Filter 925 {"conn-limit":{"count":150},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-924 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-924 inet/filter/limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-924 -j logaccept-6 inet/filter/limit-924 -m limit --limit 1/second -j LOG inet/filter/limit-924 -j DROP inet/filter/logaccept-6 -m limit --limit 1/second -j LOG inet/filter/logaccept-6 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-924 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-924 inet6/filter/limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-924 -j logaccept-6 inet6/filter/limit-924 -m limit --limit 1/second -j LOG inet6/filter/limit-924 -j DROP inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG inet6/filter/logaccept-6 -j ACCEPT Filter 926 {"conn-limit":{"count":150},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-925 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-925 inet/filter/limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-925 -j logaccept-7 inet/filter/limit-925 -m limit --limit 1/second -j LOG inet/filter/limit-925 -j DROP inet/filter/logaccept-7 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-7 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-7 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-925 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-925 inet6/filter/limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-925 -j logaccept-7 inet6/filter/limit-925 -m limit --limit 1/second -j LOG inet6/filter/limit-925 -j DROP inet6/filter/logaccept-7 -j TEE --gateway fc00::2 inet6/filter/logaccept-7 -j ACCEPT Filter 927 {"conn-limit":{"count":150},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-926 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-926 inet/filter/limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-926 -j ACCEPT inet/filter/limit-926 -m limit --limit 1/second -j LOG inet/filter/limit-926 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-926 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-926 inet6/filter/limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-926 -j ACCEPT inet6/filter/limit-926 -m limit --limit 1/second -j LOG inet6/filter/limit-926 -j DROP Filter 928 {"conn-limit":{"count":150},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-927 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-927 inet/filter/limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-927 -j logaccept-8 inet/filter/limit-927 -m limit --limit 1/second -j LOG inet/filter/limit-927 -j DROP inet/filter/logaccept-8 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-8 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-927 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-927 inet6/filter/limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-927 -j logaccept-8 inet6/filter/limit-927 -m limit --limit 1/second -j LOG inet6/filter/limit-927 -j DROP inet6/filter/logaccept-8 -j ACCEPT Filter 929 {"conn-limit":{"count":150,"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-928 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-928 inet/filter/limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-928 -j ACCEPT inet/filter/limit-928 -j TEE --gateway 10.0.0.1 inet/filter/limit-928 -j TEE --gateway 10.0.0.2 inet/filter/limit-928 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-928 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-928 inet6/filter/limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-928 -j ACCEPT inet6/filter/limit-928 -j TEE --gateway fc00::2 inet6/filter/limit-928 -j DROP Filter 930 {"action":"pass","conn-limit":{"count":150,"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-929 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-929 inet/filter/limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-929 -j RETURN inet/filter/limit-929 -j TEE --gateway 10.0.0.1 inet/filter/limit-929 -j TEE --gateway 10.0.0.2 inet/filter/limit-929 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-929 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-929 inet6/filter/limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-929 -j RETURN inet6/filter/limit-929 -j TEE --gateway fc00::2 inet6/filter/limit-929 -j DROP Filter 931 {"conn-limit":{"count":150,"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-930 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-930 inet/filter/limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-930 -j logaccept-9 inet/filter/limit-930 -j TEE --gateway 10.0.0.1 inet/filter/limit-930 -j TEE --gateway 10.0.0.2 inet/filter/limit-930 -j DROP inet/filter/logaccept-9 -m limit --limit 1/second -j LOG inet/filter/logaccept-9 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-930 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-930 inet6/filter/limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-930 -j logaccept-9 inet6/filter/limit-930 -j TEE --gateway fc00::2 inet6/filter/limit-930 -j DROP inet6/filter/logaccept-9 -m limit --limit 1/second -j LOG inet6/filter/logaccept-9 -j ACCEPT Filter 932 {"conn-limit":{"count":150,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-931 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-931 inet/filter/limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-931 -j logaccept-10 inet/filter/limit-931 -j TEE --gateway 10.0.0.1 inet/filter/limit-931 -j TEE --gateway 10.0.0.2 inet/filter/limit-931 -j DROP inet/filter/logaccept-10 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-10 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-10 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-931 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-931 inet6/filter/limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-931 -j logaccept-10 inet6/filter/limit-931 -j TEE --gateway fc00::2 inet6/filter/limit-931 -j DROP inet6/filter/logaccept-10 -j TEE --gateway fc00::2 inet6/filter/logaccept-10 -j ACCEPT Filter 933 {"conn-limit":{"count":150,"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-932 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-932 inet/filter/limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-932 -j ACCEPT inet/filter/limit-932 -j TEE --gateway 10.0.0.1 inet/filter/limit-932 -j TEE --gateway 10.0.0.2 inet/filter/limit-932 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-932 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-932 inet6/filter/limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-932 -j ACCEPT inet6/filter/limit-932 -j TEE --gateway fc00::2 inet6/filter/limit-932 -j DROP Filter 934 {"conn-limit":{"count":150,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-933 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-933 inet/filter/limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-933 -j logaccept-11 inet/filter/limit-933 -j TEE --gateway 10.0.0.1 inet/filter/limit-933 -j TEE --gateway 10.0.0.2 inet/filter/limit-933 -j DROP inet/filter/logaccept-11 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-11 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-933 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-933 inet6/filter/limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-933 -j logaccept-11 inet6/filter/limit-933 -j TEE --gateway fc00::2 inet6/filter/limit-933 -j DROP inet6/filter/logaccept-11 -j ACCEPT Filter 935 {"conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-934 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-934 inet/filter/limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-934 -j ACCEPT inet/filter/limit-934 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-934 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-934 inet6/filter/limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-934 -j ACCEPT inet6/filter/limit-934 -j DROP Filter 936 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-935 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-935 inet/filter/limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-935 -j RETURN inet/filter/limit-935 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-935 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-935 inet6/filter/limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-935 -j RETURN inet6/filter/limit-935 -j DROP Filter 937 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-936 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-936 inet/filter/limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-936 -j logaccept-12 inet/filter/limit-936 -j DROP inet/filter/logaccept-12 -m limit --limit 1/second -j LOG inet/filter/logaccept-12 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-936 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-936 inet6/filter/limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-936 -j logaccept-12 inet6/filter/limit-936 -j DROP inet6/filter/logaccept-12 -m limit --limit 1/second -j LOG inet6/filter/logaccept-12 -j ACCEPT Filter 938 {"conn-limit":{"count":150,"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-937 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-937 inet/filter/limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-937 -j logaccept-13 inet/filter/limit-937 -j DROP inet/filter/logaccept-13 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-13 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-13 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-937 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-937 inet6/filter/limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-937 -j logaccept-13 inet6/filter/limit-937 -j DROP inet6/filter/logaccept-13 -j TEE --gateway fc00::2 inet6/filter/logaccept-13 -j ACCEPT Filter 939 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-938 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-938 inet/filter/limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-938 -j ACCEPT inet/filter/limit-938 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-938 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-938 inet6/filter/limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-938 -j ACCEPT inet6/filter/limit-938 -j DROP Filter 940 {"conn-limit":{"count":150,"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-939 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-939 inet/filter/limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-939 -j logaccept-14 inet/filter/limit-939 -j DROP inet/filter/logaccept-14 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-14 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-939 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-939 inet6/filter/limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-939 -j logaccept-14 inet6/filter/limit-939 -j DROP inet6/filter/logaccept-14 -j ACCEPT Filter 941 {"conn-limit":{"count":150,"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-940 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-940 inet/filter/limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-940 -j ACCEPT inet/filter/limit-940 -m limit --limit 12/minute -j ULOG inet/filter/limit-940 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-940 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-940 inet6/filter/limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-940 -j ACCEPT inet6/filter/limit-940 -j DROP Filter 942 {"action":"pass","conn-limit":{"count":150,"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-941 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-941 inet/filter/limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-941 -j RETURN inet/filter/limit-941 -m limit --limit 12/minute -j ULOG inet/filter/limit-941 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-941 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-941 inet6/filter/limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-941 -j RETURN inet6/filter/limit-941 -j DROP Filter 943 {"conn-limit":{"count":150,"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-942 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-942 inet/filter/limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-942 -j logaccept-15 inet/filter/limit-942 -m limit --limit 12/minute -j ULOG inet/filter/limit-942 -j DROP inet/filter/logaccept-15 -m limit --limit 1/second -j LOG inet/filter/logaccept-15 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-942 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-942 inet6/filter/limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-942 -j logaccept-15 inet6/filter/limit-942 -j DROP inet6/filter/logaccept-15 -m limit --limit 1/second -j LOG inet6/filter/logaccept-15 -j ACCEPT Filter 944 {"conn-limit":{"count":150,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-943 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-943 inet/filter/limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-943 -j logaccept-16 inet/filter/limit-943 -m limit --limit 12/minute -j ULOG inet/filter/limit-943 -j DROP inet/filter/logaccept-16 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-16 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-16 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-943 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-943 inet6/filter/limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-943 -j logaccept-16 inet6/filter/limit-943 -j DROP inet6/filter/logaccept-16 -j TEE --gateway fc00::2 inet6/filter/logaccept-16 -j ACCEPT Filter 945 {"conn-limit":{"count":150,"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-944 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-944 inet/filter/limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-944 -j ACCEPT inet/filter/limit-944 -m limit --limit 12/minute -j ULOG inet/filter/limit-944 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-944 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-944 inet6/filter/limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-944 -j ACCEPT inet6/filter/limit-944 -j DROP Filter 946 {"conn-limit":{"count":150,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-945 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-945 inet/filter/limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-945 -j logaccept-17 inet/filter/limit-945 -m limit --limit 12/minute -j ULOG inet/filter/limit-945 -j DROP inet/filter/logaccept-17 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-17 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-945 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-945 inet6/filter/limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-945 -j logaccept-17 inet6/filter/limit-945 -j DROP inet6/filter/logaccept-17 -j ACCEPT Filter 947 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-946 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-946 inet/filter/limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-946 -j ACCEPT inet/filter/limit-946 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-946 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-946 inet6/filter/limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-946 -j ACCEPT inet6/filter/limit-946 -j DROP Filter 948 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-947 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-947 inet/filter/limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-947 -j RETURN inet/filter/limit-947 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-947 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-947 inet6/filter/limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-947 -j RETURN inet6/filter/limit-947 -j DROP Filter 949 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-948 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-948 inet/filter/limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-948 -j logaccept-18 inet/filter/limit-948 -j DROP inet/filter/logaccept-18 -m limit --limit 1/second -j LOG inet/filter/logaccept-18 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-948 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-948 inet6/filter/limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-948 -j logaccept-18 inet6/filter/limit-948 -j DROP inet6/filter/logaccept-18 -m limit --limit 1/second -j LOG inet6/filter/logaccept-18 -j ACCEPT Filter 950 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-949 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-949 inet/filter/limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-949 -j logaccept-19 inet/filter/limit-949 -j DROP inet/filter/logaccept-19 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-19 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-19 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-949 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-949 inet6/filter/limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-949 -j logaccept-19 inet6/filter/limit-949 -j DROP inet6/filter/logaccept-19 -j TEE --gateway fc00::2 inet6/filter/logaccept-19 -j ACCEPT Filter 951 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-950 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-950 inet/filter/limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-950 -j ACCEPT inet/filter/limit-950 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-950 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-950 inet6/filter/limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-950 -j ACCEPT inet6/filter/limit-950 -j DROP Filter 952 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-951 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-951 inet/filter/limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-951 -j logaccept-20 inet/filter/limit-951 -j DROP inet/filter/logaccept-20 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-20 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-951 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-951 inet6/filter/limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-951 -j logaccept-20 inet6/filter/limit-951 -j DROP inet6/filter/logaccept-20 -j ACCEPT Filter 953 {"conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-952 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-952 inet/filter/limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-952 -j ACCEPT inet/filter/limit-952 -m limit --limit 1/second -j LOG inet/filter/limit-952 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-952 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-952 inet6/filter/limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-952 -j ACCEPT inet6/filter/limit-952 -m limit --limit 1/second -j LOG inet6/filter/limit-952 -j DROP Filter 954 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-953 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-953 inet/filter/limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-953 -j RETURN inet/filter/limit-953 -m limit --limit 1/second -j LOG inet/filter/limit-953 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-953 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-953 inet6/filter/limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-953 -j RETURN inet6/filter/limit-953 -m limit --limit 1/second -j LOG inet6/filter/limit-953 -j DROP Filter 955 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-954 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-954 inet/filter/limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-954 -j logaccept-21 inet/filter/limit-954 -m limit --limit 1/second -j LOG inet/filter/limit-954 -j DROP inet/filter/logaccept-21 -m limit --limit 1/second -j LOG inet/filter/logaccept-21 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-954 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-954 inet6/filter/limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-954 -j logaccept-21 inet6/filter/limit-954 -m limit --limit 1/second -j LOG inet6/filter/limit-954 -j DROP inet6/filter/logaccept-21 -m limit --limit 1/second -j LOG inet6/filter/logaccept-21 -j ACCEPT Filter 956 {"conn-limit":{"count":150,"interval":5},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-955 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-955 inet/filter/limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-955 -j logaccept-22 inet/filter/limit-955 -m limit --limit 1/second -j LOG inet/filter/limit-955 -j DROP inet/filter/logaccept-22 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-22 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-22 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-955 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-955 inet6/filter/limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-955 -j logaccept-22 inet6/filter/limit-955 -m limit --limit 1/second -j LOG inet6/filter/limit-955 -j DROP inet6/filter/logaccept-22 -j TEE --gateway fc00::2 inet6/filter/logaccept-22 -j ACCEPT Filter 957 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-956 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-956 inet/filter/limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-956 -j ACCEPT inet/filter/limit-956 -m limit --limit 1/second -j LOG inet/filter/limit-956 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-956 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-956 inet6/filter/limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-956 -j ACCEPT inet6/filter/limit-956 -m limit --limit 1/second -j LOG inet6/filter/limit-956 -j DROP Filter 958 {"conn-limit":{"count":150,"interval":5},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-957 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-957 inet/filter/limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-957 -j logaccept-23 inet/filter/limit-957 -m limit --limit 1/second -j LOG inet/filter/limit-957 -j DROP inet/filter/logaccept-23 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-23 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-957 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-957 inet6/filter/limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-957 -j logaccept-23 inet6/filter/limit-957 -m limit --limit 1/second -j LOG inet6/filter/limit-957 -j DROP inet6/filter/logaccept-23 -j ACCEPT Filter 959 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-958 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-958 inet/filter/limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-958 -j ACCEPT inet/filter/limit-958 -j TEE --gateway 10.0.0.1 inet/filter/limit-958 -j TEE --gateway 10.0.0.2 inet/filter/limit-958 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-958 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-958 inet6/filter/limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-958 -j ACCEPT inet6/filter/limit-958 -j TEE --gateway fc00::2 inet6/filter/limit-958 -j DROP Filter 960 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"mirror"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-959 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-959 inet/filter/limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-959 -j RETURN inet/filter/limit-959 -j TEE --gateway 10.0.0.1 inet/filter/limit-959 -j TEE --gateway 10.0.0.2 inet/filter/limit-959 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-959 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-959 inet6/filter/limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-959 -j RETURN inet6/filter/limit-959 -j TEE --gateway fc00::2 inet6/filter/limit-959 -j DROP Filter 961 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-960 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-960 inet/filter/limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-960 -j logaccept-24 inet/filter/limit-960 -j TEE --gateway 10.0.0.1 inet/filter/limit-960 -j TEE --gateway 10.0.0.2 inet/filter/limit-960 -j DROP inet/filter/logaccept-24 -m limit --limit 1/second -j LOG inet/filter/logaccept-24 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-960 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-960 inet6/filter/limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-960 -j logaccept-24 inet6/filter/limit-960 -j TEE --gateway fc00::2 inet6/filter/limit-960 -j DROP inet6/filter/logaccept-24 -m limit --limit 1/second -j LOG inet6/filter/logaccept-24 -j ACCEPT Filter 962 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-961 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-961 inet/filter/limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-961 -j logaccept-25 inet/filter/limit-961 -j TEE --gateway 10.0.0.1 inet/filter/limit-961 -j TEE --gateway 10.0.0.2 inet/filter/limit-961 -j DROP inet/filter/logaccept-25 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-25 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-25 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-961 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-961 inet6/filter/limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-961 -j logaccept-25 inet6/filter/limit-961 -j TEE --gateway fc00::2 inet6/filter/limit-961 -j DROP inet6/filter/logaccept-25 -j TEE --gateway fc00::2 inet6/filter/logaccept-25 -j ACCEPT Filter 963 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-962 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-962 inet/filter/limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-962 -j ACCEPT inet/filter/limit-962 -j TEE --gateway 10.0.0.1 inet/filter/limit-962 -j TEE --gateway 10.0.0.2 inet/filter/limit-962 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-962 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-962 inet6/filter/limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-962 -j ACCEPT inet6/filter/limit-962 -j TEE --gateway fc00::2 inet6/filter/limit-962 -j DROP Filter 964 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-963 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-963 inet/filter/limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-963 -j logaccept-26 inet/filter/limit-963 -j TEE --gateway 10.0.0.1 inet/filter/limit-963 -j TEE --gateway 10.0.0.2 inet/filter/limit-963 -j DROP inet/filter/logaccept-26 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-26 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-963 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-963 inet6/filter/limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-963 -j logaccept-26 inet6/filter/limit-963 -j TEE --gateway fc00::2 inet6/filter/limit-963 -j DROP inet6/filter/logaccept-26 -j ACCEPT Filter 965 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-964 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-964 inet/filter/limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-964 -j ACCEPT inet/filter/limit-964 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-964 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-964 inet6/filter/limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-964 -j ACCEPT inet6/filter/limit-964 -j DROP Filter 966 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-965 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-965 inet/filter/limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-965 -j RETURN inet/filter/limit-965 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-965 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-965 inet6/filter/limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-965 -j RETURN inet6/filter/limit-965 -j DROP Filter 967 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-966 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-966 inet/filter/limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-966 -j logaccept-27 inet/filter/limit-966 -j DROP inet/filter/logaccept-27 -m limit --limit 1/second -j LOG inet/filter/logaccept-27 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-966 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-966 inet6/filter/limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-966 -j logaccept-27 inet6/filter/limit-966 -j DROP inet6/filter/logaccept-27 -m limit --limit 1/second -j LOG inet6/filter/logaccept-27 -j ACCEPT Filter 968 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-967 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-967 inet/filter/limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-967 -j logaccept-28 inet/filter/limit-967 -j DROP inet/filter/logaccept-28 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-28 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-28 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-967 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-967 inet6/filter/limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-967 -j logaccept-28 inet6/filter/limit-967 -j DROP inet6/filter/logaccept-28 -j TEE --gateway fc00::2 inet6/filter/logaccept-28 -j ACCEPT Filter 969 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-968 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-968 inet/filter/limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-968 -j ACCEPT inet/filter/limit-968 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-968 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-968 inet6/filter/limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-968 -j ACCEPT inet6/filter/limit-968 -j DROP Filter 970 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-969 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-969 inet/filter/limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-969 -j logaccept-29 inet/filter/limit-969 -j DROP inet/filter/logaccept-29 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-29 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-969 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-969 inet6/filter/limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-969 -j logaccept-29 inet6/filter/limit-969 -j DROP inet6/filter/logaccept-29 -j ACCEPT Filter 971 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-970 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-970 inet/filter/limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-970 -j ACCEPT inet/filter/limit-970 -m limit --limit 12/minute -j ULOG inet/filter/limit-970 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-970 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-970 inet6/filter/limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-970 -j ACCEPT inet6/filter/limit-970 -j DROP Filter 972 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"ulog"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-971 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-971 inet/filter/limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-971 -j RETURN inet/filter/limit-971 -m limit --limit 12/minute -j ULOG inet/filter/limit-971 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-971 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-971 inet6/filter/limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-971 -j RETURN inet6/filter/limit-971 -j DROP Filter 973 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-972 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-972 inet/filter/limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-972 -j logaccept-30 inet/filter/limit-972 -m limit --limit 12/minute -j ULOG inet/filter/limit-972 -j DROP inet/filter/logaccept-30 -m limit --limit 1/second -j LOG inet/filter/logaccept-30 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-972 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-972 inet6/filter/limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-972 -j logaccept-30 inet6/filter/limit-972 -j DROP inet6/filter/logaccept-30 -m limit --limit 1/second -j LOG inet6/filter/logaccept-30 -j ACCEPT Filter 974 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"mirror","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-973 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-973 inet/filter/limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-973 -j logaccept-31 inet/filter/limit-973 -m limit --limit 12/minute -j ULOG inet/filter/limit-973 -j DROP inet/filter/logaccept-31 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-31 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-31 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-973 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-973 inet6/filter/limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-973 -j logaccept-31 inet6/filter/limit-973 -j DROP inet6/filter/logaccept-31 -j TEE --gateway fc00::2 inet6/filter/logaccept-31 -j ACCEPT Filter 975 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-974 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-974 inet/filter/limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-974 -j ACCEPT inet/filter/limit-974 -m limit --limit 12/minute -j ULOG inet/filter/limit-974 -j DROP inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-974 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-974 inet6/filter/limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-974 -j ACCEPT inet6/filter/limit-974 -j DROP Filter 976 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"log":"ulog","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-975 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-975 inet/filter/limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-975 -j logaccept-32 inet/filter/limit-975 -m limit --limit 12/minute -j ULOG inet/filter/limit-975 -j DROP inet/filter/logaccept-32 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-32 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-975 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-975 inet6/filter/limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-975 -j logaccept-32 inet6/filter/limit-975 -j DROP inet6/filter/logaccept-32 -j ACCEPT Filter 977 {"conn-limit":1,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-976 inet/filter/limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-550 inet/filter/limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-550 -m limit --limit 1/second -j LOG inet/filter/logdrop-550 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-976 inet6/filter/limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-550 inet6/filter/limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-550 -m limit --limit 1/second -j LOG inet6/filter/logdrop-550 -j DROP Filter 978 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-977 inet/filter/limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-551 inet/filter/limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-551 -m limit --limit 1/second -j LOG inet/filter/logdrop-551 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-977 inet6/filter/limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-551 inet6/filter/limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-551 -m limit --limit 1/second -j LOG inet6/filter/logdrop-551 -j DROP Filter 979 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-978 inet/filter/limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-552 inet/filter/limit-978 -m limit --limit 1/second -j LOG inet/filter/limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-552 -m limit --limit 1/second -j LOG inet/filter/logdrop-552 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-978 inet6/filter/limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-552 inet6/filter/limit-978 -m limit --limit 1/second -j LOG inet6/filter/limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-552 -m limit --limit 1/second -j LOG inet6/filter/logdrop-552 -j DROP Filter 980 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-979 inet/filter/limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-553 inet/filter/limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-553 -m limit --limit 1/second -j LOG inet/filter/logdrop-553 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-979 inet6/filter/limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-553 inet6/filter/limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-553 -m limit --limit 1/second -j LOG inet6/filter/logdrop-553 -j DROP Filter 981 {"conn-limit":1,"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-980 inet/filter/limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-554 inet/filter/limit-980 -j TEE --gateway 10.0.0.1 inet/filter/limit-980 -j TEE --gateway 10.0.0.2 inet/filter/limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-554 -m limit --limit 1/second -j LOG inet/filter/logdrop-554 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-980 inet6/filter/limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-554 inet6/filter/limit-980 -j TEE --gateway fc00::2 inet6/filter/limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-554 -m limit --limit 1/second -j LOG inet6/filter/logdrop-554 -j DROP Filter 982 {"action":"pass","conn-limit":1,"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-981 inet/filter/limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-555 inet/filter/limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-555 -m limit --limit 1/second -j LOG inet/filter/logdrop-555 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-981 inet6/filter/limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-555 inet6/filter/limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-555 -m limit --limit 1/second -j LOG inet6/filter/logdrop-555 -j DROP Filter 983 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-982 inet/filter/limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-556 inet/filter/limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-556 -m limit --limit 1/second -j LOG inet/filter/logdrop-556 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-982 inet6/filter/limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-556 inet6/filter/limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-556 -m limit --limit 1/second -j LOG inet6/filter/logdrop-556 -j DROP Filter 984 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-983 inet/filter/limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-557 inet/filter/limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-557 -m limit --limit 1/second -j LOG inet/filter/logdrop-557 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-983 inet6/filter/limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-557 inet6/filter/limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-557 -m limit --limit 1/second -j LOG inet6/filter/logdrop-557 -j DROP Filter 985 {"conn-limit":1,"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-984 inet/filter/limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-558 inet/filter/limit-984 -m limit --limit 12/minute -j ULOG inet/filter/limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-558 -m limit --limit 1/second -j LOG inet/filter/logdrop-558 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-984 inet6/filter/limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-558 inet6/filter/limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-558 -m limit --limit 1/second -j LOG inet6/filter/logdrop-558 -j DROP Filter 986 {"action":"pass","conn-limit":1,"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-985 inet/filter/limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-559 inet/filter/limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-559 -m limit --limit 1/second -j LOG inet/filter/logdrop-559 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-985 inet6/filter/limit-985 -m recent --name limit-985 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-559 inet6/filter/logdrop-559 -m limit --limit 1/second -j LOG inet6/filter/logdrop-559 -j DROP Filter 987 {"conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-986 inet/filter/limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-986 inet6/filter/limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 988 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-987 inet/filter/limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-987 inet6/filter/limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 989 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-988 inet/filter/limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-988 -m limit --limit 1/second -j LOG inet/filter/limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-988 inet6/filter/limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-988 -m limit --limit 1/second -j LOG inet6/filter/limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 990 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-989 inet/filter/limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-989 inet6/filter/limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 991 {"conn-limit":{"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-990 inet/filter/limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-990 -j TEE --gateway 10.0.0.1 inet/filter/limit-990 -j TEE --gateway 10.0.0.2 inet/filter/limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-990 inet6/filter/limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-990 -j TEE --gateway fc00::2 inet6/filter/limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 992 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-991 inet/filter/limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-991 inet6/filter/limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 993 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-992 inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-992 inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 994 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-993 inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-993 inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 995 {"conn-limit":{"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-994 inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-994 -m limit --limit 12/minute -j ULOG inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-994 inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 996 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-995 inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-995 inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 997 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-996 inet/filter/limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-996 inet6/filter/limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 998 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-997 inet/filter/limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-997 inet6/filter/limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 999 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-998 inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-998 -m limit --limit 1/second -j LOG inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-998 inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-998 -m limit --limit 1/second -j LOG inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1000 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-999 inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-999 inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1001 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1000 inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1000 -j TEE --gateway 10.0.0.1 inet/filter/limit-1000 -j TEE --gateway 10.0.0.2 inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1000 inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1000 -j TEE --gateway fc00::2 inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1002 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1001 inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1001 inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1003 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1002 inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1002 inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1004 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1003 inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1003 inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1005 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1004 inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1004 -m limit --limit 12/minute -j ULOG inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1004 inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1006 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1005 inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1005 inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1007 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1006 inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1006 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1006 inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1006 -j ACCEPT Filter 1008 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1009 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1008 inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1008 -m limit --limit 1/second -j LOG inet/filter/limit-1008 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1008 inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1008 -m limit --limit 1/second -j LOG inet6/filter/limit-1008 -j ACCEPT Filter 1010 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1009 inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1009 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1009 inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1009 -m limit --limit 1/second -j LOG Filter 1011 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1010 inet/filter/limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1010 -j TEE --gateway 10.0.0.1 inet/filter/limit-1010 -j TEE --gateway 10.0.0.2 inet/filter/limit-1010 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1010 inet6/filter/limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1010 -j TEE --gateway fc00::2 inet6/filter/limit-1010 -j ACCEPT Filter 1012 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1011 inet/filter/limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1011 -j TEE --gateway 10.0.0.1 inet/filter/limit-1011 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1011 inet6/filter/limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1011 -j TEE --gateway fc00::2 Filter 1013 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1012 inet/filter/limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1012 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1012 inet6/filter/limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1012 -j ACCEPT Filter 1014 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1015 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1014 inet/filter/limit-1014 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1014 -m limit --limit 12/minute -j ULOG inet/filter/limit-1014 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1014 inet6/filter/limit-1014 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1014 -j ACCEPT Filter 1016 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1015 inet/filter/limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1015 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1015 inet6/filter/limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1017 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1016 inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1016 inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1018 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1017 inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1017 inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1019 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1018 inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1018 -m limit --limit 1/second -j LOG inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1018 inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1018 -m limit --limit 1/second -j LOG inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1020 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1019 inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1019 inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1021 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1020 inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1020 -j TEE --gateway 10.0.0.1 inet/filter/limit-1020 -j TEE --gateway 10.0.0.2 inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1020 inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1020 -j TEE --gateway fc00::2 inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1022 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1021 inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1021 inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1023 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1022 inet/filter/limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1022 inet6/filter/limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1024 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1023 inet/filter/limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1023 inet6/filter/limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1025 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1024 inet/filter/limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1024 -m limit --limit 12/minute -j ULOG inet/filter/limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1024 inet6/filter/limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1026 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1025 inet/filter/limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1025 inet6/filter/limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1027 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1026 inet/filter/limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1026 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1026 inet6/filter/limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1026 -j ACCEPT Filter 1028 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1029 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1028 inet/filter/limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1028 -m limit --limit 1/second -j LOG inet/filter/limit-1028 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1028 inet6/filter/limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1028 -m limit --limit 1/second -j LOG inet6/filter/limit-1028 -j ACCEPT Filter 1030 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1029 inet/filter/limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1029 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1029 inet6/filter/limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1029 -m limit --limit 1/second -j LOG Filter 1031 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1030 inet/filter/limit-1030 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1030 -j TEE --gateway 10.0.0.1 inet/filter/limit-1030 -j TEE --gateway 10.0.0.2 inet/filter/limit-1030 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1030 inet6/filter/limit-1030 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1030 -j TEE --gateway fc00::2 inet6/filter/limit-1030 -j ACCEPT Filter 1032 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1031 inet/filter/limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1031 -j TEE --gateway 10.0.0.1 inet/filter/limit-1031 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1031 inet6/filter/limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1031 -j TEE --gateway fc00::2 Filter 1033 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1032 inet/filter/limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1032 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1032 inet6/filter/limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1032 -j ACCEPT Filter 1034 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1035 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1034 inet/filter/limit-1034 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1034 -m limit --limit 12/minute -j ULOG inet/filter/limit-1034 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1034 inet6/filter/limit-1034 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1034 -j ACCEPT Filter 1036 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1035 inet/filter/limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1035 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1035 inet6/filter/limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1037 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1036 inet/filter/limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1036 inet6/filter/limit-1036 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1036 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1038 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1037 inet/filter/limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1037 inet6/filter/limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1037 -m recent --name user:C --rsource --mask fe00:: --set Filter 1039 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1038 inet/filter/limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1038 -m limit --limit 1/second -j LOG inet/filter/limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1038 inet6/filter/limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1038 -m limit --limit 1/second -j LOG inet6/filter/limit-1038 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1040 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1039 inet/filter/limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1039 inet6/filter/limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1041 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1040 inet/filter/limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1040 -j TEE --gateway 10.0.0.1 inet/filter/limit-1040 -j TEE --gateway 10.0.0.2 inet/filter/limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1040 inet6/filter/limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1040 -j TEE --gateway fc00::2 inet6/filter/limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1042 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1041 inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1041 inet6/filter/limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1043 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1042 inet/filter/limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1042 inet6/filter/limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1042 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1044 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1043 inet/filter/limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1043 inet6/filter/limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1043 -m recent --name user:C --rsource --mask fe00:: --set Filter 1045 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1044 inet/filter/limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1044 -m limit --limit 12/minute -j ULOG inet/filter/limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1044 inet6/filter/limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1044 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1046 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1045 inet/filter/limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1045 inet6/filter/limit-1045 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 1047 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1046 inet/filter/limit-1046 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1046 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1046 inet6/filter/limit-1046 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1046 -j ACCEPT Filter 1048 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1049 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1048 inet/filter/limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1048 -m limit --limit 1/second -j LOG inet/filter/limit-1048 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1048 inet6/filter/limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1048 -m limit --limit 1/second -j LOG inet6/filter/limit-1048 -j ACCEPT Filter 1050 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1049 inet/filter/limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1049 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1049 inet6/filter/limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1049 -m limit --limit 1/second -j LOG Filter 1051 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1050 inet/filter/limit-1050 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1050 -j TEE --gateway 10.0.0.1 inet/filter/limit-1050 -j TEE --gateway 10.0.0.2 inet/filter/limit-1050 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1050 inet6/filter/limit-1050 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1050 -j TEE --gateway fc00::2 inet6/filter/limit-1050 -j ACCEPT Filter 1052 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1051 inet/filter/limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1051 -j TEE --gateway 10.0.0.1 inet/filter/limit-1051 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1051 inet6/filter/limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1051 -j TEE --gateway fc00::2 Filter 1053 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1052 inet/filter/limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1052 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1052 inet6/filter/limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1052 -j ACCEPT Filter 1054 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1055 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1054 inet/filter/limit-1054 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1054 -m limit --limit 12/minute -j ULOG inet/filter/limit-1054 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1054 inet6/filter/limit-1054 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1054 -j ACCEPT Filter 1056 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1055 inet/filter/limit-1055 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1055 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1055 inet6/filter/limit-1055 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1057 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1056 inet/filter/limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1056 inet6/filter/limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1058 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1057 inet/filter/limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1057 inet6/filter/limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1057 -m recent --name user:C --rdest --mask fe00:: --set Filter 1059 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1058 inet/filter/limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1058 -m limit --limit 1/second -j LOG inet/filter/limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1058 inet6/filter/limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1058 -m limit --limit 1/second -j LOG inet6/filter/limit-1058 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1060 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1059 inet/filter/limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1059 inet6/filter/limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1061 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1060 inet/filter/limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1060 -j TEE --gateway 10.0.0.1 inet/filter/limit-1060 -j TEE --gateway 10.0.0.2 inet/filter/limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1060 inet6/filter/limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1060 -j TEE --gateway fc00::2 inet6/filter/limit-1060 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1062 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1061 inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1061 inet6/filter/limit-1061 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1061 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1063 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1062 inet/filter/limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1062 inet6/filter/limit-1062 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1062 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1064 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1063 inet/filter/limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1063 inet6/filter/limit-1063 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1063 -m recent --name user:C --rdest --mask fe00:: --set Filter 1065 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1064 inet/filter/limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1064 -m limit --limit 12/minute -j ULOG inet/filter/limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1064 inet6/filter/limit-1064 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1064 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1066 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1065 inet/filter/limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1065 inet6/filter/limit-1065 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 1067 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1066 inet/filter/limit-1066 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1066 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1066 inet6/filter/limit-1066 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1066 -j ACCEPT Filter 1068 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1069 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1068 inet/filter/limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1068 -m limit --limit 1/second -j LOG inet/filter/limit-1068 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1068 inet6/filter/limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1068 -m limit --limit 1/second -j LOG inet6/filter/limit-1068 -j ACCEPT Filter 1070 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1069 inet/filter/limit-1069 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1069 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1069 inet6/filter/limit-1069 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1069 -m limit --limit 1/second -j LOG Filter 1071 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1070 inet/filter/limit-1070 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1070 -j TEE --gateway 10.0.0.1 inet/filter/limit-1070 -j TEE --gateway 10.0.0.2 inet/filter/limit-1070 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1070 inet6/filter/limit-1070 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1070 -j TEE --gateway fc00::2 inet6/filter/limit-1070 -j ACCEPT Filter 1072 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1071 inet/filter/limit-1071 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1071 -j TEE --gateway 10.0.0.1 inet/filter/limit-1071 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1071 inet6/filter/limit-1071 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1071 -j TEE --gateway fc00::2 Filter 1073 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1072 inet/filter/limit-1072 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1072 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1072 inet6/filter/limit-1072 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1072 -j ACCEPT Filter 1074 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1075 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1074 inet/filter/limit-1074 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1074 -m limit --limit 12/minute -j ULOG inet/filter/limit-1074 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1074 inet6/filter/limit-1074 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1074 -j ACCEPT Filter 1076 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1075 inet/filter/limit-1075 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1075 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1075 inet6/filter/limit-1075 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1077 {"conn-limit":{},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1076 inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-560 inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-560 -m limit --limit 1/second -j LOG inet/filter/logdrop-560 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1076 inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-560 inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-560 -m limit --limit 1/second -j LOG inet6/filter/logdrop-560 -j DROP Filter 1078 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1077 inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-561 inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-561 -m limit --limit 1/second -j LOG inet/filter/logdrop-561 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1077 inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-561 inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-561 -m limit --limit 1/second -j LOG inet6/filter/logdrop-561 -j DROP Filter 1079 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1078 inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-562 inet/filter/limit-1078 -m limit --limit 1/second -j LOG inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-562 -m limit --limit 1/second -j LOG inet/filter/logdrop-562 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1078 inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-562 inet6/filter/limit-1078 -m limit --limit 1/second -j LOG inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-562 -m limit --limit 1/second -j LOG inet6/filter/logdrop-562 -j DROP Filter 1080 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1079 inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-563 inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-563 -m limit --limit 1/second -j LOG inet/filter/logdrop-563 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1079 inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-563 inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-563 -m limit --limit 1/second -j LOG inet6/filter/logdrop-563 -j DROP Filter 1081 {"conn-limit":{},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1080 inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-564 inet/filter/limit-1080 -j TEE --gateway 10.0.0.1 inet/filter/limit-1080 -j TEE --gateway 10.0.0.2 inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-564 -m limit --limit 1/second -j LOG inet/filter/logdrop-564 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1080 inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-564 inet6/filter/limit-1080 -j TEE --gateway fc00::2 inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-564 -m limit --limit 1/second -j LOG inet6/filter/logdrop-564 -j DROP Filter 1082 {"action":"pass","conn-limit":{},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1081 inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-565 inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-565 -m limit --limit 1/second -j LOG inet/filter/logdrop-565 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1081 inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-565 inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-565 -m limit --limit 1/second -j LOG inet6/filter/logdrop-565 -j DROP Filter 1083 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1082 inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-566 inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-566 -m limit --limit 1/second -j LOG inet/filter/logdrop-566 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1082 inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-566 inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-566 -m limit --limit 1/second -j LOG inet6/filter/logdrop-566 -j DROP Filter 1084 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1083 inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-567 inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-567 -m limit --limit 1/second -j LOG inet/filter/logdrop-567 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1083 inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-567 inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-567 -m limit --limit 1/second -j LOG inet6/filter/logdrop-567 -j DROP Filter 1085 {"conn-limit":{},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1084 inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-568 inet/filter/limit-1084 -m limit --limit 12/minute -j ULOG inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-568 -m limit --limit 1/second -j LOG inet/filter/logdrop-568 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1084 inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-568 inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-568 -m limit --limit 1/second -j LOG inet6/filter/logdrop-568 -j DROP Filter 1086 {"action":"pass","conn-limit":{},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1085 inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-569 inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-569 -m limit --limit 1/second -j LOG inet/filter/logdrop-569 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1085 inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-569 inet6/filter/logdrop-569 -m limit --limit 1/second -j LOG inet6/filter/logdrop-569 -j DROP Filter 1087 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1086 inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-570 inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-570 -m limit --limit 1/second -j LOG inet/filter/logdrop-570 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1086 inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-570 inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-570 -m limit --limit 1/second -j LOG inet6/filter/logdrop-570 -j DROP Filter 1088 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1087 inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-571 inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-571 -m limit --limit 1/second -j LOG inet/filter/logdrop-571 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1087 inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-571 inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-571 -m limit --limit 1/second -j LOG inet6/filter/logdrop-571 -j DROP Filter 1089 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1088 inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-572 inet/filter/limit-1088 -m limit --limit 1/second -j LOG inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-572 -m limit --limit 1/second -j LOG inet/filter/logdrop-572 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1088 inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-572 inet6/filter/limit-1088 -m limit --limit 1/second -j LOG inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-572 -m limit --limit 1/second -j LOG inet6/filter/logdrop-572 -j DROP Filter 1090 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1089 inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-573 inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-573 -m limit --limit 1/second -j LOG inet/filter/logdrop-573 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1089 inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-573 inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-573 -m limit --limit 1/second -j LOG inet6/filter/logdrop-573 -j DROP Filter 1091 {"conn-limit":{"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1090 inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-574 inet/filter/limit-1090 -j TEE --gateway 10.0.0.1 inet/filter/limit-1090 -j TEE --gateway 10.0.0.2 inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-574 -m limit --limit 1/second -j LOG inet/filter/logdrop-574 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1090 inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-574 inet6/filter/limit-1090 -j TEE --gateway fc00::2 inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-574 -m limit --limit 1/second -j LOG inet6/filter/logdrop-574 -j DROP Filter 1092 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1091 inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-575 inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-575 -m limit --limit 1/second -j LOG inet/filter/logdrop-575 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1091 inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-575 inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-575 -m limit --limit 1/second -j LOG inet6/filter/logdrop-575 -j DROP Filter 1093 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1092 inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-576 inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-576 -m limit --limit 1/second -j LOG inet/filter/logdrop-576 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1092 inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-576 inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-576 -m limit --limit 1/second -j LOG inet6/filter/logdrop-576 -j DROP Filter 1094 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1093 inet/filter/limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-577 inet/filter/limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-577 -m limit --limit 1/second -j LOG inet/filter/logdrop-577 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1093 inet6/filter/limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-577 inet6/filter/limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-577 -m limit --limit 1/second -j LOG inet6/filter/logdrop-577 -j DROP Filter 1095 {"conn-limit":{"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1094 inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-578 inet/filter/limit-1094 -m limit --limit 12/minute -j ULOG inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-578 -m limit --limit 1/second -j LOG inet/filter/logdrop-578 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1094 inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-578 inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-578 -m limit --limit 1/second -j LOG inet6/filter/logdrop-578 -j DROP Filter 1096 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1095 inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-579 inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-579 -m limit --limit 1/second -j LOG inet/filter/logdrop-579 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1095 inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-579 inet6/filter/logdrop-579 -m limit --limit 1/second -j LOG inet6/filter/logdrop-579 -j DROP Filter 1097 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1096 inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-580 inet/filter/limit-1096 -j ACCEPT inet/filter/logdrop-580 -m limit --limit 1/second -j LOG inet/filter/logdrop-580 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1096 inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-580 inet6/filter/limit-1096 -j ACCEPT inet6/filter/logdrop-580 -m limit --limit 1/second -j LOG inet6/filter/logdrop-580 -j DROP Filter 1098 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-581 inet/filter/logdrop-581 -m limit --limit 1/second -j LOG inet/filter/logdrop-581 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-581 inet6/filter/logdrop-581 -m limit --limit 1/second -j LOG inet6/filter/logdrop-581 -j DROP Filter 1099 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1098 inet/filter/limit-1098 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-582 inet/filter/limit-1098 -m limit --limit 1/second -j LOG inet/filter/limit-1098 -j ACCEPT inet/filter/logdrop-582 -m limit --limit 1/second -j LOG inet/filter/logdrop-582 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1098 inet6/filter/limit-1098 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-582 inet6/filter/limit-1098 -m limit --limit 1/second -j LOG inet6/filter/limit-1098 -j ACCEPT inet6/filter/logdrop-582 -m limit --limit 1/second -j LOG inet6/filter/logdrop-582 -j DROP Filter 1100 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1099 inet/filter/limit-1099 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-583 inet/filter/limit-1099 -m limit --limit 1/second -j LOG inet/filter/logdrop-583 -m limit --limit 1/second -j LOG inet/filter/logdrop-583 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1099 inet6/filter/limit-1099 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-583 inet6/filter/limit-1099 -m limit --limit 1/second -j LOG inet6/filter/logdrop-583 -m limit --limit 1/second -j LOG inet6/filter/logdrop-583 -j DROP Filter 1101 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1100 inet/filter/limit-1100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-584 inet/filter/limit-1100 -j TEE --gateway 10.0.0.1 inet/filter/limit-1100 -j TEE --gateway 10.0.0.2 inet/filter/limit-1100 -j ACCEPT inet/filter/logdrop-584 -m limit --limit 1/second -j LOG inet/filter/logdrop-584 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1100 inet6/filter/limit-1100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-584 inet6/filter/limit-1100 -j TEE --gateway fc00::2 inet6/filter/limit-1100 -j ACCEPT inet6/filter/logdrop-584 -m limit --limit 1/second -j LOG inet6/filter/logdrop-584 -j DROP Filter 1102 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1101 inet/filter/limit-1101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-585 inet/filter/limit-1101 -j TEE --gateway 10.0.0.1 inet/filter/limit-1101 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-585 -m limit --limit 1/second -j LOG inet/filter/logdrop-585 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1101 inet6/filter/limit-1101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-585 inet6/filter/limit-1101 -j TEE --gateway fc00::2 inet6/filter/logdrop-585 -m limit --limit 1/second -j LOG inet6/filter/logdrop-585 -j DROP Filter 1103 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1102 inet/filter/limit-1102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-586 inet/filter/limit-1102 -j ACCEPT inet/filter/logdrop-586 -m limit --limit 1/second -j LOG inet/filter/logdrop-586 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1102 inet6/filter/limit-1102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-586 inet6/filter/limit-1102 -j ACCEPT inet6/filter/logdrop-586 -m limit --limit 1/second -j LOG inet6/filter/logdrop-586 -j DROP Filter 1104 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-587 inet/filter/logdrop-587 -m limit --limit 1/second -j LOG inet/filter/logdrop-587 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-587 inet6/filter/logdrop-587 -m limit --limit 1/second -j LOG inet6/filter/logdrop-587 -j DROP Filter 1105 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1104 inet/filter/limit-1104 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-588 inet/filter/limit-1104 -m limit --limit 12/minute -j ULOG inet/filter/limit-1104 -j ACCEPT inet/filter/logdrop-588 -m limit --limit 1/second -j LOG inet/filter/logdrop-588 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1104 inet6/filter/limit-1104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-588 inet6/filter/limit-1104 -j ACCEPT inet6/filter/logdrop-588 -m limit --limit 1/second -j LOG inet6/filter/logdrop-588 -j DROP Filter 1106 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1105 inet/filter/limit-1105 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-589 inet/filter/limit-1105 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-589 -m limit --limit 1/second -j LOG inet/filter/logdrop-589 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1105 inet6/filter/limit-1105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-589 inet6/filter/logdrop-589 -m limit --limit 1/second -j LOG inet6/filter/logdrop-589 -j DROP Filter 1107 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1106 inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-590 inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-590 -m limit --limit 1/second -j LOG inet/filter/logdrop-590 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1106 inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-590 inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-590 -m limit --limit 1/second -j LOG inet6/filter/logdrop-590 -j DROP Filter 1108 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1107 inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-591 inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-591 -m limit --limit 1/second -j LOG inet/filter/logdrop-591 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1107 inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-591 inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-591 -m limit --limit 1/second -j LOG inet6/filter/logdrop-591 -j DROP Filter 1109 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1108 inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 inet/filter/limit-1108 -m limit --limit 1/second -j LOG inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-592 -m limit --limit 1/second -j LOG inet/filter/logdrop-592 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1108 inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 inet6/filter/limit-1108 -m limit --limit 1/second -j LOG inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-592 -m limit --limit 1/second -j LOG inet6/filter/logdrop-592 -j DROP Filter 1110 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1109 inet/filter/limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 inet/filter/limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-593 -m limit --limit 1/second -j LOG inet/filter/logdrop-593 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1109 inet6/filter/limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 inet6/filter/limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-593 -m limit --limit 1/second -j LOG inet6/filter/logdrop-593 -j DROP Filter 1111 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1110 inet/filter/limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 inet/filter/limit-1110 -j TEE --gateway 10.0.0.1 inet/filter/limit-1110 -j TEE --gateway 10.0.0.2 inet/filter/limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-594 -m limit --limit 1/second -j LOG inet/filter/logdrop-594 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1110 inet6/filter/limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 inet6/filter/limit-1110 -j TEE --gateway fc00::2 inet6/filter/limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-594 -m limit --limit 1/second -j LOG inet6/filter/logdrop-594 -j DROP Filter 1112 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1111 inet/filter/limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 inet/filter/limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-595 -m limit --limit 1/second -j LOG inet/filter/logdrop-595 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1111 inet6/filter/limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 inet6/filter/limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-595 -m limit --limit 1/second -j LOG inet6/filter/logdrop-595 -j DROP Filter 1113 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1112 inet/filter/limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 inet/filter/limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-596 -m limit --limit 1/second -j LOG inet/filter/logdrop-596 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1112 inet6/filter/limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 inet6/filter/limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-596 -m limit --limit 1/second -j LOG inet6/filter/logdrop-596 -j DROP Filter 1114 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1113 inet/filter/limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 inet/filter/limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-597 -m limit --limit 1/second -j LOG inet/filter/logdrop-597 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1113 inet6/filter/limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 inet6/filter/limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-597 -m limit --limit 1/second -j LOG inet6/filter/logdrop-597 -j DROP Filter 1115 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1114 inet/filter/limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 inet/filter/limit-1114 -m limit --limit 12/minute -j ULOG inet/filter/limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-598 -m limit --limit 1/second -j LOG inet/filter/logdrop-598 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1114 inet6/filter/limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 inet6/filter/limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-598 -m limit --limit 1/second -j LOG inet6/filter/logdrop-598 -j DROP Filter 1116 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1115 inet/filter/limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 inet/filter/limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-599 -m limit --limit 1/second -j LOG inet/filter/logdrop-599 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1115 inet6/filter/limit-1115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 inet6/filter/logdrop-599 -m limit --limit 1/second -j LOG inet6/filter/logdrop-599 -j DROP Filter 1117 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1116 inet/filter/limit-1116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-600 inet/filter/limit-1116 -j ACCEPT inet/filter/logdrop-600 -m limit --limit 1/second -j LOG inet/filter/logdrop-600 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1116 inet6/filter/limit-1116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-600 inet6/filter/limit-1116 -j ACCEPT inet6/filter/logdrop-600 -m limit --limit 1/second -j LOG inet6/filter/logdrop-600 -j DROP Filter 1118 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-601 inet/filter/logdrop-601 -m limit --limit 1/second -j LOG inet/filter/logdrop-601 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-601 inet6/filter/logdrop-601 -m limit --limit 1/second -j LOG inet6/filter/logdrop-601 -j DROP Filter 1119 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1118 inet/filter/limit-1118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-602 inet/filter/limit-1118 -m limit --limit 1/second -j LOG inet/filter/limit-1118 -j ACCEPT inet/filter/logdrop-602 -m limit --limit 1/second -j LOG inet/filter/logdrop-602 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1118 inet6/filter/limit-1118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-602 inet6/filter/limit-1118 -m limit --limit 1/second -j LOG inet6/filter/limit-1118 -j ACCEPT inet6/filter/logdrop-602 -m limit --limit 1/second -j LOG inet6/filter/logdrop-602 -j DROP Filter 1120 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1119 inet/filter/limit-1119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-603 inet/filter/limit-1119 -m limit --limit 1/second -j LOG inet/filter/logdrop-603 -m limit --limit 1/second -j LOG inet/filter/logdrop-603 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1119 inet6/filter/limit-1119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-603 inet6/filter/limit-1119 -m limit --limit 1/second -j LOG inet6/filter/logdrop-603 -m limit --limit 1/second -j LOG inet6/filter/logdrop-603 -j DROP Filter 1121 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1120 inet/filter/limit-1120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-604 inet/filter/limit-1120 -j TEE --gateway 10.0.0.1 inet/filter/limit-1120 -j TEE --gateway 10.0.0.2 inet/filter/limit-1120 -j ACCEPT inet/filter/logdrop-604 -m limit --limit 1/second -j LOG inet/filter/logdrop-604 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1120 inet6/filter/limit-1120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-604 inet6/filter/limit-1120 -j TEE --gateway fc00::2 inet6/filter/limit-1120 -j ACCEPT inet6/filter/logdrop-604 -m limit --limit 1/second -j LOG inet6/filter/logdrop-604 -j DROP Filter 1122 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1121 inet/filter/limit-1121 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-605 inet/filter/limit-1121 -j TEE --gateway 10.0.0.1 inet/filter/limit-1121 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-605 -m limit --limit 1/second -j LOG inet/filter/logdrop-605 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1121 inet6/filter/limit-1121 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-605 inet6/filter/limit-1121 -j TEE --gateway fc00::2 inet6/filter/logdrop-605 -m limit --limit 1/second -j LOG inet6/filter/logdrop-605 -j DROP Filter 1123 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1122 inet/filter/limit-1122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-606 inet/filter/limit-1122 -j ACCEPT inet/filter/logdrop-606 -m limit --limit 1/second -j LOG inet/filter/logdrop-606 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1122 inet6/filter/limit-1122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-606 inet6/filter/limit-1122 -j ACCEPT inet6/filter/logdrop-606 -m limit --limit 1/second -j LOG inet6/filter/logdrop-606 -j DROP Filter 1124 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-607 inet/filter/logdrop-607 -m limit --limit 1/second -j LOG inet/filter/logdrop-607 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-607 inet6/filter/logdrop-607 -m limit --limit 1/second -j LOG inet6/filter/logdrop-607 -j DROP Filter 1125 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1124 inet/filter/limit-1124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-608 inet/filter/limit-1124 -m limit --limit 12/minute -j ULOG inet/filter/limit-1124 -j ACCEPT inet/filter/logdrop-608 -m limit --limit 1/second -j LOG inet/filter/logdrop-608 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1124 inet6/filter/limit-1124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-608 inet6/filter/limit-1124 -j ACCEPT inet6/filter/logdrop-608 -m limit --limit 1/second -j LOG inet6/filter/logdrop-608 -j DROP Filter 1126 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1125 inet/filter/limit-1125 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-609 inet/filter/limit-1125 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-609 -m limit --limit 1/second -j LOG inet/filter/logdrop-609 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1125 inet6/filter/limit-1125 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-609 inet6/filter/logdrop-609 -m limit --limit 1/second -j LOG inet6/filter/logdrop-609 -j DROP Filter 1127 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1126 inet/filter/limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-610 inet/filter/limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-610 -m limit --limit 1/second -j LOG inet/filter/logdrop-610 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1126 inet6/filter/limit-1126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-610 inet6/filter/limit-1126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-610 -m limit --limit 1/second -j LOG inet6/filter/logdrop-610 -j DROP Filter 1128 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1127 inet/filter/limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-611 inet/filter/limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-611 -m limit --limit 1/second -j LOG inet/filter/logdrop-611 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1127 inet6/filter/limit-1127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-611 inet6/filter/limit-1127 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-611 -m limit --limit 1/second -j LOG inet6/filter/logdrop-611 -j DROP Filter 1129 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1128 inet/filter/limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-612 inet/filter/limit-1128 -m limit --limit 1/second -j LOG inet/filter/limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-612 -m limit --limit 1/second -j LOG inet/filter/logdrop-612 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1128 inet6/filter/limit-1128 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-612 inet6/filter/limit-1128 -m limit --limit 1/second -j LOG inet6/filter/limit-1128 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-612 -m limit --limit 1/second -j LOG inet6/filter/logdrop-612 -j DROP Filter 1130 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1129 inet/filter/limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-613 inet/filter/limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-613 -m limit --limit 1/second -j LOG inet/filter/logdrop-613 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1129 inet6/filter/limit-1129 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-613 inet6/filter/limit-1129 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-613 -m limit --limit 1/second -j LOG inet6/filter/logdrop-613 -j DROP Filter 1131 {"conn-limit":{"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1130 inet/filter/limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-614 inet/filter/limit-1130 -j TEE --gateway 10.0.0.1 inet/filter/limit-1130 -j TEE --gateway 10.0.0.2 inet/filter/limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-614 -m limit --limit 1/second -j LOG inet/filter/logdrop-614 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1130 inet6/filter/limit-1130 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-614 inet6/filter/limit-1130 -j TEE --gateway fc00::2 inet6/filter/limit-1130 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-614 -m limit --limit 1/second -j LOG inet6/filter/logdrop-614 -j DROP Filter 1132 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1131 inet/filter/limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-615 inet/filter/limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-615 -m limit --limit 1/second -j LOG inet/filter/logdrop-615 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1131 inet6/filter/limit-1131 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-615 inet6/filter/limit-1131 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-615 -m limit --limit 1/second -j LOG inet6/filter/logdrop-615 -j DROP Filter 1133 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1132 inet/filter/limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-616 inet/filter/limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-616 -m limit --limit 1/second -j LOG inet/filter/logdrop-616 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1132 inet6/filter/limit-1132 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-616 inet6/filter/limit-1132 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-616 -m limit --limit 1/second -j LOG inet6/filter/logdrop-616 -j DROP Filter 1134 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1133 inet/filter/limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-617 inet/filter/limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-617 -m limit --limit 1/second -j LOG inet/filter/logdrop-617 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1133 inet6/filter/limit-1133 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-617 inet6/filter/limit-1133 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-617 -m limit --limit 1/second -j LOG inet6/filter/logdrop-617 -j DROP Filter 1135 {"conn-limit":{"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1134 inet/filter/limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-618 inet/filter/limit-1134 -m limit --limit 12/minute -j ULOG inet/filter/limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-618 -m limit --limit 1/second -j LOG inet/filter/logdrop-618 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1134 inet6/filter/limit-1134 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-618 inet6/filter/limit-1134 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-618 -m limit --limit 1/second -j LOG inet6/filter/logdrop-618 -j DROP Filter 1136 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1135 inet/filter/limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-619 inet/filter/limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-619 -m limit --limit 1/second -j LOG inet/filter/logdrop-619 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1135 inet6/filter/limit-1135 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-619 inet6/filter/logdrop-619 -m limit --limit 1/second -j LOG inet6/filter/logdrop-619 -j DROP Filter 1137 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1136 inet/filter/limit-1136 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 inet/filter/limit-1136 -j ACCEPT inet/filter/logdrop-620 -m limit --limit 1/second -j LOG inet/filter/logdrop-620 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1136 inet6/filter/limit-1136 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-620 inet6/filter/limit-1136 -j ACCEPT inet6/filter/logdrop-620 -m limit --limit 1/second -j LOG inet6/filter/logdrop-620 -j DROP Filter 1138 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 inet/filter/logdrop-621 -m limit --limit 1/second -j LOG inet/filter/logdrop-621 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-621 inet6/filter/logdrop-621 -m limit --limit 1/second -j LOG inet6/filter/logdrop-621 -j DROP Filter 1139 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1138 inet/filter/limit-1138 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 inet/filter/limit-1138 -m limit --limit 1/second -j LOG inet/filter/limit-1138 -j ACCEPT inet/filter/logdrop-622 -m limit --limit 1/second -j LOG inet/filter/logdrop-622 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1138 inet6/filter/limit-1138 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-622 inet6/filter/limit-1138 -m limit --limit 1/second -j LOG inet6/filter/limit-1138 -j ACCEPT inet6/filter/logdrop-622 -m limit --limit 1/second -j LOG inet6/filter/logdrop-622 -j DROP Filter 1140 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1139 inet/filter/limit-1139 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 inet/filter/limit-1139 -m limit --limit 1/second -j LOG inet/filter/logdrop-623 -m limit --limit 1/second -j LOG inet/filter/logdrop-623 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1139 inet6/filter/limit-1139 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-623 inet6/filter/limit-1139 -m limit --limit 1/second -j LOG inet6/filter/logdrop-623 -m limit --limit 1/second -j LOG inet6/filter/logdrop-623 -j DROP Filter 1141 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1140 inet/filter/limit-1140 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-624 inet/filter/limit-1140 -j TEE --gateway 10.0.0.1 inet/filter/limit-1140 -j TEE --gateway 10.0.0.2 inet/filter/limit-1140 -j ACCEPT inet/filter/logdrop-624 -m limit --limit 1/second -j LOG inet/filter/logdrop-624 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1140 inet6/filter/limit-1140 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-624 inet6/filter/limit-1140 -j TEE --gateway fc00::2 inet6/filter/limit-1140 -j ACCEPT inet6/filter/logdrop-624 -m limit --limit 1/second -j LOG inet6/filter/logdrop-624 -j DROP Filter 1142 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1141 inet/filter/limit-1141 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-625 inet/filter/limit-1141 -j TEE --gateway 10.0.0.1 inet/filter/limit-1141 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-625 -m limit --limit 1/second -j LOG inet/filter/logdrop-625 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1141 inet6/filter/limit-1141 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-625 inet6/filter/limit-1141 -j TEE --gateway fc00::2 inet6/filter/logdrop-625 -m limit --limit 1/second -j LOG inet6/filter/logdrop-625 -j DROP Filter 1143 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1142 inet/filter/limit-1142 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-626 inet/filter/limit-1142 -j ACCEPT inet/filter/logdrop-626 -m limit --limit 1/second -j LOG inet/filter/logdrop-626 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1142 inet6/filter/limit-1142 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-626 inet6/filter/limit-1142 -j ACCEPT inet6/filter/logdrop-626 -m limit --limit 1/second -j LOG inet6/filter/logdrop-626 -j DROP Filter 1144 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-627 inet/filter/logdrop-627 -m limit --limit 1/second -j LOG inet/filter/logdrop-627 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-627 inet6/filter/logdrop-627 -m limit --limit 1/second -j LOG inet6/filter/logdrop-627 -j DROP Filter 1145 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1144 inet/filter/limit-1144 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-628 inet/filter/limit-1144 -m limit --limit 12/minute -j ULOG inet/filter/limit-1144 -j ACCEPT inet/filter/logdrop-628 -m limit --limit 1/second -j LOG inet/filter/logdrop-628 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1144 inet6/filter/limit-1144 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-628 inet6/filter/limit-1144 -j ACCEPT inet6/filter/logdrop-628 -m limit --limit 1/second -j LOG inet6/filter/logdrop-628 -j DROP Filter 1146 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1145 inet/filter/limit-1145 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-629 inet/filter/limit-1145 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-629 -m limit --limit 1/second -j LOG inet/filter/logdrop-629 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1145 inet6/filter/limit-1145 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-629 inet6/filter/logdrop-629 -m limit --limit 1/second -j LOG inet6/filter/logdrop-629 -j DROP Filter 1147 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1146 inet/filter/limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-630 inet/filter/limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-630 -m limit --limit 1/second -j LOG inet/filter/logdrop-630 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1146 inet6/filter/limit-1146 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-630 inet6/filter/limit-1146 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-630 -m limit --limit 1/second -j LOG inet6/filter/logdrop-630 -j DROP Filter 1148 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1147 inet/filter/limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-631 inet/filter/limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-631 -m limit --limit 1/second -j LOG inet/filter/logdrop-631 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1147 inet6/filter/limit-1147 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-631 inet6/filter/limit-1147 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-631 -m limit --limit 1/second -j LOG inet6/filter/logdrop-631 -j DROP Filter 1149 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1148 inet/filter/limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-632 inet/filter/limit-1148 -m limit --limit 1/second -j LOG inet/filter/limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-632 -m limit --limit 1/second -j LOG inet/filter/logdrop-632 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1148 inet6/filter/limit-1148 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-632 inet6/filter/limit-1148 -m limit --limit 1/second -j LOG inet6/filter/limit-1148 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-632 -m limit --limit 1/second -j LOG inet6/filter/logdrop-632 -j DROP Filter 1150 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1149 inet/filter/limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-633 inet/filter/limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-633 -m limit --limit 1/second -j LOG inet/filter/logdrop-633 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1149 inet6/filter/limit-1149 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-633 inet6/filter/limit-1149 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-633 -m limit --limit 1/second -j LOG inet6/filter/logdrop-633 -j DROP Filter 1151 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1150 inet/filter/limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-634 inet/filter/limit-1150 -j TEE --gateway 10.0.0.1 inet/filter/limit-1150 -j TEE --gateway 10.0.0.2 inet/filter/limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-634 -m limit --limit 1/second -j LOG inet/filter/logdrop-634 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1150 inet6/filter/limit-1150 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-634 inet6/filter/limit-1150 -j TEE --gateway fc00::2 inet6/filter/limit-1150 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-634 -m limit --limit 1/second -j LOG inet6/filter/logdrop-634 -j DROP Filter 1152 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1151 inet/filter/limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-635 inet/filter/limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-635 -m limit --limit 1/second -j LOG inet/filter/logdrop-635 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1151 inet6/filter/limit-1151 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-635 inet6/filter/limit-1151 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-635 -m limit --limit 1/second -j LOG inet6/filter/logdrop-635 -j DROP Filter 1153 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1152 inet/filter/limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-636 inet/filter/limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-636 -m limit --limit 1/second -j LOG inet/filter/logdrop-636 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1152 inet6/filter/limit-1152 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-636 inet6/filter/limit-1152 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-636 -m limit --limit 1/second -j LOG inet6/filter/logdrop-636 -j DROP Filter 1154 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1153 inet/filter/limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-637 inet/filter/limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-637 -m limit --limit 1/second -j LOG inet/filter/logdrop-637 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1153 inet6/filter/limit-1153 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-637 inet6/filter/limit-1153 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-637 -m limit --limit 1/second -j LOG inet6/filter/logdrop-637 -j DROP Filter 1155 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1154 inet/filter/limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-638 inet/filter/limit-1154 -m limit --limit 12/minute -j ULOG inet/filter/limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-638 -m limit --limit 1/second -j LOG inet/filter/logdrop-638 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1154 inet6/filter/limit-1154 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-638 inet6/filter/limit-1154 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-638 -m limit --limit 1/second -j LOG inet6/filter/logdrop-638 -j DROP Filter 1156 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1155 inet/filter/limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-639 inet/filter/limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-639 -m limit --limit 1/second -j LOG inet/filter/logdrop-639 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1155 inet6/filter/limit-1155 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-639 inet6/filter/logdrop-639 -m limit --limit 1/second -j LOG inet6/filter/logdrop-639 -j DROP Filter 1157 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1156 inet/filter/limit-1156 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-640 inet/filter/limit-1156 -j ACCEPT inet/filter/logdrop-640 -m limit --limit 1/second -j LOG inet/filter/logdrop-640 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1156 inet6/filter/limit-1156 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-640 inet6/filter/limit-1156 -j ACCEPT inet6/filter/logdrop-640 -m limit --limit 1/second -j LOG inet6/filter/logdrop-640 -j DROP Filter 1158 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-641 inet/filter/logdrop-641 -m limit --limit 1/second -j LOG inet/filter/logdrop-641 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-641 inet6/filter/logdrop-641 -m limit --limit 1/second -j LOG inet6/filter/logdrop-641 -j DROP Filter 1159 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1158 inet/filter/limit-1158 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-642 inet/filter/limit-1158 -m limit --limit 1/second -j LOG inet/filter/limit-1158 -j ACCEPT inet/filter/logdrop-642 -m limit --limit 1/second -j LOG inet/filter/logdrop-642 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1158 inet6/filter/limit-1158 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-642 inet6/filter/limit-1158 -m limit --limit 1/second -j LOG inet6/filter/limit-1158 -j ACCEPT inet6/filter/logdrop-642 -m limit --limit 1/second -j LOG inet6/filter/logdrop-642 -j DROP Filter 1160 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1159 inet/filter/limit-1159 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-643 inet/filter/limit-1159 -m limit --limit 1/second -j LOG inet/filter/logdrop-643 -m limit --limit 1/second -j LOG inet/filter/logdrop-643 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1159 inet6/filter/limit-1159 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-643 inet6/filter/limit-1159 -m limit --limit 1/second -j LOG inet6/filter/logdrop-643 -m limit --limit 1/second -j LOG inet6/filter/logdrop-643 -j DROP Filter 1161 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1160 inet/filter/limit-1160 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-644 inet/filter/limit-1160 -j TEE --gateway 10.0.0.1 inet/filter/limit-1160 -j TEE --gateway 10.0.0.2 inet/filter/limit-1160 -j ACCEPT inet/filter/logdrop-644 -m limit --limit 1/second -j LOG inet/filter/logdrop-644 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1160 inet6/filter/limit-1160 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-644 inet6/filter/limit-1160 -j TEE --gateway fc00::2 inet6/filter/limit-1160 -j ACCEPT inet6/filter/logdrop-644 -m limit --limit 1/second -j LOG inet6/filter/logdrop-644 -j DROP Filter 1162 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1161 inet/filter/limit-1161 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-645 inet/filter/limit-1161 -j TEE --gateway 10.0.0.1 inet/filter/limit-1161 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-645 -m limit --limit 1/second -j LOG inet/filter/logdrop-645 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1161 inet6/filter/limit-1161 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-645 inet6/filter/limit-1161 -j TEE --gateway fc00::2 inet6/filter/logdrop-645 -m limit --limit 1/second -j LOG inet6/filter/logdrop-645 -j DROP Filter 1163 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1162 inet/filter/limit-1162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-646 inet/filter/limit-1162 -j ACCEPT inet/filter/logdrop-646 -m limit --limit 1/second -j LOG inet/filter/logdrop-646 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1162 inet6/filter/limit-1162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-646 inet6/filter/limit-1162 -j ACCEPT inet6/filter/logdrop-646 -m limit --limit 1/second -j LOG inet6/filter/logdrop-646 -j DROP Filter 1164 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-647 inet/filter/logdrop-647 -m limit --limit 1/second -j LOG inet/filter/logdrop-647 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-647 inet6/filter/logdrop-647 -m limit --limit 1/second -j LOG inet6/filter/logdrop-647 -j DROP Filter 1165 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1164 inet/filter/limit-1164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 inet/filter/limit-1164 -m limit --limit 12/minute -j ULOG inet/filter/limit-1164 -j ACCEPT inet/filter/logdrop-648 -m limit --limit 1/second -j LOG inet/filter/logdrop-648 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1164 inet6/filter/limit-1164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 inet6/filter/limit-1164 -j ACCEPT inet6/filter/logdrop-648 -m limit --limit 1/second -j LOG inet6/filter/logdrop-648 -j DROP Filter 1166 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1165 inet/filter/limit-1165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 inet/filter/limit-1165 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-649 -m limit --limit 1/second -j LOG inet/filter/logdrop-649 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1165 inet6/filter/limit-1165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 inet6/filter/logdrop-649 -m limit --limit 1/second -j LOG inet6/filter/logdrop-649 -j DROP Filter 1167 {"conn-limit":{"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1166 inet/filter/limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-650 inet/filter/limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-650 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-650 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-650 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1166 inet6/filter/limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-650 inet6/filter/limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-650 -j TEE --gateway fc00::2 inet6/filter/logdrop-650 -j DROP Filter 1168 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1167 inet/filter/limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-651 inet/filter/limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-651 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-651 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-651 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1167 inet6/filter/limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-651 inet6/filter/limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-651 -j TEE --gateway fc00::2 inet6/filter/logdrop-651 -j DROP Filter 1169 {"conn-limit":{"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1168 inet/filter/limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-652 inet/filter/limit-1168 -m limit --limit 1/second -j LOG inet/filter/limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-652 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-652 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-652 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1168 inet6/filter/limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-652 inet6/filter/limit-1168 -m limit --limit 1/second -j LOG inet6/filter/limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-652 -j TEE --gateway fc00::2 inet6/filter/logdrop-652 -j DROP Filter 1170 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1169 inet/filter/limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-653 inet/filter/limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-653 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-653 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-653 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1169 inet6/filter/limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-653 inet6/filter/limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-653 -j TEE --gateway fc00::2 inet6/filter/logdrop-653 -j DROP Filter 1171 {"conn-limit":{"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1170 inet/filter/limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-654 inet/filter/limit-1170 -j TEE --gateway 10.0.0.1 inet/filter/limit-1170 -j TEE --gateway 10.0.0.2 inet/filter/limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-654 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-654 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-654 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1170 inet6/filter/limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-654 inet6/filter/limit-1170 -j TEE --gateway fc00::2 inet6/filter/limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-654 -j TEE --gateway fc00::2 inet6/filter/logdrop-654 -j DROP Filter 1172 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1171 inet/filter/limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-655 inet/filter/limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-655 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-655 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-655 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1171 inet6/filter/limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-655 inet6/filter/limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-655 -j TEE --gateway fc00::2 inet6/filter/logdrop-655 -j DROP Filter 1173 {"conn-limit":{"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1172 inet/filter/limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-656 inet/filter/limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-656 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-656 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-656 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1172 inet6/filter/limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-656 inet6/filter/limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-656 -j TEE --gateway fc00::2 inet6/filter/logdrop-656 -j DROP Filter 1174 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1173 inet/filter/limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-657 inet/filter/limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-657 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-657 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-657 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1173 inet6/filter/limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-657 inet6/filter/limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-657 -j TEE --gateway fc00::2 inet6/filter/logdrop-657 -j DROP Filter 1175 {"conn-limit":{"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1174 inet/filter/limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-658 inet/filter/limit-1174 -m limit --limit 12/minute -j ULOG inet/filter/limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-658 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-658 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-658 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1174 inet6/filter/limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-658 inet6/filter/limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-658 -j TEE --gateway fc00::2 inet6/filter/logdrop-658 -j DROP Filter 1176 {"action":"pass","conn-limit":{"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1175 inet/filter/limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-659 inet/filter/limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-659 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-659 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-659 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1175 inet6/filter/limit-1175 -m recent --name limit-1175 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-659 inet6/filter/logdrop-659 -j TEE --gateway fc00::2 inet6/filter/logdrop-659 -j DROP Filter 1177 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1176 inet/filter/limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-660 inet/filter/limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-660 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-660 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-660 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1176 inet6/filter/limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-660 inet6/filter/limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-660 -j TEE --gateway fc00::2 inet6/filter/logdrop-660 -j DROP Filter 1178 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1177 inet/filter/limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-661 inet/filter/limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-661 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-661 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-661 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1177 inet6/filter/limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-661 inet6/filter/limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-661 -j TEE --gateway fc00::2 inet6/filter/logdrop-661 -j DROP Filter 1179 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1178 inet/filter/limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-662 inet/filter/limit-1178 -m limit --limit 1/second -j LOG inet/filter/limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-662 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-662 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-662 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1178 inet6/filter/limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-662 inet6/filter/limit-1178 -m limit --limit 1/second -j LOG inet6/filter/limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-662 -j TEE --gateway fc00::2 inet6/filter/logdrop-662 -j DROP Filter 1180 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1179 inet/filter/limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-663 inet/filter/limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-663 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-663 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-663 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1179 inet6/filter/limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-663 inet6/filter/limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-663 -j TEE --gateway fc00::2 inet6/filter/logdrop-663 -j DROP Filter 1181 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1180 inet/filter/limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-664 inet/filter/limit-1180 -j TEE --gateway 10.0.0.1 inet/filter/limit-1180 -j TEE --gateway 10.0.0.2 inet/filter/limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-664 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-664 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-664 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1180 inet6/filter/limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-664 inet6/filter/limit-1180 -j TEE --gateway fc00::2 inet6/filter/limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-664 -j TEE --gateway fc00::2 inet6/filter/logdrop-664 -j DROP Filter 1182 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1181 inet/filter/limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-665 inet/filter/limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-665 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-665 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-665 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1181 inet6/filter/limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-665 inet6/filter/limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-665 -j TEE --gateway fc00::2 inet6/filter/logdrop-665 -j DROP Filter 1183 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1182 inet/filter/limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-666 inet/filter/limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-666 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-666 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-666 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1182 inet6/filter/limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-666 inet6/filter/limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-666 -j TEE --gateway fc00::2 inet6/filter/logdrop-666 -j DROP Filter 1184 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1183 inet/filter/limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-667 inet/filter/limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-667 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-667 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-667 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1183 inet6/filter/limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-667 inet6/filter/limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-667 -j TEE --gateway fc00::2 inet6/filter/logdrop-667 -j DROP Filter 1185 {"conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1184 inet/filter/limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-668 inet/filter/limit-1184 -m limit --limit 12/minute -j ULOG inet/filter/limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-668 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-668 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-668 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1184 inet6/filter/limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-668 inet6/filter/limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-668 -j TEE --gateway fc00::2 inet6/filter/logdrop-668 -j DROP Filter 1186 {"action":"pass","conn-limit":{"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1185 inet/filter/limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-669 inet/filter/limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-669 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-669 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-669 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1185 inet6/filter/limit-1185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-669 inet6/filter/logdrop-669 -j TEE --gateway fc00::2 inet6/filter/logdrop-669 -j DROP Filter 1187 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1186 inet/filter/limit-1186 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 inet/filter/limit-1186 -j ACCEPT inet/filter/logdrop-670 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-670 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-670 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1186 inet6/filter/limit-1186 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-670 inet6/filter/limit-1186 -j ACCEPT inet6/filter/logdrop-670 -j TEE --gateway fc00::2 inet6/filter/logdrop-670 -j DROP Filter 1188 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 inet/filter/logdrop-671 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-671 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-671 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-671 inet6/filter/logdrop-671 -j TEE --gateway fc00::2 inet6/filter/logdrop-671 -j DROP Filter 1189 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1188 inet/filter/limit-1188 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-672 inet/filter/limit-1188 -m limit --limit 1/second -j LOG inet/filter/limit-1188 -j ACCEPT inet/filter/logdrop-672 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-672 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-672 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1188 inet6/filter/limit-1188 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-672 inet6/filter/limit-1188 -m limit --limit 1/second -j LOG inet6/filter/limit-1188 -j ACCEPT inet6/filter/logdrop-672 -j TEE --gateway fc00::2 inet6/filter/logdrop-672 -j DROP Filter 1190 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1189 inet/filter/limit-1189 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-673 inet/filter/limit-1189 -m limit --limit 1/second -j LOG inet/filter/logdrop-673 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-673 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-673 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1189 inet6/filter/limit-1189 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-673 inet6/filter/limit-1189 -m limit --limit 1/second -j LOG inet6/filter/logdrop-673 -j TEE --gateway fc00::2 inet6/filter/logdrop-673 -j DROP Filter 1191 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1190 inet/filter/limit-1190 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-674 inet/filter/limit-1190 -j TEE --gateway 10.0.0.1 inet/filter/limit-1190 -j TEE --gateway 10.0.0.2 inet/filter/limit-1190 -j ACCEPT inet/filter/logdrop-674 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-674 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-674 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1190 inet6/filter/limit-1190 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-674 inet6/filter/limit-1190 -j TEE --gateway fc00::2 inet6/filter/limit-1190 -j ACCEPT inet6/filter/logdrop-674 -j TEE --gateway fc00::2 inet6/filter/logdrop-674 -j DROP Filter 1192 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1191 inet/filter/limit-1191 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-675 inet/filter/limit-1191 -j TEE --gateway 10.0.0.1 inet/filter/limit-1191 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-675 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-675 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-675 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1191 inet6/filter/limit-1191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-675 inet6/filter/limit-1191 -j TEE --gateway fc00::2 inet6/filter/logdrop-675 -j TEE --gateway fc00::2 inet6/filter/logdrop-675 -j DROP Filter 1193 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1192 inet/filter/limit-1192 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-676 inet/filter/limit-1192 -j ACCEPT inet/filter/logdrop-676 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-676 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-676 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1192 inet6/filter/limit-1192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-676 inet6/filter/limit-1192 -j ACCEPT inet6/filter/logdrop-676 -j TEE --gateway fc00::2 inet6/filter/logdrop-676 -j DROP Filter 1194 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-677 inet/filter/logdrop-677 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-677 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-677 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-677 inet6/filter/logdrop-677 -j TEE --gateway fc00::2 inet6/filter/logdrop-677 -j DROP Filter 1195 {"conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1194 inet/filter/limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-678 inet/filter/limit-1194 -m limit --limit 12/minute -j ULOG inet/filter/limit-1194 -j ACCEPT inet/filter/logdrop-678 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-678 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-678 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1194 inet6/filter/limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-678 inet6/filter/limit-1194 -j ACCEPT inet6/filter/logdrop-678 -j TEE --gateway fc00::2 inet6/filter/logdrop-678 -j DROP Filter 1196 {"action":"pass","conn-limit":{"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1195 inet/filter/limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-679 inet/filter/limit-1195 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-679 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-679 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-679 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1195 inet6/filter/limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-679 inet6/filter/logdrop-679 -j TEE --gateway fc00::2 inet6/filter/logdrop-679 -j DROP Filter 1197 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1196 inet/filter/limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 inet/filter/limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-680 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-680 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-680 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1196 inet6/filter/limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 inet6/filter/limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-680 -j TEE --gateway fc00::2 inet6/filter/logdrop-680 -j DROP Filter 1198 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1197 inet/filter/limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 inet/filter/limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-681 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-681 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-681 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1197 inet6/filter/limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 inet6/filter/limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-681 -j TEE --gateway fc00::2 inet6/filter/logdrop-681 -j DROP Filter 1199 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1198 inet/filter/limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 inet/filter/limit-1198 -m limit --limit 1/second -j LOG inet/filter/limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-682 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-682 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-682 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1198 inet6/filter/limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 inet6/filter/limit-1198 -m limit --limit 1/second -j LOG inet6/filter/limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-682 -j TEE --gateway fc00::2 inet6/filter/logdrop-682 -j DROP Filter 1200 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1199 inet/filter/limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 inet/filter/limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-683 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-683 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-683 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1199 inet6/filter/limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 inet6/filter/limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-683 -j TEE --gateway fc00::2 inet6/filter/logdrop-683 -j DROP Filter 1201 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1200 inet/filter/limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 inet/filter/limit-1200 -j TEE --gateway 10.0.0.1 inet/filter/limit-1200 -j TEE --gateway 10.0.0.2 inet/filter/limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-684 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-684 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-684 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1200 inet6/filter/limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 inet6/filter/limit-1200 -j TEE --gateway fc00::2 inet6/filter/limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-684 -j TEE --gateway fc00::2 inet6/filter/logdrop-684 -j DROP Filter 1202 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1201 inet/filter/limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 inet/filter/limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-685 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-685 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-685 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1201 inet6/filter/limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 inet6/filter/limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-685 -j TEE --gateway fc00::2 inet6/filter/logdrop-685 -j DROP Filter 1203 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1202 inet/filter/limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 inet/filter/limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-686 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-686 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-686 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1202 inet6/filter/limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 inet6/filter/limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-686 -j TEE --gateway fc00::2 inet6/filter/logdrop-686 -j DROP Filter 1204 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1203 inet/filter/limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 inet/filter/limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-687 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-687 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-687 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1203 inet6/filter/limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 inet6/filter/limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-687 -j TEE --gateway fc00::2 inet6/filter/logdrop-687 -j DROP Filter 1205 {"conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1204 inet/filter/limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-688 inet/filter/limit-1204 -m limit --limit 12/minute -j ULOG inet/filter/limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-688 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-688 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-688 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1204 inet6/filter/limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-688 inet6/filter/limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-688 -j TEE --gateway fc00::2 inet6/filter/logdrop-688 -j DROP Filter 1206 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1205 inet/filter/limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-689 inet/filter/limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-689 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-689 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-689 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1205 inet6/filter/limit-1205 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-689 inet6/filter/logdrop-689 -j TEE --gateway fc00::2 inet6/filter/logdrop-689 -j DROP Filter 1207 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1206 inet/filter/limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 inet/filter/limit-1206 -j ACCEPT inet/filter/logdrop-690 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-690 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-690 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1206 inet6/filter/limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 inet6/filter/limit-1206 -j ACCEPT inet6/filter/logdrop-690 -j TEE --gateway fc00::2 inet6/filter/logdrop-690 -j DROP Filter 1208 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 inet/filter/logdrop-691 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-691 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-691 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 inet6/filter/logdrop-691 -j TEE --gateway fc00::2 inet6/filter/logdrop-691 -j DROP Filter 1209 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1208 inet/filter/limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 inet/filter/limit-1208 -m limit --limit 1/second -j LOG inet/filter/limit-1208 -j ACCEPT inet/filter/logdrop-692 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-692 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-692 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1208 inet6/filter/limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 inet6/filter/limit-1208 -m limit --limit 1/second -j LOG inet6/filter/limit-1208 -j ACCEPT inet6/filter/logdrop-692 -j TEE --gateway fc00::2 inet6/filter/logdrop-692 -j DROP Filter 1210 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1209 inet/filter/limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 inet/filter/limit-1209 -m limit --limit 1/second -j LOG inet/filter/logdrop-693 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-693 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-693 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1209 inet6/filter/limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 inet6/filter/limit-1209 -m limit --limit 1/second -j LOG inet6/filter/logdrop-693 -j TEE --gateway fc00::2 inet6/filter/logdrop-693 -j DROP Filter 1211 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1210 inet/filter/limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 inet/filter/limit-1210 -j TEE --gateway 10.0.0.1 inet/filter/limit-1210 -j TEE --gateway 10.0.0.2 inet/filter/limit-1210 -j ACCEPT inet/filter/logdrop-694 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-694 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-694 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1210 inet6/filter/limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 inet6/filter/limit-1210 -j TEE --gateway fc00::2 inet6/filter/limit-1210 -j ACCEPT inet6/filter/logdrop-694 -j TEE --gateway fc00::2 inet6/filter/logdrop-694 -j DROP Filter 1212 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1211 inet/filter/limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 inet/filter/limit-1211 -j TEE --gateway 10.0.0.1 inet/filter/limit-1211 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-695 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-695 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-695 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1211 inet6/filter/limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 inet6/filter/limit-1211 -j TEE --gateway fc00::2 inet6/filter/logdrop-695 -j TEE --gateway fc00::2 inet6/filter/logdrop-695 -j DROP Filter 1213 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1212 inet/filter/limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-696 inet/filter/limit-1212 -j ACCEPT inet/filter/logdrop-696 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-696 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-696 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1212 inet6/filter/limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-696 inet6/filter/limit-1212 -j ACCEPT inet6/filter/logdrop-696 -j TEE --gateway fc00::2 inet6/filter/logdrop-696 -j DROP Filter 1214 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-697 inet/filter/logdrop-697 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-697 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-697 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-697 inet6/filter/logdrop-697 -j TEE --gateway fc00::2 inet6/filter/logdrop-697 -j DROP Filter 1215 {"conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1214 inet/filter/limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-698 inet/filter/limit-1214 -m limit --limit 12/minute -j ULOG inet/filter/limit-1214 -j ACCEPT inet/filter/logdrop-698 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-698 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-698 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1214 inet6/filter/limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-698 inet6/filter/limit-1214 -j ACCEPT inet6/filter/logdrop-698 -j TEE --gateway fc00::2 inet6/filter/logdrop-698 -j DROP Filter 1216 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1215 inet/filter/limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-699 inet/filter/limit-1215 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-699 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-699 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-699 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1215 inet6/filter/limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-699 inet6/filter/logdrop-699 -j TEE --gateway fc00::2 inet6/filter/logdrop-699 -j DROP Filter 1217 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1216 inet/filter/limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-700 inet/filter/limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-700 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-700 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-700 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1216 inet6/filter/limit-1216 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-700 inet6/filter/limit-1216 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-700 -j TEE --gateway fc00::2 inet6/filter/logdrop-700 -j DROP Filter 1218 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1217 inet/filter/limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-701 inet/filter/limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-701 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-701 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-701 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1217 inet6/filter/limit-1217 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-701 inet6/filter/limit-1217 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-701 -j TEE --gateway fc00::2 inet6/filter/logdrop-701 -j DROP Filter 1219 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1218 inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-702 inet/filter/limit-1218 -m limit --limit 1/second -j LOG inet/filter/limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-702 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-702 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-702 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1218 inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-702 inet6/filter/limit-1218 -m limit --limit 1/second -j LOG inet6/filter/limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-702 -j TEE --gateway fc00::2 inet6/filter/logdrop-702 -j DROP Filter 1220 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1219 inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-703 inet/filter/limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-703 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-703 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-703 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1219 inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-703 inet6/filter/limit-1219 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-703 -j TEE --gateway fc00::2 inet6/filter/logdrop-703 -j DROP Filter 1221 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1220 inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-704 inet/filter/limit-1220 -j TEE --gateway 10.0.0.1 inet/filter/limit-1220 -j TEE --gateway 10.0.0.2 inet/filter/limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-704 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-704 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-704 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1220 inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-704 inet6/filter/limit-1220 -j TEE --gateway fc00::2 inet6/filter/limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-704 -j TEE --gateway fc00::2 inet6/filter/logdrop-704 -j DROP Filter 1222 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1221 inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-705 inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-705 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-705 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-705 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1221 inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-705 inet6/filter/limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-705 -j TEE --gateway fc00::2 inet6/filter/logdrop-705 -j DROP Filter 1223 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1222 inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-706 inet/filter/limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-706 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-706 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-706 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1222 inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-706 inet6/filter/limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-706 -j TEE --gateway fc00::2 inet6/filter/logdrop-706 -j DROP Filter 1224 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1223 inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-707 inet/filter/limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-707 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-707 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-707 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1223 inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-707 inet6/filter/limit-1223 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-707 -j TEE --gateway fc00::2 inet6/filter/logdrop-707 -j DROP Filter 1225 {"conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1224 inet/filter/limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-708 inet/filter/limit-1224 -m limit --limit 12/minute -j ULOG inet/filter/limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-708 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-708 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-708 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1224 inet6/filter/limit-1224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-708 inet6/filter/limit-1224 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-708 -j TEE --gateway fc00::2 inet6/filter/logdrop-708 -j DROP Filter 1226 {"action":"pass","conn-limit":{"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1225 inet/filter/limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-709 inet/filter/limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-709 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-709 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-709 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1225 inet6/filter/limit-1225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-709 inet6/filter/logdrop-709 -j TEE --gateway fc00::2 inet6/filter/logdrop-709 -j DROP Filter 1227 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1226 inet/filter/limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 inet/filter/limit-1226 -j ACCEPT inet/filter/logdrop-710 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-710 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-710 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1226 inet6/filter/limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-710 inet6/filter/limit-1226 -j ACCEPT inet6/filter/logdrop-710 -j TEE --gateway fc00::2 inet6/filter/logdrop-710 -j DROP Filter 1228 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 inet/filter/logdrop-711 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-711 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-711 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-711 inet6/filter/logdrop-711 -j TEE --gateway fc00::2 inet6/filter/logdrop-711 -j DROP Filter 1229 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1228 inet/filter/limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-712 inet/filter/limit-1228 -m limit --limit 1/second -j LOG inet/filter/limit-1228 -j ACCEPT inet/filter/logdrop-712 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-712 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-712 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1228 inet6/filter/limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-712 inet6/filter/limit-1228 -m limit --limit 1/second -j LOG inet6/filter/limit-1228 -j ACCEPT inet6/filter/logdrop-712 -j TEE --gateway fc00::2 inet6/filter/logdrop-712 -j DROP Filter 1230 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1229 inet/filter/limit-1229 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-713 inet/filter/limit-1229 -m limit --limit 1/second -j LOG inet/filter/logdrop-713 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-713 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-713 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1229 inet6/filter/limit-1229 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-713 inet6/filter/limit-1229 -m limit --limit 1/second -j LOG inet6/filter/logdrop-713 -j TEE --gateway fc00::2 inet6/filter/logdrop-713 -j DROP Filter 1231 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1230 inet/filter/limit-1230 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-714 inet/filter/limit-1230 -j TEE --gateway 10.0.0.1 inet/filter/limit-1230 -j TEE --gateway 10.0.0.2 inet/filter/limit-1230 -j ACCEPT inet/filter/logdrop-714 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-714 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-714 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1230 inet6/filter/limit-1230 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-714 inet6/filter/limit-1230 -j TEE --gateway fc00::2 inet6/filter/limit-1230 -j ACCEPT inet6/filter/logdrop-714 -j TEE --gateway fc00::2 inet6/filter/logdrop-714 -j DROP Filter 1232 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1231 inet/filter/limit-1231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-715 inet/filter/limit-1231 -j TEE --gateway 10.0.0.1 inet/filter/limit-1231 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-715 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-715 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-715 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1231 inet6/filter/limit-1231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-715 inet6/filter/limit-1231 -j TEE --gateway fc00::2 inet6/filter/logdrop-715 -j TEE --gateway fc00::2 inet6/filter/logdrop-715 -j DROP Filter 1233 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1232 inet/filter/limit-1232 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-716 inet/filter/limit-1232 -j ACCEPT inet/filter/logdrop-716 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-716 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-716 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1232 inet6/filter/limit-1232 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-716 inet6/filter/limit-1232 -j ACCEPT inet6/filter/logdrop-716 -j TEE --gateway fc00::2 inet6/filter/logdrop-716 -j DROP Filter 1234 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-717 inet/filter/logdrop-717 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-717 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-717 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-717 inet6/filter/logdrop-717 -j TEE --gateway fc00::2 inet6/filter/logdrop-717 -j DROP Filter 1235 {"conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1234 inet/filter/limit-1234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-718 inet/filter/limit-1234 -m limit --limit 12/minute -j ULOG inet/filter/limit-1234 -j ACCEPT inet/filter/logdrop-718 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-718 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-718 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1234 inet6/filter/limit-1234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-718 inet6/filter/limit-1234 -j ACCEPT inet6/filter/logdrop-718 -j TEE --gateway fc00::2 inet6/filter/logdrop-718 -j DROP Filter 1236 {"action":"pass","conn-limit":{"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1235 inet/filter/limit-1235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-719 inet/filter/limit-1235 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-719 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-719 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-719 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1235 inet6/filter/limit-1235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-719 inet6/filter/logdrop-719 -j TEE --gateway fc00::2 inet6/filter/logdrop-719 -j DROP Filter 1237 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1236 inet/filter/limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-720 inet/filter/limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-720 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-720 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-720 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1236 inet6/filter/limit-1236 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-720 inet6/filter/limit-1236 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-720 -j TEE --gateway fc00::2 inet6/filter/logdrop-720 -j DROP Filter 1238 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1237 inet/filter/limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-721 inet/filter/limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-721 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-721 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-721 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1237 inet6/filter/limit-1237 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-721 inet6/filter/limit-1237 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-721 -j TEE --gateway fc00::2 inet6/filter/logdrop-721 -j DROP Filter 1239 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1238 inet/filter/limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-722 inet/filter/limit-1238 -m limit --limit 1/second -j LOG inet/filter/limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-722 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-722 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-722 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1238 inet6/filter/limit-1238 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-722 inet6/filter/limit-1238 -m limit --limit 1/second -j LOG inet6/filter/limit-1238 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-722 -j TEE --gateway fc00::2 inet6/filter/logdrop-722 -j DROP Filter 1240 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1239 inet/filter/limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-723 inet/filter/limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-723 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-723 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-723 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1239 inet6/filter/limit-1239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-723 inet6/filter/limit-1239 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-723 -j TEE --gateway fc00::2 inet6/filter/logdrop-723 -j DROP Filter 1241 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1240 inet/filter/limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-724 inet/filter/limit-1240 -j TEE --gateway 10.0.0.1 inet/filter/limit-1240 -j TEE --gateway 10.0.0.2 inet/filter/limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-724 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-724 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-724 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1240 inet6/filter/limit-1240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-724 inet6/filter/limit-1240 -j TEE --gateway fc00::2 inet6/filter/limit-1240 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-724 -j TEE --gateway fc00::2 inet6/filter/logdrop-724 -j DROP Filter 1242 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1241 inet/filter/limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-725 inet/filter/limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-725 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-725 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-725 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1241 inet6/filter/limit-1241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-725 inet6/filter/limit-1241 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-725 -j TEE --gateway fc00::2 inet6/filter/logdrop-725 -j DROP Filter 1243 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1242 inet/filter/limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-726 inet/filter/limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-726 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-726 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-726 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1242 inet6/filter/limit-1242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-726 inet6/filter/limit-1242 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-726 -j TEE --gateway fc00::2 inet6/filter/logdrop-726 -j DROP Filter 1244 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1243 inet/filter/limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-727 inet/filter/limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-727 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-727 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-727 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1243 inet6/filter/limit-1243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-727 inet6/filter/limit-1243 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-727 -j TEE --gateway fc00::2 inet6/filter/logdrop-727 -j DROP Filter 1245 {"conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1244 inet/filter/limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 inet/filter/limit-1244 -m limit --limit 12/minute -j ULOG inet/filter/limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-728 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-728 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-728 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1244 inet6/filter/limit-1244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 inet6/filter/limit-1244 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-728 -j TEE --gateway fc00::2 inet6/filter/logdrop-728 -j DROP Filter 1246 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1245 inet/filter/limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 inet/filter/limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-729 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-729 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-729 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1245 inet6/filter/limit-1245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 inet6/filter/logdrop-729 -j TEE --gateway fc00::2 inet6/filter/logdrop-729 -j DROP Filter 1247 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1246 inet/filter/limit-1246 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-730 inet/filter/limit-1246 -j ACCEPT inet/filter/logdrop-730 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-730 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-730 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1246 inet6/filter/limit-1246 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-730 inet6/filter/limit-1246 -j ACCEPT inet6/filter/logdrop-730 -j TEE --gateway fc00::2 inet6/filter/logdrop-730 -j DROP Filter 1248 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-731 inet/filter/logdrop-731 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-731 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-731 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-731 inet6/filter/logdrop-731 -j TEE --gateway fc00::2 inet6/filter/logdrop-731 -j DROP Filter 1249 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1248 inet/filter/limit-1248 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-732 inet/filter/limit-1248 -m limit --limit 1/second -j LOG inet/filter/limit-1248 -j ACCEPT inet/filter/logdrop-732 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-732 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-732 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1248 inet6/filter/limit-1248 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-732 inet6/filter/limit-1248 -m limit --limit 1/second -j LOG inet6/filter/limit-1248 -j ACCEPT inet6/filter/logdrop-732 -j TEE --gateway fc00::2 inet6/filter/logdrop-732 -j DROP Filter 1250 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1249 inet/filter/limit-1249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-733 inet/filter/limit-1249 -m limit --limit 1/second -j LOG inet/filter/logdrop-733 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-733 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-733 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1249 inet6/filter/limit-1249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-733 inet6/filter/limit-1249 -m limit --limit 1/second -j LOG inet6/filter/logdrop-733 -j TEE --gateway fc00::2 inet6/filter/logdrop-733 -j DROP Filter 1251 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1250 inet/filter/limit-1250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-734 inet/filter/limit-1250 -j TEE --gateway 10.0.0.1 inet/filter/limit-1250 -j TEE --gateway 10.0.0.2 inet/filter/limit-1250 -j ACCEPT inet/filter/logdrop-734 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-734 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-734 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1250 inet6/filter/limit-1250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-734 inet6/filter/limit-1250 -j TEE --gateway fc00::2 inet6/filter/limit-1250 -j ACCEPT inet6/filter/logdrop-734 -j TEE --gateway fc00::2 inet6/filter/logdrop-734 -j DROP Filter 1252 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1251 inet/filter/limit-1251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-735 inet/filter/limit-1251 -j TEE --gateway 10.0.0.1 inet/filter/limit-1251 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-735 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-735 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-735 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1251 inet6/filter/limit-1251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-735 inet6/filter/limit-1251 -j TEE --gateway fc00::2 inet6/filter/logdrop-735 -j TEE --gateway fc00::2 inet6/filter/logdrop-735 -j DROP Filter 1253 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1252 inet/filter/limit-1252 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 inet/filter/limit-1252 -j ACCEPT inet/filter/logdrop-736 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-736 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-736 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1252 inet6/filter/limit-1252 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 inet6/filter/limit-1252 -j ACCEPT inet6/filter/logdrop-736 -j TEE --gateway fc00::2 inet6/filter/logdrop-736 -j DROP Filter 1254 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 inet/filter/logdrop-737 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-737 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-737 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 inet6/filter/logdrop-737 -j TEE --gateway fc00::2 inet6/filter/logdrop-737 -j DROP Filter 1255 {"conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1254 inet/filter/limit-1254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 inet/filter/limit-1254 -m limit --limit 12/minute -j ULOG inet/filter/limit-1254 -j ACCEPT inet/filter/logdrop-738 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-738 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-738 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1254 inet6/filter/limit-1254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 inet6/filter/limit-1254 -j ACCEPT inet6/filter/logdrop-738 -j TEE --gateway fc00::2 inet6/filter/logdrop-738 -j DROP Filter 1256 {"action":"pass","conn-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1255 inet/filter/limit-1255 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 inet/filter/limit-1255 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-739 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-739 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-739 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1255 inet6/filter/limit-1255 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 inet6/filter/logdrop-739 -j TEE --gateway fc00::2 inet6/filter/logdrop-739 -j DROP Filter 1257 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1256 inet/filter/limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1256 inet6/filter/limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1258 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1257 inet/filter/limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1257 inet6/filter/limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1259 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1258 inet/filter/limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1258 -m limit --limit 1/second -j LOG inet/filter/limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1258 inet6/filter/limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1258 -m limit --limit 1/second -j LOG inet6/filter/limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1260 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1259 inet/filter/limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1259 inet6/filter/limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1261 {"conn-limit":{"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1260 inet/filter/limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1260 -j TEE --gateway 10.0.0.1 inet/filter/limit-1260 -j TEE --gateway 10.0.0.2 inet/filter/limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1260 inet6/filter/limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1260 -j TEE --gateway fc00::2 inet6/filter/limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1262 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1261 inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1261 inet6/filter/limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1263 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1262 inet/filter/limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1262 inet6/filter/limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1264 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1263 inet/filter/limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1263 inet6/filter/limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1265 {"conn-limit":{"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1264 inet/filter/limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1264 -m limit --limit 12/minute -j ULOG inet/filter/limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1264 inet6/filter/limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1266 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1265 inet/filter/limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1265 inet6/filter/limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1267 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1266 inet/filter/limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1266 inet6/filter/limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1268 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1267 inet/filter/limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1267 inet6/filter/limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1269 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1268 inet/filter/limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1268 -m limit --limit 1/second -j LOG inet/filter/limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1268 inet6/filter/limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1268 -m limit --limit 1/second -j LOG inet6/filter/limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1270 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1269 inet/filter/limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1269 inet6/filter/limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1271 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1270 inet/filter/limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1270 -j TEE --gateway 10.0.0.1 inet/filter/limit-1270 -j TEE --gateway 10.0.0.2 inet/filter/limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1270 inet6/filter/limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1270 -j TEE --gateway fc00::2 inet6/filter/limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1272 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1271 inet/filter/limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1271 inet6/filter/limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1273 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1272 inet/filter/limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1272 inet6/filter/limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1274 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1273 inet/filter/limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1273 inet6/filter/limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1275 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1274 inet/filter/limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1274 -m limit --limit 12/minute -j ULOG inet/filter/limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1274 inet6/filter/limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1276 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1275 inet/filter/limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1275 inet6/filter/limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1277 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1276 inet/filter/limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1276 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1276 inet6/filter/limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1276 -j ACCEPT Filter 1278 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1279 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1278 inet/filter/limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1278 -m limit --limit 1/second -j LOG inet/filter/limit-1278 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1278 inet6/filter/limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1278 -m limit --limit 1/second -j LOG inet6/filter/limit-1278 -j ACCEPT Filter 1280 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1279 inet/filter/limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1279 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1279 inet6/filter/limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1279 -m limit --limit 1/second -j LOG Filter 1281 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1280 inet/filter/limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1280 -j TEE --gateway 10.0.0.1 inet/filter/limit-1280 -j TEE --gateway 10.0.0.2 inet/filter/limit-1280 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1280 inet6/filter/limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1280 -j TEE --gateway fc00::2 inet6/filter/limit-1280 -j ACCEPT Filter 1282 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1281 inet/filter/limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1281 -j TEE --gateway 10.0.0.1 inet/filter/limit-1281 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1281 inet6/filter/limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1281 -j TEE --gateway fc00::2 Filter 1283 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1282 inet/filter/limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1282 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1282 inet6/filter/limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1282 -j ACCEPT Filter 1284 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1285 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1284 inet/filter/limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1284 -m limit --limit 12/minute -j ULOG inet/filter/limit-1284 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1284 inet6/filter/limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1284 -j ACCEPT Filter 1286 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1285 inet/filter/limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1285 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1285 inet6/filter/limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1287 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1286 inet/filter/limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1286 inet6/filter/limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1288 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1287 inet/filter/limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1287 inet6/filter/limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1289 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1288 inet/filter/limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1288 -m limit --limit 1/second -j LOG inet/filter/limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1288 inet6/filter/limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1288 -m limit --limit 1/second -j LOG inet6/filter/limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1290 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1289 inet/filter/limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1289 inet6/filter/limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1291 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1290 inet/filter/limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1290 -j TEE --gateway 10.0.0.1 inet/filter/limit-1290 -j TEE --gateway 10.0.0.2 inet/filter/limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1290 inet6/filter/limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1290 -j TEE --gateway fc00::2 inet6/filter/limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1292 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1291 inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1291 inet6/filter/limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1293 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1292 inet/filter/limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1292 inet6/filter/limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1294 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1293 inet/filter/limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1293 inet6/filter/limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1295 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1294 inet/filter/limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1294 -m limit --limit 12/minute -j ULOG inet/filter/limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1294 inet6/filter/limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1296 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1295 inet/filter/limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1295 inet6/filter/limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1297 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1296 inet/filter/limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1296 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1296 inet6/filter/limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1296 -j ACCEPT Filter 1298 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1299 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1298 inet/filter/limit-1298 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1298 -m limit --limit 1/second -j LOG inet/filter/limit-1298 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1298 inet6/filter/limit-1298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1298 -m limit --limit 1/second -j LOG inet6/filter/limit-1298 -j ACCEPT Filter 1300 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1299 inet/filter/limit-1299 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1299 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1299 inet6/filter/limit-1299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1299 -m limit --limit 1/second -j LOG Filter 1301 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1300 inet/filter/limit-1300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1300 -j TEE --gateway 10.0.0.1 inet/filter/limit-1300 -j TEE --gateway 10.0.0.2 inet/filter/limit-1300 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1300 inet6/filter/limit-1300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1300 -j TEE --gateway fc00::2 inet6/filter/limit-1300 -j ACCEPT Filter 1302 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1301 inet/filter/limit-1301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1301 -j TEE --gateway 10.0.0.1 inet/filter/limit-1301 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1301 inet6/filter/limit-1301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1301 -j TEE --gateway fc00::2 Filter 1303 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1302 inet/filter/limit-1302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1302 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1302 inet6/filter/limit-1302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1302 -j ACCEPT Filter 1304 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1305 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1304 inet/filter/limit-1304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1304 -m limit --limit 12/minute -j ULOG inet/filter/limit-1304 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1304 inet6/filter/limit-1304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1304 -j ACCEPT Filter 1306 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1305 inet/filter/limit-1305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1305 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1305 inet6/filter/limit-1305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1307 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1306 inet/filter/limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1306 inet6/filter/limit-1306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1308 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1307 inet/filter/limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1307 inet6/filter/limit-1307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1307 -m recent --name user:C --rsource --mask fe00:: --set Filter 1309 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1308 inet/filter/limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1308 -m limit --limit 1/second -j LOG inet/filter/limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1308 inet6/filter/limit-1308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1308 -m limit --limit 1/second -j LOG inet6/filter/limit-1308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1310 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1309 inet/filter/limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1309 inet6/filter/limit-1309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1311 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1310 inet/filter/limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1310 -j TEE --gateway 10.0.0.1 inet/filter/limit-1310 -j TEE --gateway 10.0.0.2 inet/filter/limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1310 inet6/filter/limit-1310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1310 -j TEE --gateway fc00::2 inet6/filter/limit-1310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1312 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1311 inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1311 inet6/filter/limit-1311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1311 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1313 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1312 inet/filter/limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1312 inet6/filter/limit-1312 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1312 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1314 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1313 inet/filter/limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1313 inet6/filter/limit-1313 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1313 -m recent --name user:C --rsource --mask fe00:: --set Filter 1315 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1314 inet/filter/limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1314 -m limit --limit 12/minute -j ULOG inet/filter/limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1314 inet6/filter/limit-1314 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1314 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1316 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1315 inet/filter/limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1315 inet6/filter/limit-1315 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 1317 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1316 inet/filter/limit-1316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1316 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1316 inet6/filter/limit-1316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1316 -j ACCEPT Filter 1318 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1319 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1318 inet/filter/limit-1318 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1318 -m limit --limit 1/second -j LOG inet/filter/limit-1318 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1318 inet6/filter/limit-1318 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1318 -m limit --limit 1/second -j LOG inet6/filter/limit-1318 -j ACCEPT Filter 1320 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1319 inet/filter/limit-1319 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1319 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1319 inet6/filter/limit-1319 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1319 -m limit --limit 1/second -j LOG Filter 1321 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1320 inet/filter/limit-1320 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1320 -j TEE --gateway 10.0.0.1 inet/filter/limit-1320 -j TEE --gateway 10.0.0.2 inet/filter/limit-1320 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1320 inet6/filter/limit-1320 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1320 -j TEE --gateway fc00::2 inet6/filter/limit-1320 -j ACCEPT Filter 1322 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1321 inet/filter/limit-1321 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1321 -j TEE --gateway 10.0.0.1 inet/filter/limit-1321 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1321 inet6/filter/limit-1321 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1321 -j TEE --gateway fc00::2 Filter 1323 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1322 inet/filter/limit-1322 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1322 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1322 inet6/filter/limit-1322 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1322 -j ACCEPT Filter 1324 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1325 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1324 inet/filter/limit-1324 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1324 -m limit --limit 12/minute -j ULOG inet/filter/limit-1324 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1324 inet6/filter/limit-1324 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1324 -j ACCEPT Filter 1326 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1325 inet/filter/limit-1325 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1325 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1325 inet6/filter/limit-1325 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1327 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1326 inet/filter/limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1326 inet6/filter/limit-1326 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1326 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1328 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1327 inet/filter/limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1327 inet6/filter/limit-1327 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1327 -m recent --name user:C --rdest --mask fe00:: --set Filter 1329 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1328 inet/filter/limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1328 -m limit --limit 1/second -j LOG inet/filter/limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1328 inet6/filter/limit-1328 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1328 -m limit --limit 1/second -j LOG inet6/filter/limit-1328 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1330 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1329 inet/filter/limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1329 inet6/filter/limit-1329 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1329 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1331 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1330 inet/filter/limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1330 -j TEE --gateway 10.0.0.1 inet/filter/limit-1330 -j TEE --gateway 10.0.0.2 inet/filter/limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1330 inet6/filter/limit-1330 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1330 -j TEE --gateway fc00::2 inet6/filter/limit-1330 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1332 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1331 inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1331 inet6/filter/limit-1331 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1331 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1333 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1332 inet/filter/limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1332 inet6/filter/limit-1332 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1332 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1334 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1333 inet/filter/limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1333 inet6/filter/limit-1333 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1333 -m recent --name user:C --rdest --mask fe00:: --set Filter 1335 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1334 inet/filter/limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1334 -m limit --limit 12/minute -j ULOG inet/filter/limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1334 inet6/filter/limit-1334 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1334 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1336 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1335 inet/filter/limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1335 inet6/filter/limit-1335 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 1337 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1336 inet/filter/limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1336 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1336 inet6/filter/limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1336 -j ACCEPT Filter 1338 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1339 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1338 inet/filter/limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1338 -m limit --limit 1/second -j LOG inet/filter/limit-1338 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1338 inet6/filter/limit-1338 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1338 -m limit --limit 1/second -j LOG inet6/filter/limit-1338 -j ACCEPT Filter 1340 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1339 inet/filter/limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1339 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1339 inet6/filter/limit-1339 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1339 -m limit --limit 1/second -j LOG Filter 1341 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1340 inet/filter/limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1340 -j TEE --gateway 10.0.0.1 inet/filter/limit-1340 -j TEE --gateway 10.0.0.2 inet/filter/limit-1340 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1340 inet6/filter/limit-1340 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1340 -j TEE --gateway fc00::2 inet6/filter/limit-1340 -j ACCEPT Filter 1342 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1341 inet/filter/limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1341 -j TEE --gateway 10.0.0.1 inet/filter/limit-1341 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1341 inet6/filter/limit-1341 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1341 -j TEE --gateway fc00::2 Filter 1343 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1342 inet/filter/limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1342 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1342 inet6/filter/limit-1342 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1342 -j ACCEPT Filter 1344 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1345 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1344 inet/filter/limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1344 -m limit --limit 12/minute -j ULOG inet/filter/limit-1344 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1344 inet6/filter/limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1344 -j ACCEPT Filter 1346 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1345 inet/filter/limit-1345 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1345 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1345 inet6/filter/limit-1345 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1347 {"conn-limit":{"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1346 inet/filter/limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-740 inet/filter/limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-740 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-740 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1346 inet6/filter/limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-740 inet6/filter/limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-740 -j DROP Filter 1348 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1347 inet/filter/limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-741 inet/filter/limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-741 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-741 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1347 inet6/filter/limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-741 inet6/filter/limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-741 -j DROP Filter 1349 {"conn-limit":{"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1348 inet/filter/limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-742 inet/filter/limit-1348 -m limit --limit 1/second -j LOG inet/filter/limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-742 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-742 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1348 inet6/filter/limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-742 inet6/filter/limit-1348 -m limit --limit 1/second -j LOG inet6/filter/limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-742 -j DROP Filter 1350 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1349 inet/filter/limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-743 inet/filter/limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-743 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-743 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1349 inet6/filter/limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-743 inet6/filter/limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-743 -j DROP Filter 1351 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1350 inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-744 inet/filter/limit-1350 -j TEE --gateway 10.0.0.1 inet/filter/limit-1350 -j TEE --gateway 10.0.0.2 inet/filter/limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-744 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-744 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1350 inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-744 inet6/filter/limit-1350 -j TEE --gateway fc00::2 inet6/filter/limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-744 -j DROP Filter 1352 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1351 inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-745 inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-745 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-745 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1351 inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-745 inet6/filter/limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-745 -j DROP Filter 1353 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1352 inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-746 inet/filter/limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-746 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-746 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1352 inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-746 inet6/filter/limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-746 -j DROP Filter 1354 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1353 inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-747 inet/filter/limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-747 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-747 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1353 inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-747 inet6/filter/limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-747 -j DROP Filter 1355 {"conn-limit":{"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1354 inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-748 inet/filter/limit-1354 -m limit --limit 12/minute -j ULOG inet/filter/limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-748 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-748 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1354 inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-748 inet6/filter/limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-748 -j DROP Filter 1356 {"action":"pass","conn-limit":{"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1355 inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-749 inet/filter/limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-749 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-749 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1355 inet6/filter/limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-749 inet6/filter/logdrop-749 -j DROP Filter 1357 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1356 inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-750 inet/filter/limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-750 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-750 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1356 inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-750 inet6/filter/limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-750 -j DROP Filter 1358 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1357 inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-751 inet/filter/limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-751 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-751 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1357 inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-751 inet6/filter/limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-751 -j DROP Filter 1359 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1358 inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-752 inet/filter/limit-1358 -m limit --limit 1/second -j LOG inet/filter/limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-752 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-752 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1358 inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-752 inet6/filter/limit-1358 -m limit --limit 1/second -j LOG inet6/filter/limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-752 -j DROP Filter 1360 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1359 inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-753 inet/filter/limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-753 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-753 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1359 inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-753 inet6/filter/limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-753 -j DROP Filter 1361 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1360 inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-754 inet/filter/limit-1360 -j TEE --gateway 10.0.0.1 inet/filter/limit-1360 -j TEE --gateway 10.0.0.2 inet/filter/limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-754 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-754 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1360 inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-754 inet6/filter/limit-1360 -j TEE --gateway fc00::2 inet6/filter/limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-754 -j DROP Filter 1362 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1361 inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-755 inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-755 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-755 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1361 inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-755 inet6/filter/limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-755 -j DROP Filter 1363 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1362 inet/filter/limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-756 inet/filter/limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-756 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-756 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1362 inet6/filter/limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-756 inet6/filter/limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-756 -j DROP Filter 1364 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1363 inet/filter/limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-757 inet/filter/limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-757 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-757 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1363 inet6/filter/limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-757 inet6/filter/limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-757 -j DROP Filter 1365 {"conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1364 inet/filter/limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-758 inet/filter/limit-1364 -m limit --limit 12/minute -j ULOG inet/filter/limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-758 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-758 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1364 inet6/filter/limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-758 inet6/filter/limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-758 -j DROP Filter 1366 {"action":"pass","conn-limit":{"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1365 inet/filter/limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-759 inet/filter/limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-759 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-759 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1365 inet6/filter/limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-759 inet6/filter/logdrop-759 -j DROP Filter 1367 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1366 inet/filter/limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-760 inet/filter/limit-1366 -j ACCEPT inet/filter/logdrop-760 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-760 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1366 inet6/filter/limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-760 inet6/filter/limit-1366 -j ACCEPT inet6/filter/logdrop-760 -j DROP Filter 1368 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-761 inet/filter/logdrop-761 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-761 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-761 inet6/filter/logdrop-761 -j DROP Filter 1369 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1368 inet/filter/limit-1368 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-762 inet/filter/limit-1368 -m limit --limit 1/second -j LOG inet/filter/limit-1368 -j ACCEPT inet/filter/logdrop-762 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-762 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1368 inet6/filter/limit-1368 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-762 inet6/filter/limit-1368 -m limit --limit 1/second -j LOG inet6/filter/limit-1368 -j ACCEPT inet6/filter/logdrop-762 -j DROP Filter 1370 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1369 inet/filter/limit-1369 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-763 inet/filter/limit-1369 -m limit --limit 1/second -j LOG inet/filter/logdrop-763 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-763 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1369 inet6/filter/limit-1369 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-763 inet6/filter/limit-1369 -m limit --limit 1/second -j LOG inet6/filter/logdrop-763 -j DROP Filter 1371 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1370 inet/filter/limit-1370 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-764 inet/filter/limit-1370 -j TEE --gateway 10.0.0.1 inet/filter/limit-1370 -j TEE --gateway 10.0.0.2 inet/filter/limit-1370 -j ACCEPT inet/filter/logdrop-764 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-764 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1370 inet6/filter/limit-1370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-764 inet6/filter/limit-1370 -j TEE --gateway fc00::2 inet6/filter/limit-1370 -j ACCEPT inet6/filter/logdrop-764 -j DROP Filter 1372 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1371 inet/filter/limit-1371 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-765 inet/filter/limit-1371 -j TEE --gateway 10.0.0.1 inet/filter/limit-1371 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-765 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-765 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1371 inet6/filter/limit-1371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-765 inet6/filter/limit-1371 -j TEE --gateway fc00::2 inet6/filter/logdrop-765 -j DROP Filter 1373 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1372 inet/filter/limit-1372 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-766 inet/filter/limit-1372 -j ACCEPT inet/filter/logdrop-766 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-766 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1372 inet6/filter/limit-1372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-766 inet6/filter/limit-1372 -j ACCEPT inet6/filter/logdrop-766 -j DROP Filter 1374 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-767 inet/filter/logdrop-767 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-767 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-767 inet6/filter/logdrop-767 -j DROP Filter 1375 {"conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1374 inet/filter/limit-1374 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-768 inet/filter/limit-1374 -m limit --limit 12/minute -j ULOG inet/filter/limit-1374 -j ACCEPT inet/filter/logdrop-768 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-768 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1374 inet6/filter/limit-1374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-768 inet6/filter/limit-1374 -j ACCEPT inet6/filter/logdrop-768 -j DROP Filter 1376 {"action":"pass","conn-limit":{"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1375 inet/filter/limit-1375 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-769 inet/filter/limit-1375 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-769 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-769 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1375 inet6/filter/limit-1375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-769 inet6/filter/logdrop-769 -j DROP Filter 1377 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1376 inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-770 inet/filter/limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-770 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-770 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1376 inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-770 inet6/filter/limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-770 -j DROP Filter 1378 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1377 inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-771 inet/filter/limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-771 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-771 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1377 inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-771 inet6/filter/limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-771 -j DROP Filter 1379 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1378 inet/filter/limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-772 inet/filter/limit-1378 -m limit --limit 1/second -j LOG inet/filter/limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-772 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-772 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1378 inet6/filter/limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-772 inet6/filter/limit-1378 -m limit --limit 1/second -j LOG inet6/filter/limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-772 -j DROP Filter 1380 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1379 inet/filter/limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-773 inet/filter/limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-773 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-773 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1379 inet6/filter/limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-773 inet6/filter/limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-773 -j DROP Filter 1381 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1380 inet/filter/limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-774 inet/filter/limit-1380 -j TEE --gateway 10.0.0.1 inet/filter/limit-1380 -j TEE --gateway 10.0.0.2 inet/filter/limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-774 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-774 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1380 inet6/filter/limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-774 inet6/filter/limit-1380 -j TEE --gateway fc00::2 inet6/filter/limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-774 -j DROP Filter 1382 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1381 inet/filter/limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-775 inet/filter/limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-775 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-775 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1381 inet6/filter/limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-775 inet6/filter/limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-775 -j DROP Filter 1383 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1382 inet/filter/limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-776 inet/filter/limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-776 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-776 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1382 inet6/filter/limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-776 inet6/filter/limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-776 -j DROP Filter 1384 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1383 inet/filter/limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-777 inet/filter/limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-777 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-777 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1383 inet6/filter/limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-777 inet6/filter/limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-777 -j DROP Filter 1385 {"conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1384 inet/filter/limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-778 inet/filter/limit-1384 -m limit --limit 12/minute -j ULOG inet/filter/limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-778 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-778 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1384 inet6/filter/limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-778 inet6/filter/limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-778 -j DROP Filter 1386 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1385 inet/filter/limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-779 inet/filter/limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-779 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-779 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1385 inet6/filter/limit-1385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-779 inet6/filter/logdrop-779 -j DROP Filter 1387 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1386 inet/filter/limit-1386 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-780 inet/filter/limit-1386 -j ACCEPT inet/filter/logdrop-780 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-780 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1386 inet6/filter/limit-1386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-780 inet6/filter/limit-1386 -j ACCEPT inet6/filter/logdrop-780 -j DROP Filter 1388 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-781 inet/filter/logdrop-781 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-781 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-781 inet6/filter/logdrop-781 -j DROP Filter 1389 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1388 inet/filter/limit-1388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-782 inet/filter/limit-1388 -m limit --limit 1/second -j LOG inet/filter/limit-1388 -j ACCEPT inet/filter/logdrop-782 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-782 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1388 inet6/filter/limit-1388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-782 inet6/filter/limit-1388 -m limit --limit 1/second -j LOG inet6/filter/limit-1388 -j ACCEPT inet6/filter/logdrop-782 -j DROP Filter 1390 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1389 inet/filter/limit-1389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-783 inet/filter/limit-1389 -m limit --limit 1/second -j LOG inet/filter/logdrop-783 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-783 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1389 inet6/filter/limit-1389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-783 inet6/filter/limit-1389 -m limit --limit 1/second -j LOG inet6/filter/logdrop-783 -j DROP Filter 1391 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1390 inet/filter/limit-1390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-784 inet/filter/limit-1390 -j TEE --gateway 10.0.0.1 inet/filter/limit-1390 -j TEE --gateway 10.0.0.2 inet/filter/limit-1390 -j ACCEPT inet/filter/logdrop-784 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-784 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1390 inet6/filter/limit-1390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-784 inet6/filter/limit-1390 -j TEE --gateway fc00::2 inet6/filter/limit-1390 -j ACCEPT inet6/filter/logdrop-784 -j DROP Filter 1392 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1391 inet/filter/limit-1391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-785 inet/filter/limit-1391 -j TEE --gateway 10.0.0.1 inet/filter/limit-1391 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-785 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-785 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1391 inet6/filter/limit-1391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-785 inet6/filter/limit-1391 -j TEE --gateway fc00::2 inet6/filter/logdrop-785 -j DROP Filter 1393 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1392 inet/filter/limit-1392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-786 inet/filter/limit-1392 -j ACCEPT inet/filter/logdrop-786 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-786 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1392 inet6/filter/limit-1392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-786 inet6/filter/limit-1392 -j ACCEPT inet6/filter/logdrop-786 -j DROP Filter 1394 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-787 inet/filter/logdrop-787 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-787 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-787 inet6/filter/logdrop-787 -j DROP Filter 1395 {"conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1394 inet/filter/limit-1394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-788 inet/filter/limit-1394 -m limit --limit 12/minute -j ULOG inet/filter/limit-1394 -j ACCEPT inet/filter/logdrop-788 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-788 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1394 inet6/filter/limit-1394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-788 inet6/filter/limit-1394 -j ACCEPT inet6/filter/logdrop-788 -j DROP Filter 1396 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1395 inet/filter/limit-1395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-789 inet/filter/limit-1395 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-789 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-789 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1395 inet6/filter/limit-1395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-789 inet6/filter/logdrop-789 -j DROP Filter 1397 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1396 inet/filter/limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-790 inet/filter/limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-790 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-790 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1396 inet6/filter/limit-1396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-790 inet6/filter/limit-1396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-790 -j DROP Filter 1398 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1397 inet/filter/limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-791 inet/filter/limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-791 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-791 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1397 inet6/filter/limit-1397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-791 inet6/filter/limit-1397 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-791 -j DROP Filter 1399 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1398 inet/filter/limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-792 inet/filter/limit-1398 -m limit --limit 1/second -j LOG inet/filter/limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-792 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-792 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1398 inet6/filter/limit-1398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-792 inet6/filter/limit-1398 -m limit --limit 1/second -j LOG inet6/filter/limit-1398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-792 -j DROP Filter 1400 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1399 inet/filter/limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-793 inet/filter/limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-793 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-793 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1399 inet6/filter/limit-1399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-793 inet6/filter/limit-1399 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-793 -j DROP Filter 1401 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1400 inet/filter/limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-794 inet/filter/limit-1400 -j TEE --gateway 10.0.0.1 inet/filter/limit-1400 -j TEE --gateway 10.0.0.2 inet/filter/limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-794 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-794 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1400 inet6/filter/limit-1400 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-794 inet6/filter/limit-1400 -j TEE --gateway fc00::2 inet6/filter/limit-1400 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-794 -j DROP Filter 1402 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1401 inet/filter/limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-795 inet/filter/limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-795 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-795 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1401 inet6/filter/limit-1401 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-795 inet6/filter/limit-1401 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-795 -j DROP Filter 1403 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1402 inet/filter/limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-796 inet/filter/limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-796 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-796 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1402 inet6/filter/limit-1402 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-796 inet6/filter/limit-1402 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-796 -j DROP Filter 1404 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1403 inet/filter/limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-797 inet/filter/limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-797 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-797 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1403 inet6/filter/limit-1403 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-797 inet6/filter/limit-1403 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-797 -j DROP Filter 1405 {"conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1404 inet/filter/limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-798 inet/filter/limit-1404 -m limit --limit 12/minute -j ULOG inet/filter/limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-798 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-798 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1404 inet6/filter/limit-1404 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-798 inet6/filter/limit-1404 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-798 -j DROP Filter 1406 {"action":"pass","conn-limit":{"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1405 inet/filter/limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-799 inet/filter/limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-799 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-799 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1405 inet6/filter/limit-1405 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-799 inet6/filter/logdrop-799 -j DROP Filter 1407 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1406 inet/filter/limit-1406 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-800 inet/filter/limit-1406 -j ACCEPT inet/filter/logdrop-800 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-800 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1406 inet6/filter/limit-1406 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-800 inet6/filter/limit-1406 -j ACCEPT inet6/filter/logdrop-800 -j DROP Filter 1408 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-801 inet/filter/logdrop-801 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-801 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-801 inet6/filter/logdrop-801 -j DROP Filter 1409 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1408 inet/filter/limit-1408 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-802 inet/filter/limit-1408 -m limit --limit 1/second -j LOG inet/filter/limit-1408 -j ACCEPT inet/filter/logdrop-802 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-802 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1408 inet6/filter/limit-1408 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-802 inet6/filter/limit-1408 -m limit --limit 1/second -j LOG inet6/filter/limit-1408 -j ACCEPT inet6/filter/logdrop-802 -j DROP Filter 1410 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1409 inet/filter/limit-1409 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-803 inet/filter/limit-1409 -m limit --limit 1/second -j LOG inet/filter/logdrop-803 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-803 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1409 inet6/filter/limit-1409 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-803 inet6/filter/limit-1409 -m limit --limit 1/second -j LOG inet6/filter/logdrop-803 -j DROP Filter 1411 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1410 inet/filter/limit-1410 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-804 inet/filter/limit-1410 -j TEE --gateway 10.0.0.1 inet/filter/limit-1410 -j TEE --gateway 10.0.0.2 inet/filter/limit-1410 -j ACCEPT inet/filter/logdrop-804 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-804 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1410 inet6/filter/limit-1410 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-804 inet6/filter/limit-1410 -j TEE --gateway fc00::2 inet6/filter/limit-1410 -j ACCEPT inet6/filter/logdrop-804 -j DROP Filter 1412 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1411 inet/filter/limit-1411 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-805 inet/filter/limit-1411 -j TEE --gateway 10.0.0.1 inet/filter/limit-1411 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-805 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-805 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1411 inet6/filter/limit-1411 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-805 inet6/filter/limit-1411 -j TEE --gateway fc00::2 inet6/filter/logdrop-805 -j DROP Filter 1413 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1412 inet/filter/limit-1412 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-806 inet/filter/limit-1412 -j ACCEPT inet/filter/logdrop-806 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-806 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1412 inet6/filter/limit-1412 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-806 inet6/filter/limit-1412 -j ACCEPT inet6/filter/logdrop-806 -j DROP Filter 1414 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-807 inet/filter/logdrop-807 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-807 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-807 inet6/filter/logdrop-807 -j DROP Filter 1415 {"conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1414 inet/filter/limit-1414 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-808 inet/filter/limit-1414 -m limit --limit 12/minute -j ULOG inet/filter/limit-1414 -j ACCEPT inet/filter/logdrop-808 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-808 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1414 inet6/filter/limit-1414 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-808 inet6/filter/limit-1414 -j ACCEPT inet6/filter/logdrop-808 -j DROP Filter 1416 {"action":"pass","conn-limit":{"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1415 inet/filter/limit-1415 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-809 inet/filter/limit-1415 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-809 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-809 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1415 inet6/filter/limit-1415 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-809 inet6/filter/logdrop-809 -j DROP Filter 1417 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1416 inet/filter/limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-810 inet/filter/limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-810 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-810 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1416 inet6/filter/limit-1416 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-810 inet6/filter/limit-1416 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-810 -j DROP Filter 1418 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1417 inet/filter/limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-811 inet/filter/limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-811 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-811 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1417 inet6/filter/limit-1417 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-811 inet6/filter/limit-1417 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-811 -j DROP Filter 1419 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1418 inet/filter/limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-812 inet/filter/limit-1418 -m limit --limit 1/second -j LOG inet/filter/limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-812 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-812 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1418 inet6/filter/limit-1418 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-812 inet6/filter/limit-1418 -m limit --limit 1/second -j LOG inet6/filter/limit-1418 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-812 -j DROP Filter 1420 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1419 inet/filter/limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-813 inet/filter/limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-813 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-813 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1419 inet6/filter/limit-1419 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-813 inet6/filter/limit-1419 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-813 -j DROP Filter 1421 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1420 inet/filter/limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-814 inet/filter/limit-1420 -j TEE --gateway 10.0.0.1 inet/filter/limit-1420 -j TEE --gateway 10.0.0.2 inet/filter/limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-814 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-814 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1420 inet6/filter/limit-1420 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-814 inet6/filter/limit-1420 -j TEE --gateway fc00::2 inet6/filter/limit-1420 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-814 -j DROP Filter 1422 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1421 inet/filter/limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-815 inet/filter/limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-815 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-815 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1421 inet6/filter/limit-1421 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-815 inet6/filter/limit-1421 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-815 -j DROP Filter 1423 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1422 inet/filter/limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-816 inet/filter/limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-816 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-816 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1422 inet6/filter/limit-1422 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-816 inet6/filter/limit-1422 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-816 -j DROP Filter 1424 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1423 inet/filter/limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-817 inet/filter/limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-817 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-817 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1423 inet6/filter/limit-1423 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-817 inet6/filter/limit-1423 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-817 -j DROP Filter 1425 {"conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1424 inet/filter/limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-818 inet/filter/limit-1424 -m limit --limit 12/minute -j ULOG inet/filter/limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-818 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-818 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1424 inet6/filter/limit-1424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-818 inet6/filter/limit-1424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-818 -j DROP Filter 1426 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1425 inet/filter/limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-819 inet/filter/limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-819 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-819 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1425 inet6/filter/limit-1425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-819 inet6/filter/logdrop-819 -j DROP Filter 1427 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1426 inet/filter/limit-1426 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-820 inet/filter/limit-1426 -j ACCEPT inet/filter/logdrop-820 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-820 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1426 inet6/filter/limit-1426 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-820 inet6/filter/limit-1426 -j ACCEPT inet6/filter/logdrop-820 -j DROP Filter 1428 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-821 inet/filter/logdrop-821 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-821 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-821 inet6/filter/logdrop-821 -j DROP Filter 1429 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1428 inet/filter/limit-1428 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-822 inet/filter/limit-1428 -m limit --limit 1/second -j LOG inet/filter/limit-1428 -j ACCEPT inet/filter/logdrop-822 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-822 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1428 inet6/filter/limit-1428 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-822 inet6/filter/limit-1428 -m limit --limit 1/second -j LOG inet6/filter/limit-1428 -j ACCEPT inet6/filter/logdrop-822 -j DROP Filter 1430 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1429 inet/filter/limit-1429 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-823 inet/filter/limit-1429 -m limit --limit 1/second -j LOG inet/filter/logdrop-823 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-823 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1429 inet6/filter/limit-1429 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-823 inet6/filter/limit-1429 -m limit --limit 1/second -j LOG inet6/filter/logdrop-823 -j DROP Filter 1431 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1430 inet/filter/limit-1430 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-824 inet/filter/limit-1430 -j TEE --gateway 10.0.0.1 inet/filter/limit-1430 -j TEE --gateway 10.0.0.2 inet/filter/limit-1430 -j ACCEPT inet/filter/logdrop-824 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-824 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1430 inet6/filter/limit-1430 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-824 inet6/filter/limit-1430 -j TEE --gateway fc00::2 inet6/filter/limit-1430 -j ACCEPT inet6/filter/logdrop-824 -j DROP Filter 1432 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1431 inet/filter/limit-1431 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-825 inet/filter/limit-1431 -j TEE --gateway 10.0.0.1 inet/filter/limit-1431 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-825 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-825 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1431 inet6/filter/limit-1431 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-825 inet6/filter/limit-1431 -j TEE --gateway fc00::2 inet6/filter/logdrop-825 -j DROP Filter 1433 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1432 inet/filter/limit-1432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-826 inet/filter/limit-1432 -j ACCEPT inet/filter/logdrop-826 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-826 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1432 inet6/filter/limit-1432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-826 inet6/filter/limit-1432 -j ACCEPT inet6/filter/logdrop-826 -j DROP Filter 1434 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-827 inet/filter/logdrop-827 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-827 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-827 inet6/filter/logdrop-827 -j DROP Filter 1435 {"conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1434 inet/filter/limit-1434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-828 inet/filter/limit-1434 -m limit --limit 12/minute -j ULOG inet/filter/limit-1434 -j ACCEPT inet/filter/logdrop-828 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-828 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1434 inet6/filter/limit-1434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-828 inet6/filter/limit-1434 -j ACCEPT inet6/filter/logdrop-828 -j DROP Filter 1436 {"action":"pass","conn-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1435 inet/filter/limit-1435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-829 inet/filter/limit-1435 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-829 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-829 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1435 inet6/filter/limit-1435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-829 inet6/filter/logdrop-829 -j DROP Filter 1437 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1436 inet/filter/limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1436 inet6/filter/limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1438 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1437 inet/filter/limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1437 inet6/filter/limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1439 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1438 inet/filter/limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1438 -m limit --limit 1/second -j LOG inet/filter/limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1438 inet6/filter/limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1438 -m limit --limit 1/second -j LOG inet6/filter/limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1440 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1439 inet/filter/limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1439 inet6/filter/limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1441 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1440 inet/filter/limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1440 -j TEE --gateway 10.0.0.1 inet/filter/limit-1440 -j TEE --gateway 10.0.0.2 inet/filter/limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1440 inet6/filter/limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1440 -j TEE --gateway fc00::2 inet6/filter/limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1442 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1441 inet/filter/limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1441 inet6/filter/limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1443 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1442 inet/filter/limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1442 inet6/filter/limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1444 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1443 inet/filter/limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1443 inet6/filter/limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1445 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1444 inet/filter/limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1444 -m limit --limit 12/minute -j ULOG inet/filter/limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1444 inet6/filter/limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1446 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1445 inet/filter/limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1445 inet6/filter/limit-1445 -m recent --name limit-1445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 1447 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1446 inet/filter/limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1446 inet6/filter/limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1448 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1447 inet/filter/limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1447 inet6/filter/limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1449 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1448 inet/filter/limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1448 -m limit --limit 1/second -j LOG inet/filter/limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1448 inet6/filter/limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1448 -m limit --limit 1/second -j LOG inet6/filter/limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1450 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1449 inet/filter/limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1449 inet6/filter/limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1451 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1450 inet/filter/limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1450 -j TEE --gateway 10.0.0.1 inet/filter/limit-1450 -j TEE --gateway 10.0.0.2 inet/filter/limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1450 inet6/filter/limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1450 -j TEE --gateway fc00::2 inet6/filter/limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1452 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1451 inet/filter/limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1451 inet6/filter/limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1453 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1452 inet/filter/limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1452 inet6/filter/limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1454 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1453 inet/filter/limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1453 inet6/filter/limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1455 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1454 inet/filter/limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1454 -m limit --limit 12/minute -j ULOG inet/filter/limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1454 inet6/filter/limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1456 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1455 inet/filter/limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1455 inet6/filter/limit-1455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 1457 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1456 inet/filter/limit-1456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1456 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1456 inet6/filter/limit-1456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1456 -j ACCEPT Filter 1458 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1459 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1458 inet/filter/limit-1458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1458 -m limit --limit 1/second -j LOG inet/filter/limit-1458 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1458 inet6/filter/limit-1458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1458 -m limit --limit 1/second -j LOG inet6/filter/limit-1458 -j ACCEPT Filter 1460 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1459 inet/filter/limit-1459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1459 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1459 inet6/filter/limit-1459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1459 -m limit --limit 1/second -j LOG Filter 1461 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1460 inet/filter/limit-1460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1460 -j TEE --gateway 10.0.0.1 inet/filter/limit-1460 -j TEE --gateway 10.0.0.2 inet/filter/limit-1460 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1460 inet6/filter/limit-1460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1460 -j TEE --gateway fc00::2 inet6/filter/limit-1460 -j ACCEPT Filter 1462 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1461 inet/filter/limit-1461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1461 -j TEE --gateway 10.0.0.1 inet/filter/limit-1461 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1461 inet6/filter/limit-1461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1461 -j TEE --gateway fc00::2 Filter 1463 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1462 inet/filter/limit-1462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1462 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1462 inet6/filter/limit-1462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1462 -j ACCEPT Filter 1464 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1465 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1464 inet/filter/limit-1464 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1464 -m limit --limit 12/minute -j ULOG inet/filter/limit-1464 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1464 inet6/filter/limit-1464 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1464 -j ACCEPT Filter 1466 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1465 inet/filter/limit-1465 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1465 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1465 inet6/filter/limit-1465 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1467 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1466 inet/filter/limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1466 inet6/filter/limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1468 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1467 inet/filter/limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1467 inet6/filter/limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1469 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1468 inet/filter/limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1468 -m limit --limit 1/second -j LOG inet/filter/limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1468 inet6/filter/limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1468 -m limit --limit 1/second -j LOG inet6/filter/limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1470 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1469 inet/filter/limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1469 inet6/filter/limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1471 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1470 inet/filter/limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1470 -j TEE --gateway 10.0.0.1 inet/filter/limit-1470 -j TEE --gateway 10.0.0.2 inet/filter/limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1470 inet6/filter/limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1470 -j TEE --gateway fc00::2 inet6/filter/limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1472 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1471 inet/filter/limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1471 inet6/filter/limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1473 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1472 inet/filter/limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1472 inet6/filter/limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1474 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1473 inet/filter/limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1473 inet6/filter/limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1475 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1474 inet/filter/limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1474 -m limit --limit 12/minute -j ULOG inet/filter/limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1474 inet6/filter/limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1476 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1475 inet/filter/limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1475 inet6/filter/limit-1475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 1477 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1476 inet/filter/limit-1476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1476 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1476 inet6/filter/limit-1476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1476 -j ACCEPT Filter 1478 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1479 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1478 inet/filter/limit-1478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1478 -m limit --limit 1/second -j LOG inet/filter/limit-1478 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1478 inet6/filter/limit-1478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1478 -m limit --limit 1/second -j LOG inet6/filter/limit-1478 -j ACCEPT Filter 1480 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1479 inet/filter/limit-1479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1479 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1479 inet6/filter/limit-1479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1479 -m limit --limit 1/second -j LOG Filter 1481 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1480 inet/filter/limit-1480 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1480 -j TEE --gateway 10.0.0.1 inet/filter/limit-1480 -j TEE --gateway 10.0.0.2 inet/filter/limit-1480 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1480 inet6/filter/limit-1480 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1480 -j TEE --gateway fc00::2 inet6/filter/limit-1480 -j ACCEPT Filter 1482 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1481 inet/filter/limit-1481 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1481 -j TEE --gateway 10.0.0.1 inet/filter/limit-1481 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1481 inet6/filter/limit-1481 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1481 -j TEE --gateway fc00::2 Filter 1483 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1482 inet/filter/limit-1482 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1482 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1482 inet6/filter/limit-1482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1482 -j ACCEPT Filter 1484 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1485 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1484 inet/filter/limit-1484 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1484 -m limit --limit 12/minute -j ULOG inet/filter/limit-1484 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1484 inet6/filter/limit-1484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1484 -j ACCEPT Filter 1486 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1485 inet/filter/limit-1485 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1485 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1485 inet6/filter/limit-1485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1487 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1486 inet/filter/limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1486 inet6/filter/limit-1486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1488 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1487 inet/filter/limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1487 inet6/filter/limit-1487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1487 -m recent --name user:C --rsource --mask fe00:: --set Filter 1489 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1488 inet/filter/limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1488 -m limit --limit 1/second -j LOG inet/filter/limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1488 inet6/filter/limit-1488 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1488 -m limit --limit 1/second -j LOG inet6/filter/limit-1488 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1490 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1489 inet/filter/limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1489 inet6/filter/limit-1489 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1489 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1491 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1490 inet/filter/limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1490 -j TEE --gateway 10.0.0.1 inet/filter/limit-1490 -j TEE --gateway 10.0.0.2 inet/filter/limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1490 inet6/filter/limit-1490 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1490 -j TEE --gateway fc00::2 inet6/filter/limit-1490 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1492 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1491 inet/filter/limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1491 inet6/filter/limit-1491 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1491 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1493 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1492 inet/filter/limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1492 inet6/filter/limit-1492 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1492 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1494 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1493 inet/filter/limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1493 inet6/filter/limit-1493 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1493 -m recent --name user:C --rsource --mask fe00:: --set Filter 1495 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1494 inet/filter/limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1494 -m limit --limit 12/minute -j ULOG inet/filter/limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1494 inet6/filter/limit-1494 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1494 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1496 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1495 inet/filter/limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1495 inet6/filter/limit-1495 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 1497 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1496 inet/filter/limit-1496 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1496 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1496 inet6/filter/limit-1496 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1496 -j ACCEPT Filter 1498 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1499 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1498 inet/filter/limit-1498 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1498 -m limit --limit 1/second -j LOG inet/filter/limit-1498 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1498 inet6/filter/limit-1498 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1498 -m limit --limit 1/second -j LOG inet6/filter/limit-1498 -j ACCEPT Filter 1500 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1499 inet/filter/limit-1499 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1499 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1499 inet6/filter/limit-1499 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1499 -m limit --limit 1/second -j LOG Filter 1501 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1500 inet/filter/limit-1500 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1500 -j TEE --gateway 10.0.0.1 inet/filter/limit-1500 -j TEE --gateway 10.0.0.2 inet/filter/limit-1500 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1500 inet6/filter/limit-1500 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1500 -j TEE --gateway fc00::2 inet6/filter/limit-1500 -j ACCEPT Filter 1502 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1501 inet/filter/limit-1501 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1501 -j TEE --gateway 10.0.0.1 inet/filter/limit-1501 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1501 inet6/filter/limit-1501 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1501 -j TEE --gateway fc00::2 Filter 1503 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1502 inet/filter/limit-1502 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1502 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1502 inet6/filter/limit-1502 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1502 -j ACCEPT Filter 1504 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1505 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1504 inet/filter/limit-1504 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1504 -m limit --limit 12/minute -j ULOG inet/filter/limit-1504 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1504 inet6/filter/limit-1504 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1504 -j ACCEPT Filter 1506 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1505 inet/filter/limit-1505 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1505 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1505 inet6/filter/limit-1505 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1507 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1506 inet/filter/limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1506 inet6/filter/limit-1506 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1506 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1508 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1507 inet/filter/limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1507 inet6/filter/limit-1507 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1507 -m recent --name user:C --rdest --mask fe00:: --set Filter 1509 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1508 inet/filter/limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1508 -m limit --limit 1/second -j LOG inet/filter/limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1508 inet6/filter/limit-1508 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1508 -m limit --limit 1/second -j LOG inet6/filter/limit-1508 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1510 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1509 inet/filter/limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1509 inet6/filter/limit-1509 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1509 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1511 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1510 inet/filter/limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1510 -j TEE --gateway 10.0.0.1 inet/filter/limit-1510 -j TEE --gateway 10.0.0.2 inet/filter/limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1510 inet6/filter/limit-1510 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1510 -j TEE --gateway fc00::2 inet6/filter/limit-1510 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1512 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1511 inet/filter/limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1511 inet6/filter/limit-1511 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1511 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1513 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1512 inet/filter/limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1512 inet6/filter/limit-1512 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1512 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1514 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1513 inet/filter/limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1513 inet6/filter/limit-1513 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1513 -m recent --name user:C --rdest --mask fe00:: --set Filter 1515 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1514 inet/filter/limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1514 -m limit --limit 12/minute -j ULOG inet/filter/limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1514 inet6/filter/limit-1514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1516 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1515 inet/filter/limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1515 inet6/filter/limit-1515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 1517 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1516 inet/filter/limit-1516 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1516 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1516 inet6/filter/limit-1516 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1516 -j ACCEPT Filter 1518 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1519 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1518 inet/filter/limit-1518 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1518 -m limit --limit 1/second -j LOG inet/filter/limit-1518 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1518 inet6/filter/limit-1518 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1518 -m limit --limit 1/second -j LOG inet6/filter/limit-1518 -j ACCEPT Filter 1520 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1519 inet/filter/limit-1519 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1519 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1519 inet6/filter/limit-1519 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1519 -m limit --limit 1/second -j LOG Filter 1521 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1520 inet/filter/limit-1520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1520 -j TEE --gateway 10.0.0.1 inet/filter/limit-1520 -j TEE --gateway 10.0.0.2 inet/filter/limit-1520 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1520 inet6/filter/limit-1520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1520 -j TEE --gateway fc00::2 inet6/filter/limit-1520 -j ACCEPT Filter 1522 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1521 inet/filter/limit-1521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1521 -j TEE --gateway 10.0.0.1 inet/filter/limit-1521 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1521 inet6/filter/limit-1521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1521 -j TEE --gateway fc00::2 Filter 1523 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1522 inet/filter/limit-1522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1522 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1522 inet6/filter/limit-1522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1522 -j ACCEPT Filter 1524 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1525 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1524 inet/filter/limit-1524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1524 -m limit --limit 12/minute -j ULOG inet/filter/limit-1524 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1524 inet6/filter/limit-1524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1524 -j ACCEPT Filter 1526 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1525 inet/filter/limit-1525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1525 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1525 inet6/filter/limit-1525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1527 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1526 inet/filter/limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 inet/filter/limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-830 -m limit --limit 1/second -j LOG inet/filter/logdrop-830 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1526 inet6/filter/limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 inet6/filter/limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-830 -m limit --limit 1/second -j LOG inet6/filter/logdrop-830 -j DROP Filter 1528 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1527 inet/filter/limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 inet/filter/limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-831 -m limit --limit 1/second -j LOG inet/filter/logdrop-831 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1527 inet6/filter/limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 inet6/filter/limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-831 -m limit --limit 1/second -j LOG inet6/filter/logdrop-831 -j DROP Filter 1529 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1528 inet/filter/limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-832 inet/filter/limit-1528 -m limit --limit 1/second -j LOG inet/filter/limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-832 -m limit --limit 1/second -j LOG inet/filter/logdrop-832 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1528 inet6/filter/limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-832 inet6/filter/limit-1528 -m limit --limit 1/second -j LOG inet6/filter/limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-832 -m limit --limit 1/second -j LOG inet6/filter/logdrop-832 -j DROP Filter 1530 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1529 inet/filter/limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-833 inet/filter/limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-833 -m limit --limit 1/second -j LOG inet/filter/logdrop-833 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1529 inet6/filter/limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-833 inet6/filter/limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-833 -m limit --limit 1/second -j LOG inet6/filter/logdrop-833 -j DROP Filter 1531 {"conn-limit":{"interval":5},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1530 inet/filter/limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-834 inet/filter/limit-1530 -j TEE --gateway 10.0.0.1 inet/filter/limit-1530 -j TEE --gateway 10.0.0.2 inet/filter/limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-834 -m limit --limit 1/second -j LOG inet/filter/logdrop-834 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1530 inet6/filter/limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-834 inet6/filter/limit-1530 -j TEE --gateway fc00::2 inet6/filter/limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-834 -m limit --limit 1/second -j LOG inet6/filter/logdrop-834 -j DROP Filter 1532 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1531 inet/filter/limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-835 inet/filter/limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-835 -m limit --limit 1/second -j LOG inet/filter/logdrop-835 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1531 inet6/filter/limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-835 inet6/filter/limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-835 -m limit --limit 1/second -j LOG inet6/filter/logdrop-835 -j DROP Filter 1533 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1532 inet/filter/limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-836 inet/filter/limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-836 -m limit --limit 1/second -j LOG inet/filter/logdrop-836 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1532 inet6/filter/limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-836 inet6/filter/limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-836 -m limit --limit 1/second -j LOG inet6/filter/logdrop-836 -j DROP Filter 1534 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1533 inet/filter/limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-837 inet/filter/limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-837 -m limit --limit 1/second -j LOG inet/filter/logdrop-837 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1533 inet6/filter/limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-837 inet6/filter/limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-837 -m limit --limit 1/second -j LOG inet6/filter/logdrop-837 -j DROP Filter 1535 {"conn-limit":{"interval":5},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1534 inet/filter/limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-838 inet/filter/limit-1534 -m limit --limit 12/minute -j ULOG inet/filter/limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-838 -m limit --limit 1/second -j LOG inet/filter/logdrop-838 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1534 inet6/filter/limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-838 inet6/filter/limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-838 -m limit --limit 1/second -j LOG inet6/filter/logdrop-838 -j DROP Filter 1536 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1535 inet/filter/limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-839 inet/filter/limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-839 -m limit --limit 1/second -j LOG inet/filter/logdrop-839 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1535 inet6/filter/limit-1535 -m recent --name limit-1535 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-839 inet6/filter/logdrop-839 -m limit --limit 1/second -j LOG inet6/filter/logdrop-839 -j DROP Filter 1537 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1536 inet/filter/limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 inet/filter/limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-840 -m limit --limit 1/second -j LOG inet/filter/logdrop-840 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1536 inet6/filter/limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 inet6/filter/limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-840 -m limit --limit 1/second -j LOG inet6/filter/logdrop-840 -j DROP Filter 1538 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1537 inet/filter/limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 inet/filter/limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-841 -m limit --limit 1/second -j LOG inet/filter/logdrop-841 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1537 inet6/filter/limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 inet6/filter/limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-841 -m limit --limit 1/second -j LOG inet6/filter/logdrop-841 -j DROP Filter 1539 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1538 inet/filter/limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 inet/filter/limit-1538 -m limit --limit 1/second -j LOG inet/filter/limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-842 -m limit --limit 1/second -j LOG inet/filter/logdrop-842 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1538 inet6/filter/limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 inet6/filter/limit-1538 -m limit --limit 1/second -j LOG inet6/filter/limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-842 -m limit --limit 1/second -j LOG inet6/filter/logdrop-842 -j DROP Filter 1540 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1539 inet/filter/limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 inet/filter/limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-843 -m limit --limit 1/second -j LOG inet/filter/logdrop-843 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1539 inet6/filter/limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 inet6/filter/limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-843 -m limit --limit 1/second -j LOG inet6/filter/logdrop-843 -j DROP Filter 1541 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1540 inet/filter/limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 inet/filter/limit-1540 -j TEE --gateway 10.0.0.1 inet/filter/limit-1540 -j TEE --gateway 10.0.0.2 inet/filter/limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-844 -m limit --limit 1/second -j LOG inet/filter/logdrop-844 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1540 inet6/filter/limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 inet6/filter/limit-1540 -j TEE --gateway fc00::2 inet6/filter/limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-844 -m limit --limit 1/second -j LOG inet6/filter/logdrop-844 -j DROP Filter 1542 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1541 inet/filter/limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 inet/filter/limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-845 -m limit --limit 1/second -j LOG inet/filter/logdrop-845 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1541 inet6/filter/limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 inet6/filter/limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-845 -m limit --limit 1/second -j LOG inet6/filter/logdrop-845 -j DROP Filter 1543 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1542 inet/filter/limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 inet/filter/limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-846 -m limit --limit 1/second -j LOG inet/filter/logdrop-846 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1542 inet6/filter/limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 inet6/filter/limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-846 -m limit --limit 1/second -j LOG inet6/filter/logdrop-846 -j DROP Filter 1544 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1543 inet/filter/limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 inet/filter/limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-847 -m limit --limit 1/second -j LOG inet/filter/logdrop-847 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1543 inet6/filter/limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 inet6/filter/limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-847 -m limit --limit 1/second -j LOG inet6/filter/logdrop-847 -j DROP Filter 1545 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1544 inet/filter/limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-848 inet/filter/limit-1544 -m limit --limit 12/minute -j ULOG inet/filter/limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-848 -m limit --limit 1/second -j LOG inet/filter/logdrop-848 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1544 inet6/filter/limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-848 inet6/filter/limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-848 -m limit --limit 1/second -j LOG inet6/filter/logdrop-848 -j DROP Filter 1546 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1545 inet/filter/limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-849 inet/filter/limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-849 -m limit --limit 1/second -j LOG inet/filter/logdrop-849 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1545 inet6/filter/limit-1545 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-849 inet6/filter/logdrop-849 -m limit --limit 1/second -j LOG inet6/filter/logdrop-849 -j DROP Filter 1547 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1546 inet/filter/limit-1546 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 inet/filter/limit-1546 -j ACCEPT inet/filter/logdrop-850 -m limit --limit 1/second -j LOG inet/filter/logdrop-850 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1546 inet6/filter/limit-1546 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 inet6/filter/limit-1546 -j ACCEPT inet6/filter/logdrop-850 -m limit --limit 1/second -j LOG inet6/filter/logdrop-850 -j DROP Filter 1548 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 inet/filter/logdrop-851 -m limit --limit 1/second -j LOG inet/filter/logdrop-851 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 inet6/filter/logdrop-851 -m limit --limit 1/second -j LOG inet6/filter/logdrop-851 -j DROP Filter 1549 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1548 inet/filter/limit-1548 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 inet/filter/limit-1548 -m limit --limit 1/second -j LOG inet/filter/limit-1548 -j ACCEPT inet/filter/logdrop-852 -m limit --limit 1/second -j LOG inet/filter/logdrop-852 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1548 inet6/filter/limit-1548 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 inet6/filter/limit-1548 -m limit --limit 1/second -j LOG inet6/filter/limit-1548 -j ACCEPT inet6/filter/logdrop-852 -m limit --limit 1/second -j LOG inet6/filter/logdrop-852 -j DROP Filter 1550 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1549 inet/filter/limit-1549 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 inet/filter/limit-1549 -m limit --limit 1/second -j LOG inet/filter/logdrop-853 -m limit --limit 1/second -j LOG inet/filter/logdrop-853 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1549 inet6/filter/limit-1549 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 inet6/filter/limit-1549 -m limit --limit 1/second -j LOG inet6/filter/logdrop-853 -m limit --limit 1/second -j LOG inet6/filter/logdrop-853 -j DROP Filter 1551 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1550 inet/filter/limit-1550 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 inet/filter/limit-1550 -j TEE --gateway 10.0.0.1 inet/filter/limit-1550 -j TEE --gateway 10.0.0.2 inet/filter/limit-1550 -j ACCEPT inet/filter/logdrop-854 -m limit --limit 1/second -j LOG inet/filter/logdrop-854 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1550 inet6/filter/limit-1550 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 inet6/filter/limit-1550 -j TEE --gateway fc00::2 inet6/filter/limit-1550 -j ACCEPT inet6/filter/logdrop-854 -m limit --limit 1/second -j LOG inet6/filter/logdrop-854 -j DROP Filter 1552 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1551 inet/filter/limit-1551 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 inet/filter/limit-1551 -j TEE --gateway 10.0.0.1 inet/filter/limit-1551 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-855 -m limit --limit 1/second -j LOG inet/filter/logdrop-855 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1551 inet6/filter/limit-1551 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 inet6/filter/limit-1551 -j TEE --gateway fc00::2 inet6/filter/logdrop-855 -m limit --limit 1/second -j LOG inet6/filter/logdrop-855 -j DROP Filter 1553 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1552 inet/filter/limit-1552 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-856 inet/filter/limit-1552 -j ACCEPT inet/filter/logdrop-856 -m limit --limit 1/second -j LOG inet/filter/logdrop-856 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1552 inet6/filter/limit-1552 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-856 inet6/filter/limit-1552 -j ACCEPT inet6/filter/logdrop-856 -m limit --limit 1/second -j LOG inet6/filter/logdrop-856 -j DROP Filter 1554 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-857 inet/filter/logdrop-857 -m limit --limit 1/second -j LOG inet/filter/logdrop-857 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-857 inet6/filter/logdrop-857 -m limit --limit 1/second -j LOG inet6/filter/logdrop-857 -j DROP Filter 1555 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1554 inet/filter/limit-1554 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-858 inet/filter/limit-1554 -m limit --limit 12/minute -j ULOG inet/filter/limit-1554 -j ACCEPT inet/filter/logdrop-858 -m limit --limit 1/second -j LOG inet/filter/logdrop-858 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1554 inet6/filter/limit-1554 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-858 inet6/filter/limit-1554 -j ACCEPT inet6/filter/logdrop-858 -m limit --limit 1/second -j LOG inet6/filter/logdrop-858 -j DROP Filter 1556 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1555 inet/filter/limit-1555 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-859 inet/filter/limit-1555 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-859 -m limit --limit 1/second -j LOG inet/filter/logdrop-859 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1555 inet6/filter/limit-1555 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-859 inet6/filter/logdrop-859 -m limit --limit 1/second -j LOG inet6/filter/logdrop-859 -j DROP Filter 1557 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1556 inet/filter/limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-860 inet/filter/limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-860 -m limit --limit 1/second -j LOG inet/filter/logdrop-860 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1556 inet6/filter/limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-860 inet6/filter/limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-860 -m limit --limit 1/second -j LOG inet6/filter/logdrop-860 -j DROP Filter 1558 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1557 inet/filter/limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-861 inet/filter/limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-861 -m limit --limit 1/second -j LOG inet/filter/logdrop-861 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1557 inet6/filter/limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-861 inet6/filter/limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-861 -m limit --limit 1/second -j LOG inet6/filter/logdrop-861 -j DROP Filter 1559 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1558 inet/filter/limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-862 inet/filter/limit-1558 -m limit --limit 1/second -j LOG inet/filter/limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-862 -m limit --limit 1/second -j LOG inet/filter/logdrop-862 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1558 inet6/filter/limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-862 inet6/filter/limit-1558 -m limit --limit 1/second -j LOG inet6/filter/limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-862 -m limit --limit 1/second -j LOG inet6/filter/logdrop-862 -j DROP Filter 1560 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1559 inet/filter/limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-863 inet/filter/limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-863 -m limit --limit 1/second -j LOG inet/filter/logdrop-863 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1559 inet6/filter/limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-863 inet6/filter/limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-863 -m limit --limit 1/second -j LOG inet6/filter/logdrop-863 -j DROP Filter 1561 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1560 inet/filter/limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-864 inet/filter/limit-1560 -j TEE --gateway 10.0.0.1 inet/filter/limit-1560 -j TEE --gateway 10.0.0.2 inet/filter/limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-864 -m limit --limit 1/second -j LOG inet/filter/logdrop-864 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1560 inet6/filter/limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-864 inet6/filter/limit-1560 -j TEE --gateway fc00::2 inet6/filter/limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-864 -m limit --limit 1/second -j LOG inet6/filter/logdrop-864 -j DROP Filter 1562 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1561 inet/filter/limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-865 inet/filter/limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-865 -m limit --limit 1/second -j LOG inet/filter/logdrop-865 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1561 inet6/filter/limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-865 inet6/filter/limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-865 -m limit --limit 1/second -j LOG inet6/filter/logdrop-865 -j DROP Filter 1563 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1562 inet/filter/limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-866 inet/filter/limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-866 -m limit --limit 1/second -j LOG inet/filter/logdrop-866 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1562 inet6/filter/limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-866 inet6/filter/limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-866 -m limit --limit 1/second -j LOG inet6/filter/logdrop-866 -j DROP Filter 1564 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1563 inet/filter/limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-867 inet/filter/limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-867 -m limit --limit 1/second -j LOG inet/filter/logdrop-867 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1563 inet6/filter/limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-867 inet6/filter/limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-867 -m limit --limit 1/second -j LOG inet6/filter/logdrop-867 -j DROP Filter 1565 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1564 inet/filter/limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-868 inet/filter/limit-1564 -m limit --limit 12/minute -j ULOG inet/filter/limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-868 -m limit --limit 1/second -j LOG inet/filter/logdrop-868 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1564 inet6/filter/limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-868 inet6/filter/limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-868 -m limit --limit 1/second -j LOG inet6/filter/logdrop-868 -j DROP Filter 1566 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1565 inet/filter/limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-869 inet/filter/limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-869 -m limit --limit 1/second -j LOG inet/filter/logdrop-869 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1565 inet6/filter/limit-1565 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-869 inet6/filter/logdrop-869 -m limit --limit 1/second -j LOG inet6/filter/logdrop-869 -j DROP Filter 1567 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1566 inet/filter/limit-1566 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 inet/filter/limit-1566 -j ACCEPT inet/filter/logdrop-870 -m limit --limit 1/second -j LOG inet/filter/logdrop-870 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1566 inet6/filter/limit-1566 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-870 inet6/filter/limit-1566 -j ACCEPT inet6/filter/logdrop-870 -m limit --limit 1/second -j LOG inet6/filter/logdrop-870 -j DROP Filter 1568 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 inet/filter/logdrop-871 -m limit --limit 1/second -j LOG inet/filter/logdrop-871 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-871 inet6/filter/logdrop-871 -m limit --limit 1/second -j LOG inet6/filter/logdrop-871 -j DROP Filter 1569 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1568 inet/filter/limit-1568 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-872 inet/filter/limit-1568 -m limit --limit 1/second -j LOG inet/filter/limit-1568 -j ACCEPT inet/filter/logdrop-872 -m limit --limit 1/second -j LOG inet/filter/logdrop-872 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1568 inet6/filter/limit-1568 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-872 inet6/filter/limit-1568 -m limit --limit 1/second -j LOG inet6/filter/limit-1568 -j ACCEPT inet6/filter/logdrop-872 -m limit --limit 1/second -j LOG inet6/filter/logdrop-872 -j DROP Filter 1570 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1569 inet/filter/limit-1569 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-873 inet/filter/limit-1569 -m limit --limit 1/second -j LOG inet/filter/logdrop-873 -m limit --limit 1/second -j LOG inet/filter/logdrop-873 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1569 inet6/filter/limit-1569 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-873 inet6/filter/limit-1569 -m limit --limit 1/second -j LOG inet6/filter/logdrop-873 -m limit --limit 1/second -j LOG inet6/filter/logdrop-873 -j DROP Filter 1571 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1570 inet/filter/limit-1570 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-874 inet/filter/limit-1570 -j TEE --gateway 10.0.0.1 inet/filter/limit-1570 -j TEE --gateway 10.0.0.2 inet/filter/limit-1570 -j ACCEPT inet/filter/logdrop-874 -m limit --limit 1/second -j LOG inet/filter/logdrop-874 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1570 inet6/filter/limit-1570 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-874 inet6/filter/limit-1570 -j TEE --gateway fc00::2 inet6/filter/limit-1570 -j ACCEPT inet6/filter/logdrop-874 -m limit --limit 1/second -j LOG inet6/filter/logdrop-874 -j DROP Filter 1572 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1571 inet/filter/limit-1571 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-875 inet/filter/limit-1571 -j TEE --gateway 10.0.0.1 inet/filter/limit-1571 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-875 -m limit --limit 1/second -j LOG inet/filter/logdrop-875 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1571 inet6/filter/limit-1571 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-875 inet6/filter/limit-1571 -j TEE --gateway fc00::2 inet6/filter/logdrop-875 -m limit --limit 1/second -j LOG inet6/filter/logdrop-875 -j DROP Filter 1573 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1572 inet/filter/limit-1572 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-876 inet/filter/limit-1572 -j ACCEPT inet/filter/logdrop-876 -m limit --limit 1/second -j LOG inet/filter/logdrop-876 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1572 inet6/filter/limit-1572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-876 inet6/filter/limit-1572 -j ACCEPT inet6/filter/logdrop-876 -m limit --limit 1/second -j LOG inet6/filter/logdrop-876 -j DROP Filter 1574 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-877 inet/filter/logdrop-877 -m limit --limit 1/second -j LOG inet/filter/logdrop-877 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-877 inet6/filter/logdrop-877 -m limit --limit 1/second -j LOG inet6/filter/logdrop-877 -j DROP Filter 1575 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1574 inet/filter/limit-1574 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-878 inet/filter/limit-1574 -m limit --limit 12/minute -j ULOG inet/filter/limit-1574 -j ACCEPT inet/filter/logdrop-878 -m limit --limit 1/second -j LOG inet/filter/logdrop-878 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1574 inet6/filter/limit-1574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-878 inet6/filter/limit-1574 -j ACCEPT inet6/filter/logdrop-878 -m limit --limit 1/second -j LOG inet6/filter/logdrop-878 -j DROP Filter 1576 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1575 inet/filter/limit-1575 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-879 inet/filter/limit-1575 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-879 -m limit --limit 1/second -j LOG inet/filter/logdrop-879 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1575 inet6/filter/limit-1575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-879 inet6/filter/logdrop-879 -m limit --limit 1/second -j LOG inet6/filter/logdrop-879 -j DROP Filter 1577 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1576 inet/filter/limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-880 inet/filter/limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-880 -m limit --limit 1/second -j LOG inet/filter/logdrop-880 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1576 inet6/filter/limit-1576 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-880 inet6/filter/limit-1576 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-880 -m limit --limit 1/second -j LOG inet6/filter/logdrop-880 -j DROP Filter 1578 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1577 inet/filter/limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-881 inet/filter/limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-881 -m limit --limit 1/second -j LOG inet/filter/logdrop-881 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1577 inet6/filter/limit-1577 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-881 inet6/filter/limit-1577 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-881 -m limit --limit 1/second -j LOG inet6/filter/logdrop-881 -j DROP Filter 1579 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1578 inet/filter/limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-882 inet/filter/limit-1578 -m limit --limit 1/second -j LOG inet/filter/limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-882 -m limit --limit 1/second -j LOG inet/filter/logdrop-882 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1578 inet6/filter/limit-1578 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-882 inet6/filter/limit-1578 -m limit --limit 1/second -j LOG inet6/filter/limit-1578 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-882 -m limit --limit 1/second -j LOG inet6/filter/logdrop-882 -j DROP Filter 1580 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1579 inet/filter/limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-883 inet/filter/limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-883 -m limit --limit 1/second -j LOG inet/filter/logdrop-883 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1579 inet6/filter/limit-1579 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-883 inet6/filter/limit-1579 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-883 -m limit --limit 1/second -j LOG inet6/filter/logdrop-883 -j DROP Filter 1581 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1580 inet/filter/limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-884 inet/filter/limit-1580 -j TEE --gateway 10.0.0.1 inet/filter/limit-1580 -j TEE --gateway 10.0.0.2 inet/filter/limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-884 -m limit --limit 1/second -j LOG inet/filter/logdrop-884 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1580 inet6/filter/limit-1580 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-884 inet6/filter/limit-1580 -j TEE --gateway fc00::2 inet6/filter/limit-1580 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-884 -m limit --limit 1/second -j LOG inet6/filter/logdrop-884 -j DROP Filter 1582 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1581 inet/filter/limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-885 inet/filter/limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-885 -m limit --limit 1/second -j LOG inet/filter/logdrop-885 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1581 inet6/filter/limit-1581 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-885 inet6/filter/limit-1581 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-885 -m limit --limit 1/second -j LOG inet6/filter/logdrop-885 -j DROP Filter 1583 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1582 inet/filter/limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-886 inet/filter/limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-886 -m limit --limit 1/second -j LOG inet/filter/logdrop-886 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1582 inet6/filter/limit-1582 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-886 inet6/filter/limit-1582 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-886 -m limit --limit 1/second -j LOG inet6/filter/logdrop-886 -j DROP Filter 1584 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1583 inet/filter/limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-887 inet/filter/limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-887 -m limit --limit 1/second -j LOG inet/filter/logdrop-887 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1583 inet6/filter/limit-1583 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-887 inet6/filter/limit-1583 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-887 -m limit --limit 1/second -j LOG inet6/filter/logdrop-887 -j DROP Filter 1585 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1584 inet/filter/limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-888 inet/filter/limit-1584 -m limit --limit 12/minute -j ULOG inet/filter/limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-888 -m limit --limit 1/second -j LOG inet/filter/logdrop-888 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1584 inet6/filter/limit-1584 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-888 inet6/filter/limit-1584 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-888 -m limit --limit 1/second -j LOG inet6/filter/logdrop-888 -j DROP Filter 1586 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1585 inet/filter/limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-889 inet/filter/limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-889 -m limit --limit 1/second -j LOG inet/filter/logdrop-889 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1585 inet6/filter/limit-1585 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-889 inet6/filter/logdrop-889 -m limit --limit 1/second -j LOG inet6/filter/logdrop-889 -j DROP Filter 1587 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1586 inet/filter/limit-1586 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-890 inet/filter/limit-1586 -j ACCEPT inet/filter/logdrop-890 -m limit --limit 1/second -j LOG inet/filter/logdrop-890 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1586 inet6/filter/limit-1586 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-890 inet6/filter/limit-1586 -j ACCEPT inet6/filter/logdrop-890 -m limit --limit 1/second -j LOG inet6/filter/logdrop-890 -j DROP Filter 1588 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-891 inet/filter/logdrop-891 -m limit --limit 1/second -j LOG inet/filter/logdrop-891 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-891 inet6/filter/logdrop-891 -m limit --limit 1/second -j LOG inet6/filter/logdrop-891 -j DROP Filter 1589 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1588 inet/filter/limit-1588 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-892 inet/filter/limit-1588 -m limit --limit 1/second -j LOG inet/filter/limit-1588 -j ACCEPT inet/filter/logdrop-892 -m limit --limit 1/second -j LOG inet/filter/logdrop-892 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1588 inet6/filter/limit-1588 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-892 inet6/filter/limit-1588 -m limit --limit 1/second -j LOG inet6/filter/limit-1588 -j ACCEPT inet6/filter/logdrop-892 -m limit --limit 1/second -j LOG inet6/filter/logdrop-892 -j DROP Filter 1590 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1589 inet/filter/limit-1589 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-893 inet/filter/limit-1589 -m limit --limit 1/second -j LOG inet/filter/logdrop-893 -m limit --limit 1/second -j LOG inet/filter/logdrop-893 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1589 inet6/filter/limit-1589 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-893 inet6/filter/limit-1589 -m limit --limit 1/second -j LOG inet6/filter/logdrop-893 -m limit --limit 1/second -j LOG inet6/filter/logdrop-893 -j DROP Filter 1591 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1590 inet/filter/limit-1590 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-894 inet/filter/limit-1590 -j TEE --gateway 10.0.0.1 inet/filter/limit-1590 -j TEE --gateway 10.0.0.2 inet/filter/limit-1590 -j ACCEPT inet/filter/logdrop-894 -m limit --limit 1/second -j LOG inet/filter/logdrop-894 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1590 inet6/filter/limit-1590 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-894 inet6/filter/limit-1590 -j TEE --gateway fc00::2 inet6/filter/limit-1590 -j ACCEPT inet6/filter/logdrop-894 -m limit --limit 1/second -j LOG inet6/filter/logdrop-894 -j DROP Filter 1592 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1591 inet/filter/limit-1591 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-895 inet/filter/limit-1591 -j TEE --gateway 10.0.0.1 inet/filter/limit-1591 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-895 -m limit --limit 1/second -j LOG inet/filter/logdrop-895 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1591 inet6/filter/limit-1591 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-895 inet6/filter/limit-1591 -j TEE --gateway fc00::2 inet6/filter/logdrop-895 -m limit --limit 1/second -j LOG inet6/filter/logdrop-895 -j DROP Filter 1593 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1592 inet/filter/limit-1592 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-896 inet/filter/limit-1592 -j ACCEPT inet/filter/logdrop-896 -m limit --limit 1/second -j LOG inet/filter/logdrop-896 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1592 inet6/filter/limit-1592 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-896 inet6/filter/limit-1592 -j ACCEPT inet6/filter/logdrop-896 -m limit --limit 1/second -j LOG inet6/filter/logdrop-896 -j DROP Filter 1594 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-897 inet/filter/logdrop-897 -m limit --limit 1/second -j LOG inet/filter/logdrop-897 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-897 inet6/filter/logdrop-897 -m limit --limit 1/second -j LOG inet6/filter/logdrop-897 -j DROP Filter 1595 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1594 inet/filter/limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-898 inet/filter/limit-1594 -m limit --limit 12/minute -j ULOG inet/filter/limit-1594 -j ACCEPT inet/filter/logdrop-898 -m limit --limit 1/second -j LOG inet/filter/logdrop-898 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1594 inet6/filter/limit-1594 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-898 inet6/filter/limit-1594 -j ACCEPT inet6/filter/logdrop-898 -m limit --limit 1/second -j LOG inet6/filter/logdrop-898 -j DROP Filter 1596 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1595 inet/filter/limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-899 inet/filter/limit-1595 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-899 -m limit --limit 1/second -j LOG inet/filter/logdrop-899 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1595 inet6/filter/limit-1595 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-899 inet6/filter/logdrop-899 -m limit --limit 1/second -j LOG inet6/filter/logdrop-899 -j DROP Filter 1597 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1596 inet/filter/limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-900 inet/filter/limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-900 -m limit --limit 1/second -j LOG inet/filter/logdrop-900 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1596 inet6/filter/limit-1596 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-900 inet6/filter/limit-1596 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-900 -m limit --limit 1/second -j LOG inet6/filter/logdrop-900 -j DROP Filter 1598 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1597 inet/filter/limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-901 inet/filter/limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-901 -m limit --limit 1/second -j LOG inet/filter/logdrop-901 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1597 inet6/filter/limit-1597 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-901 inet6/filter/limit-1597 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-901 -m limit --limit 1/second -j LOG inet6/filter/logdrop-901 -j DROP Filter 1599 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1598 inet/filter/limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-902 inet/filter/limit-1598 -m limit --limit 1/second -j LOG inet/filter/limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-902 -m limit --limit 1/second -j LOG inet/filter/logdrop-902 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1598 inet6/filter/limit-1598 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-902 inet6/filter/limit-1598 -m limit --limit 1/second -j LOG inet6/filter/limit-1598 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-902 -m limit --limit 1/second -j LOG inet6/filter/logdrop-902 -j DROP Filter 1600 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1599 inet/filter/limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-903 inet/filter/limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-903 -m limit --limit 1/second -j LOG inet/filter/logdrop-903 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1599 inet6/filter/limit-1599 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-903 inet6/filter/limit-1599 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-903 -m limit --limit 1/second -j LOG inet6/filter/logdrop-903 -j DROP Filter 1601 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1600 inet/filter/limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-904 inet/filter/limit-1600 -j TEE --gateway 10.0.0.1 inet/filter/limit-1600 -j TEE --gateway 10.0.0.2 inet/filter/limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-904 -m limit --limit 1/second -j LOG inet/filter/logdrop-904 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1600 inet6/filter/limit-1600 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-904 inet6/filter/limit-1600 -j TEE --gateway fc00::2 inet6/filter/limit-1600 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-904 -m limit --limit 1/second -j LOG inet6/filter/logdrop-904 -j DROP Filter 1602 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1601 inet/filter/limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-905 inet/filter/limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-905 -m limit --limit 1/second -j LOG inet/filter/logdrop-905 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1601 inet6/filter/limit-1601 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-905 inet6/filter/limit-1601 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-905 -m limit --limit 1/second -j LOG inet6/filter/logdrop-905 -j DROP Filter 1603 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1602 inet/filter/limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-906 inet/filter/limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-906 -m limit --limit 1/second -j LOG inet/filter/logdrop-906 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1602 inet6/filter/limit-1602 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-906 inet6/filter/limit-1602 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-906 -m limit --limit 1/second -j LOG inet6/filter/logdrop-906 -j DROP Filter 1604 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1603 inet/filter/limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-907 inet/filter/limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-907 -m limit --limit 1/second -j LOG inet/filter/logdrop-907 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1603 inet6/filter/limit-1603 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-907 inet6/filter/limit-1603 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-907 -m limit --limit 1/second -j LOG inet6/filter/logdrop-907 -j DROP Filter 1605 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1604 inet/filter/limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-908 inet/filter/limit-1604 -m limit --limit 12/minute -j ULOG inet/filter/limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-908 -m limit --limit 1/second -j LOG inet/filter/logdrop-908 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1604 inet6/filter/limit-1604 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-908 inet6/filter/limit-1604 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-908 -m limit --limit 1/second -j LOG inet6/filter/logdrop-908 -j DROP Filter 1606 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1605 inet/filter/limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-909 inet/filter/limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-909 -m limit --limit 1/second -j LOG inet/filter/logdrop-909 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1605 inet6/filter/limit-1605 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-909 inet6/filter/logdrop-909 -m limit --limit 1/second -j LOG inet6/filter/logdrop-909 -j DROP Filter 1607 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1606 inet/filter/limit-1606 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-910 inet/filter/limit-1606 -j ACCEPT inet/filter/logdrop-910 -m limit --limit 1/second -j LOG inet/filter/logdrop-910 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1606 inet6/filter/limit-1606 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-910 inet6/filter/limit-1606 -j ACCEPT inet6/filter/logdrop-910 -m limit --limit 1/second -j LOG inet6/filter/logdrop-910 -j DROP Filter 1608 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-911 inet/filter/logdrop-911 -m limit --limit 1/second -j LOG inet/filter/logdrop-911 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-911 inet6/filter/logdrop-911 -m limit --limit 1/second -j LOG inet6/filter/logdrop-911 -j DROP Filter 1609 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1608 inet/filter/limit-1608 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-912 inet/filter/limit-1608 -m limit --limit 1/second -j LOG inet/filter/limit-1608 -j ACCEPT inet/filter/logdrop-912 -m limit --limit 1/second -j LOG inet/filter/logdrop-912 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1608 inet6/filter/limit-1608 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-912 inet6/filter/limit-1608 -m limit --limit 1/second -j LOG inet6/filter/limit-1608 -j ACCEPT inet6/filter/logdrop-912 -m limit --limit 1/second -j LOG inet6/filter/logdrop-912 -j DROP Filter 1610 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1609 inet/filter/limit-1609 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-913 inet/filter/limit-1609 -m limit --limit 1/second -j LOG inet/filter/logdrop-913 -m limit --limit 1/second -j LOG inet/filter/logdrop-913 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1609 inet6/filter/limit-1609 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-913 inet6/filter/limit-1609 -m limit --limit 1/second -j LOG inet6/filter/logdrop-913 -m limit --limit 1/second -j LOG inet6/filter/logdrop-913 -j DROP Filter 1611 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1610 inet/filter/limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-914 inet/filter/limit-1610 -j TEE --gateway 10.0.0.1 inet/filter/limit-1610 -j TEE --gateway 10.0.0.2 inet/filter/limit-1610 -j ACCEPT inet/filter/logdrop-914 -m limit --limit 1/second -j LOG inet/filter/logdrop-914 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1610 inet6/filter/limit-1610 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-914 inet6/filter/limit-1610 -j TEE --gateway fc00::2 inet6/filter/limit-1610 -j ACCEPT inet6/filter/logdrop-914 -m limit --limit 1/second -j LOG inet6/filter/logdrop-914 -j DROP Filter 1612 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1611 inet/filter/limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-915 inet/filter/limit-1611 -j TEE --gateway 10.0.0.1 inet/filter/limit-1611 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-915 -m limit --limit 1/second -j LOG inet/filter/logdrop-915 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1611 inet6/filter/limit-1611 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-915 inet6/filter/limit-1611 -j TEE --gateway fc00::2 inet6/filter/logdrop-915 -m limit --limit 1/second -j LOG inet6/filter/logdrop-915 -j DROP Filter 1613 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1612 inet/filter/limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-916 inet/filter/limit-1612 -j ACCEPT inet/filter/logdrop-916 -m limit --limit 1/second -j LOG inet/filter/logdrop-916 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1612 inet6/filter/limit-1612 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-916 inet6/filter/limit-1612 -j ACCEPT inet6/filter/logdrop-916 -m limit --limit 1/second -j LOG inet6/filter/logdrop-916 -j DROP Filter 1614 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-917 inet/filter/logdrop-917 -m limit --limit 1/second -j LOG inet/filter/logdrop-917 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-917 inet6/filter/logdrop-917 -m limit --limit 1/second -j LOG inet6/filter/logdrop-917 -j DROP Filter 1615 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1614 inet/filter/limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-918 inet/filter/limit-1614 -m limit --limit 12/minute -j ULOG inet/filter/limit-1614 -j ACCEPT inet/filter/logdrop-918 -m limit --limit 1/second -j LOG inet/filter/logdrop-918 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1614 inet6/filter/limit-1614 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-918 inet6/filter/limit-1614 -j ACCEPT inet6/filter/logdrop-918 -m limit --limit 1/second -j LOG inet6/filter/logdrop-918 -j DROP Filter 1616 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1615 inet/filter/limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-919 inet/filter/limit-1615 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-919 -m limit --limit 1/second -j LOG inet/filter/logdrop-919 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1615 inet6/filter/limit-1615 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-919 inet6/filter/logdrop-919 -m limit --limit 1/second -j LOG inet6/filter/logdrop-919 -j DROP Filter 1617 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1616 inet/filter/limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-920 inet/filter/limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-920 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-920 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-920 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1616 inet6/filter/limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-920 inet6/filter/limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-920 -j TEE --gateway fc00::2 inet6/filter/logdrop-920 -j DROP Filter 1618 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1617 inet/filter/limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-921 inet/filter/limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-921 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-921 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-921 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1617 inet6/filter/limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-921 inet6/filter/limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-921 -j TEE --gateway fc00::2 inet6/filter/logdrop-921 -j DROP Filter 1619 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1618 inet/filter/limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-922 inet/filter/limit-1618 -m limit --limit 1/second -j LOG inet/filter/limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-922 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-922 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-922 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1618 inet6/filter/limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-922 inet6/filter/limit-1618 -m limit --limit 1/second -j LOG inet6/filter/limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-922 -j TEE --gateway fc00::2 inet6/filter/logdrop-922 -j DROP Filter 1620 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1619 inet/filter/limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-923 inet/filter/limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-923 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-923 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-923 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1619 inet6/filter/limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-923 inet6/filter/limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-923 -j TEE --gateway fc00::2 inet6/filter/logdrop-923 -j DROP Filter 1621 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1620 inet/filter/limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-924 inet/filter/limit-1620 -j TEE --gateway 10.0.0.1 inet/filter/limit-1620 -j TEE --gateway 10.0.0.2 inet/filter/limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-924 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-924 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-924 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1620 inet6/filter/limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-924 inet6/filter/limit-1620 -j TEE --gateway fc00::2 inet6/filter/limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-924 -j TEE --gateway fc00::2 inet6/filter/logdrop-924 -j DROP Filter 1622 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1621 inet/filter/limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-925 inet/filter/limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-925 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-925 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-925 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1621 inet6/filter/limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-925 inet6/filter/limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-925 -j TEE --gateway fc00::2 inet6/filter/logdrop-925 -j DROP Filter 1623 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1622 inet/filter/limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-926 inet/filter/limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-926 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-926 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-926 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1622 inet6/filter/limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-926 inet6/filter/limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-926 -j TEE --gateway fc00::2 inet6/filter/logdrop-926 -j DROP Filter 1624 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1623 inet/filter/limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-927 inet/filter/limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-927 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-927 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-927 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1623 inet6/filter/limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-927 inet6/filter/limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-927 -j TEE --gateway fc00::2 inet6/filter/logdrop-927 -j DROP Filter 1625 {"conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1624 inet/filter/limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-928 inet/filter/limit-1624 -m limit --limit 12/minute -j ULOG inet/filter/limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-928 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-928 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-928 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1624 inet6/filter/limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-928 inet6/filter/limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-928 -j TEE --gateway fc00::2 inet6/filter/logdrop-928 -j DROP Filter 1626 {"action":"pass","conn-limit":{"interval":5,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1625 inet/filter/limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-929 inet/filter/limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-929 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-929 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-929 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1625 inet6/filter/limit-1625 -m recent --name limit-1625 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-929 inet6/filter/logdrop-929 -j TEE --gateway fc00::2 inet6/filter/logdrop-929 -j DROP Filter 1627 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1626 inet/filter/limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-930 inet/filter/limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-930 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-930 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-930 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1626 inet6/filter/limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-930 inet6/filter/limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-930 -j TEE --gateway fc00::2 inet6/filter/logdrop-930 -j DROP Filter 1628 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1627 inet/filter/limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-931 inet/filter/limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-931 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-931 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-931 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1627 inet6/filter/limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-931 inet6/filter/limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-931 -j TEE --gateway fc00::2 inet6/filter/logdrop-931 -j DROP Filter 1629 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1628 inet/filter/limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-932 inet/filter/limit-1628 -m limit --limit 1/second -j LOG inet/filter/limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-932 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-932 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-932 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1628 inet6/filter/limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-932 inet6/filter/limit-1628 -m limit --limit 1/second -j LOG inet6/filter/limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-932 -j TEE --gateway fc00::2 inet6/filter/logdrop-932 -j DROP Filter 1630 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1629 inet/filter/limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-933 inet/filter/limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-933 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-933 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-933 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1629 inet6/filter/limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-933 inet6/filter/limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-933 -j TEE --gateway fc00::2 inet6/filter/logdrop-933 -j DROP Filter 1631 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1630 inet/filter/limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-934 inet/filter/limit-1630 -j TEE --gateway 10.0.0.1 inet/filter/limit-1630 -j TEE --gateway 10.0.0.2 inet/filter/limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-934 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-934 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-934 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1630 inet6/filter/limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-934 inet6/filter/limit-1630 -j TEE --gateway fc00::2 inet6/filter/limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-934 -j TEE --gateway fc00::2 inet6/filter/logdrop-934 -j DROP Filter 1632 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1631 inet/filter/limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-935 inet/filter/limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-935 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-935 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-935 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1631 inet6/filter/limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-935 inet6/filter/limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-935 -j TEE --gateway fc00::2 inet6/filter/logdrop-935 -j DROP Filter 1633 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1632 inet/filter/limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-936 inet/filter/limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-936 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-936 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-936 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1632 inet6/filter/limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-936 inet6/filter/limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-936 -j TEE --gateway fc00::2 inet6/filter/logdrop-936 -j DROP Filter 1634 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1633 inet/filter/limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-937 inet/filter/limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-937 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-937 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-937 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1633 inet6/filter/limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-937 inet6/filter/limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-937 -j TEE --gateway fc00::2 inet6/filter/logdrop-937 -j DROP Filter 1635 {"conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1634 inet/filter/limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-938 inet/filter/limit-1634 -m limit --limit 12/minute -j ULOG inet/filter/limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-938 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-938 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-938 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1634 inet6/filter/limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-938 inet6/filter/limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-938 -j TEE --gateway fc00::2 inet6/filter/logdrop-938 -j DROP Filter 1636 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1635 inet/filter/limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-939 inet/filter/limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-939 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-939 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-939 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1635 inet6/filter/limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-939 inet6/filter/logdrop-939 -j TEE --gateway fc00::2 inet6/filter/logdrop-939 -j DROP Filter 1637 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1636 inet/filter/limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-940 inet/filter/limit-1636 -j ACCEPT inet/filter/logdrop-940 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-940 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-940 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1636 inet6/filter/limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-940 inet6/filter/limit-1636 -j ACCEPT inet6/filter/logdrop-940 -j TEE --gateway fc00::2 inet6/filter/logdrop-940 -j DROP Filter 1638 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-941 inet/filter/logdrop-941 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-941 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-941 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-941 inet6/filter/logdrop-941 -j TEE --gateway fc00::2 inet6/filter/logdrop-941 -j DROP Filter 1639 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1638 inet/filter/limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-942 inet/filter/limit-1638 -m limit --limit 1/second -j LOG inet/filter/limit-1638 -j ACCEPT inet/filter/logdrop-942 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-942 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-942 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1638 inet6/filter/limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-942 inet6/filter/limit-1638 -m limit --limit 1/second -j LOG inet6/filter/limit-1638 -j ACCEPT inet6/filter/logdrop-942 -j TEE --gateway fc00::2 inet6/filter/logdrop-942 -j DROP Filter 1640 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1639 inet/filter/limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-943 inet/filter/limit-1639 -m limit --limit 1/second -j LOG inet/filter/logdrop-943 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-943 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-943 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1639 inet6/filter/limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-943 inet6/filter/limit-1639 -m limit --limit 1/second -j LOG inet6/filter/logdrop-943 -j TEE --gateway fc00::2 inet6/filter/logdrop-943 -j DROP Filter 1641 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1640 inet/filter/limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-944 inet/filter/limit-1640 -j TEE --gateway 10.0.0.1 inet/filter/limit-1640 -j TEE --gateway 10.0.0.2 inet/filter/limit-1640 -j ACCEPT inet/filter/logdrop-944 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-944 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-944 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1640 inet6/filter/limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-944 inet6/filter/limit-1640 -j TEE --gateway fc00::2 inet6/filter/limit-1640 -j ACCEPT inet6/filter/logdrop-944 -j TEE --gateway fc00::2 inet6/filter/logdrop-944 -j DROP Filter 1642 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1641 inet/filter/limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-945 inet/filter/limit-1641 -j TEE --gateway 10.0.0.1 inet/filter/limit-1641 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-945 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-945 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-945 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1641 inet6/filter/limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-945 inet6/filter/limit-1641 -j TEE --gateway fc00::2 inet6/filter/logdrop-945 -j TEE --gateway fc00::2 inet6/filter/logdrop-945 -j DROP Filter 1643 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1642 inet/filter/limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-946 inet/filter/limit-1642 -j ACCEPT inet/filter/logdrop-946 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-946 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-946 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1642 inet6/filter/limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-946 inet6/filter/limit-1642 -j ACCEPT inet6/filter/logdrop-946 -j TEE --gateway fc00::2 inet6/filter/logdrop-946 -j DROP Filter 1644 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-947 inet/filter/logdrop-947 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-947 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-947 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-947 inet6/filter/logdrop-947 -j TEE --gateway fc00::2 inet6/filter/logdrop-947 -j DROP Filter 1645 {"conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1644 inet/filter/limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-948 inet/filter/limit-1644 -m limit --limit 12/minute -j ULOG inet/filter/limit-1644 -j ACCEPT inet/filter/logdrop-948 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-948 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-948 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1644 inet6/filter/limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-948 inet6/filter/limit-1644 -j ACCEPT inet6/filter/logdrop-948 -j TEE --gateway fc00::2 inet6/filter/logdrop-948 -j DROP Filter 1646 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1645 inet/filter/limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-949 inet/filter/limit-1645 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-949 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-949 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-949 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1645 inet6/filter/limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-949 inet6/filter/logdrop-949 -j TEE --gateway fc00::2 inet6/filter/logdrop-949 -j DROP Filter 1647 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1646 inet/filter/limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-950 inet/filter/limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-950 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-950 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-950 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1646 inet6/filter/limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-950 inet6/filter/limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-950 -j TEE --gateway fc00::2 inet6/filter/logdrop-950 -j DROP Filter 1648 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1647 inet/filter/limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-951 inet/filter/limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-951 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-951 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-951 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1647 inet6/filter/limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-951 inet6/filter/limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-951 -j TEE --gateway fc00::2 inet6/filter/logdrop-951 -j DROP Filter 1649 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1648 inet/filter/limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-952 inet/filter/limit-1648 -m limit --limit 1/second -j LOG inet/filter/limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-952 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-952 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-952 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1648 inet6/filter/limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-952 inet6/filter/limit-1648 -m limit --limit 1/second -j LOG inet6/filter/limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-952 -j TEE --gateway fc00::2 inet6/filter/logdrop-952 -j DROP Filter 1650 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1649 inet/filter/limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-953 inet/filter/limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-953 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-953 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-953 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1649 inet6/filter/limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-953 inet6/filter/limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-953 -j TEE --gateway fc00::2 inet6/filter/logdrop-953 -j DROP Filter 1651 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1650 inet/filter/limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-954 inet/filter/limit-1650 -j TEE --gateway 10.0.0.1 inet/filter/limit-1650 -j TEE --gateway 10.0.0.2 inet/filter/limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-954 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-954 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-954 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1650 inet6/filter/limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-954 inet6/filter/limit-1650 -j TEE --gateway fc00::2 inet6/filter/limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-954 -j TEE --gateway fc00::2 inet6/filter/logdrop-954 -j DROP Filter 1652 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1651 inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-955 inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-955 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-955 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-955 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1651 inet6/filter/limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-955 inet6/filter/limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-955 -j TEE --gateway fc00::2 inet6/filter/logdrop-955 -j DROP Filter 1653 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1652 inet/filter/limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-956 inet/filter/limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-956 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-956 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-956 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1652 inet6/filter/limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-956 inet6/filter/limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-956 -j TEE --gateway fc00::2 inet6/filter/logdrop-956 -j DROP Filter 1654 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1653 inet/filter/limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-957 inet/filter/limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-957 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-957 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-957 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1653 inet6/filter/limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-957 inet6/filter/limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-957 -j TEE --gateway fc00::2 inet6/filter/logdrop-957 -j DROP Filter 1655 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1654 inet/filter/limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-958 inet/filter/limit-1654 -m limit --limit 12/minute -j ULOG inet/filter/limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-958 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-958 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-958 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1654 inet6/filter/limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-958 inet6/filter/limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-958 -j TEE --gateway fc00::2 inet6/filter/logdrop-958 -j DROP Filter 1656 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1655 inet/filter/limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-959 inet/filter/limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-959 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-959 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-959 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1655 inet6/filter/limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-959 inet6/filter/logdrop-959 -j TEE --gateway fc00::2 inet6/filter/logdrop-959 -j DROP Filter 1657 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1656 inet/filter/limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-960 inet/filter/limit-1656 -j ACCEPT inet/filter/logdrop-960 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-960 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-960 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1656 inet6/filter/limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-960 inet6/filter/limit-1656 -j ACCEPT inet6/filter/logdrop-960 -j TEE --gateway fc00::2 inet6/filter/logdrop-960 -j DROP Filter 1658 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-961 inet/filter/logdrop-961 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-961 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-961 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-961 inet6/filter/logdrop-961 -j TEE --gateway fc00::2 inet6/filter/logdrop-961 -j DROP Filter 1659 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1658 inet/filter/limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-962 inet/filter/limit-1658 -m limit --limit 1/second -j LOG inet/filter/limit-1658 -j ACCEPT inet/filter/logdrop-962 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-962 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-962 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1658 inet6/filter/limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-962 inet6/filter/limit-1658 -m limit --limit 1/second -j LOG inet6/filter/limit-1658 -j ACCEPT inet6/filter/logdrop-962 -j TEE --gateway fc00::2 inet6/filter/logdrop-962 -j DROP Filter 1660 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1659 inet/filter/limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-963 inet/filter/limit-1659 -m limit --limit 1/second -j LOG inet/filter/logdrop-963 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-963 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-963 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1659 inet6/filter/limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-963 inet6/filter/limit-1659 -m limit --limit 1/second -j LOG inet6/filter/logdrop-963 -j TEE --gateway fc00::2 inet6/filter/logdrop-963 -j DROP Filter 1661 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1660 inet/filter/limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-964 inet/filter/limit-1660 -j TEE --gateway 10.0.0.1 inet/filter/limit-1660 -j TEE --gateway 10.0.0.2 inet/filter/limit-1660 -j ACCEPT inet/filter/logdrop-964 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-964 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-964 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1660 inet6/filter/limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-964 inet6/filter/limit-1660 -j TEE --gateway fc00::2 inet6/filter/limit-1660 -j ACCEPT inet6/filter/logdrop-964 -j TEE --gateway fc00::2 inet6/filter/logdrop-964 -j DROP Filter 1662 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1661 inet/filter/limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-965 inet/filter/limit-1661 -j TEE --gateway 10.0.0.1 inet/filter/limit-1661 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-965 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-965 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-965 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1661 inet6/filter/limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-965 inet6/filter/limit-1661 -j TEE --gateway fc00::2 inet6/filter/logdrop-965 -j TEE --gateway fc00::2 inet6/filter/logdrop-965 -j DROP Filter 1663 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1662 inet/filter/limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-966 inet/filter/limit-1662 -j ACCEPT inet/filter/logdrop-966 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-966 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-966 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1662 inet6/filter/limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-966 inet6/filter/limit-1662 -j ACCEPT inet6/filter/logdrop-966 -j TEE --gateway fc00::2 inet6/filter/logdrop-966 -j DROP Filter 1664 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-967 inet/filter/logdrop-967 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-967 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-967 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-967 inet6/filter/logdrop-967 -j TEE --gateway fc00::2 inet6/filter/logdrop-967 -j DROP Filter 1665 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1664 inet/filter/limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-968 inet/filter/limit-1664 -m limit --limit 12/minute -j ULOG inet/filter/limit-1664 -j ACCEPT inet/filter/logdrop-968 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-968 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-968 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1664 inet6/filter/limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-968 inet6/filter/limit-1664 -j ACCEPT inet6/filter/logdrop-968 -j TEE --gateway fc00::2 inet6/filter/logdrop-968 -j DROP Filter 1666 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1665 inet/filter/limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-969 inet/filter/limit-1665 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-969 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-969 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-969 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1665 inet6/filter/limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-969 inet6/filter/logdrop-969 -j TEE --gateway fc00::2 inet6/filter/logdrop-969 -j DROP Filter 1667 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1666 inet/filter/limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-970 inet/filter/limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-970 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-970 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-970 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1666 inet6/filter/limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-970 inet6/filter/limit-1666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-970 -j TEE --gateway fc00::2 inet6/filter/logdrop-970 -j DROP Filter 1668 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1667 inet/filter/limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-971 inet/filter/limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-971 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-971 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-971 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1667 inet6/filter/limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-971 inet6/filter/limit-1667 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-971 -j TEE --gateway fc00::2 inet6/filter/logdrop-971 -j DROP Filter 1669 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1668 inet/filter/limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-972 inet/filter/limit-1668 -m limit --limit 1/second -j LOG inet/filter/limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-972 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-972 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-972 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1668 inet6/filter/limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-972 inet6/filter/limit-1668 -m limit --limit 1/second -j LOG inet6/filter/limit-1668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-972 -j TEE --gateway fc00::2 inet6/filter/logdrop-972 -j DROP Filter 1670 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1669 inet/filter/limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-973 inet/filter/limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-973 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-973 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-973 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1669 inet6/filter/limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-973 inet6/filter/limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-973 -j TEE --gateway fc00::2 inet6/filter/logdrop-973 -j DROP Filter 1671 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1670 inet/filter/limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-974 inet/filter/limit-1670 -j TEE --gateway 10.0.0.1 inet/filter/limit-1670 -j TEE --gateway 10.0.0.2 inet/filter/limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-974 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-974 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-974 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1670 inet6/filter/limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-974 inet6/filter/limit-1670 -j TEE --gateway fc00::2 inet6/filter/limit-1670 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-974 -j TEE --gateway fc00::2 inet6/filter/logdrop-974 -j DROP Filter 1672 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1671 inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-975 inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-975 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-975 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-975 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1671 inet6/filter/limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-975 inet6/filter/limit-1671 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-975 -j TEE --gateway fc00::2 inet6/filter/logdrop-975 -j DROP Filter 1673 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1672 inet/filter/limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-976 inet/filter/limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-976 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-976 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-976 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1672 inet6/filter/limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-976 inet6/filter/limit-1672 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-976 -j TEE --gateway fc00::2 inet6/filter/logdrop-976 -j DROP Filter 1674 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1673 inet/filter/limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-977 inet/filter/limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-977 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-977 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-977 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1673 inet6/filter/limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-977 inet6/filter/limit-1673 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-977 -j TEE --gateway fc00::2 inet6/filter/logdrop-977 -j DROP Filter 1675 {"conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1674 inet/filter/limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-978 inet/filter/limit-1674 -m limit --limit 12/minute -j ULOG inet/filter/limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-978 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-978 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-978 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1674 inet6/filter/limit-1674 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-978 inet6/filter/limit-1674 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-978 -j TEE --gateway fc00::2 inet6/filter/logdrop-978 -j DROP Filter 1676 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1675 inet/filter/limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-979 inet/filter/limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-979 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-979 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-979 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1675 inet6/filter/limit-1675 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-979 inet6/filter/logdrop-979 -j TEE --gateway fc00::2 inet6/filter/logdrop-979 -j DROP Filter 1677 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1676 inet/filter/limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-980 inet/filter/limit-1676 -j ACCEPT inet/filter/logdrop-980 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-980 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-980 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1676 inet6/filter/limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-980 inet6/filter/limit-1676 -j ACCEPT inet6/filter/logdrop-980 -j TEE --gateway fc00::2 inet6/filter/logdrop-980 -j DROP Filter 1678 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-981 inet/filter/logdrop-981 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-981 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-981 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-981 inet6/filter/logdrop-981 -j TEE --gateway fc00::2 inet6/filter/logdrop-981 -j DROP Filter 1679 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1678 inet/filter/limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-982 inet/filter/limit-1678 -m limit --limit 1/second -j LOG inet/filter/limit-1678 -j ACCEPT inet/filter/logdrop-982 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-982 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-982 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1678 inet6/filter/limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-982 inet6/filter/limit-1678 -m limit --limit 1/second -j LOG inet6/filter/limit-1678 -j ACCEPT inet6/filter/logdrop-982 -j TEE --gateway fc00::2 inet6/filter/logdrop-982 -j DROP Filter 1680 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1679 inet/filter/limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-983 inet/filter/limit-1679 -m limit --limit 1/second -j LOG inet/filter/logdrop-983 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-983 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-983 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1679 inet6/filter/limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-983 inet6/filter/limit-1679 -m limit --limit 1/second -j LOG inet6/filter/logdrop-983 -j TEE --gateway fc00::2 inet6/filter/logdrop-983 -j DROP Filter 1681 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1680 inet/filter/limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-984 inet/filter/limit-1680 -j TEE --gateway 10.0.0.1 inet/filter/limit-1680 -j TEE --gateway 10.0.0.2 inet/filter/limit-1680 -j ACCEPT inet/filter/logdrop-984 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-984 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-984 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1680 inet6/filter/limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-984 inet6/filter/limit-1680 -j TEE --gateway fc00::2 inet6/filter/limit-1680 -j ACCEPT inet6/filter/logdrop-984 -j TEE --gateway fc00::2 inet6/filter/logdrop-984 -j DROP Filter 1682 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1681 inet/filter/limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-985 inet/filter/limit-1681 -j TEE --gateway 10.0.0.1 inet/filter/limit-1681 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-985 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-985 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-985 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1681 inet6/filter/limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-985 inet6/filter/limit-1681 -j TEE --gateway fc00::2 inet6/filter/logdrop-985 -j TEE --gateway fc00::2 inet6/filter/logdrop-985 -j DROP Filter 1683 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1682 inet/filter/limit-1682 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-986 inet/filter/limit-1682 -j ACCEPT inet/filter/logdrop-986 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-986 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-986 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1682 inet6/filter/limit-1682 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-986 inet6/filter/limit-1682 -j ACCEPT inet6/filter/logdrop-986 -j TEE --gateway fc00::2 inet6/filter/logdrop-986 -j DROP Filter 1684 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-987 inet/filter/logdrop-987 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-987 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-987 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-987 inet6/filter/logdrop-987 -j TEE --gateway fc00::2 inet6/filter/logdrop-987 -j DROP Filter 1685 {"conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1684 inet/filter/limit-1684 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-988 inet/filter/limit-1684 -m limit --limit 12/minute -j ULOG inet/filter/limit-1684 -j ACCEPT inet/filter/logdrop-988 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-988 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-988 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1684 inet6/filter/limit-1684 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-988 inet6/filter/limit-1684 -j ACCEPT inet6/filter/logdrop-988 -j TEE --gateway fc00::2 inet6/filter/logdrop-988 -j DROP Filter 1686 {"action":"pass","conn-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1685 inet/filter/limit-1685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-989 inet/filter/limit-1685 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-989 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-989 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-989 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1685 inet6/filter/limit-1685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-989 inet6/filter/logdrop-989 -j TEE --gateway fc00::2 inet6/filter/logdrop-989 -j DROP Filter 1687 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1686 inet/filter/limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-990 inet/filter/limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-990 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-990 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-990 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1686 inet6/filter/limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-990 inet6/filter/limit-1686 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-990 -j TEE --gateway fc00::2 inet6/filter/logdrop-990 -j DROP Filter 1688 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1687 inet/filter/limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-991 inet/filter/limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-991 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-991 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-991 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1687 inet6/filter/limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-991 inet6/filter/limit-1687 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-991 -j TEE --gateway fc00::2 inet6/filter/logdrop-991 -j DROP Filter 1689 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1688 inet/filter/limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-992 inet/filter/limit-1688 -m limit --limit 1/second -j LOG inet/filter/limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-992 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-992 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-992 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1688 inet6/filter/limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-992 inet6/filter/limit-1688 -m limit --limit 1/second -j LOG inet6/filter/limit-1688 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-992 -j TEE --gateway fc00::2 inet6/filter/logdrop-992 -j DROP Filter 1690 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1689 inet/filter/limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-993 inet/filter/limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-993 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-993 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-993 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1689 inet6/filter/limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-993 inet6/filter/limit-1689 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-993 -j TEE --gateway fc00::2 inet6/filter/logdrop-993 -j DROP Filter 1691 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1690 inet/filter/limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-994 inet/filter/limit-1690 -j TEE --gateway 10.0.0.1 inet/filter/limit-1690 -j TEE --gateway 10.0.0.2 inet/filter/limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-994 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-994 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-994 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1690 inet6/filter/limit-1690 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-994 inet6/filter/limit-1690 -j TEE --gateway fc00::2 inet6/filter/limit-1690 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-994 -j TEE --gateway fc00::2 inet6/filter/logdrop-994 -j DROP Filter 1692 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1691 inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-995 inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-995 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-995 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-995 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1691 inet6/filter/limit-1691 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-995 inet6/filter/limit-1691 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-995 -j TEE --gateway fc00::2 inet6/filter/logdrop-995 -j DROP Filter 1693 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1692 inet/filter/limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-996 inet/filter/limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-996 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-996 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-996 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1692 inet6/filter/limit-1692 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-996 inet6/filter/limit-1692 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-996 -j TEE --gateway fc00::2 inet6/filter/logdrop-996 -j DROP Filter 1694 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1693 inet/filter/limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-997 inet/filter/limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-997 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-997 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-997 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1693 inet6/filter/limit-1693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-997 inet6/filter/limit-1693 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-997 -j TEE --gateway fc00::2 inet6/filter/logdrop-997 -j DROP Filter 1695 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1694 inet/filter/limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-998 inet/filter/limit-1694 -m limit --limit 12/minute -j ULOG inet/filter/limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-998 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-998 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-998 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1694 inet6/filter/limit-1694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-998 inet6/filter/limit-1694 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-998 -j TEE --gateway fc00::2 inet6/filter/logdrop-998 -j DROP Filter 1696 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1695 inet/filter/limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-999 inet/filter/limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-999 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-999 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-999 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1695 inet6/filter/limit-1695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-999 inet6/filter/logdrop-999 -j TEE --gateway fc00::2 inet6/filter/logdrop-999 -j DROP Filter 1697 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1696 inet/filter/limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 inet/filter/limit-1696 -j ACCEPT inet/filter/logdrop-1000 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1000 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1000 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1696 inet6/filter/limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 inet6/filter/limit-1696 -j ACCEPT inet6/filter/logdrop-1000 -j TEE --gateway fc00::2 inet6/filter/logdrop-1000 -j DROP Filter 1698 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 inet/filter/logdrop-1001 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1001 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1001 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 inet6/filter/logdrop-1001 -j TEE --gateway fc00::2 inet6/filter/logdrop-1001 -j DROP Filter 1699 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1698 inet/filter/limit-1698 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 inet/filter/limit-1698 -m limit --limit 1/second -j LOG inet/filter/limit-1698 -j ACCEPT inet/filter/logdrop-1002 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1002 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1002 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1698 inet6/filter/limit-1698 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 inet6/filter/limit-1698 -m limit --limit 1/second -j LOG inet6/filter/limit-1698 -j ACCEPT inet6/filter/logdrop-1002 -j TEE --gateway fc00::2 inet6/filter/logdrop-1002 -j DROP Filter 1700 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1699 inet/filter/limit-1699 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 inet/filter/limit-1699 -m limit --limit 1/second -j LOG inet/filter/logdrop-1003 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1003 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1003 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1699 inet6/filter/limit-1699 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 inet6/filter/limit-1699 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1003 -j TEE --gateway fc00::2 inet6/filter/logdrop-1003 -j DROP Filter 1701 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1700 inet/filter/limit-1700 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 inet/filter/limit-1700 -j TEE --gateway 10.0.0.1 inet/filter/limit-1700 -j TEE --gateway 10.0.0.2 inet/filter/limit-1700 -j ACCEPT inet/filter/logdrop-1004 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1004 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1004 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1700 inet6/filter/limit-1700 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 inet6/filter/limit-1700 -j TEE --gateway fc00::2 inet6/filter/limit-1700 -j ACCEPT inet6/filter/logdrop-1004 -j TEE --gateway fc00::2 inet6/filter/logdrop-1004 -j DROP Filter 1702 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1701 inet/filter/limit-1701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 inet/filter/limit-1701 -j TEE --gateway 10.0.0.1 inet/filter/limit-1701 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1005 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1005 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1005 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1701 inet6/filter/limit-1701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 inet6/filter/limit-1701 -j TEE --gateway fc00::2 inet6/filter/logdrop-1005 -j TEE --gateway fc00::2 inet6/filter/logdrop-1005 -j DROP Filter 1703 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1702 inet/filter/limit-1702 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 inet/filter/limit-1702 -j ACCEPT inet/filter/logdrop-1006 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1006 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1006 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1702 inet6/filter/limit-1702 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 inet6/filter/limit-1702 -j ACCEPT inet6/filter/logdrop-1006 -j TEE --gateway fc00::2 inet6/filter/logdrop-1006 -j DROP Filter 1704 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 inet/filter/logdrop-1007 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1007 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1007 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 inet6/filter/logdrop-1007 -j TEE --gateway fc00::2 inet6/filter/logdrop-1007 -j DROP Filter 1705 {"conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1704 inet/filter/limit-1704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 inet/filter/limit-1704 -m limit --limit 12/minute -j ULOG inet/filter/limit-1704 -j ACCEPT inet/filter/logdrop-1008 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1008 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1008 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1704 inet6/filter/limit-1704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 inet6/filter/limit-1704 -j ACCEPT inet6/filter/logdrop-1008 -j TEE --gateway fc00::2 inet6/filter/logdrop-1008 -j DROP Filter 1706 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1705 inet/filter/limit-1705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 inet/filter/limit-1705 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1009 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1009 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1009 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1705 inet6/filter/limit-1705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 inet6/filter/logdrop-1009 -j TEE --gateway fc00::2 inet6/filter/logdrop-1009 -j DROP Filter 1707 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1706 inet/filter/limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1706 inet6/filter/limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1708 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1707 inet/filter/limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1707 inet6/filter/limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1709 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1708 inet/filter/limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1708 -m limit --limit 1/second -j LOG inet/filter/limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1708 inet6/filter/limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1708 -m limit --limit 1/second -j LOG inet6/filter/limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1710 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1709 inet/filter/limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1709 inet6/filter/limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1711 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1710 inet/filter/limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1710 -j TEE --gateway 10.0.0.1 inet/filter/limit-1710 -j TEE --gateway 10.0.0.2 inet/filter/limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1710 inet6/filter/limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1710 -j TEE --gateway fc00::2 inet6/filter/limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1712 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1711 inet/filter/limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1711 inet6/filter/limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1713 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1712 inet/filter/limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1712 inet6/filter/limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1714 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1713 inet/filter/limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1713 inet6/filter/limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1715 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1714 inet/filter/limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1714 -m limit --limit 12/minute -j ULOG inet/filter/limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1714 inet6/filter/limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1716 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1715 inet/filter/limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1715 inet6/filter/limit-1715 -m recent --name limit-1715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 1717 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1716 inet/filter/limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1716 inet6/filter/limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1718 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1717 inet/filter/limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1717 inet6/filter/limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1719 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1718 inet/filter/limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1718 -m limit --limit 1/second -j LOG inet/filter/limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1718 inet6/filter/limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1718 -m limit --limit 1/second -j LOG inet6/filter/limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1720 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1719 inet/filter/limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1719 inet6/filter/limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1721 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1720 inet/filter/limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1720 -j TEE --gateway 10.0.0.1 inet/filter/limit-1720 -j TEE --gateway 10.0.0.2 inet/filter/limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1720 inet6/filter/limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1720 -j TEE --gateway fc00::2 inet6/filter/limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1722 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1721 inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1721 inet6/filter/limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1723 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1722 inet/filter/limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1722 inet6/filter/limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1724 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1723 inet/filter/limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1723 inet6/filter/limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1725 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1724 inet/filter/limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1724 -m limit --limit 12/minute -j ULOG inet/filter/limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1724 inet6/filter/limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1726 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1725 inet/filter/limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1725 inet6/filter/limit-1725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 1727 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1726 inet/filter/limit-1726 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1726 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1726 inet6/filter/limit-1726 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1726 -j ACCEPT Filter 1728 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1729 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1728 inet/filter/limit-1728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1728 -m limit --limit 1/second -j LOG inet/filter/limit-1728 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1728 inet6/filter/limit-1728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1728 -m limit --limit 1/second -j LOG inet6/filter/limit-1728 -j ACCEPT Filter 1730 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1729 inet/filter/limit-1729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1729 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1729 inet6/filter/limit-1729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1729 -m limit --limit 1/second -j LOG Filter 1731 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1730 inet/filter/limit-1730 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1730 -j TEE --gateway 10.0.0.1 inet/filter/limit-1730 -j TEE --gateway 10.0.0.2 inet/filter/limit-1730 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1730 inet6/filter/limit-1730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1730 -j TEE --gateway fc00::2 inet6/filter/limit-1730 -j ACCEPT Filter 1732 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1731 inet/filter/limit-1731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1731 -j TEE --gateway 10.0.0.1 inet/filter/limit-1731 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1731 inet6/filter/limit-1731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1731 -j TEE --gateway fc00::2 Filter 1733 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1732 inet/filter/limit-1732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1732 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1732 inet6/filter/limit-1732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1732 -j ACCEPT Filter 1734 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1735 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1734 inet/filter/limit-1734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1734 -m limit --limit 12/minute -j ULOG inet/filter/limit-1734 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1734 inet6/filter/limit-1734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1734 -j ACCEPT Filter 1736 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1735 inet/filter/limit-1735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1735 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1735 inet6/filter/limit-1735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1737 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1736 inet/filter/limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1736 inet6/filter/limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1738 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1737 inet/filter/limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1737 inet6/filter/limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1739 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1738 inet/filter/limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1738 -m limit --limit 1/second -j LOG inet/filter/limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1738 inet6/filter/limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1738 -m limit --limit 1/second -j LOG inet6/filter/limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1740 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1739 inet/filter/limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1739 inet6/filter/limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1741 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1740 inet/filter/limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1740 -j TEE --gateway 10.0.0.1 inet/filter/limit-1740 -j TEE --gateway 10.0.0.2 inet/filter/limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1740 inet6/filter/limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1740 -j TEE --gateway fc00::2 inet6/filter/limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1742 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1741 inet/filter/limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1741 inet6/filter/limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1743 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1742 inet/filter/limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1742 inet6/filter/limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1744 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1743 inet/filter/limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1743 inet6/filter/limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1745 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1744 inet/filter/limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1744 -m limit --limit 12/minute -j ULOG inet/filter/limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1744 inet6/filter/limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT Filter 1746 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1745 inet/filter/limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1745 inet6/filter/limit-1745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 1747 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1746 inet/filter/limit-1746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1746 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1746 inet6/filter/limit-1746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1746 -j ACCEPT Filter 1748 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1749 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1748 inet/filter/limit-1748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1748 -m limit --limit 1/second -j LOG inet/filter/limit-1748 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1748 inet6/filter/limit-1748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1748 -m limit --limit 1/second -j LOG inet6/filter/limit-1748 -j ACCEPT Filter 1750 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1749 inet/filter/limit-1749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1749 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1749 inet6/filter/limit-1749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1749 -m limit --limit 1/second -j LOG Filter 1751 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1750 inet/filter/limit-1750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1750 -j TEE --gateway 10.0.0.1 inet/filter/limit-1750 -j TEE --gateway 10.0.0.2 inet/filter/limit-1750 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1750 inet6/filter/limit-1750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1750 -j TEE --gateway fc00::2 inet6/filter/limit-1750 -j ACCEPT Filter 1752 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1751 inet/filter/limit-1751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1751 -j TEE --gateway 10.0.0.1 inet/filter/limit-1751 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1751 inet6/filter/limit-1751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1751 -j TEE --gateway fc00::2 Filter 1753 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1752 inet/filter/limit-1752 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1752 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1752 inet6/filter/limit-1752 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1752 -j ACCEPT Filter 1754 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1755 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1754 inet/filter/limit-1754 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1754 -m limit --limit 12/minute -j ULOG inet/filter/limit-1754 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1754 inet6/filter/limit-1754 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1754 -j ACCEPT Filter 1756 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1755 inet/filter/limit-1755 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1755 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1755 inet6/filter/limit-1755 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1757 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1756 inet/filter/limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1756 inet6/filter/limit-1756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1758 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1757 inet/filter/limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1757 inet6/filter/limit-1757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1757 -m recent --name user:C --rsource --mask fe00:: --set Filter 1759 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1758 inet/filter/limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1758 -m limit --limit 1/second -j LOG inet/filter/limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1758 inet6/filter/limit-1758 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1758 -m limit --limit 1/second -j LOG inet6/filter/limit-1758 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1760 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1759 inet/filter/limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1759 inet6/filter/limit-1759 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1759 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1761 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1760 inet/filter/limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1760 -j TEE --gateway 10.0.0.1 inet/filter/limit-1760 -j TEE --gateway 10.0.0.2 inet/filter/limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1760 inet6/filter/limit-1760 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1760 -j TEE --gateway fc00::2 inet6/filter/limit-1760 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1762 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1761 inet/filter/limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1761 inet6/filter/limit-1761 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1761 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1763 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1762 inet/filter/limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1762 inet6/filter/limit-1762 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1762 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1764 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1763 inet/filter/limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1763 inet6/filter/limit-1763 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1763 -m recent --name user:C --rsource --mask fe00:: --set Filter 1765 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1764 inet/filter/limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1764 -m limit --limit 12/minute -j ULOG inet/filter/limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1764 inet6/filter/limit-1764 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1764 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT Filter 1766 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1765 inet/filter/limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1765 inet6/filter/limit-1765 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 1767 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1766 inet/filter/limit-1766 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1766 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1766 inet6/filter/limit-1766 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1766 -j ACCEPT Filter 1768 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1769 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1768 inet/filter/limit-1768 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1768 -m limit --limit 1/second -j LOG inet/filter/limit-1768 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1768 inet6/filter/limit-1768 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1768 -m limit --limit 1/second -j LOG inet6/filter/limit-1768 -j ACCEPT Filter 1770 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1769 inet/filter/limit-1769 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1769 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1769 inet6/filter/limit-1769 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1769 -m limit --limit 1/second -j LOG Filter 1771 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1770 inet/filter/limit-1770 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1770 -j TEE --gateway 10.0.0.1 inet/filter/limit-1770 -j TEE --gateway 10.0.0.2 inet/filter/limit-1770 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1770 inet6/filter/limit-1770 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1770 -j TEE --gateway fc00::2 inet6/filter/limit-1770 -j ACCEPT Filter 1772 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1771 inet/filter/limit-1771 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1771 -j TEE --gateway 10.0.0.1 inet/filter/limit-1771 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1771 inet6/filter/limit-1771 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1771 -j TEE --gateway fc00::2 Filter 1773 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1772 inet/filter/limit-1772 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1772 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1772 inet6/filter/limit-1772 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1772 -j ACCEPT Filter 1774 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1775 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1774 inet/filter/limit-1774 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1774 -m limit --limit 12/minute -j ULOG inet/filter/limit-1774 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1774 inet6/filter/limit-1774 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1774 -j ACCEPT Filter 1776 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1775 inet/filter/limit-1775 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1775 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1775 inet6/filter/limit-1775 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1777 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1776 inet/filter/limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1776 inet6/filter/limit-1776 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1776 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1778 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1777 inet/filter/limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1777 inet6/filter/limit-1777 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1777 -m recent --name user:C --rdest --mask fe00:: --set Filter 1779 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1778 inet/filter/limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1778 -m limit --limit 1/second -j LOG inet/filter/limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1778 inet6/filter/limit-1778 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1778 -m limit --limit 1/second -j LOG inet6/filter/limit-1778 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1780 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1779 inet/filter/limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1779 inet6/filter/limit-1779 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1779 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 1781 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1780 inet/filter/limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1780 -j TEE --gateway 10.0.0.1 inet/filter/limit-1780 -j TEE --gateway 10.0.0.2 inet/filter/limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1780 inet6/filter/limit-1780 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1780 -j TEE --gateway fc00::2 inet6/filter/limit-1780 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1782 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1781 inet/filter/limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1781 inet6/filter/limit-1781 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1781 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 1783 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1782 inet/filter/limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1782 inet6/filter/limit-1782 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1782 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1784 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1783 inet/filter/limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1783 inet6/filter/limit-1783 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1783 -m recent --name user:C --rdest --mask fe00:: --set Filter 1785 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1784 inet/filter/limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1784 -m limit --limit 12/minute -j ULOG inet/filter/limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1784 inet6/filter/limit-1784 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1784 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT Filter 1786 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1785 inet/filter/limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1785 inet6/filter/limit-1785 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 1787 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1786 inet/filter/limit-1786 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1786 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1786 inet6/filter/limit-1786 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1786 -j ACCEPT Filter 1788 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1789 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1788 inet/filter/limit-1788 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1788 -m limit --limit 1/second -j LOG inet/filter/limit-1788 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1788 inet6/filter/limit-1788 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1788 -m limit --limit 1/second -j LOG inet6/filter/limit-1788 -j ACCEPT Filter 1790 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1789 inet/filter/limit-1789 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1789 -m limit --limit 1/second -j LOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1789 inet6/filter/limit-1789 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1789 -m limit --limit 1/second -j LOG Filter 1791 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1790 inet/filter/limit-1790 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1790 -j TEE --gateway 10.0.0.1 inet/filter/limit-1790 -j TEE --gateway 10.0.0.2 inet/filter/limit-1790 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1790 inet6/filter/limit-1790 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1790 -j TEE --gateway fc00::2 inet6/filter/limit-1790 -j ACCEPT Filter 1792 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1791 inet/filter/limit-1791 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1791 -j TEE --gateway 10.0.0.1 inet/filter/limit-1791 -j TEE --gateway 10.0.0.2 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1791 inet6/filter/limit-1791 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1791 -j TEE --gateway fc00::2 Filter 1793 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1792 inet/filter/limit-1792 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1792 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1792 inet6/filter/limit-1792 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1792 -j ACCEPT Filter 1794 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1795 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1794 inet/filter/limit-1794 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1794 -m limit --limit 12/minute -j ULOG inet/filter/limit-1794 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1794 inet6/filter/limit-1794 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-1794 -j ACCEPT Filter 1796 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1795 inet/filter/limit-1795 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-1795 -m limit --limit 12/minute -j ULOG inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1795 inet6/filter/limit-1795 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 1797 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1796 inet/filter/limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1010 inet/filter/limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1010 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1010 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1796 inet6/filter/limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1010 inet6/filter/limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1010 -j DROP Filter 1798 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1797 inet/filter/limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1011 inet/filter/limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1011 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1011 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1797 inet6/filter/limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1011 inet6/filter/limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1011 -j DROP Filter 1799 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1798 inet/filter/limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1012 inet/filter/limit-1798 -m limit --limit 1/second -j LOG inet/filter/limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1012 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1012 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1798 inet6/filter/limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1012 inet6/filter/limit-1798 -m limit --limit 1/second -j LOG inet6/filter/limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1012 -j DROP Filter 1800 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1799 inet/filter/limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1013 inet/filter/limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1013 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1013 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1799 inet6/filter/limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1013 inet6/filter/limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1013 -j DROP Filter 1801 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1800 inet/filter/limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1014 inet/filter/limit-1800 -j TEE --gateway 10.0.0.1 inet/filter/limit-1800 -j TEE --gateway 10.0.0.2 inet/filter/limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1014 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1014 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1800 inet6/filter/limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1014 inet6/filter/limit-1800 -j TEE --gateway fc00::2 inet6/filter/limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1014 -j DROP Filter 1802 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1801 inet/filter/limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1015 inet/filter/limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1015 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1015 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1801 inet6/filter/limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1015 inet6/filter/limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1015 -j DROP Filter 1803 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1802 inet/filter/limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1016 inet/filter/limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1016 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1016 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1802 inet6/filter/limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1016 inet6/filter/limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1016 -j DROP Filter 1804 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1803 inet/filter/limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1017 inet/filter/limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1017 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1017 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1803 inet6/filter/limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1017 inet6/filter/limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1017 -j DROP Filter 1805 {"conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1804 inet/filter/limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1018 inet/filter/limit-1804 -m limit --limit 12/minute -j ULOG inet/filter/limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1018 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1018 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1804 inet6/filter/limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1018 inet6/filter/limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1018 -j DROP Filter 1806 {"action":"pass","conn-limit":{"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1805 inet/filter/limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1019 inet/filter/limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1019 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1019 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1805 inet6/filter/limit-1805 -m recent --name limit-1805 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1019 inet6/filter/logdrop-1019 -j DROP Filter 1807 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1806 inet/filter/limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1020 inet/filter/limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1020 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1020 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1806 inet6/filter/limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1020 inet6/filter/limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1020 -j DROP Filter 1808 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1807 inet/filter/limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1021 inet/filter/limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1021 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1021 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1807 inet6/filter/limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1021 inet6/filter/limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1021 -j DROP Filter 1809 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1808 inet/filter/limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1022 inet/filter/limit-1808 -m limit --limit 1/second -j LOG inet/filter/limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1022 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1022 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1808 inet6/filter/limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1022 inet6/filter/limit-1808 -m limit --limit 1/second -j LOG inet6/filter/limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1022 -j DROP Filter 1810 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1809 inet/filter/limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1023 inet/filter/limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1023 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1023 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1809 inet6/filter/limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1023 inet6/filter/limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1023 -j DROP Filter 1811 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1810 inet/filter/limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1024 inet/filter/limit-1810 -j TEE --gateway 10.0.0.1 inet/filter/limit-1810 -j TEE --gateway 10.0.0.2 inet/filter/limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1024 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1024 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1810 inet6/filter/limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1024 inet6/filter/limit-1810 -j TEE --gateway fc00::2 inet6/filter/limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1024 -j DROP Filter 1812 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1811 inet/filter/limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1025 inet/filter/limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1025 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1025 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1811 inet6/filter/limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1025 inet6/filter/limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1025 -j DROP Filter 1813 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1812 inet/filter/limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1026 inet/filter/limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1026 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1026 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1812 inet6/filter/limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1026 inet6/filter/limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1026 -j DROP Filter 1814 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1813 inet/filter/limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1027 inet/filter/limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1027 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1027 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1813 inet6/filter/limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1027 inet6/filter/limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1027 -j DROP Filter 1815 {"conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1814 inet/filter/limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1028 inet/filter/limit-1814 -m limit --limit 12/minute -j ULOG inet/filter/limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1028 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1028 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1814 inet6/filter/limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1028 inet6/filter/limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1028 -j DROP Filter 1816 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1815 inet/filter/limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1029 inet/filter/limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1029 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1029 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1815 inet6/filter/limit-1815 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1029 inet6/filter/logdrop-1029 -j DROP Filter 1817 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1816 inet/filter/limit-1816 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 inet/filter/limit-1816 -j ACCEPT inet/filter/logdrop-1030 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1030 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1816 inet6/filter/limit-1816 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 inet6/filter/limit-1816 -j ACCEPT inet6/filter/logdrop-1030 -j DROP Filter 1818 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 inet/filter/logdrop-1031 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1031 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 inet6/filter/logdrop-1031 -j DROP Filter 1819 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1818 inet/filter/limit-1818 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 inet/filter/limit-1818 -m limit --limit 1/second -j LOG inet/filter/limit-1818 -j ACCEPT inet/filter/logdrop-1032 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1032 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1818 inet6/filter/limit-1818 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 inet6/filter/limit-1818 -m limit --limit 1/second -j LOG inet6/filter/limit-1818 -j ACCEPT inet6/filter/logdrop-1032 -j DROP Filter 1820 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1819 inet/filter/limit-1819 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 inet/filter/limit-1819 -m limit --limit 1/second -j LOG inet/filter/logdrop-1033 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1033 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1819 inet6/filter/limit-1819 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 inet6/filter/limit-1819 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1033 -j DROP Filter 1821 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1820 inet/filter/limit-1820 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 inet/filter/limit-1820 -j TEE --gateway 10.0.0.1 inet/filter/limit-1820 -j TEE --gateway 10.0.0.2 inet/filter/limit-1820 -j ACCEPT inet/filter/logdrop-1034 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1034 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1820 inet6/filter/limit-1820 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 inet6/filter/limit-1820 -j TEE --gateway fc00::2 inet6/filter/limit-1820 -j ACCEPT inet6/filter/logdrop-1034 -j DROP Filter 1822 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1821 inet/filter/limit-1821 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 inet/filter/limit-1821 -j TEE --gateway 10.0.0.1 inet/filter/limit-1821 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1035 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1035 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1821 inet6/filter/limit-1821 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 inet6/filter/limit-1821 -j TEE --gateway fc00::2 inet6/filter/logdrop-1035 -j DROP Filter 1823 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1822 inet/filter/limit-1822 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 inet/filter/limit-1822 -j ACCEPT inet/filter/logdrop-1036 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1036 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1822 inet6/filter/limit-1822 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 inet6/filter/limit-1822 -j ACCEPT inet6/filter/logdrop-1036 -j DROP Filter 1824 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 inet/filter/logdrop-1037 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1037 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 inet6/filter/logdrop-1037 -j DROP Filter 1825 {"conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1824 inet/filter/limit-1824 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 inet/filter/limit-1824 -m limit --limit 12/minute -j ULOG inet/filter/limit-1824 -j ACCEPT inet/filter/logdrop-1038 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1038 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1824 inet6/filter/limit-1824 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 inet6/filter/limit-1824 -j ACCEPT inet6/filter/logdrop-1038 -j DROP Filter 1826 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1825 inet/filter/limit-1825 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 inet/filter/limit-1825 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1039 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1039 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1825 inet6/filter/limit-1825 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 inet6/filter/logdrop-1039 -j DROP Filter 1827 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1826 inet/filter/limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 inet/filter/limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1040 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1040 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1826 inet6/filter/limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 inet6/filter/limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1040 -j DROP Filter 1828 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1827 inet/filter/limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 inet/filter/limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1041 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1041 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1827 inet6/filter/limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 inet6/filter/limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1041 -j DROP Filter 1829 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1828 inet/filter/limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 inet/filter/limit-1828 -m limit --limit 1/second -j LOG inet/filter/limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1042 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1042 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1828 inet6/filter/limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 inet6/filter/limit-1828 -m limit --limit 1/second -j LOG inet6/filter/limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1042 -j DROP Filter 1830 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1829 inet/filter/limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 inet/filter/limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1043 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1043 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1829 inet6/filter/limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 inet6/filter/limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1043 -j DROP Filter 1831 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1830 inet/filter/limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 inet/filter/limit-1830 -j TEE --gateway 10.0.0.1 inet/filter/limit-1830 -j TEE --gateway 10.0.0.2 inet/filter/limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1044 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1044 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1830 inet6/filter/limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 inet6/filter/limit-1830 -j TEE --gateway fc00::2 inet6/filter/limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1044 -j DROP Filter 1832 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1831 inet/filter/limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 inet/filter/limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1045 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1045 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1831 inet6/filter/limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 inet6/filter/limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1045 -j DROP Filter 1833 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1832 inet/filter/limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 inet/filter/limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1046 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1046 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1832 inet6/filter/limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 inet6/filter/limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1046 -j DROP Filter 1834 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1833 inet/filter/limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 inet/filter/limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1047 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1047 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1833 inet6/filter/limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 inet6/filter/limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1047 -j DROP Filter 1835 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1834 inet/filter/limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 inet/filter/limit-1834 -m limit --limit 12/minute -j ULOG inet/filter/limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-1048 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1048 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1834 inet6/filter/limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 inet6/filter/limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-1048 -j DROP Filter 1836 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1835 inet/filter/limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 inet/filter/limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1049 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1049 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1835 inet6/filter/limit-1835 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 inet6/filter/logdrop-1049 -j DROP Filter 1837 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1836 inet/filter/limit-1836 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 inet/filter/limit-1836 -j ACCEPT inet/filter/logdrop-1050 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1050 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1836 inet6/filter/limit-1836 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 inet6/filter/limit-1836 -j ACCEPT inet6/filter/logdrop-1050 -j DROP Filter 1838 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 inet/filter/logdrop-1051 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1051 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 inet6/filter/logdrop-1051 -j DROP Filter 1839 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1838 inet/filter/limit-1838 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 inet/filter/limit-1838 -m limit --limit 1/second -j LOG inet/filter/limit-1838 -j ACCEPT inet/filter/logdrop-1052 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1052 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1838 inet6/filter/limit-1838 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 inet6/filter/limit-1838 -m limit --limit 1/second -j LOG inet6/filter/limit-1838 -j ACCEPT inet6/filter/logdrop-1052 -j DROP Filter 1840 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1839 inet/filter/limit-1839 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 inet/filter/limit-1839 -m limit --limit 1/second -j LOG inet/filter/logdrop-1053 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1053 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1839 inet6/filter/limit-1839 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 inet6/filter/limit-1839 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1053 -j DROP Filter 1841 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1840 inet/filter/limit-1840 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 inet/filter/limit-1840 -j TEE --gateway 10.0.0.1 inet/filter/limit-1840 -j TEE --gateway 10.0.0.2 inet/filter/limit-1840 -j ACCEPT inet/filter/logdrop-1054 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1054 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1840 inet6/filter/limit-1840 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 inet6/filter/limit-1840 -j TEE --gateway fc00::2 inet6/filter/limit-1840 -j ACCEPT inet6/filter/logdrop-1054 -j DROP Filter 1842 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1841 inet/filter/limit-1841 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 inet/filter/limit-1841 -j TEE --gateway 10.0.0.1 inet/filter/limit-1841 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1055 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1055 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1841 inet6/filter/limit-1841 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 inet6/filter/limit-1841 -j TEE --gateway fc00::2 inet6/filter/logdrop-1055 -j DROP Filter 1843 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1842 inet/filter/limit-1842 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 inet/filter/limit-1842 -j ACCEPT inet/filter/logdrop-1056 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1056 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1842 inet6/filter/limit-1842 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 inet6/filter/limit-1842 -j ACCEPT inet6/filter/logdrop-1056 -j DROP Filter 1844 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 inet/filter/logdrop-1057 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1057 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 inet6/filter/logdrop-1057 -j DROP Filter 1845 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1844 inet/filter/limit-1844 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 inet/filter/limit-1844 -m limit --limit 12/minute -j ULOG inet/filter/limit-1844 -j ACCEPT inet/filter/logdrop-1058 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1058 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1844 inet6/filter/limit-1844 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 inet6/filter/limit-1844 -j ACCEPT inet6/filter/logdrop-1058 -j DROP Filter 1846 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1845 inet/filter/limit-1845 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 inet/filter/limit-1845 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1059 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1059 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1845 inet6/filter/limit-1845 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 inet6/filter/logdrop-1059 -j DROP Filter 1847 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1846 inet/filter/limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1060 inet/filter/limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1060 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1060 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1846 inet6/filter/limit-1846 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1060 inet6/filter/limit-1846 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1060 -j DROP Filter 1848 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1847 inet/filter/limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1061 inet/filter/limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1061 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1061 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1847 inet6/filter/limit-1847 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1061 inet6/filter/limit-1847 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1061 -j DROP Filter 1849 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1848 inet/filter/limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1062 inet/filter/limit-1848 -m limit --limit 1/second -j LOG inet/filter/limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1062 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1062 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1848 inet6/filter/limit-1848 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1062 inet6/filter/limit-1848 -m limit --limit 1/second -j LOG inet6/filter/limit-1848 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1062 -j DROP Filter 1850 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1849 inet/filter/limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1063 inet/filter/limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1063 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1063 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1849 inet6/filter/limit-1849 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1063 inet6/filter/limit-1849 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1063 -j DROP Filter 1851 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1850 inet/filter/limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1064 inet/filter/limit-1850 -j TEE --gateway 10.0.0.1 inet/filter/limit-1850 -j TEE --gateway 10.0.0.2 inet/filter/limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1064 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1064 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1850 inet6/filter/limit-1850 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1064 inet6/filter/limit-1850 -j TEE --gateway fc00::2 inet6/filter/limit-1850 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1064 -j DROP Filter 1852 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1851 inet/filter/limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1065 inet/filter/limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1065 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1065 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1851 inet6/filter/limit-1851 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1065 inet6/filter/limit-1851 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1065 -j DROP Filter 1853 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1852 inet/filter/limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1066 inet/filter/limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1066 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1066 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1852 inet6/filter/limit-1852 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1066 inet6/filter/limit-1852 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1066 -j DROP Filter 1854 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1853 inet/filter/limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1067 inet/filter/limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1067 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1067 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1853 inet6/filter/limit-1853 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1067 inet6/filter/limit-1853 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1067 -j DROP Filter 1855 {"conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1854 inet/filter/limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1068 inet/filter/limit-1854 -m limit --limit 12/minute -j ULOG inet/filter/limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1068 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1068 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1854 inet6/filter/limit-1854 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1068 inet6/filter/limit-1854 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1068 -j DROP Filter 1856 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1855 inet/filter/limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1069 inet/filter/limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1069 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1069 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1855 inet6/filter/limit-1855 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1069 inet6/filter/logdrop-1069 -j DROP Filter 1857 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1856 inet/filter/limit-1856 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 inet/filter/limit-1856 -j ACCEPT inet/filter/logdrop-1070 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1070 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1856 inet6/filter/limit-1856 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 inet6/filter/limit-1856 -j ACCEPT inet6/filter/logdrop-1070 -j DROP Filter 1858 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 inet/filter/logdrop-1071 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1071 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 inet6/filter/logdrop-1071 -j DROP Filter 1859 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1858 inet/filter/limit-1858 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 inet/filter/limit-1858 -m limit --limit 1/second -j LOG inet/filter/limit-1858 -j ACCEPT inet/filter/logdrop-1072 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1072 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1858 inet6/filter/limit-1858 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 inet6/filter/limit-1858 -m limit --limit 1/second -j LOG inet6/filter/limit-1858 -j ACCEPT inet6/filter/logdrop-1072 -j DROP Filter 1860 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1859 inet/filter/limit-1859 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 inet/filter/limit-1859 -m limit --limit 1/second -j LOG inet/filter/logdrop-1073 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1073 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1859 inet6/filter/limit-1859 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 inet6/filter/limit-1859 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1073 -j DROP Filter 1861 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1860 inet/filter/limit-1860 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 inet/filter/limit-1860 -j TEE --gateway 10.0.0.1 inet/filter/limit-1860 -j TEE --gateway 10.0.0.2 inet/filter/limit-1860 -j ACCEPT inet/filter/logdrop-1074 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1074 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1860 inet6/filter/limit-1860 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 inet6/filter/limit-1860 -j TEE --gateway fc00::2 inet6/filter/limit-1860 -j ACCEPT inet6/filter/logdrop-1074 -j DROP Filter 1862 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1861 inet/filter/limit-1861 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 inet/filter/limit-1861 -j TEE --gateway 10.0.0.1 inet/filter/limit-1861 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1075 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1075 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1861 inet6/filter/limit-1861 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 inet6/filter/limit-1861 -j TEE --gateway fc00::2 inet6/filter/logdrop-1075 -j DROP Filter 1863 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1862 inet/filter/limit-1862 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 inet/filter/limit-1862 -j ACCEPT inet/filter/logdrop-1076 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1076 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1862 inet6/filter/limit-1862 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 inet6/filter/limit-1862 -j ACCEPT inet6/filter/logdrop-1076 -j DROP Filter 1864 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 inet/filter/logdrop-1077 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1077 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 inet6/filter/logdrop-1077 -j DROP Filter 1865 {"conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1864 inet/filter/limit-1864 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 inet/filter/limit-1864 -m limit --limit 12/minute -j ULOG inet/filter/limit-1864 -j ACCEPT inet/filter/logdrop-1078 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1078 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1864 inet6/filter/limit-1864 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 inet6/filter/limit-1864 -j ACCEPT inet6/filter/logdrop-1078 -j DROP Filter 1866 {"action":"pass","conn-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1865 inet/filter/limit-1865 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 inet/filter/limit-1865 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1079 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1079 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1865 inet6/filter/limit-1865 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 inet6/filter/logdrop-1079 -j DROP Filter 1867 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1866 inet/filter/limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 inet/filter/limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1080 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1080 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1866 inet6/filter/limit-1866 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 inet6/filter/limit-1866 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1080 -j DROP Filter 1868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1867 inet/filter/limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 inet/filter/limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1081 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1081 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1867 inet6/filter/limit-1867 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 inet6/filter/limit-1867 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1081 -j DROP Filter 1869 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1868 inet/filter/limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 inet/filter/limit-1868 -m limit --limit 1/second -j LOG inet/filter/limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1082 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1082 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1868 inet6/filter/limit-1868 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 inet6/filter/limit-1868 -m limit --limit 1/second -j LOG inet6/filter/limit-1868 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1082 -j DROP Filter 1870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1869 inet/filter/limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 inet/filter/limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1083 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1083 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1869 inet6/filter/limit-1869 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 inet6/filter/limit-1869 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1083 -j DROP Filter 1871 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1870 inet/filter/limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 inet/filter/limit-1870 -j TEE --gateway 10.0.0.1 inet/filter/limit-1870 -j TEE --gateway 10.0.0.2 inet/filter/limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1084 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1084 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1870 inet6/filter/limit-1870 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 inet6/filter/limit-1870 -j TEE --gateway fc00::2 inet6/filter/limit-1870 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1084 -j DROP Filter 1872 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1871 inet/filter/limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 inet/filter/limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1085 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1085 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1871 inet6/filter/limit-1871 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 inet6/filter/limit-1871 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1085 -j DROP Filter 1873 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1872 inet/filter/limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 inet/filter/limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1086 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1086 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1872 inet6/filter/limit-1872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 inet6/filter/limit-1872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1086 -j DROP Filter 1874 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1873 inet/filter/limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 inet/filter/limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1087 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1087 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1873 inet6/filter/limit-1873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 inet6/filter/limit-1873 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1087 -j DROP Filter 1875 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1874 inet/filter/limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1088 inet/filter/limit-1874 -m limit --limit 12/minute -j ULOG inet/filter/limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-1088 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1088 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1874 inet6/filter/limit-1874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1088 inet6/filter/limit-1874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-1088 -j DROP Filter 1876 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1875 inet/filter/limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1089 inet/filter/limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1089 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1089 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1875 inet6/filter/limit-1875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1089 inet6/filter/logdrop-1089 -j DROP Filter 1877 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1876 inet/filter/limit-1876 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 inet/filter/limit-1876 -j ACCEPT inet/filter/logdrop-1090 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1090 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1876 inet6/filter/limit-1876 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 inet6/filter/limit-1876 -j ACCEPT inet6/filter/logdrop-1090 -j DROP Filter 1878 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 inet/filter/logdrop-1091 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1091 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 inet6/filter/logdrop-1091 -j DROP Filter 1879 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1878 inet/filter/limit-1878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 inet/filter/limit-1878 -m limit --limit 1/second -j LOG inet/filter/limit-1878 -j ACCEPT inet/filter/logdrop-1092 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1092 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1878 inet6/filter/limit-1878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 inet6/filter/limit-1878 -m limit --limit 1/second -j LOG inet6/filter/limit-1878 -j ACCEPT inet6/filter/logdrop-1092 -j DROP Filter 1880 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1879 inet/filter/limit-1879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 inet/filter/limit-1879 -m limit --limit 1/second -j LOG inet/filter/logdrop-1093 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1093 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1879 inet6/filter/limit-1879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 inet6/filter/limit-1879 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1093 -j DROP Filter 1881 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1880 inet/filter/limit-1880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 inet/filter/limit-1880 -j TEE --gateway 10.0.0.1 inet/filter/limit-1880 -j TEE --gateway 10.0.0.2 inet/filter/limit-1880 -j ACCEPT inet/filter/logdrop-1094 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1094 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1880 inet6/filter/limit-1880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 inet6/filter/limit-1880 -j TEE --gateway fc00::2 inet6/filter/limit-1880 -j ACCEPT inet6/filter/logdrop-1094 -j DROP Filter 1882 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1881 inet/filter/limit-1881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 inet/filter/limit-1881 -j TEE --gateway 10.0.0.1 inet/filter/limit-1881 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1095 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1095 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1881 inet6/filter/limit-1881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 inet6/filter/limit-1881 -j TEE --gateway fc00::2 inet6/filter/logdrop-1095 -j DROP Filter 1883 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1882 inet/filter/limit-1882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 inet/filter/limit-1882 -j ACCEPT inet/filter/logdrop-1096 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1096 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1882 inet6/filter/limit-1882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 inet6/filter/limit-1882 -j ACCEPT inet6/filter/logdrop-1096 -j DROP Filter 1884 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 inet/filter/logdrop-1097 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1097 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 inet6/filter/logdrop-1097 -j DROP Filter 1885 {"conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1884 inet/filter/limit-1884 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 inet/filter/limit-1884 -m limit --limit 12/minute -j ULOG inet/filter/limit-1884 -j ACCEPT inet/filter/logdrop-1098 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1098 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1884 inet6/filter/limit-1884 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 inet6/filter/limit-1884 -j ACCEPT inet6/filter/logdrop-1098 -j DROP Filter 1886 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1885 inet/filter/limit-1885 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 inet/filter/limit-1885 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1099 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1099 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1885 inet6/filter/limit-1885 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 inet6/filter/logdrop-1099 -j DROP Filter 1887 {"conn-limit":150,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1886 inet/filter/limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j ACCEPT inet/filter/limit-1886 -m limit --limit 1/second -j LOG inet/filter/limit-1886 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1886 inet6/filter/limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j ACCEPT inet6/filter/limit-1886 -m limit --limit 1/second -j LOG inet6/filter/limit-1886 -j DROP Filter 1888 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1887 inet/filter/limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1887 -j RETURN inet/filter/limit-1887 -m limit --limit 1/second -j LOG inet/filter/limit-1887 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1887 inet6/filter/limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1887 -j RETURN inet6/filter/limit-1887 -m limit --limit 1/second -j LOG inet6/filter/limit-1887 -j DROP Filter 1889 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1888 inet/filter/limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1888 -j logaccept-33 inet/filter/limit-1888 -m limit --limit 1/second -j LOG inet/filter/limit-1888 -j DROP inet/filter/logaccept-33 -m limit --limit 1/second -j LOG inet/filter/logaccept-33 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1888 inet6/filter/limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1888 -j logaccept-33 inet6/filter/limit-1888 -m limit --limit 1/second -j LOG inet6/filter/limit-1888 -j DROP inet6/filter/logaccept-33 -m limit --limit 1/second -j LOG inet6/filter/logaccept-33 -j ACCEPT Filter 1890 {"conn-limit":150,"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1889 inet/filter/limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1889 -j logaccept-34 inet/filter/limit-1889 -m limit --limit 1/second -j LOG inet/filter/limit-1889 -j DROP inet/filter/logaccept-34 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-34 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-34 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1889 inet6/filter/limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1889 -j logaccept-34 inet6/filter/limit-1889 -m limit --limit 1/second -j LOG inet6/filter/limit-1889 -j DROP inet6/filter/logaccept-34 -j TEE --gateway fc00::2 inet6/filter/logaccept-34 -j ACCEPT Filter 1891 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1890 inet/filter/limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1890 -j ACCEPT inet/filter/limit-1890 -m limit --limit 1/second -j LOG inet/filter/limit-1890 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1890 inet6/filter/limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1890 -j ACCEPT inet6/filter/limit-1890 -m limit --limit 1/second -j LOG inet6/filter/limit-1890 -j DROP Filter 1892 {"conn-limit":150,"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1891 inet/filter/limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1891 -j logaccept-35 inet/filter/limit-1891 -m limit --limit 1/second -j LOG inet/filter/limit-1891 -j DROP inet/filter/logaccept-35 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-35 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1891 inet6/filter/limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1891 -j logaccept-35 inet6/filter/limit-1891 -m limit --limit 1/second -j LOG inet6/filter/limit-1891 -j DROP inet6/filter/logaccept-35 -j ACCEPT Filter 1893 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1892 inet/filter/limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1892 -j ACCEPT inet/filter/limit-1892 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1892 inet6/filter/limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1892 -j ACCEPT inet6/filter/limit-1892 -j DROP Filter 1894 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1893 inet/filter/limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1893 -j RETURN inet/filter/limit-1893 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1893 inet6/filter/limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1893 -j RETURN inet6/filter/limit-1893 -j DROP Filter 1895 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1894 inet/filter/limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1894 -j logaccept-36 inet/filter/limit-1894 -j DROP inet/filter/logaccept-36 -m limit --limit 1/second -j LOG inet/filter/logaccept-36 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1894 inet6/filter/limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1894 -j logaccept-36 inet6/filter/limit-1894 -j DROP inet6/filter/logaccept-36 -m limit --limit 1/second -j LOG inet6/filter/logaccept-36 -j ACCEPT Filter 1896 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1895 inet/filter/limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1895 -j logaccept-37 inet/filter/limit-1895 -j DROP inet/filter/logaccept-37 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-37 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-37 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1895 inet6/filter/limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1895 -j logaccept-37 inet6/filter/limit-1895 -j DROP inet6/filter/logaccept-37 -j TEE --gateway fc00::2 inet6/filter/logaccept-37 -j ACCEPT Filter 1897 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1896 inet/filter/limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1896 -j ACCEPT inet/filter/limit-1896 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1896 inet6/filter/limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1896 -j ACCEPT inet6/filter/limit-1896 -j DROP Filter 1898 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1897 inet/filter/limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1897 -j logaccept-38 inet/filter/limit-1897 -j DROP inet/filter/logaccept-38 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-38 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1897 inet6/filter/limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1897 -j logaccept-38 inet6/filter/limit-1897 -j DROP inet6/filter/logaccept-38 -j ACCEPT Filter 1899 {"conn-limit":{"count":150},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1898 inet/filter/limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1898 -j ACCEPT inet/filter/limit-1898 -m limit --limit 1/second -j LOG inet/filter/limit-1898 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1898 inet6/filter/limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1898 -j ACCEPT inet6/filter/limit-1898 -m limit --limit 1/second -j LOG inet6/filter/limit-1898 -j DROP Filter 1900 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1899 inet/filter/limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1899 -j RETURN inet/filter/limit-1899 -m limit --limit 1/second -j LOG inet/filter/limit-1899 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1899 inet6/filter/limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1899 -j RETURN inet6/filter/limit-1899 -m limit --limit 1/second -j LOG inet6/filter/limit-1899 -j DROP Filter 1901 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1900 inet/filter/limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1900 -j logaccept-39 inet/filter/limit-1900 -m limit --limit 1/second -j LOG inet/filter/limit-1900 -j DROP inet/filter/logaccept-39 -m limit --limit 1/second -j LOG inet/filter/logaccept-39 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1900 inet6/filter/limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1900 -j logaccept-39 inet6/filter/limit-1900 -m limit --limit 1/second -j LOG inet6/filter/limit-1900 -j DROP inet6/filter/logaccept-39 -m limit --limit 1/second -j LOG inet6/filter/logaccept-39 -j ACCEPT Filter 1902 {"conn-limit":{"count":150},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1901 inet/filter/limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1901 -j logaccept-40 inet/filter/limit-1901 -m limit --limit 1/second -j LOG inet/filter/limit-1901 -j DROP inet/filter/logaccept-40 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-40 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-40 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1901 inet6/filter/limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1901 -j logaccept-40 inet6/filter/limit-1901 -m limit --limit 1/second -j LOG inet6/filter/limit-1901 -j DROP inet6/filter/logaccept-40 -j TEE --gateway fc00::2 inet6/filter/logaccept-40 -j ACCEPT Filter 1903 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1902 inet/filter/limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1902 -j ACCEPT inet/filter/limit-1902 -m limit --limit 1/second -j LOG inet/filter/limit-1902 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1902 inet6/filter/limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1902 -j ACCEPT inet6/filter/limit-1902 -m limit --limit 1/second -j LOG inet6/filter/limit-1902 -j DROP Filter 1904 {"conn-limit":{"count":150},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1903 inet/filter/limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1903 -j logaccept-41 inet/filter/limit-1903 -m limit --limit 1/second -j LOG inet/filter/limit-1903 -j DROP inet/filter/logaccept-41 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-41 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1903 inet6/filter/limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1903 -j logaccept-41 inet6/filter/limit-1903 -m limit --limit 1/second -j LOG inet6/filter/limit-1903 -j DROP inet6/filter/logaccept-41 -j ACCEPT Filter 1905 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1904 inet/filter/limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1904 -j ACCEPT inet/filter/limit-1904 -j TEE --gateway 10.0.0.1 inet/filter/limit-1904 -j TEE --gateway 10.0.0.2 inet/filter/limit-1904 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1904 inet6/filter/limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1904 -j ACCEPT inet6/filter/limit-1904 -j TEE --gateway fc00::2 inet6/filter/limit-1904 -j DROP Filter 1906 {"action":"pass","conn-limit":{"count":150,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1905 inet/filter/limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1905 -j RETURN inet/filter/limit-1905 -j TEE --gateway 10.0.0.1 inet/filter/limit-1905 -j TEE --gateway 10.0.0.2 inet/filter/limit-1905 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1905 inet6/filter/limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1905 -j RETURN inet6/filter/limit-1905 -j TEE --gateway fc00::2 inet6/filter/limit-1905 -j DROP Filter 1907 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1906 inet/filter/limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1906 -j logaccept-42 inet/filter/limit-1906 -j TEE --gateway 10.0.0.1 inet/filter/limit-1906 -j TEE --gateway 10.0.0.2 inet/filter/limit-1906 -j DROP inet/filter/logaccept-42 -m limit --limit 1/second -j LOG inet/filter/logaccept-42 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1906 inet6/filter/limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1906 -j logaccept-42 inet6/filter/limit-1906 -j TEE --gateway fc00::2 inet6/filter/limit-1906 -j DROP inet6/filter/logaccept-42 -m limit --limit 1/second -j LOG inet6/filter/logaccept-42 -j ACCEPT Filter 1908 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1907 inet/filter/limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1907 -j logaccept-43 inet/filter/limit-1907 -j TEE --gateway 10.0.0.1 inet/filter/limit-1907 -j TEE --gateway 10.0.0.2 inet/filter/limit-1907 -j DROP inet/filter/logaccept-43 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-43 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-43 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1907 inet6/filter/limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1907 -j logaccept-43 inet6/filter/limit-1907 -j TEE --gateway fc00::2 inet6/filter/limit-1907 -j DROP inet6/filter/logaccept-43 -j TEE --gateway fc00::2 inet6/filter/logaccept-43 -j ACCEPT Filter 1909 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1908 inet/filter/limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1908 -j ACCEPT inet/filter/limit-1908 -j TEE --gateway 10.0.0.1 inet/filter/limit-1908 -j TEE --gateway 10.0.0.2 inet/filter/limit-1908 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1908 inet6/filter/limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1908 -j ACCEPT inet6/filter/limit-1908 -j TEE --gateway fc00::2 inet6/filter/limit-1908 -j DROP Filter 1910 {"conn-limit":{"count":150,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1909 inet/filter/limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1909 -j logaccept-44 inet/filter/limit-1909 -j TEE --gateway 10.0.0.1 inet/filter/limit-1909 -j TEE --gateway 10.0.0.2 inet/filter/limit-1909 -j DROP inet/filter/logaccept-44 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-44 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1909 inet6/filter/limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1909 -j logaccept-44 inet6/filter/limit-1909 -j TEE --gateway fc00::2 inet6/filter/limit-1909 -j DROP inet6/filter/logaccept-44 -j ACCEPT Filter 1911 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1910 inet/filter/limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1910 -j ACCEPT inet/filter/limit-1910 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1910 inet6/filter/limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1910 -j ACCEPT inet6/filter/limit-1910 -j DROP Filter 1912 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1911 inet/filter/limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1911 -j RETURN inet/filter/limit-1911 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1911 inet6/filter/limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1911 -j RETURN inet6/filter/limit-1911 -j DROP Filter 1913 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1912 inet/filter/limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1912 -j logaccept-45 inet/filter/limit-1912 -j DROP inet/filter/logaccept-45 -m limit --limit 1/second -j LOG inet/filter/logaccept-45 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1912 inet6/filter/limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1912 -j logaccept-45 inet6/filter/limit-1912 -j DROP inet6/filter/logaccept-45 -m limit --limit 1/second -j LOG inet6/filter/logaccept-45 -j ACCEPT Filter 1914 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1913 inet/filter/limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1913 -j logaccept-46 inet/filter/limit-1913 -j DROP inet/filter/logaccept-46 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-46 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-46 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1913 inet6/filter/limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1913 -j logaccept-46 inet6/filter/limit-1913 -j DROP inet6/filter/logaccept-46 -j TEE --gateway fc00::2 inet6/filter/logaccept-46 -j ACCEPT Filter 1915 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1914 inet/filter/limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1914 -j ACCEPT inet/filter/limit-1914 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1914 inet6/filter/limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1914 -j ACCEPT inet6/filter/limit-1914 -j DROP Filter 1916 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1915 inet/filter/limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1915 -j logaccept-47 inet/filter/limit-1915 -j DROP inet/filter/logaccept-47 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-47 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1915 inet6/filter/limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1915 -j logaccept-47 inet6/filter/limit-1915 -j DROP inet6/filter/logaccept-47 -j ACCEPT Filter 1917 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1916 inet/filter/limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1916 -j ACCEPT inet/filter/limit-1916 -m limit --limit 12/minute -j ULOG inet/filter/limit-1916 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1916 inet6/filter/limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1916 -j ACCEPT inet6/filter/limit-1916 -j DROP Filter 1918 {"action":"pass","conn-limit":{"count":150,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1917 inet/filter/limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1917 -j RETURN inet/filter/limit-1917 -m limit --limit 12/minute -j ULOG inet/filter/limit-1917 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1917 inet6/filter/limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1917 -j RETURN inet6/filter/limit-1917 -j DROP Filter 1919 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1918 inet/filter/limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1918 -j logaccept-48 inet/filter/limit-1918 -m limit --limit 12/minute -j ULOG inet/filter/limit-1918 -j DROP inet/filter/logaccept-48 -m limit --limit 1/second -j LOG inet/filter/logaccept-48 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1918 inet6/filter/limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1918 -j logaccept-48 inet6/filter/limit-1918 -j DROP inet6/filter/logaccept-48 -m limit --limit 1/second -j LOG inet6/filter/logaccept-48 -j ACCEPT Filter 1920 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1919 inet/filter/limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1919 -j logaccept-49 inet/filter/limit-1919 -m limit --limit 12/minute -j ULOG inet/filter/limit-1919 -j DROP inet/filter/logaccept-49 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-49 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-49 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1919 inet6/filter/limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1919 -j logaccept-49 inet6/filter/limit-1919 -j DROP inet6/filter/logaccept-49 -j TEE --gateway fc00::2 inet6/filter/logaccept-49 -j ACCEPT Filter 1921 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1920 inet/filter/limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1920 -j ACCEPT inet/filter/limit-1920 -m limit --limit 12/minute -j ULOG inet/filter/limit-1920 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1920 inet6/filter/limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1920 -j ACCEPT inet6/filter/limit-1920 -j DROP Filter 1922 {"conn-limit":{"count":150,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1921 inet/filter/limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1921 -j logaccept-50 inet/filter/limit-1921 -m limit --limit 12/minute -j ULOG inet/filter/limit-1921 -j DROP inet/filter/logaccept-50 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-50 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1921 inet6/filter/limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1921 -j logaccept-50 inet6/filter/limit-1921 -j DROP inet6/filter/logaccept-50 -j ACCEPT Filter 1923 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1922 inet/filter/limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1922 -j ACCEPT inet/filter/limit-1922 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1922 inet6/filter/limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1922 -j ACCEPT inet6/filter/limit-1922 -j DROP Filter 1924 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1923 inet/filter/limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1923 -j RETURN inet/filter/limit-1923 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1923 inet6/filter/limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1923 -j RETURN inet6/filter/limit-1923 -j DROP Filter 1925 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1924 inet/filter/limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1924 -j logaccept-51 inet/filter/limit-1924 -j DROP inet/filter/logaccept-51 -m limit --limit 1/second -j LOG inet/filter/logaccept-51 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1924 inet6/filter/limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1924 -j logaccept-51 inet6/filter/limit-1924 -j DROP inet6/filter/logaccept-51 -m limit --limit 1/second -j LOG inet6/filter/logaccept-51 -j ACCEPT Filter 1926 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1925 inet/filter/limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1925 -j logaccept-52 inet/filter/limit-1925 -j DROP inet/filter/logaccept-52 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-52 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-52 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1925 inet6/filter/limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1925 -j logaccept-52 inet6/filter/limit-1925 -j DROP inet6/filter/logaccept-52 -j TEE --gateway fc00::2 inet6/filter/logaccept-52 -j ACCEPT Filter 1927 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1926 inet/filter/limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1926 -j ACCEPT inet/filter/limit-1926 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1926 inet6/filter/limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1926 -j ACCEPT inet6/filter/limit-1926 -j DROP Filter 1928 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1927 inet/filter/limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1927 -j logaccept-53 inet/filter/limit-1927 -j DROP inet/filter/logaccept-53 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-53 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1927 inet6/filter/limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1927 -j logaccept-53 inet6/filter/limit-1927 -j DROP inet6/filter/logaccept-53 -j ACCEPT Filter 1929 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1928 inet/filter/limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1928 -j ACCEPT inet/filter/limit-1928 -m limit --limit 1/second -j LOG inet/filter/limit-1928 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1928 inet6/filter/limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1928 -j ACCEPT inet6/filter/limit-1928 -m limit --limit 1/second -j LOG inet6/filter/limit-1928 -j DROP Filter 1930 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1929 inet/filter/limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1929 -j RETURN inet/filter/limit-1929 -m limit --limit 1/second -j LOG inet/filter/limit-1929 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1929 inet6/filter/limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1929 -j RETURN inet6/filter/limit-1929 -m limit --limit 1/second -j LOG inet6/filter/limit-1929 -j DROP Filter 1931 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1930 inet/filter/limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1930 -j logaccept-54 inet/filter/limit-1930 -m limit --limit 1/second -j LOG inet/filter/limit-1930 -j DROP inet/filter/logaccept-54 -m limit --limit 1/second -j LOG inet/filter/logaccept-54 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1930 inet6/filter/limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1930 -j logaccept-54 inet6/filter/limit-1930 -m limit --limit 1/second -j LOG inet6/filter/limit-1930 -j DROP inet6/filter/logaccept-54 -m limit --limit 1/second -j LOG inet6/filter/logaccept-54 -j ACCEPT Filter 1932 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1931 inet/filter/limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1931 -j logaccept-55 inet/filter/limit-1931 -m limit --limit 1/second -j LOG inet/filter/limit-1931 -j DROP inet/filter/logaccept-55 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-55 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-55 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1931 inet6/filter/limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1931 -j logaccept-55 inet6/filter/limit-1931 -m limit --limit 1/second -j LOG inet6/filter/limit-1931 -j DROP inet6/filter/logaccept-55 -j TEE --gateway fc00::2 inet6/filter/logaccept-55 -j ACCEPT Filter 1933 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1932 inet/filter/limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1932 -j ACCEPT inet/filter/limit-1932 -m limit --limit 1/second -j LOG inet/filter/limit-1932 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1932 inet6/filter/limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1932 -j ACCEPT inet6/filter/limit-1932 -m limit --limit 1/second -j LOG inet6/filter/limit-1932 -j DROP Filter 1934 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1933 inet/filter/limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1933 -j logaccept-56 inet/filter/limit-1933 -m limit --limit 1/second -j LOG inet/filter/limit-1933 -j DROP inet/filter/logaccept-56 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-56 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1933 inet6/filter/limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1933 -j logaccept-56 inet6/filter/limit-1933 -m limit --limit 1/second -j LOG inet6/filter/limit-1933 -j DROP inet6/filter/logaccept-56 -j ACCEPT Filter 1935 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1934 inet/filter/limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1934 -j ACCEPT inet/filter/limit-1934 -j TEE --gateway 10.0.0.1 inet/filter/limit-1934 -j TEE --gateway 10.0.0.2 inet/filter/limit-1934 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1934 inet6/filter/limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1934 -j ACCEPT inet6/filter/limit-1934 -j TEE --gateway fc00::2 inet6/filter/limit-1934 -j DROP Filter 1936 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1935 inet/filter/limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1935 -j RETURN inet/filter/limit-1935 -j TEE --gateway 10.0.0.1 inet/filter/limit-1935 -j TEE --gateway 10.0.0.2 inet/filter/limit-1935 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1935 inet6/filter/limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1935 -j RETURN inet6/filter/limit-1935 -j TEE --gateway fc00::2 inet6/filter/limit-1935 -j DROP Filter 1937 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1936 inet/filter/limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1936 -j logaccept-57 inet/filter/limit-1936 -j TEE --gateway 10.0.0.1 inet/filter/limit-1936 -j TEE --gateway 10.0.0.2 inet/filter/limit-1936 -j DROP inet/filter/logaccept-57 -m limit --limit 1/second -j LOG inet/filter/logaccept-57 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1936 inet6/filter/limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1936 -j logaccept-57 inet6/filter/limit-1936 -j TEE --gateway fc00::2 inet6/filter/limit-1936 -j DROP inet6/filter/logaccept-57 -m limit --limit 1/second -j LOG inet6/filter/logaccept-57 -j ACCEPT Filter 1938 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1937 inet/filter/limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1937 -j logaccept-58 inet/filter/limit-1937 -j TEE --gateway 10.0.0.1 inet/filter/limit-1937 -j TEE --gateway 10.0.0.2 inet/filter/limit-1937 -j DROP inet/filter/logaccept-58 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-58 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-58 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1937 inet6/filter/limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1937 -j logaccept-58 inet6/filter/limit-1937 -j TEE --gateway fc00::2 inet6/filter/limit-1937 -j DROP inet6/filter/logaccept-58 -j TEE --gateway fc00::2 inet6/filter/logaccept-58 -j ACCEPT Filter 1939 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1938 inet/filter/limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1938 -j ACCEPT inet/filter/limit-1938 -j TEE --gateway 10.0.0.1 inet/filter/limit-1938 -j TEE --gateway 10.0.0.2 inet/filter/limit-1938 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1938 inet6/filter/limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1938 -j ACCEPT inet6/filter/limit-1938 -j TEE --gateway fc00::2 inet6/filter/limit-1938 -j DROP Filter 1940 {"conn-limit":{"count":150,"interval":5,"log":"mirror"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1939 inet/filter/limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1939 -j logaccept-59 inet/filter/limit-1939 -j TEE --gateway 10.0.0.1 inet/filter/limit-1939 -j TEE --gateway 10.0.0.2 inet/filter/limit-1939 -j DROP inet/filter/logaccept-59 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-59 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1939 inet6/filter/limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1939 -j logaccept-59 inet6/filter/limit-1939 -j TEE --gateway fc00::2 inet6/filter/limit-1939 -j DROP inet6/filter/logaccept-59 -j ACCEPT Filter 1941 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1940 inet/filter/limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1940 -j ACCEPT inet/filter/limit-1940 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1940 inet6/filter/limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1940 -j ACCEPT inet6/filter/limit-1940 -j DROP Filter 1942 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1941 inet/filter/limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1941 -j RETURN inet/filter/limit-1941 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1941 inet6/filter/limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1941 -j RETURN inet6/filter/limit-1941 -j DROP Filter 1943 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1942 inet/filter/limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1942 -j logaccept-60 inet/filter/limit-1942 -j DROP inet/filter/logaccept-60 -m limit --limit 1/second -j LOG inet/filter/logaccept-60 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1942 inet6/filter/limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1942 -j logaccept-60 inet6/filter/limit-1942 -j DROP inet6/filter/logaccept-60 -m limit --limit 1/second -j LOG inet6/filter/logaccept-60 -j ACCEPT Filter 1944 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1943 inet/filter/limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1943 -j logaccept-61 inet/filter/limit-1943 -j DROP inet/filter/logaccept-61 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-61 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-61 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1943 inet6/filter/limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1943 -j logaccept-61 inet6/filter/limit-1943 -j DROP inet6/filter/logaccept-61 -j TEE --gateway fc00::2 inet6/filter/logaccept-61 -j ACCEPT Filter 1945 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1944 inet/filter/limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1944 -j ACCEPT inet/filter/limit-1944 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1944 inet6/filter/limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1944 -j ACCEPT inet6/filter/limit-1944 -j DROP Filter 1946 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1945 inet/filter/limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1945 -j logaccept-62 inet/filter/limit-1945 -j DROP inet/filter/logaccept-62 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-62 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1945 inet6/filter/limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1945 -j logaccept-62 inet6/filter/limit-1945 -j DROP inet6/filter/logaccept-62 -j ACCEPT Filter 1947 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1946 inet/filter/limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1946 -j ACCEPT inet/filter/limit-1946 -m limit --limit 12/minute -j ULOG inet/filter/limit-1946 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1946 inet6/filter/limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1946 -j ACCEPT inet6/filter/limit-1946 -j DROP Filter 1948 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1947 inet/filter/limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1947 -j RETURN inet/filter/limit-1947 -m limit --limit 12/minute -j ULOG inet/filter/limit-1947 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1947 inet6/filter/limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1947 -j RETURN inet6/filter/limit-1947 -j DROP Filter 1949 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":true,"out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1948 inet/filter/limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1948 -j logaccept-63 inet/filter/limit-1948 -m limit --limit 12/minute -j ULOG inet/filter/limit-1948 -j DROP inet/filter/logaccept-63 -m limit --limit 1/second -j LOG inet/filter/logaccept-63 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1948 inet6/filter/limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1948 -j logaccept-63 inet6/filter/limit-1948 -j DROP inet6/filter/logaccept-63 -m limit --limit 1/second -j LOG inet6/filter/logaccept-63 -j ACCEPT Filter 1950 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"mirror","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1949 inet/filter/limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1949 -j logaccept-64 inet/filter/limit-1949 -m limit --limit 12/minute -j ULOG inet/filter/limit-1949 -j DROP inet/filter/logaccept-64 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-64 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-64 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1949 inet6/filter/limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1949 -j logaccept-64 inet6/filter/limit-1949 -j DROP inet6/filter/logaccept-64 -j TEE --gateway fc00::2 inet6/filter/logaccept-64 -j ACCEPT Filter 1951 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"none","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1950 inet/filter/limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1950 -j ACCEPT inet/filter/limit-1950 -m limit --limit 12/minute -j ULOG inet/filter/limit-1950 -j DROP inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1950 inet6/filter/limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1950 -j ACCEPT inet6/filter/limit-1950 -j DROP Filter 1952 {"conn-limit":{"count":150,"interval":5,"log":"ulog"},"in":"_fw","log":"ulog","out":"B"} (filter-limit) inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1951 inet/filter/limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1951 -j logaccept-65 inet/filter/limit-1951 -m limit --limit 12/minute -j ULOG inet/filter/limit-1951 -j DROP inet/filter/logaccept-65 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-65 -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-1951 inet6/filter/limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1951 -j logaccept-65 inet6/filter/limit-1951 -j DROP inet6/filter/logaccept-65 -j ACCEPT Filter 1953 {"flow-limit":1} (filter-limit) inet/filter/FORWARD -j limit-1952 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1952 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1952 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1100 inet/filter/limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1100 -m limit --limit 1/second -j LOG inet/filter/logdrop-1100 -j DROP inet6/filter/FORWARD -j limit-1952 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1952 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1952 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1100 inet6/filter/limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1100 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1100 -j DROP Filter 1954 {"action":"pass","flow-limit":1} (filter-limit) inet/filter/FORWARD -j limit-1953 inet/filter/INPUT -j limit-1953 inet/filter/OUTPUT -j limit-1953 inet/filter/limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1101 inet/filter/limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1101 -m limit --limit 1/second -j LOG inet/filter/logdrop-1101 -j DROP inet6/filter/FORWARD -j limit-1953 inet6/filter/INPUT -j limit-1953 inet6/filter/OUTPUT -j limit-1953 inet6/filter/limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1101 inet6/filter/limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1101 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1101 -j DROP Filter 1955 {"flow-limit":1,"log":true} (filter-limit) inet/filter/FORWARD -j limit-1954 inet/filter/FORWARD -j logaccept-final-0 inet/filter/INPUT -j limit-1954 inet/filter/INPUT -j logaccept-final-0 inet/filter/OUTPUT -j limit-1954 inet/filter/OUTPUT -j logaccept-final-0 inet/filter/limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1102 inet/filter/limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-0 -j ACCEPT inet/filter/logdrop-1102 -m limit --limit 1/second -j LOG inet/filter/logdrop-1102 -j DROP inet6/filter/FORWARD -j limit-1954 inet6/filter/FORWARD -j logaccept-final-0 inet6/filter/INPUT -j limit-1954 inet6/filter/INPUT -j logaccept-final-0 inet6/filter/OUTPUT -j limit-1954 inet6/filter/OUTPUT -j logaccept-final-0 inet6/filter/limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1102 inet6/filter/limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-0 -j ACCEPT inet6/filter/logdrop-1102 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1102 -j DROP Filter 1956 {"action":"pass","flow-limit":1,"log":true} (filter-limit) inet/filter/FORWARD -j limit-1955 inet/filter/INPUT -j limit-1955 inet/filter/OUTPUT -j limit-1955 inet/filter/limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1103 inet/filter/limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1103 -m limit --limit 1/second -j LOG inet/filter/logdrop-1103 -j DROP inet6/filter/FORWARD -j limit-1955 inet6/filter/INPUT -j limit-1955 inet6/filter/OUTPUT -j limit-1955 inet6/filter/limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1103 inet6/filter/limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1103 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1103 -j DROP Filter 1957 {"flow-limit":1,"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1956 inet/filter/FORWARD -j logaccept-final-1 inet/filter/INPUT -j limit-1956 inet/filter/INPUT -j logaccept-final-1 inet/filter/OUTPUT -j limit-1956 inet/filter/OUTPUT -j logaccept-final-1 inet/filter/limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1104 inet/filter/limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-1 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-1 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-1 -j ACCEPT inet/filter/logdrop-1104 -m limit --limit 1/second -j LOG inet/filter/logdrop-1104 -j DROP inet6/filter/FORWARD -j limit-1956 inet6/filter/FORWARD -j logaccept-final-1 inet6/filter/INPUT -j limit-1956 inet6/filter/INPUT -j logaccept-final-1 inet6/filter/OUTPUT -j limit-1956 inet6/filter/OUTPUT -j logaccept-final-1 inet6/filter/limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1104 inet6/filter/limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-1 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-1 -j ACCEPT inet6/filter/logdrop-1104 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1104 -j DROP Filter 1958 {"action":"pass","flow-limit":1,"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1957 inet/filter/INPUT -j limit-1957 inet/filter/OUTPUT -j limit-1957 inet/filter/limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1105 inet/filter/limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1105 -m limit --limit 1/second -j LOG inet/filter/logdrop-1105 -j DROP inet6/filter/FORWARD -j limit-1957 inet6/filter/INPUT -j limit-1957 inet6/filter/OUTPUT -j limit-1957 inet6/filter/limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1105 inet6/filter/limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1105 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1105 -j DROP Filter 1959 {"flow-limit":1,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1958 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1958 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1958 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1106 inet/filter/limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1106 -m limit --limit 1/second -j LOG inet/filter/logdrop-1106 -j DROP inet6/filter/FORWARD -j limit-1958 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1958 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1958 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1106 inet6/filter/limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1106 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1106 -j DROP Filter 1960 {"action":"pass","flow-limit":1,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1959 inet/filter/INPUT -j limit-1959 inet/filter/OUTPUT -j limit-1959 inet/filter/limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1107 inet/filter/limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1107 -m limit --limit 1/second -j LOG inet/filter/logdrop-1107 -j DROP inet6/filter/FORWARD -j limit-1959 inet6/filter/INPUT -j limit-1959 inet6/filter/OUTPUT -j limit-1959 inet6/filter/limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1107 inet6/filter/limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1107 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1107 -j DROP Filter 1961 {"flow-limit":1,"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1960 inet/filter/FORWARD -j logaccept-final-2 inet/filter/INPUT -j limit-1960 inet/filter/INPUT -j logaccept-final-2 inet/filter/OUTPUT -j limit-1960 inet/filter/OUTPUT -j logaccept-final-2 inet/filter/limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1108 inet/filter/limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-2 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-2 -j ACCEPT inet/filter/logdrop-1108 -m limit --limit 1/second -j LOG inet/filter/logdrop-1108 -j DROP inet6/filter/FORWARD -j limit-1960 inet6/filter/FORWARD -j logaccept-final-2 inet6/filter/INPUT -j limit-1960 inet6/filter/INPUT -j logaccept-final-2 inet6/filter/OUTPUT -j limit-1960 inet6/filter/OUTPUT -j logaccept-final-2 inet6/filter/limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1108 inet6/filter/limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-2 -j ACCEPT inet6/filter/logdrop-1108 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1108 -j DROP Filter 1962 {"action":"pass","flow-limit":1,"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1961 inet/filter/INPUT -j limit-1961 inet/filter/OUTPUT -j limit-1961 inet/filter/limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1109 inet/filter/limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1109 -m limit --limit 1/second -j LOG inet/filter/logdrop-1109 -j DROP inet6/filter/FORWARD -j limit-1961 inet6/filter/INPUT -j limit-1961 inet6/filter/OUTPUT -j limit-1961 inet6/filter/limit-1961 -m recent --name limit-1961 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1109 inet6/filter/logdrop-1109 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1109 -j DROP Filter 1963 {"flow-limit":{"log":false}} (filter-limit) inet/filter/FORWARD -j limit-1962 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1962 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1962 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1962 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1962 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1962 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1964 {"action":"pass","flow-limit":{"log":false}} (filter-limit) inet/filter/FORWARD -j limit-1963 inet/filter/INPUT -j limit-1963 inet/filter/OUTPUT -j limit-1963 inet/filter/limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1963 inet6/filter/INPUT -j limit-1963 inet6/filter/OUTPUT -j limit-1963 inet6/filter/limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1965 {"flow-limit":{"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1964 inet/filter/FORWARD -j logaccept-final-3 inet/filter/INPUT -j limit-1964 inet/filter/INPUT -j logaccept-final-3 inet/filter/OUTPUT -j limit-1964 inet/filter/OUTPUT -j logaccept-final-3 inet/filter/limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-3 -j ACCEPT inet6/filter/FORWARD -j limit-1964 inet6/filter/FORWARD -j logaccept-final-3 inet6/filter/INPUT -j limit-1964 inet6/filter/INPUT -j logaccept-final-3 inet6/filter/OUTPUT -j limit-1964 inet6/filter/OUTPUT -j logaccept-final-3 inet6/filter/limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-3 -j ACCEPT Filter 1966 {"action":"pass","flow-limit":{"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1965 inet/filter/INPUT -j limit-1965 inet/filter/OUTPUT -j limit-1965 inet/filter/limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-1965 inet6/filter/INPUT -j limit-1965 inet6/filter/OUTPUT -j limit-1965 inet6/filter/limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1967 {"flow-limit":{"log":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1966 inet/filter/FORWARD -j logaccept-final-4 inet/filter/INPUT -j limit-1966 inet/filter/INPUT -j logaccept-final-4 inet/filter/OUTPUT -j limit-1966 inet/filter/OUTPUT -j logaccept-final-4 inet/filter/limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-4 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-4 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-4 -j ACCEPT inet6/filter/FORWARD -j limit-1966 inet6/filter/FORWARD -j logaccept-final-4 inet6/filter/INPUT -j limit-1966 inet6/filter/INPUT -j logaccept-final-4 inet6/filter/OUTPUT -j limit-1966 inet6/filter/OUTPUT -j logaccept-final-4 inet6/filter/limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-4 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-4 -j ACCEPT Filter 1968 {"action":"pass","flow-limit":{"log":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1967 inet/filter/INPUT -j limit-1967 inet/filter/OUTPUT -j limit-1967 inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-1967 inet6/filter/INPUT -j limit-1967 inet6/filter/OUTPUT -j limit-1967 inet6/filter/limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1969 {"flow-limit":{"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1968 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1968 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1968 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1968 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1968 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1968 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1970 {"action":"pass","flow-limit":{"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1969 inet/filter/INPUT -j limit-1969 inet/filter/OUTPUT -j limit-1969 inet/filter/limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1969 inet6/filter/INPUT -j limit-1969 inet6/filter/OUTPUT -j limit-1969 inet6/filter/limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1971 {"flow-limit":{"log":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1970 inet/filter/FORWARD -j logaccept-final-5 inet/filter/INPUT -j limit-1970 inet/filter/INPUT -j logaccept-final-5 inet/filter/OUTPUT -j limit-1970 inet/filter/OUTPUT -j logaccept-final-5 inet/filter/limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-5 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-5 -j ACCEPT inet6/filter/FORWARD -j limit-1970 inet6/filter/FORWARD -j logaccept-final-5 inet6/filter/INPUT -j limit-1970 inet6/filter/INPUT -j logaccept-final-5 inet6/filter/OUTPUT -j limit-1970 inet6/filter/OUTPUT -j logaccept-final-5 inet6/filter/limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-5 -j ACCEPT Filter 1972 {"action":"pass","flow-limit":{"log":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1971 inet/filter/INPUT -j limit-1971 inet/filter/OUTPUT -j limit-1971 inet/filter/limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-1971 inet6/filter/INPUT -j limit-1971 inet6/filter/OUTPUT -j limit-1971 inet6/filter/limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1973 {"flow-limit":{"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-1972 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1972 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1972 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1972 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1972 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1972 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1974 {"action":"pass","flow-limit":{"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-1973 inet/filter/INPUT -j limit-1973 inet/filter/OUTPUT -j limit-1973 inet/filter/limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1973 inet6/filter/INPUT -j limit-1973 inet6/filter/OUTPUT -j limit-1973 inet6/filter/limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1975 {"flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1974 inet/filter/FORWARD -j logaccept-final-6 inet/filter/INPUT -j limit-1974 inet/filter/INPUT -j logaccept-final-6 inet/filter/OUTPUT -j limit-1974 inet/filter/OUTPUT -j logaccept-final-6 inet/filter/limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-6 -j ACCEPT inet6/filter/FORWARD -j limit-1974 inet6/filter/FORWARD -j logaccept-final-6 inet6/filter/INPUT -j limit-1974 inet6/filter/INPUT -j logaccept-final-6 inet6/filter/OUTPUT -j limit-1974 inet6/filter/OUTPUT -j logaccept-final-6 inet6/filter/limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-6 -j ACCEPT Filter 1976 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1975 inet/filter/INPUT -j limit-1975 inet/filter/OUTPUT -j limit-1975 inet/filter/limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-1975 inet6/filter/INPUT -j limit-1975 inet6/filter/OUTPUT -j limit-1975 inet6/filter/limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1977 {"flow-limit":{"log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1976 inet/filter/FORWARD -j logaccept-final-7 inet/filter/INPUT -j limit-1976 inet/filter/INPUT -j logaccept-final-7 inet/filter/OUTPUT -j limit-1976 inet/filter/OUTPUT -j logaccept-final-7 inet/filter/limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-7 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-7 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-7 -j ACCEPT inet6/filter/FORWARD -j limit-1976 inet6/filter/FORWARD -j logaccept-final-7 inet6/filter/INPUT -j limit-1976 inet6/filter/INPUT -j logaccept-final-7 inet6/filter/OUTPUT -j limit-1976 inet6/filter/OUTPUT -j logaccept-final-7 inet6/filter/limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-7 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-7 -j ACCEPT Filter 1978 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1977 inet/filter/INPUT -j limit-1977 inet/filter/OUTPUT -j limit-1977 inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-1977 inet6/filter/INPUT -j limit-1977 inet6/filter/OUTPUT -j limit-1977 inet6/filter/limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1979 {"flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1978 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1978 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1978 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1978 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1978 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1978 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1980 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1979 inet/filter/INPUT -j limit-1979 inet/filter/OUTPUT -j limit-1979 inet/filter/limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1979 inet6/filter/INPUT -j limit-1979 inet6/filter/OUTPUT -j limit-1979 inet6/filter/limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1981 {"flow-limit":{"log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1980 inet/filter/FORWARD -j logaccept-final-8 inet/filter/INPUT -j limit-1980 inet/filter/INPUT -j logaccept-final-8 inet/filter/OUTPUT -j limit-1980 inet/filter/OUTPUT -j logaccept-final-8 inet/filter/limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-8 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-8 -j ACCEPT inet6/filter/FORWARD -j limit-1980 inet6/filter/FORWARD -j logaccept-final-8 inet6/filter/INPUT -j limit-1980 inet6/filter/INPUT -j logaccept-final-8 inet6/filter/OUTPUT -j limit-1980 inet6/filter/OUTPUT -j logaccept-final-8 inet6/filter/limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-8 -j ACCEPT Filter 1982 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1981 inet/filter/INPUT -j limit-1981 inet/filter/OUTPUT -j limit-1981 inet/filter/limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-1981 inet6/filter/INPUT -j limit-1981 inet6/filter/OUTPUT -j limit-1981 inet6/filter/limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 1983 {"flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1982 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1982 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1982 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-1982 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1982 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1982 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1984 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-1983 inet/filter/INPUT -j limit-1983 inet/filter/OUTPUT -j limit-1983 inet/filter/limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-1983 inet6/filter/INPUT -j limit-1983 inet6/filter/OUTPUT -j limit-1983 inet6/filter/limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1985 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1984 inet/filter/FORWARD -j logaccept-final-9 inet/filter/INPUT -j limit-1984 inet/filter/INPUT -j logaccept-final-9 inet/filter/OUTPUT -j limit-1984 inet/filter/OUTPUT -j logaccept-final-9 inet/filter/limit-1984 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-9 -j ACCEPT inet6/filter/FORWARD -j limit-1984 inet6/filter/FORWARD -j logaccept-final-9 inet6/filter/INPUT -j limit-1984 inet6/filter/INPUT -j logaccept-final-9 inet6/filter/OUTPUT -j limit-1984 inet6/filter/OUTPUT -j logaccept-final-9 inet6/filter/limit-1984 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-9 -j ACCEPT Filter 1986 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1985 inet/filter/INPUT -j limit-1985 inet/filter/OUTPUT -j limit-1985 inet/filter/limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1985 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-1985 inet6/filter/INPUT -j limit-1985 inet6/filter/OUTPUT -j limit-1985 inet6/filter/limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1985 -m limit --limit 1/second -j LOG Filter 1987 {"flow-limit":{"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1986 inet/filter/FORWARD -j logaccept-final-10 inet/filter/INPUT -j limit-1986 inet/filter/INPUT -j logaccept-final-10 inet/filter/OUTPUT -j limit-1986 inet/filter/OUTPUT -j logaccept-final-10 inet/filter/limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-10 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-10 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-10 -j ACCEPT inet6/filter/FORWARD -j limit-1986 inet6/filter/FORWARD -j logaccept-final-10 inet6/filter/INPUT -j limit-1986 inet6/filter/INPUT -j logaccept-final-10 inet6/filter/OUTPUT -j limit-1986 inet6/filter/OUTPUT -j logaccept-final-10 inet6/filter/limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-10 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-10 -j ACCEPT Filter 1988 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1987 inet/filter/INPUT -j limit-1987 inet/filter/OUTPUT -j limit-1987 inet/filter/limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1987 -j TEE --gateway 10.0.0.1 inet/filter/limit-1987 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-1987 inet6/filter/INPUT -j limit-1987 inet6/filter/OUTPUT -j limit-1987 inet6/filter/limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1987 -j TEE --gateway fc00::2 Filter 1989 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1988 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1988 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1988 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1988 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-1988 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1988 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1988 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1988 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1990 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1989 inet/filter/INPUT -j limit-1989 inet/filter/OUTPUT -j limit-1989 inet/filter/limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-1989 inet6/filter/INPUT -j limit-1989 inet6/filter/OUTPUT -j limit-1989 inet6/filter/limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1991 {"flow-limit":{"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1990 inet/filter/FORWARD -j logaccept-final-11 inet/filter/INPUT -j limit-1990 inet/filter/INPUT -j logaccept-final-11 inet/filter/OUTPUT -j limit-1990 inet/filter/OUTPUT -j logaccept-final-11 inet/filter/limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-11 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-11 -j ACCEPT inet6/filter/FORWARD -j limit-1990 inet6/filter/FORWARD -j logaccept-final-11 inet6/filter/INPUT -j limit-1990 inet6/filter/INPUT -j logaccept-final-11 inet6/filter/OUTPUT -j limit-1990 inet6/filter/OUTPUT -j logaccept-final-11 inet6/filter/limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-11 -j ACCEPT Filter 1992 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-1991 inet/filter/INPUT -j limit-1991 inet/filter/OUTPUT -j limit-1991 inet/filter/limit-1991 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1991 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-1991 inet6/filter/INPUT -j limit-1991 inet6/filter/OUTPUT -j limit-1991 inet6/filter/limit-1991 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 1993 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-1992 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1992 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1992 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1992 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1992 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1992 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1994 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-1993 inet/filter/INPUT -j limit-1993 inet/filter/OUTPUT -j limit-1993 inet/filter/limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1993 inet6/filter/INPUT -j limit-1993 inet6/filter/OUTPUT -j limit-1993 inet6/filter/limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 1995 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1994 inet/filter/FORWARD -j logaccept-final-12 inet/filter/INPUT -j limit-1994 inet/filter/INPUT -j logaccept-final-12 inet/filter/OUTPUT -j limit-1994 inet/filter/OUTPUT -j logaccept-final-12 inet/filter/limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-12 -j ACCEPT inet6/filter/FORWARD -j limit-1994 inet6/filter/FORWARD -j logaccept-final-12 inet6/filter/INPUT -j limit-1994 inet6/filter/INPUT -j logaccept-final-12 inet6/filter/OUTPUT -j limit-1994 inet6/filter/OUTPUT -j logaccept-final-12 inet6/filter/limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-12 -j ACCEPT Filter 1996 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-1995 inet/filter/INPUT -j limit-1995 inet/filter/OUTPUT -j limit-1995 inet/filter/limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-1995 inet6/filter/INPUT -j limit-1995 inet6/filter/OUTPUT -j limit-1995 inet6/filter/limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 1997 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1996 inet/filter/FORWARD -j logaccept-final-13 inet/filter/INPUT -j limit-1996 inet/filter/INPUT -j logaccept-final-13 inet/filter/OUTPUT -j limit-1996 inet/filter/OUTPUT -j logaccept-final-13 inet/filter/limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-13 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-13 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-13 -j ACCEPT inet6/filter/FORWARD -j limit-1996 inet6/filter/FORWARD -j logaccept-final-13 inet6/filter/INPUT -j limit-1996 inet6/filter/INPUT -j logaccept-final-13 inet6/filter/OUTPUT -j limit-1996 inet6/filter/OUTPUT -j logaccept-final-13 inet6/filter/limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-13 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-13 -j ACCEPT Filter 1998 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-1997 inet/filter/INPUT -j limit-1997 inet/filter/OUTPUT -j limit-1997 inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-1997 inet6/filter/INPUT -j limit-1997 inet6/filter/OUTPUT -j limit-1997 inet6/filter/limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 1999 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1998 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-1998 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-1998 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1998 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-1998 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-1998 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2000 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-1999 inet/filter/INPUT -j limit-1999 inet/filter/OUTPUT -j limit-1999 inet/filter/limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-1999 inet6/filter/INPUT -j limit-1999 inet6/filter/OUTPUT -j limit-1999 inet6/filter/limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2001 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2000 inet/filter/FORWARD -j logaccept-final-14 inet/filter/INPUT -j limit-2000 inet/filter/INPUT -j logaccept-final-14 inet/filter/OUTPUT -j limit-2000 inet/filter/OUTPUT -j logaccept-final-14 inet/filter/limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-14 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-14 -j ACCEPT inet6/filter/FORWARD -j limit-2000 inet6/filter/FORWARD -j logaccept-final-14 inet6/filter/INPUT -j limit-2000 inet6/filter/INPUT -j logaccept-final-14 inet6/filter/OUTPUT -j limit-2000 inet6/filter/OUTPUT -j logaccept-final-14 inet6/filter/limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-14 -j ACCEPT Filter 2002 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2001 inet/filter/INPUT -j limit-2001 inet/filter/OUTPUT -j limit-2001 inet/filter/limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2001 inet6/filter/INPUT -j limit-2001 inet6/filter/OUTPUT -j limit-2001 inet6/filter/limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 2003 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2002 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2002 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2002 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2002 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2002 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2002 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2004 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2003 inet/filter/INPUT -j limit-2003 inet/filter/OUTPUT -j limit-2003 inet/filter/limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2003 inet6/filter/INPUT -j limit-2003 inet6/filter/OUTPUT -j limit-2003 inet6/filter/limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2005 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2004 inet/filter/FORWARD -j logaccept-final-15 inet/filter/INPUT -j limit-2004 inet/filter/INPUT -j logaccept-final-15 inet/filter/OUTPUT -j limit-2004 inet/filter/OUTPUT -j logaccept-final-15 inet/filter/limit-2004 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-15 -j ACCEPT inet6/filter/FORWARD -j limit-2004 inet6/filter/FORWARD -j logaccept-final-15 inet6/filter/INPUT -j limit-2004 inet6/filter/INPUT -j logaccept-final-15 inet6/filter/OUTPUT -j limit-2004 inet6/filter/OUTPUT -j logaccept-final-15 inet6/filter/limit-2004 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-15 -j ACCEPT Filter 2006 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2005 inet/filter/INPUT -j limit-2005 inet/filter/OUTPUT -j limit-2005 inet/filter/limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2005 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2005 inet6/filter/INPUT -j limit-2005 inet6/filter/OUTPUT -j limit-2005 inet6/filter/limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2005 -m limit --limit 1/second -j LOG Filter 2007 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2006 inet/filter/FORWARD -j logaccept-final-16 inet/filter/INPUT -j limit-2006 inet/filter/INPUT -j logaccept-final-16 inet/filter/OUTPUT -j limit-2006 inet/filter/OUTPUT -j logaccept-final-16 inet/filter/limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-16 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-16 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-16 -j ACCEPT inet6/filter/FORWARD -j limit-2006 inet6/filter/FORWARD -j logaccept-final-16 inet6/filter/INPUT -j limit-2006 inet6/filter/INPUT -j logaccept-final-16 inet6/filter/OUTPUT -j limit-2006 inet6/filter/OUTPUT -j logaccept-final-16 inet6/filter/limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-16 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-16 -j ACCEPT Filter 2008 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2007 inet/filter/INPUT -j limit-2007 inet/filter/OUTPUT -j limit-2007 inet/filter/limit-2007 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2007 -j TEE --gateway 10.0.0.1 inet/filter/limit-2007 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2007 inet6/filter/INPUT -j limit-2007 inet6/filter/OUTPUT -j limit-2007 inet6/filter/limit-2007 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2007 -j TEE --gateway fc00::2 Filter 2009 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2008 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2008 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2008 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2008 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2008 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2008 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2008 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2008 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2010 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2009 inet/filter/INPUT -j limit-2009 inet/filter/OUTPUT -j limit-2009 inet/filter/limit-2009 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2009 inet6/filter/INPUT -j limit-2009 inet6/filter/OUTPUT -j limit-2009 inet6/filter/limit-2009 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2011 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2010 inet/filter/FORWARD -j logaccept-final-17 inet/filter/INPUT -j limit-2010 inet/filter/INPUT -j logaccept-final-17 inet/filter/OUTPUT -j limit-2010 inet/filter/OUTPUT -j logaccept-final-17 inet/filter/limit-2010 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-17 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-17 -j ACCEPT inet6/filter/FORWARD -j limit-2010 inet6/filter/FORWARD -j logaccept-final-17 inet6/filter/INPUT -j limit-2010 inet6/filter/INPUT -j logaccept-final-17 inet6/filter/OUTPUT -j limit-2010 inet6/filter/OUTPUT -j logaccept-final-17 inet6/filter/limit-2010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-17 -j ACCEPT Filter 2012 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2011 inet/filter/INPUT -j limit-2011 inet/filter/OUTPUT -j limit-2011 inet/filter/limit-2011 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2011 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2011 inet6/filter/INPUT -j limit-2011 inet6/filter/OUTPUT -j limit-2011 inet6/filter/limit-2011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2013 {"flow-limit":{"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2012 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2012 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2012 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2012 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2012 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2012 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2012 -m recent --name user:C --rsource --mask fe00:: --set Filter 2014 {"action":"pass","flow-limit":{"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2013 inet/filter/INPUT -j limit-2013 inet/filter/OUTPUT -j limit-2013 inet/filter/limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2013 inet6/filter/INPUT -j limit-2013 inet6/filter/OUTPUT -j limit-2013 inet6/filter/limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2013 -m recent --name user:C --rsource --mask fe00:: --set Filter 2015 {"flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2014 inet/filter/FORWARD -j logaccept-final-18 inet/filter/INPUT -j limit-2014 inet/filter/INPUT -j logaccept-final-18 inet/filter/OUTPUT -j limit-2014 inet/filter/OUTPUT -j logaccept-final-18 inet/filter/limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-18 -j ACCEPT inet6/filter/FORWARD -j limit-2014 inet6/filter/FORWARD -j logaccept-final-18 inet6/filter/INPUT -j limit-2014 inet6/filter/INPUT -j logaccept-final-18 inet6/filter/OUTPUT -j limit-2014 inet6/filter/OUTPUT -j logaccept-final-18 inet6/filter/limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2014 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-18 -j ACCEPT Filter 2016 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2015 inet/filter/INPUT -j limit-2015 inet/filter/OUTPUT -j limit-2015 inet/filter/limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2015 inet6/filter/INPUT -j limit-2015 inet6/filter/OUTPUT -j limit-2015 inet6/filter/limit-2015 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2015 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2017 {"flow-limit":{"log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2016 inet/filter/FORWARD -j logaccept-final-19 inet/filter/INPUT -j limit-2016 inet/filter/INPUT -j logaccept-final-19 inet/filter/OUTPUT -j limit-2016 inet/filter/OUTPUT -j logaccept-final-19 inet/filter/limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-19 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-19 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-19 -j ACCEPT inet6/filter/FORWARD -j limit-2016 inet6/filter/FORWARD -j logaccept-final-19 inet6/filter/INPUT -j limit-2016 inet6/filter/INPUT -j logaccept-final-19 inet6/filter/OUTPUT -j limit-2016 inet6/filter/OUTPUT -j logaccept-final-19 inet6/filter/limit-2016 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2016 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-19 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-19 -j ACCEPT Filter 2018 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2017 inet/filter/INPUT -j limit-2017 inet/filter/OUTPUT -j limit-2017 inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2017 inet6/filter/INPUT -j limit-2017 inet6/filter/OUTPUT -j limit-2017 inet6/filter/limit-2017 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2017 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2019 {"flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2018 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2018 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2018 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2018 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2018 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2018 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2018 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2018 -m recent --name user:C --rsource --mask fe00:: --set Filter 2020 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2019 inet/filter/INPUT -j limit-2019 inet/filter/OUTPUT -j limit-2019 inet/filter/limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2019 inet6/filter/INPUT -j limit-2019 inet6/filter/OUTPUT -j limit-2019 inet6/filter/limit-2019 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2019 -m recent --name user:C --rsource --mask fe00:: --set Filter 2021 {"flow-limit":{"log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2020 inet/filter/FORWARD -j logaccept-final-20 inet/filter/INPUT -j limit-2020 inet/filter/INPUT -j logaccept-final-20 inet/filter/OUTPUT -j limit-2020 inet/filter/OUTPUT -j logaccept-final-20 inet/filter/limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-20 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-20 -j ACCEPT inet6/filter/FORWARD -j limit-2020 inet6/filter/FORWARD -j logaccept-final-20 inet6/filter/INPUT -j limit-2020 inet6/filter/INPUT -j logaccept-final-20 inet6/filter/OUTPUT -j limit-2020 inet6/filter/OUTPUT -j logaccept-final-20 inet6/filter/limit-2020 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2020 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-20 -j ACCEPT Filter 2022 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2021 inet/filter/INPUT -j limit-2021 inet/filter/OUTPUT -j limit-2021 inet/filter/limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2021 inet6/filter/INPUT -j limit-2021 inet6/filter/OUTPUT -j limit-2021 inet6/filter/limit-2021 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 2023 {"flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2022 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2022 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2022 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2022 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2022 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2022 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2024 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2023 inet/filter/INPUT -j limit-2023 inet/filter/OUTPUT -j limit-2023 inet/filter/limit-2023 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2023 inet6/filter/INPUT -j limit-2023 inet6/filter/OUTPUT -j limit-2023 inet6/filter/limit-2023 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2025 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2024 inet/filter/FORWARD -j logaccept-final-21 inet/filter/INPUT -j limit-2024 inet/filter/INPUT -j logaccept-final-21 inet/filter/OUTPUT -j limit-2024 inet/filter/OUTPUT -j logaccept-final-21 inet/filter/limit-2024 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-21 -j ACCEPT inet6/filter/FORWARD -j limit-2024 inet6/filter/FORWARD -j logaccept-final-21 inet6/filter/INPUT -j limit-2024 inet6/filter/INPUT -j logaccept-final-21 inet6/filter/OUTPUT -j limit-2024 inet6/filter/OUTPUT -j logaccept-final-21 inet6/filter/limit-2024 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-21 -j ACCEPT Filter 2026 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2025 inet/filter/INPUT -j limit-2025 inet/filter/OUTPUT -j limit-2025 inet/filter/limit-2025 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2025 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2025 inet6/filter/INPUT -j limit-2025 inet6/filter/OUTPUT -j limit-2025 inet6/filter/limit-2025 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2025 -m limit --limit 1/second -j LOG Filter 2027 {"flow-limit":{"log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2026 inet/filter/FORWARD -j logaccept-final-22 inet/filter/INPUT -j limit-2026 inet/filter/INPUT -j logaccept-final-22 inet/filter/OUTPUT -j limit-2026 inet/filter/OUTPUT -j logaccept-final-22 inet/filter/limit-2026 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-22 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-22 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-22 -j ACCEPT inet6/filter/FORWARD -j limit-2026 inet6/filter/FORWARD -j logaccept-final-22 inet6/filter/INPUT -j limit-2026 inet6/filter/INPUT -j logaccept-final-22 inet6/filter/OUTPUT -j limit-2026 inet6/filter/OUTPUT -j logaccept-final-22 inet6/filter/limit-2026 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-22 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-22 -j ACCEPT Filter 2028 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2027 inet/filter/INPUT -j limit-2027 inet/filter/OUTPUT -j limit-2027 inet/filter/limit-2027 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2027 -j TEE --gateway 10.0.0.1 inet/filter/limit-2027 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2027 inet6/filter/INPUT -j limit-2027 inet6/filter/OUTPUT -j limit-2027 inet6/filter/limit-2027 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2027 -j TEE --gateway fc00::2 Filter 2029 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2028 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2028 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2028 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2028 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2028 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2028 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2030 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2029 inet/filter/INPUT -j limit-2029 inet/filter/OUTPUT -j limit-2029 inet/filter/limit-2029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2029 inet6/filter/INPUT -j limit-2029 inet6/filter/OUTPUT -j limit-2029 inet6/filter/limit-2029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2031 {"flow-limit":{"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2030 inet/filter/FORWARD -j logaccept-final-23 inet/filter/INPUT -j limit-2030 inet/filter/INPUT -j logaccept-final-23 inet/filter/OUTPUT -j limit-2030 inet/filter/OUTPUT -j logaccept-final-23 inet/filter/limit-2030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-23 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-23 -j ACCEPT inet6/filter/FORWARD -j limit-2030 inet6/filter/FORWARD -j logaccept-final-23 inet6/filter/INPUT -j limit-2030 inet6/filter/INPUT -j logaccept-final-23 inet6/filter/OUTPUT -j limit-2030 inet6/filter/OUTPUT -j logaccept-final-23 inet6/filter/limit-2030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-23 -j ACCEPT Filter 2032 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2031 inet/filter/INPUT -j limit-2031 inet/filter/OUTPUT -j limit-2031 inet/filter/limit-2031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2031 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2031 inet6/filter/INPUT -j limit-2031 inet6/filter/OUTPUT -j limit-2031 inet6/filter/limit-2031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2033 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2032 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2032 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2032 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2032 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2032 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2032 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2032 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2032 -m recent --name user:C --rdest --mask fe00:: --set Filter 2034 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2033 inet/filter/INPUT -j limit-2033 inet/filter/OUTPUT -j limit-2033 inet/filter/limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2033 inet6/filter/INPUT -j limit-2033 inet6/filter/OUTPUT -j limit-2033 inet6/filter/limit-2033 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2033 -m recent --name user:C --rdest --mask fe00:: --set Filter 2035 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2034 inet/filter/FORWARD -j logaccept-final-24 inet/filter/INPUT -j limit-2034 inet/filter/INPUT -j logaccept-final-24 inet/filter/OUTPUT -j limit-2034 inet/filter/OUTPUT -j logaccept-final-24 inet/filter/limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-24 -j ACCEPT inet6/filter/FORWARD -j limit-2034 inet6/filter/FORWARD -j logaccept-final-24 inet6/filter/INPUT -j limit-2034 inet6/filter/INPUT -j logaccept-final-24 inet6/filter/OUTPUT -j limit-2034 inet6/filter/OUTPUT -j logaccept-final-24 inet6/filter/limit-2034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2034 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-24 -j ACCEPT Filter 2036 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2035 inet/filter/INPUT -j limit-2035 inet/filter/OUTPUT -j limit-2035 inet/filter/limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2035 inet6/filter/INPUT -j limit-2035 inet6/filter/OUTPUT -j limit-2035 inet6/filter/limit-2035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2035 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2037 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2036 inet/filter/FORWARD -j logaccept-final-25 inet/filter/INPUT -j limit-2036 inet/filter/INPUT -j logaccept-final-25 inet/filter/OUTPUT -j limit-2036 inet/filter/OUTPUT -j logaccept-final-25 inet/filter/limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-25 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-25 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-25 -j ACCEPT inet6/filter/FORWARD -j limit-2036 inet6/filter/FORWARD -j logaccept-final-25 inet6/filter/INPUT -j limit-2036 inet6/filter/INPUT -j logaccept-final-25 inet6/filter/OUTPUT -j limit-2036 inet6/filter/OUTPUT -j logaccept-final-25 inet6/filter/limit-2036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2036 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-25 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-25 -j ACCEPT Filter 2038 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2037 inet/filter/INPUT -j limit-2037 inet/filter/OUTPUT -j limit-2037 inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2037 inet6/filter/INPUT -j limit-2037 inet6/filter/OUTPUT -j limit-2037 inet6/filter/limit-2037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2037 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2039 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2038 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2038 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2038 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2038 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2038 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2038 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2038 -m recent --name user:C --rdest --mask fe00:: --set Filter 2040 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2039 inet/filter/INPUT -j limit-2039 inet/filter/OUTPUT -j limit-2039 inet/filter/limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2039 inet6/filter/INPUT -j limit-2039 inet6/filter/OUTPUT -j limit-2039 inet6/filter/limit-2039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2039 -m recent --name user:C --rdest --mask fe00:: --set Filter 2041 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2040 inet/filter/FORWARD -j logaccept-final-26 inet/filter/INPUT -j limit-2040 inet/filter/INPUT -j logaccept-final-26 inet/filter/OUTPUT -j limit-2040 inet/filter/OUTPUT -j logaccept-final-26 inet/filter/limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-26 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-26 -j ACCEPT inet6/filter/FORWARD -j limit-2040 inet6/filter/FORWARD -j logaccept-final-26 inet6/filter/INPUT -j limit-2040 inet6/filter/INPUT -j logaccept-final-26 inet6/filter/OUTPUT -j limit-2040 inet6/filter/OUTPUT -j logaccept-final-26 inet6/filter/limit-2040 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2040 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-26 -j ACCEPT Filter 2042 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2041 inet/filter/INPUT -j limit-2041 inet/filter/OUTPUT -j limit-2041 inet/filter/limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2041 inet6/filter/INPUT -j limit-2041 inet6/filter/OUTPUT -j limit-2041 inet6/filter/limit-2041 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 2043 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2042 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2042 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2042 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2042 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2042 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2042 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2044 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2043 inet/filter/INPUT -j limit-2043 inet/filter/OUTPUT -j limit-2043 inet/filter/limit-2043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2043 inet6/filter/INPUT -j limit-2043 inet6/filter/OUTPUT -j limit-2043 inet6/filter/limit-2043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2045 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2044 inet/filter/FORWARD -j logaccept-final-27 inet/filter/INPUT -j limit-2044 inet/filter/INPUT -j logaccept-final-27 inet/filter/OUTPUT -j limit-2044 inet/filter/OUTPUT -j logaccept-final-27 inet/filter/limit-2044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-27 -j ACCEPT inet6/filter/FORWARD -j limit-2044 inet6/filter/FORWARD -j logaccept-final-27 inet6/filter/INPUT -j limit-2044 inet6/filter/INPUT -j logaccept-final-27 inet6/filter/OUTPUT -j limit-2044 inet6/filter/OUTPUT -j logaccept-final-27 inet6/filter/limit-2044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-27 -j ACCEPT Filter 2046 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2045 inet/filter/INPUT -j limit-2045 inet/filter/OUTPUT -j limit-2045 inet/filter/limit-2045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2045 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2045 inet6/filter/INPUT -j limit-2045 inet6/filter/OUTPUT -j limit-2045 inet6/filter/limit-2045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2045 -m limit --limit 1/second -j LOG Filter 2047 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2046 inet/filter/FORWARD -j logaccept-final-28 inet/filter/INPUT -j limit-2046 inet/filter/INPUT -j logaccept-final-28 inet/filter/OUTPUT -j limit-2046 inet/filter/OUTPUT -j logaccept-final-28 inet/filter/limit-2046 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-28 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-28 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-28 -j ACCEPT inet6/filter/FORWARD -j limit-2046 inet6/filter/FORWARD -j logaccept-final-28 inet6/filter/INPUT -j limit-2046 inet6/filter/INPUT -j logaccept-final-28 inet6/filter/OUTPUT -j limit-2046 inet6/filter/OUTPUT -j logaccept-final-28 inet6/filter/limit-2046 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-28 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-28 -j ACCEPT Filter 2048 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2047 inet/filter/INPUT -j limit-2047 inet/filter/OUTPUT -j limit-2047 inet/filter/limit-2047 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2047 -j TEE --gateway 10.0.0.1 inet/filter/limit-2047 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2047 inet6/filter/INPUT -j limit-2047 inet6/filter/OUTPUT -j limit-2047 inet6/filter/limit-2047 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2047 -j TEE --gateway fc00::2 Filter 2049 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2048 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2048 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2048 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2048 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2048 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2048 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2048 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2048 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2050 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2049 inet/filter/INPUT -j limit-2049 inet/filter/OUTPUT -j limit-2049 inet/filter/limit-2049 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2049 inet6/filter/INPUT -j limit-2049 inet6/filter/OUTPUT -j limit-2049 inet6/filter/limit-2049 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2051 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2050 inet/filter/FORWARD -j logaccept-final-29 inet/filter/INPUT -j limit-2050 inet/filter/INPUT -j logaccept-final-29 inet/filter/OUTPUT -j limit-2050 inet/filter/OUTPUT -j logaccept-final-29 inet/filter/limit-2050 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-29 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-29 -j ACCEPT inet6/filter/FORWARD -j limit-2050 inet6/filter/FORWARD -j logaccept-final-29 inet6/filter/INPUT -j limit-2050 inet6/filter/INPUT -j logaccept-final-29 inet6/filter/OUTPUT -j limit-2050 inet6/filter/OUTPUT -j logaccept-final-29 inet6/filter/limit-2050 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-29 -j ACCEPT Filter 2052 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2051 inet/filter/INPUT -j limit-2051 inet/filter/OUTPUT -j limit-2051 inet/filter/limit-2051 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2051 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2051 inet6/filter/INPUT -j limit-2051 inet6/filter/OUTPUT -j limit-2051 inet6/filter/limit-2051 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2053 {"flow-limit":{}} (filter-limit) inet/filter/FORWARD -j limit-2052 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2052 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2052 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1110 inet/filter/limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1110 -m limit --limit 1/second -j LOG inet/filter/logdrop-1110 -j DROP inet6/filter/FORWARD -j limit-2052 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2052 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2052 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1110 inet6/filter/limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1110 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1110 -j DROP Filter 2054 {"action":"pass","flow-limit":{}} (filter-limit) inet/filter/FORWARD -j limit-2053 inet/filter/INPUT -j limit-2053 inet/filter/OUTPUT -j limit-2053 inet/filter/limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1111 inet/filter/limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1111 -m limit --limit 1/second -j LOG inet/filter/logdrop-1111 -j DROP inet6/filter/FORWARD -j limit-2053 inet6/filter/INPUT -j limit-2053 inet6/filter/OUTPUT -j limit-2053 inet6/filter/limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1111 inet6/filter/limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1111 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1111 -j DROP Filter 2055 {"flow-limit":{},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2054 inet/filter/FORWARD -j logaccept-final-30 inet/filter/INPUT -j limit-2054 inet/filter/INPUT -j logaccept-final-30 inet/filter/OUTPUT -j limit-2054 inet/filter/OUTPUT -j logaccept-final-30 inet/filter/limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1112 inet/filter/limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-30 -j ACCEPT inet/filter/logdrop-1112 -m limit --limit 1/second -j LOG inet/filter/logdrop-1112 -j DROP inet6/filter/FORWARD -j limit-2054 inet6/filter/FORWARD -j logaccept-final-30 inet6/filter/INPUT -j limit-2054 inet6/filter/INPUT -j logaccept-final-30 inet6/filter/OUTPUT -j limit-2054 inet6/filter/OUTPUT -j logaccept-final-30 inet6/filter/limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1112 inet6/filter/limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-30 -j ACCEPT inet6/filter/logdrop-1112 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1112 -j DROP Filter 2056 {"action":"pass","flow-limit":{},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2055 inet/filter/INPUT -j limit-2055 inet/filter/OUTPUT -j limit-2055 inet/filter/limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1113 inet/filter/limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1113 -m limit --limit 1/second -j LOG inet/filter/logdrop-1113 -j DROP inet6/filter/FORWARD -j limit-2055 inet6/filter/INPUT -j limit-2055 inet6/filter/OUTPUT -j limit-2055 inet6/filter/limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1113 inet6/filter/limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1113 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1113 -j DROP Filter 2057 {"flow-limit":{},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2056 inet/filter/FORWARD -j logaccept-final-31 inet/filter/INPUT -j limit-2056 inet/filter/INPUT -j logaccept-final-31 inet/filter/OUTPUT -j limit-2056 inet/filter/OUTPUT -j logaccept-final-31 inet/filter/limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1114 inet/filter/limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-31 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-31 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-31 -j ACCEPT inet/filter/logdrop-1114 -m limit --limit 1/second -j LOG inet/filter/logdrop-1114 -j DROP inet6/filter/FORWARD -j limit-2056 inet6/filter/FORWARD -j logaccept-final-31 inet6/filter/INPUT -j limit-2056 inet6/filter/INPUT -j logaccept-final-31 inet6/filter/OUTPUT -j limit-2056 inet6/filter/OUTPUT -j logaccept-final-31 inet6/filter/limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1114 inet6/filter/limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-31 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-31 -j ACCEPT inet6/filter/logdrop-1114 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1114 -j DROP Filter 2058 {"action":"pass","flow-limit":{},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2057 inet/filter/INPUT -j limit-2057 inet/filter/OUTPUT -j limit-2057 inet/filter/limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1115 inet/filter/limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1115 -m limit --limit 1/second -j LOG inet/filter/logdrop-1115 -j DROP inet6/filter/FORWARD -j limit-2057 inet6/filter/INPUT -j limit-2057 inet6/filter/OUTPUT -j limit-2057 inet6/filter/limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1115 inet6/filter/limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1115 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1115 -j DROP Filter 2059 {"flow-limit":{},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2058 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2058 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2058 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1116 inet/filter/limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1116 -m limit --limit 1/second -j LOG inet/filter/logdrop-1116 -j DROP inet6/filter/FORWARD -j limit-2058 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2058 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2058 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1116 inet6/filter/limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1116 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1116 -j DROP Filter 2060 {"action":"pass","flow-limit":{},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2059 inet/filter/INPUT -j limit-2059 inet/filter/OUTPUT -j limit-2059 inet/filter/limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1117 inet/filter/limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1117 -m limit --limit 1/second -j LOG inet/filter/logdrop-1117 -j DROP inet6/filter/FORWARD -j limit-2059 inet6/filter/INPUT -j limit-2059 inet6/filter/OUTPUT -j limit-2059 inet6/filter/limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1117 inet6/filter/limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1117 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1117 -j DROP Filter 2061 {"flow-limit":{},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2060 inet/filter/FORWARD -j logaccept-final-32 inet/filter/INPUT -j limit-2060 inet/filter/INPUT -j logaccept-final-32 inet/filter/OUTPUT -j limit-2060 inet/filter/OUTPUT -j logaccept-final-32 inet/filter/limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1118 inet/filter/limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-32 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-32 -j ACCEPT inet/filter/logdrop-1118 -m limit --limit 1/second -j LOG inet/filter/logdrop-1118 -j DROP inet6/filter/FORWARD -j limit-2060 inet6/filter/FORWARD -j logaccept-final-32 inet6/filter/INPUT -j limit-2060 inet6/filter/INPUT -j logaccept-final-32 inet6/filter/OUTPUT -j limit-2060 inet6/filter/OUTPUT -j logaccept-final-32 inet6/filter/limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1118 inet6/filter/limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-32 -j ACCEPT inet6/filter/logdrop-1118 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1118 -j DROP Filter 2062 {"action":"pass","flow-limit":{},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2061 inet/filter/INPUT -j limit-2061 inet/filter/OUTPUT -j limit-2061 inet/filter/limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1119 inet/filter/limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1119 -m limit --limit 1/second -j LOG inet/filter/logdrop-1119 -j DROP inet6/filter/FORWARD -j limit-2061 inet6/filter/INPUT -j limit-2061 inet6/filter/OUTPUT -j limit-2061 inet6/filter/limit-2061 -m recent --name limit-2061 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1119 inet6/filter/logdrop-1119 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1119 -j DROP Filter 2063 {"flow-limit":{"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2062 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2062 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2062 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1120 inet/filter/limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1120 -m limit --limit 1/second -j LOG inet/filter/logdrop-1120 -j DROP inet6/filter/FORWARD -j limit-2062 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2062 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2062 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1120 inet6/filter/limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1120 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1120 -j DROP Filter 2064 {"action":"pass","flow-limit":{"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2063 inet/filter/INPUT -j limit-2063 inet/filter/OUTPUT -j limit-2063 inet/filter/limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1121 inet/filter/limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1121 -m limit --limit 1/second -j LOG inet/filter/logdrop-1121 -j DROP inet6/filter/FORWARD -j limit-2063 inet6/filter/INPUT -j limit-2063 inet6/filter/OUTPUT -j limit-2063 inet6/filter/limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1121 inet6/filter/limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1121 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1121 -j DROP Filter 2065 {"flow-limit":{"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2064 inet/filter/FORWARD -j logaccept-final-33 inet/filter/INPUT -j limit-2064 inet/filter/INPUT -j logaccept-final-33 inet/filter/OUTPUT -j limit-2064 inet/filter/OUTPUT -j logaccept-final-33 inet/filter/limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1122 inet/filter/limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-33 -j ACCEPT inet/filter/logdrop-1122 -m limit --limit 1/second -j LOG inet/filter/logdrop-1122 -j DROP inet6/filter/FORWARD -j limit-2064 inet6/filter/FORWARD -j logaccept-final-33 inet6/filter/INPUT -j limit-2064 inet6/filter/INPUT -j logaccept-final-33 inet6/filter/OUTPUT -j limit-2064 inet6/filter/OUTPUT -j logaccept-final-33 inet6/filter/limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1122 inet6/filter/limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-33 -j ACCEPT inet6/filter/logdrop-1122 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1122 -j DROP Filter 2066 {"action":"pass","flow-limit":{"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2065 inet/filter/INPUT -j limit-2065 inet/filter/OUTPUT -j limit-2065 inet/filter/limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1123 inet/filter/limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1123 -m limit --limit 1/second -j LOG inet/filter/logdrop-1123 -j DROP inet6/filter/FORWARD -j limit-2065 inet6/filter/INPUT -j limit-2065 inet6/filter/OUTPUT -j limit-2065 inet6/filter/limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1123 inet6/filter/limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1123 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1123 -j DROP Filter 2067 {"flow-limit":{"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2066 inet/filter/FORWARD -j logaccept-final-34 inet/filter/INPUT -j limit-2066 inet/filter/INPUT -j logaccept-final-34 inet/filter/OUTPUT -j limit-2066 inet/filter/OUTPUT -j logaccept-final-34 inet/filter/limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1124 inet/filter/limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-34 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-34 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-34 -j ACCEPT inet/filter/logdrop-1124 -m limit --limit 1/second -j LOG inet/filter/logdrop-1124 -j DROP inet6/filter/FORWARD -j limit-2066 inet6/filter/FORWARD -j logaccept-final-34 inet6/filter/INPUT -j limit-2066 inet6/filter/INPUT -j logaccept-final-34 inet6/filter/OUTPUT -j limit-2066 inet6/filter/OUTPUT -j logaccept-final-34 inet6/filter/limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1124 inet6/filter/limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-34 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-34 -j ACCEPT inet6/filter/logdrop-1124 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1124 -j DROP Filter 2068 {"action":"pass","flow-limit":{"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2067 inet/filter/INPUT -j limit-2067 inet/filter/OUTPUT -j limit-2067 inet/filter/limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1125 inet/filter/limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1125 -m limit --limit 1/second -j LOG inet/filter/logdrop-1125 -j DROP inet6/filter/FORWARD -j limit-2067 inet6/filter/INPUT -j limit-2067 inet6/filter/OUTPUT -j limit-2067 inet6/filter/limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1125 inet6/filter/limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1125 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1125 -j DROP Filter 2069 {"flow-limit":{"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2068 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2068 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2068 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1126 inet/filter/limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1126 -m limit --limit 1/second -j LOG inet/filter/logdrop-1126 -j DROP inet6/filter/FORWARD -j limit-2068 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2068 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2068 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1126 inet6/filter/limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1126 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1126 -j DROP Filter 2070 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2069 inet/filter/INPUT -j limit-2069 inet/filter/OUTPUT -j limit-2069 inet/filter/limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1127 inet/filter/limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1127 -m limit --limit 1/second -j LOG inet/filter/logdrop-1127 -j DROP inet6/filter/FORWARD -j limit-2069 inet6/filter/INPUT -j limit-2069 inet6/filter/OUTPUT -j limit-2069 inet6/filter/limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1127 inet6/filter/limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1127 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1127 -j DROP Filter 2071 {"flow-limit":{"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2070 inet/filter/FORWARD -j logaccept-final-35 inet/filter/INPUT -j limit-2070 inet/filter/INPUT -j logaccept-final-35 inet/filter/OUTPUT -j limit-2070 inet/filter/OUTPUT -j logaccept-final-35 inet/filter/limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1128 inet/filter/limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-35 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-35 -j ACCEPT inet/filter/logdrop-1128 -m limit --limit 1/second -j LOG inet/filter/logdrop-1128 -j DROP inet6/filter/FORWARD -j limit-2070 inet6/filter/FORWARD -j logaccept-final-35 inet6/filter/INPUT -j limit-2070 inet6/filter/INPUT -j logaccept-final-35 inet6/filter/OUTPUT -j limit-2070 inet6/filter/OUTPUT -j logaccept-final-35 inet6/filter/limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1128 inet6/filter/limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-35 -j ACCEPT inet6/filter/logdrop-1128 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1128 -j DROP Filter 2072 {"action":"pass","flow-limit":{"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2071 inet/filter/INPUT -j limit-2071 inet/filter/OUTPUT -j limit-2071 inet/filter/limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1129 inet/filter/limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1129 -m limit --limit 1/second -j LOG inet/filter/logdrop-1129 -j DROP inet6/filter/FORWARD -j limit-2071 inet6/filter/INPUT -j limit-2071 inet6/filter/OUTPUT -j limit-2071 inet6/filter/limit-2071 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1129 inet6/filter/logdrop-1129 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1129 -j DROP Filter 2073 {"flow-limit":{"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2072 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2072 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2072 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2072 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 inet/filter/logdrop-1130 -m limit --limit 1/second -j LOG inet/filter/logdrop-1130 -j DROP inet6/filter/FORWARD -j limit-2072 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2072 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2072 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2072 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 inet6/filter/logdrop-1130 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1130 -j DROP Filter 2074 {"action":"pass","flow-limit":{"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2073 inet/filter/INPUT -j limit-2073 inet/filter/OUTPUT -j limit-2073 inet/filter/limit-2073 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 inet/filter/logdrop-1131 -m limit --limit 1/second -j LOG inet/filter/logdrop-1131 -j DROP inet6/filter/FORWARD -j limit-2073 inet6/filter/INPUT -j limit-2073 inet6/filter/OUTPUT -j limit-2073 inet6/filter/limit-2073 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 inet6/filter/logdrop-1131 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1131 -j DROP Filter 2075 {"flow-limit":{"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2074 inet/filter/FORWARD -j logaccept-final-36 inet/filter/INPUT -j limit-2074 inet/filter/INPUT -j logaccept-final-36 inet/filter/OUTPUT -j limit-2074 inet/filter/OUTPUT -j logaccept-final-36 inet/filter/limit-2074 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-36 -j ACCEPT inet/filter/logdrop-1132 -m limit --limit 1/second -j LOG inet/filter/logdrop-1132 -j DROP inet6/filter/FORWARD -j limit-2074 inet6/filter/FORWARD -j logaccept-final-36 inet6/filter/INPUT -j limit-2074 inet6/filter/INPUT -j logaccept-final-36 inet6/filter/OUTPUT -j limit-2074 inet6/filter/OUTPUT -j logaccept-final-36 inet6/filter/limit-2074 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-36 -j ACCEPT inet6/filter/logdrop-1132 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1132 -j DROP Filter 2076 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2075 inet/filter/INPUT -j limit-2075 inet/filter/OUTPUT -j limit-2075 inet/filter/limit-2075 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 inet/filter/limit-2075 -m limit --limit 1/second -j LOG inet/filter/logdrop-1133 -m limit --limit 1/second -j LOG inet/filter/logdrop-1133 -j DROP inet6/filter/FORWARD -j limit-2075 inet6/filter/INPUT -j limit-2075 inet6/filter/OUTPUT -j limit-2075 inet6/filter/limit-2075 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 inet6/filter/limit-2075 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1133 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1133 -j DROP Filter 2077 {"flow-limit":{"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2076 inet/filter/FORWARD -j logaccept-final-37 inet/filter/INPUT -j limit-2076 inet/filter/INPUT -j logaccept-final-37 inet/filter/OUTPUT -j limit-2076 inet/filter/OUTPUT -j logaccept-final-37 inet/filter/limit-2076 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 inet/filter/logaccept-final-37 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-37 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-37 -j ACCEPT inet/filter/logdrop-1134 -m limit --limit 1/second -j LOG inet/filter/logdrop-1134 -j DROP inet6/filter/FORWARD -j limit-2076 inet6/filter/FORWARD -j logaccept-final-37 inet6/filter/INPUT -j limit-2076 inet6/filter/INPUT -j logaccept-final-37 inet6/filter/OUTPUT -j limit-2076 inet6/filter/OUTPUT -j logaccept-final-37 inet6/filter/limit-2076 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 inet6/filter/logaccept-final-37 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-37 -j ACCEPT inet6/filter/logdrop-1134 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1134 -j DROP Filter 2078 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2077 inet/filter/INPUT -j limit-2077 inet/filter/OUTPUT -j limit-2077 inet/filter/limit-2077 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 inet/filter/limit-2077 -j TEE --gateway 10.0.0.1 inet/filter/limit-2077 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1135 -m limit --limit 1/second -j LOG inet/filter/logdrop-1135 -j DROP inet6/filter/FORWARD -j limit-2077 inet6/filter/INPUT -j limit-2077 inet6/filter/OUTPUT -j limit-2077 inet6/filter/limit-2077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 inet6/filter/limit-2077 -j TEE --gateway fc00::2 inet6/filter/logdrop-1135 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1135 -j DROP Filter 2079 {"flow-limit":{"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2078 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2078 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2078 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2078 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 inet/filter/logdrop-1136 -m limit --limit 1/second -j LOG inet/filter/logdrop-1136 -j DROP inet6/filter/FORWARD -j limit-2078 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2078 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2078 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 inet6/filter/logdrop-1136 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1136 -j DROP Filter 2080 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2079 inet/filter/INPUT -j limit-2079 inet/filter/OUTPUT -j limit-2079 inet/filter/limit-2079 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 inet/filter/logdrop-1137 -m limit --limit 1/second -j LOG inet/filter/logdrop-1137 -j DROP inet6/filter/FORWARD -j limit-2079 inet6/filter/INPUT -j limit-2079 inet6/filter/OUTPUT -j limit-2079 inet6/filter/limit-2079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 inet6/filter/logdrop-1137 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1137 -j DROP Filter 2081 {"flow-limit":{"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2080 inet/filter/FORWARD -j logaccept-final-38 inet/filter/INPUT -j limit-2080 inet/filter/INPUT -j logaccept-final-38 inet/filter/OUTPUT -j limit-2080 inet/filter/OUTPUT -j logaccept-final-38 inet/filter/limit-2080 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 inet/filter/logaccept-final-38 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-38 -j ACCEPT inet/filter/logdrop-1138 -m limit --limit 1/second -j LOG inet/filter/logdrop-1138 -j DROP inet6/filter/FORWARD -j limit-2080 inet6/filter/FORWARD -j logaccept-final-38 inet6/filter/INPUT -j limit-2080 inet6/filter/INPUT -j logaccept-final-38 inet6/filter/OUTPUT -j limit-2080 inet6/filter/OUTPUT -j logaccept-final-38 inet6/filter/limit-2080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 inet6/filter/logaccept-final-38 -j ACCEPT inet6/filter/logdrop-1138 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1138 -j DROP Filter 2082 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2081 inet/filter/INPUT -j limit-2081 inet/filter/OUTPUT -j limit-2081 inet/filter/limit-2081 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 inet/filter/limit-2081 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1139 -m limit --limit 1/second -j LOG inet/filter/logdrop-1139 -j DROP inet6/filter/FORWARD -j limit-2081 inet6/filter/INPUT -j limit-2081 inet6/filter/OUTPUT -j limit-2081 inet6/filter/limit-2081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 inet6/filter/logdrop-1139 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1139 -j DROP Filter 2083 {"flow-limit":{"addr":"dest","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2082 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2082 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2082 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1140 inet/filter/limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1140 -m limit --limit 1/second -j LOG inet/filter/logdrop-1140 -j DROP inet6/filter/FORWARD -j limit-2082 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2082 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2082 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1140 inet6/filter/limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1140 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1140 -j DROP Filter 2084 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2083 inet/filter/INPUT -j limit-2083 inet/filter/OUTPUT -j limit-2083 inet/filter/limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1141 inet/filter/limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1141 -m limit --limit 1/second -j LOG inet/filter/logdrop-1141 -j DROP inet6/filter/FORWARD -j limit-2083 inet6/filter/INPUT -j limit-2083 inet6/filter/OUTPUT -j limit-2083 inet6/filter/limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1141 inet6/filter/limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1141 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1141 -j DROP Filter 2085 {"flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2084 inet/filter/FORWARD -j logaccept-final-39 inet/filter/INPUT -j limit-2084 inet/filter/INPUT -j logaccept-final-39 inet/filter/OUTPUT -j limit-2084 inet/filter/OUTPUT -j logaccept-final-39 inet/filter/limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1142 inet/filter/limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-39 -j ACCEPT inet/filter/logdrop-1142 -m limit --limit 1/second -j LOG inet/filter/logdrop-1142 -j DROP inet6/filter/FORWARD -j limit-2084 inet6/filter/FORWARD -j logaccept-final-39 inet6/filter/INPUT -j limit-2084 inet6/filter/INPUT -j logaccept-final-39 inet6/filter/OUTPUT -j limit-2084 inet6/filter/OUTPUT -j logaccept-final-39 inet6/filter/limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1142 inet6/filter/limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-39 -j ACCEPT inet6/filter/logdrop-1142 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1142 -j DROP Filter 2086 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2085 inet/filter/INPUT -j limit-2085 inet/filter/OUTPUT -j limit-2085 inet/filter/limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1143 inet/filter/limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1143 -m limit --limit 1/second -j LOG inet/filter/logdrop-1143 -j DROP inet6/filter/FORWARD -j limit-2085 inet6/filter/INPUT -j limit-2085 inet6/filter/OUTPUT -j limit-2085 inet6/filter/limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1143 inet6/filter/limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1143 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1143 -j DROP Filter 2087 {"flow-limit":{"addr":"dest","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2086 inet/filter/FORWARD -j logaccept-final-40 inet/filter/INPUT -j limit-2086 inet/filter/INPUT -j logaccept-final-40 inet/filter/OUTPUT -j limit-2086 inet/filter/OUTPUT -j logaccept-final-40 inet/filter/limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1144 inet/filter/limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-40 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-40 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-40 -j ACCEPT inet/filter/logdrop-1144 -m limit --limit 1/second -j LOG inet/filter/logdrop-1144 -j DROP inet6/filter/FORWARD -j limit-2086 inet6/filter/FORWARD -j logaccept-final-40 inet6/filter/INPUT -j limit-2086 inet6/filter/INPUT -j logaccept-final-40 inet6/filter/OUTPUT -j limit-2086 inet6/filter/OUTPUT -j logaccept-final-40 inet6/filter/limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1144 inet6/filter/limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-40 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-40 -j ACCEPT inet6/filter/logdrop-1144 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1144 -j DROP Filter 2088 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2087 inet/filter/INPUT -j limit-2087 inet/filter/OUTPUT -j limit-2087 inet/filter/limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1145 inet/filter/limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1145 -m limit --limit 1/second -j LOG inet/filter/logdrop-1145 -j DROP inet6/filter/FORWARD -j limit-2087 inet6/filter/INPUT -j limit-2087 inet6/filter/OUTPUT -j limit-2087 inet6/filter/limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1145 inet6/filter/limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1145 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1145 -j DROP Filter 2089 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2088 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2088 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2088 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1146 inet/filter/limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1146 -m limit --limit 1/second -j LOG inet/filter/logdrop-1146 -j DROP inet6/filter/FORWARD -j limit-2088 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2088 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2088 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1146 inet6/filter/limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1146 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1146 -j DROP Filter 2090 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2089 inet/filter/INPUT -j limit-2089 inet/filter/OUTPUT -j limit-2089 inet/filter/limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1147 inet/filter/limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1147 -m limit --limit 1/second -j LOG inet/filter/logdrop-1147 -j DROP inet6/filter/FORWARD -j limit-2089 inet6/filter/INPUT -j limit-2089 inet6/filter/OUTPUT -j limit-2089 inet6/filter/limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1147 inet6/filter/limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1147 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1147 -j DROP Filter 2091 {"flow-limit":{"addr":"dest","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2090 inet/filter/FORWARD -j logaccept-final-41 inet/filter/INPUT -j limit-2090 inet/filter/INPUT -j logaccept-final-41 inet/filter/OUTPUT -j limit-2090 inet/filter/OUTPUT -j logaccept-final-41 inet/filter/limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1148 inet/filter/limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-41 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-41 -j ACCEPT inet/filter/logdrop-1148 -m limit --limit 1/second -j LOG inet/filter/logdrop-1148 -j DROP inet6/filter/FORWARD -j limit-2090 inet6/filter/FORWARD -j logaccept-final-41 inet6/filter/INPUT -j limit-2090 inet6/filter/INPUT -j logaccept-final-41 inet6/filter/OUTPUT -j limit-2090 inet6/filter/OUTPUT -j logaccept-final-41 inet6/filter/limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1148 inet6/filter/limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-41 -j ACCEPT inet6/filter/logdrop-1148 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1148 -j DROP Filter 2092 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2091 inet/filter/INPUT -j limit-2091 inet/filter/OUTPUT -j limit-2091 inet/filter/limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1149 inet/filter/limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1149 -m limit --limit 1/second -j LOG inet/filter/logdrop-1149 -j DROP inet6/filter/FORWARD -j limit-2091 inet6/filter/INPUT -j limit-2091 inet6/filter/OUTPUT -j limit-2091 inet6/filter/limit-2091 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1149 inet6/filter/logdrop-1149 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1149 -j DROP Filter 2093 {"flow-limit":{"addr":"dest","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2092 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2092 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2092 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2092 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 inet/filter/logdrop-1150 -m limit --limit 1/second -j LOG inet/filter/logdrop-1150 -j DROP inet6/filter/FORWARD -j limit-2092 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2092 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2092 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2092 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 inet6/filter/logdrop-1150 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1150 -j DROP Filter 2094 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2093 inet/filter/INPUT -j limit-2093 inet/filter/OUTPUT -j limit-2093 inet/filter/limit-2093 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 inet/filter/logdrop-1151 -m limit --limit 1/second -j LOG inet/filter/logdrop-1151 -j DROP inet6/filter/FORWARD -j limit-2093 inet6/filter/INPUT -j limit-2093 inet6/filter/OUTPUT -j limit-2093 inet6/filter/limit-2093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 inet6/filter/logdrop-1151 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1151 -j DROP Filter 2095 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2094 inet/filter/FORWARD -j logaccept-final-42 inet/filter/INPUT -j limit-2094 inet/filter/INPUT -j logaccept-final-42 inet/filter/OUTPUT -j limit-2094 inet/filter/OUTPUT -j logaccept-final-42 inet/filter/limit-2094 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-42 -j ACCEPT inet/filter/logdrop-1152 -m limit --limit 1/second -j LOG inet/filter/logdrop-1152 -j DROP inet6/filter/FORWARD -j limit-2094 inet6/filter/FORWARD -j logaccept-final-42 inet6/filter/INPUT -j limit-2094 inet6/filter/INPUT -j logaccept-final-42 inet6/filter/OUTPUT -j limit-2094 inet6/filter/OUTPUT -j logaccept-final-42 inet6/filter/limit-2094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-42 -j ACCEPT inet6/filter/logdrop-1152 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1152 -j DROP Filter 2096 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2095 inet/filter/INPUT -j limit-2095 inet/filter/OUTPUT -j limit-2095 inet/filter/limit-2095 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 inet/filter/limit-2095 -m limit --limit 1/second -j LOG inet/filter/logdrop-1153 -m limit --limit 1/second -j LOG inet/filter/logdrop-1153 -j DROP inet6/filter/FORWARD -j limit-2095 inet6/filter/INPUT -j limit-2095 inet6/filter/OUTPUT -j limit-2095 inet6/filter/limit-2095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 inet6/filter/limit-2095 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1153 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1153 -j DROP Filter 2097 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2096 inet/filter/FORWARD -j logaccept-final-43 inet/filter/INPUT -j limit-2096 inet/filter/INPUT -j logaccept-final-43 inet/filter/OUTPUT -j limit-2096 inet/filter/OUTPUT -j logaccept-final-43 inet/filter/limit-2096 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 inet/filter/logaccept-final-43 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-43 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-43 -j ACCEPT inet/filter/logdrop-1154 -m limit --limit 1/second -j LOG inet/filter/logdrop-1154 -j DROP inet6/filter/FORWARD -j limit-2096 inet6/filter/FORWARD -j logaccept-final-43 inet6/filter/INPUT -j limit-2096 inet6/filter/INPUT -j logaccept-final-43 inet6/filter/OUTPUT -j limit-2096 inet6/filter/OUTPUT -j logaccept-final-43 inet6/filter/limit-2096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 inet6/filter/logaccept-final-43 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-43 -j ACCEPT inet6/filter/logdrop-1154 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1154 -j DROP Filter 2098 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2097 inet/filter/INPUT -j limit-2097 inet/filter/OUTPUT -j limit-2097 inet/filter/limit-2097 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 inet/filter/limit-2097 -j TEE --gateway 10.0.0.1 inet/filter/limit-2097 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1155 -m limit --limit 1/second -j LOG inet/filter/logdrop-1155 -j DROP inet6/filter/FORWARD -j limit-2097 inet6/filter/INPUT -j limit-2097 inet6/filter/OUTPUT -j limit-2097 inet6/filter/limit-2097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 inet6/filter/limit-2097 -j TEE --gateway fc00::2 inet6/filter/logdrop-1155 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1155 -j DROP Filter 2099 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2098 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2098 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2098 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2098 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 inet/filter/logdrop-1156 -m limit --limit 1/second -j LOG inet/filter/logdrop-1156 -j DROP inet6/filter/FORWARD -j limit-2098 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2098 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2098 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 inet6/filter/logdrop-1156 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1156 -j DROP Filter 2100 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2099 inet/filter/INPUT -j limit-2099 inet/filter/OUTPUT -j limit-2099 inet/filter/limit-2099 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 inet/filter/logdrop-1157 -m limit --limit 1/second -j LOG inet/filter/logdrop-1157 -j DROP inet6/filter/FORWARD -j limit-2099 inet6/filter/INPUT -j limit-2099 inet6/filter/OUTPUT -j limit-2099 inet6/filter/limit-2099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 inet6/filter/logdrop-1157 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1157 -j DROP Filter 2101 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2100 inet/filter/FORWARD -j logaccept-final-44 inet/filter/INPUT -j limit-2100 inet/filter/INPUT -j logaccept-final-44 inet/filter/OUTPUT -j limit-2100 inet/filter/OUTPUT -j logaccept-final-44 inet/filter/limit-2100 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 inet/filter/logaccept-final-44 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-44 -j ACCEPT inet/filter/logdrop-1158 -m limit --limit 1/second -j LOG inet/filter/logdrop-1158 -j DROP inet6/filter/FORWARD -j limit-2100 inet6/filter/FORWARD -j logaccept-final-44 inet6/filter/INPUT -j limit-2100 inet6/filter/INPUT -j logaccept-final-44 inet6/filter/OUTPUT -j limit-2100 inet6/filter/OUTPUT -j logaccept-final-44 inet6/filter/limit-2100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 inet6/filter/logaccept-final-44 -j ACCEPT inet6/filter/logdrop-1158 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1158 -j DROP Filter 2102 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2101 inet/filter/INPUT -j limit-2101 inet/filter/OUTPUT -j limit-2101 inet/filter/limit-2101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 inet/filter/limit-2101 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1159 -m limit --limit 1/second -j LOG inet/filter/logdrop-1159 -j DROP inet6/filter/FORWARD -j limit-2101 inet6/filter/INPUT -j limit-2101 inet6/filter/OUTPUT -j limit-2101 inet6/filter/limit-2101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 inet6/filter/logdrop-1159 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1159 -j DROP Filter 2103 {"flow-limit":{"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2102 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2102 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2102 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1160 inet/filter/limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1160 -m limit --limit 1/second -j LOG inet/filter/logdrop-1160 -j DROP inet6/filter/FORWARD -j limit-2102 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2102 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2102 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2102 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1160 inet6/filter/limit-2102 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1160 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1160 -j DROP Filter 2104 {"action":"pass","flow-limit":{"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2103 inet/filter/INPUT -j limit-2103 inet/filter/OUTPUT -j limit-2103 inet/filter/limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1161 inet/filter/limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1161 -m limit --limit 1/second -j LOG inet/filter/logdrop-1161 -j DROP inet6/filter/FORWARD -j limit-2103 inet6/filter/INPUT -j limit-2103 inet6/filter/OUTPUT -j limit-2103 inet6/filter/limit-2103 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1161 inet6/filter/limit-2103 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1161 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1161 -j DROP Filter 2105 {"flow-limit":{"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2104 inet/filter/FORWARD -j logaccept-final-45 inet/filter/INPUT -j limit-2104 inet/filter/INPUT -j logaccept-final-45 inet/filter/OUTPUT -j limit-2104 inet/filter/OUTPUT -j logaccept-final-45 inet/filter/limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1162 inet/filter/limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-45 -j ACCEPT inet/filter/logdrop-1162 -m limit --limit 1/second -j LOG inet/filter/logdrop-1162 -j DROP inet6/filter/FORWARD -j limit-2104 inet6/filter/FORWARD -j logaccept-final-45 inet6/filter/INPUT -j limit-2104 inet6/filter/INPUT -j logaccept-final-45 inet6/filter/OUTPUT -j limit-2104 inet6/filter/OUTPUT -j logaccept-final-45 inet6/filter/limit-2104 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1162 inet6/filter/limit-2104 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-45 -j ACCEPT inet6/filter/logdrop-1162 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1162 -j DROP Filter 2106 {"action":"pass","flow-limit":{"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2105 inet/filter/INPUT -j limit-2105 inet/filter/OUTPUT -j limit-2105 inet/filter/limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1163 inet/filter/limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1163 -m limit --limit 1/second -j LOG inet/filter/logdrop-1163 -j DROP inet6/filter/FORWARD -j limit-2105 inet6/filter/INPUT -j limit-2105 inet6/filter/OUTPUT -j limit-2105 inet6/filter/limit-2105 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1163 inet6/filter/limit-2105 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1163 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1163 -j DROP Filter 2107 {"flow-limit":{"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2106 inet/filter/FORWARD -j logaccept-final-46 inet/filter/INPUT -j limit-2106 inet/filter/INPUT -j logaccept-final-46 inet/filter/OUTPUT -j limit-2106 inet/filter/OUTPUT -j logaccept-final-46 inet/filter/limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1164 inet/filter/limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-46 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-46 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-46 -j ACCEPT inet/filter/logdrop-1164 -m limit --limit 1/second -j LOG inet/filter/logdrop-1164 -j DROP inet6/filter/FORWARD -j limit-2106 inet6/filter/FORWARD -j logaccept-final-46 inet6/filter/INPUT -j limit-2106 inet6/filter/INPUT -j logaccept-final-46 inet6/filter/OUTPUT -j limit-2106 inet6/filter/OUTPUT -j logaccept-final-46 inet6/filter/limit-2106 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1164 inet6/filter/limit-2106 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-46 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-46 -j ACCEPT inet6/filter/logdrop-1164 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1164 -j DROP Filter 2108 {"action":"pass","flow-limit":{"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2107 inet/filter/INPUT -j limit-2107 inet/filter/OUTPUT -j limit-2107 inet/filter/limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1165 inet/filter/limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1165 -m limit --limit 1/second -j LOG inet/filter/logdrop-1165 -j DROP inet6/filter/FORWARD -j limit-2107 inet6/filter/INPUT -j limit-2107 inet6/filter/OUTPUT -j limit-2107 inet6/filter/limit-2107 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1165 inet6/filter/limit-2107 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1165 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1165 -j DROP Filter 2109 {"flow-limit":{"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2108 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2108 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2108 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1166 inet/filter/limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1166 -m limit --limit 1/second -j LOG inet/filter/logdrop-1166 -j DROP inet6/filter/FORWARD -j limit-2108 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2108 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2108 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2108 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1166 inet6/filter/limit-2108 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1166 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1166 -j DROP Filter 2110 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2109 inet/filter/INPUT -j limit-2109 inet/filter/OUTPUT -j limit-2109 inet/filter/limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1167 inet/filter/limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1167 -m limit --limit 1/second -j LOG inet/filter/logdrop-1167 -j DROP inet6/filter/FORWARD -j limit-2109 inet6/filter/INPUT -j limit-2109 inet6/filter/OUTPUT -j limit-2109 inet6/filter/limit-2109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1167 inet6/filter/limit-2109 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1167 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1167 -j DROP Filter 2111 {"flow-limit":{"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2110 inet/filter/FORWARD -j logaccept-final-47 inet/filter/INPUT -j limit-2110 inet/filter/INPUT -j logaccept-final-47 inet/filter/OUTPUT -j limit-2110 inet/filter/OUTPUT -j logaccept-final-47 inet/filter/limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1168 inet/filter/limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-47 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-47 -j ACCEPT inet/filter/logdrop-1168 -m limit --limit 1/second -j LOG inet/filter/logdrop-1168 -j DROP inet6/filter/FORWARD -j limit-2110 inet6/filter/FORWARD -j logaccept-final-47 inet6/filter/INPUT -j limit-2110 inet6/filter/INPUT -j logaccept-final-47 inet6/filter/OUTPUT -j limit-2110 inet6/filter/OUTPUT -j logaccept-final-47 inet6/filter/limit-2110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1168 inet6/filter/limit-2110 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-47 -j ACCEPT inet6/filter/logdrop-1168 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1168 -j DROP Filter 2112 {"action":"pass","flow-limit":{"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2111 inet/filter/INPUT -j limit-2111 inet/filter/OUTPUT -j limit-2111 inet/filter/limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1169 inet/filter/limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1169 -m limit --limit 1/second -j LOG inet/filter/logdrop-1169 -j DROP inet6/filter/FORWARD -j limit-2111 inet6/filter/INPUT -j limit-2111 inet6/filter/OUTPUT -j limit-2111 inet6/filter/limit-2111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1169 inet6/filter/logdrop-1169 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1169 -j DROP Filter 2113 {"flow-limit":{"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2112 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2112 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2112 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2112 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 inet/filter/logdrop-1170 -m limit --limit 1/second -j LOG inet/filter/logdrop-1170 -j DROP inet6/filter/FORWARD -j limit-2112 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2112 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2112 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2112 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 inet6/filter/logdrop-1170 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1170 -j DROP Filter 2114 {"action":"pass","flow-limit":{"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2113 inet/filter/INPUT -j limit-2113 inet/filter/OUTPUT -j limit-2113 inet/filter/limit-2113 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 inet/filter/logdrop-1171 -m limit --limit 1/second -j LOG inet/filter/logdrop-1171 -j DROP inet6/filter/FORWARD -j limit-2113 inet6/filter/INPUT -j limit-2113 inet6/filter/OUTPUT -j limit-2113 inet6/filter/limit-2113 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 inet6/filter/logdrop-1171 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1171 -j DROP Filter 2115 {"flow-limit":{"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2114 inet/filter/FORWARD -j logaccept-final-48 inet/filter/INPUT -j limit-2114 inet/filter/INPUT -j logaccept-final-48 inet/filter/OUTPUT -j limit-2114 inet/filter/OUTPUT -j logaccept-final-48 inet/filter/limit-2114 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-48 -j ACCEPT inet/filter/logdrop-1172 -m limit --limit 1/second -j LOG inet/filter/logdrop-1172 -j DROP inet6/filter/FORWARD -j limit-2114 inet6/filter/FORWARD -j logaccept-final-48 inet6/filter/INPUT -j limit-2114 inet6/filter/INPUT -j logaccept-final-48 inet6/filter/OUTPUT -j limit-2114 inet6/filter/OUTPUT -j logaccept-final-48 inet6/filter/limit-2114 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-48 -j ACCEPT inet6/filter/logdrop-1172 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1172 -j DROP Filter 2116 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2115 inet/filter/INPUT -j limit-2115 inet/filter/OUTPUT -j limit-2115 inet/filter/limit-2115 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 inet/filter/limit-2115 -m limit --limit 1/second -j LOG inet/filter/logdrop-1173 -m limit --limit 1/second -j LOG inet/filter/logdrop-1173 -j DROP inet6/filter/FORWARD -j limit-2115 inet6/filter/INPUT -j limit-2115 inet6/filter/OUTPUT -j limit-2115 inet6/filter/limit-2115 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 inet6/filter/limit-2115 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1173 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1173 -j DROP Filter 2117 {"flow-limit":{"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2116 inet/filter/FORWARD -j logaccept-final-49 inet/filter/INPUT -j limit-2116 inet/filter/INPUT -j logaccept-final-49 inet/filter/OUTPUT -j limit-2116 inet/filter/OUTPUT -j logaccept-final-49 inet/filter/limit-2116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 inet/filter/logaccept-final-49 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-49 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-49 -j ACCEPT inet/filter/logdrop-1174 -m limit --limit 1/second -j LOG inet/filter/logdrop-1174 -j DROP inet6/filter/FORWARD -j limit-2116 inet6/filter/FORWARD -j logaccept-final-49 inet6/filter/INPUT -j limit-2116 inet6/filter/INPUT -j logaccept-final-49 inet6/filter/OUTPUT -j limit-2116 inet6/filter/OUTPUT -j logaccept-final-49 inet6/filter/limit-2116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 inet6/filter/logaccept-final-49 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-49 -j ACCEPT inet6/filter/logdrop-1174 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1174 -j DROP Filter 2118 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2117 inet/filter/INPUT -j limit-2117 inet/filter/OUTPUT -j limit-2117 inet/filter/limit-2117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 inet/filter/limit-2117 -j TEE --gateway 10.0.0.1 inet/filter/limit-2117 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1175 -m limit --limit 1/second -j LOG inet/filter/logdrop-1175 -j DROP inet6/filter/FORWARD -j limit-2117 inet6/filter/INPUT -j limit-2117 inet6/filter/OUTPUT -j limit-2117 inet6/filter/limit-2117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 inet6/filter/limit-2117 -j TEE --gateway fc00::2 inet6/filter/logdrop-1175 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1175 -j DROP Filter 2119 {"flow-limit":{"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2118 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2118 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2118 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 inet/filter/logdrop-1176 -m limit --limit 1/second -j LOG inet/filter/logdrop-1176 -j DROP inet6/filter/FORWARD -j limit-2118 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2118 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2118 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 inet6/filter/logdrop-1176 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1176 -j DROP Filter 2120 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2119 inet/filter/INPUT -j limit-2119 inet/filter/OUTPUT -j limit-2119 inet/filter/limit-2119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 inet/filter/logdrop-1177 -m limit --limit 1/second -j LOG inet/filter/logdrop-1177 -j DROP inet6/filter/FORWARD -j limit-2119 inet6/filter/INPUT -j limit-2119 inet6/filter/OUTPUT -j limit-2119 inet6/filter/limit-2119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 inet6/filter/logdrop-1177 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1177 -j DROP Filter 2121 {"flow-limit":{"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2120 inet/filter/FORWARD -j logaccept-final-50 inet/filter/INPUT -j limit-2120 inet/filter/INPUT -j logaccept-final-50 inet/filter/OUTPUT -j limit-2120 inet/filter/OUTPUT -j logaccept-final-50 inet/filter/limit-2120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 inet/filter/logaccept-final-50 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-50 -j ACCEPT inet/filter/logdrop-1178 -m limit --limit 1/second -j LOG inet/filter/logdrop-1178 -j DROP inet6/filter/FORWARD -j limit-2120 inet6/filter/FORWARD -j logaccept-final-50 inet6/filter/INPUT -j limit-2120 inet6/filter/INPUT -j logaccept-final-50 inet6/filter/OUTPUT -j limit-2120 inet6/filter/OUTPUT -j logaccept-final-50 inet6/filter/limit-2120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 inet6/filter/logaccept-final-50 -j ACCEPT inet6/filter/logdrop-1178 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1178 -j DROP Filter 2122 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2121 inet/filter/INPUT -j limit-2121 inet/filter/OUTPUT -j limit-2121 inet/filter/limit-2121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 inet/filter/limit-2121 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1179 -m limit --limit 1/second -j LOG inet/filter/logdrop-1179 -j DROP inet6/filter/FORWARD -j limit-2121 inet6/filter/INPUT -j limit-2121 inet6/filter/OUTPUT -j limit-2121 inet6/filter/limit-2121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 inet6/filter/logdrop-1179 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1179 -j DROP Filter 2123 {"flow-limit":{"addr":"dest","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2122 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2122 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2122 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1180 inet/filter/limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1180 -m limit --limit 1/second -j LOG inet/filter/logdrop-1180 -j DROP inet6/filter/FORWARD -j limit-2122 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2122 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2122 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1180 inet6/filter/limit-2122 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1180 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1180 -j DROP Filter 2124 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2123 inet/filter/INPUT -j limit-2123 inet/filter/OUTPUT -j limit-2123 inet/filter/limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1181 inet/filter/limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1181 -m limit --limit 1/second -j LOG inet/filter/logdrop-1181 -j DROP inet6/filter/FORWARD -j limit-2123 inet6/filter/INPUT -j limit-2123 inet6/filter/OUTPUT -j limit-2123 inet6/filter/limit-2123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1181 inet6/filter/limit-2123 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1181 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1181 -j DROP Filter 2125 {"flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2124 inet/filter/FORWARD -j logaccept-final-51 inet/filter/INPUT -j limit-2124 inet/filter/INPUT -j logaccept-final-51 inet/filter/OUTPUT -j limit-2124 inet/filter/OUTPUT -j logaccept-final-51 inet/filter/limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1182 inet/filter/limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-51 -j ACCEPT inet/filter/logdrop-1182 -m limit --limit 1/second -j LOG inet/filter/logdrop-1182 -j DROP inet6/filter/FORWARD -j limit-2124 inet6/filter/FORWARD -j logaccept-final-51 inet6/filter/INPUT -j limit-2124 inet6/filter/INPUT -j logaccept-final-51 inet6/filter/OUTPUT -j limit-2124 inet6/filter/OUTPUT -j logaccept-final-51 inet6/filter/limit-2124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1182 inet6/filter/limit-2124 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-51 -j ACCEPT inet6/filter/logdrop-1182 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1182 -j DROP Filter 2126 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2125 inet/filter/INPUT -j limit-2125 inet/filter/OUTPUT -j limit-2125 inet/filter/limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1183 inet/filter/limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1183 -m limit --limit 1/second -j LOG inet/filter/logdrop-1183 -j DROP inet6/filter/FORWARD -j limit-2125 inet6/filter/INPUT -j limit-2125 inet6/filter/OUTPUT -j limit-2125 inet6/filter/limit-2125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1183 inet6/filter/limit-2125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1183 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1183 -j DROP Filter 2127 {"flow-limit":{"addr":"dest","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2126 inet/filter/FORWARD -j logaccept-final-52 inet/filter/INPUT -j limit-2126 inet/filter/INPUT -j logaccept-final-52 inet/filter/OUTPUT -j limit-2126 inet/filter/OUTPUT -j logaccept-final-52 inet/filter/limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1184 inet/filter/limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-52 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-52 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-52 -j ACCEPT inet/filter/logdrop-1184 -m limit --limit 1/second -j LOG inet/filter/logdrop-1184 -j DROP inet6/filter/FORWARD -j limit-2126 inet6/filter/FORWARD -j logaccept-final-52 inet6/filter/INPUT -j limit-2126 inet6/filter/INPUT -j logaccept-final-52 inet6/filter/OUTPUT -j limit-2126 inet6/filter/OUTPUT -j logaccept-final-52 inet6/filter/limit-2126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1184 inet6/filter/limit-2126 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-52 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-52 -j ACCEPT inet6/filter/logdrop-1184 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1184 -j DROP Filter 2128 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2127 inet/filter/INPUT -j limit-2127 inet/filter/OUTPUT -j limit-2127 inet/filter/limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1185 inet/filter/limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1185 -m limit --limit 1/second -j LOG inet/filter/logdrop-1185 -j DROP inet6/filter/FORWARD -j limit-2127 inet6/filter/INPUT -j limit-2127 inet6/filter/OUTPUT -j limit-2127 inet6/filter/limit-2127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1185 inet6/filter/limit-2127 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1185 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1185 -j DROP Filter 2129 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2128 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2128 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2128 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1186 inet/filter/limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1186 -m limit --limit 1/second -j LOG inet/filter/logdrop-1186 -j DROP inet6/filter/FORWARD -j limit-2128 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2128 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2128 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1186 inet6/filter/limit-2128 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1186 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1186 -j DROP Filter 2130 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2129 inet/filter/INPUT -j limit-2129 inet/filter/OUTPUT -j limit-2129 inet/filter/limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1187 inet/filter/limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1187 -m limit --limit 1/second -j LOG inet/filter/logdrop-1187 -j DROP inet6/filter/FORWARD -j limit-2129 inet6/filter/INPUT -j limit-2129 inet6/filter/OUTPUT -j limit-2129 inet6/filter/limit-2129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1187 inet6/filter/limit-2129 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1187 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1187 -j DROP Filter 2131 {"flow-limit":{"addr":"dest","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2130 inet/filter/FORWARD -j logaccept-final-53 inet/filter/INPUT -j limit-2130 inet/filter/INPUT -j logaccept-final-53 inet/filter/OUTPUT -j limit-2130 inet/filter/OUTPUT -j logaccept-final-53 inet/filter/limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1188 inet/filter/limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-53 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-53 -j ACCEPT inet/filter/logdrop-1188 -m limit --limit 1/second -j LOG inet/filter/logdrop-1188 -j DROP inet6/filter/FORWARD -j limit-2130 inet6/filter/FORWARD -j logaccept-final-53 inet6/filter/INPUT -j limit-2130 inet6/filter/INPUT -j logaccept-final-53 inet6/filter/OUTPUT -j limit-2130 inet6/filter/OUTPUT -j logaccept-final-53 inet6/filter/limit-2130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1188 inet6/filter/limit-2130 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-53 -j ACCEPT inet6/filter/logdrop-1188 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1188 -j DROP Filter 2132 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2131 inet/filter/INPUT -j limit-2131 inet/filter/OUTPUT -j limit-2131 inet/filter/limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1189 inet/filter/limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1189 -m limit --limit 1/second -j LOG inet/filter/logdrop-1189 -j DROP inet6/filter/FORWARD -j limit-2131 inet6/filter/INPUT -j limit-2131 inet6/filter/OUTPUT -j limit-2131 inet6/filter/limit-2131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1189 inet6/filter/logdrop-1189 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1189 -j DROP Filter 2133 {"flow-limit":{"addr":"dest","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2132 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2132 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2132 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 inet/filter/logdrop-1190 -m limit --limit 1/second -j LOG inet/filter/logdrop-1190 -j DROP inet6/filter/FORWARD -j limit-2132 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2132 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2132 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 inet6/filter/logdrop-1190 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1190 -j DROP Filter 2134 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2133 inet/filter/INPUT -j limit-2133 inet/filter/OUTPUT -j limit-2133 inet/filter/limit-2133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 inet/filter/logdrop-1191 -m limit --limit 1/second -j LOG inet/filter/logdrop-1191 -j DROP inet6/filter/FORWARD -j limit-2133 inet6/filter/INPUT -j limit-2133 inet6/filter/OUTPUT -j limit-2133 inet6/filter/limit-2133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 inet6/filter/logdrop-1191 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1191 -j DROP Filter 2135 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2134 inet/filter/FORWARD -j logaccept-final-54 inet/filter/INPUT -j limit-2134 inet/filter/INPUT -j logaccept-final-54 inet/filter/OUTPUT -j limit-2134 inet/filter/OUTPUT -j logaccept-final-54 inet/filter/limit-2134 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-54 -j ACCEPT inet/filter/logdrop-1192 -m limit --limit 1/second -j LOG inet/filter/logdrop-1192 -j DROP inet6/filter/FORWARD -j limit-2134 inet6/filter/FORWARD -j logaccept-final-54 inet6/filter/INPUT -j limit-2134 inet6/filter/INPUT -j logaccept-final-54 inet6/filter/OUTPUT -j limit-2134 inet6/filter/OUTPUT -j logaccept-final-54 inet6/filter/limit-2134 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-54 -j ACCEPT inet6/filter/logdrop-1192 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1192 -j DROP Filter 2136 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2135 inet/filter/INPUT -j limit-2135 inet/filter/OUTPUT -j limit-2135 inet/filter/limit-2135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 inet/filter/limit-2135 -m limit --limit 1/second -j LOG inet/filter/logdrop-1193 -m limit --limit 1/second -j LOG inet/filter/logdrop-1193 -j DROP inet6/filter/FORWARD -j limit-2135 inet6/filter/INPUT -j limit-2135 inet6/filter/OUTPUT -j limit-2135 inet6/filter/limit-2135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 inet6/filter/limit-2135 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1193 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1193 -j DROP Filter 2137 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2136 inet/filter/FORWARD -j logaccept-final-55 inet/filter/INPUT -j limit-2136 inet/filter/INPUT -j logaccept-final-55 inet/filter/OUTPUT -j limit-2136 inet/filter/OUTPUT -j logaccept-final-55 inet/filter/limit-2136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 inet/filter/logaccept-final-55 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-55 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-55 -j ACCEPT inet/filter/logdrop-1194 -m limit --limit 1/second -j LOG inet/filter/logdrop-1194 -j DROP inet6/filter/FORWARD -j limit-2136 inet6/filter/FORWARD -j logaccept-final-55 inet6/filter/INPUT -j limit-2136 inet6/filter/INPUT -j logaccept-final-55 inet6/filter/OUTPUT -j limit-2136 inet6/filter/OUTPUT -j logaccept-final-55 inet6/filter/limit-2136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 inet6/filter/logaccept-final-55 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-55 -j ACCEPT inet6/filter/logdrop-1194 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1194 -j DROP Filter 2138 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2137 inet/filter/INPUT -j limit-2137 inet/filter/OUTPUT -j limit-2137 inet/filter/limit-2137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 inet/filter/limit-2137 -j TEE --gateway 10.0.0.1 inet/filter/limit-2137 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1195 -m limit --limit 1/second -j LOG inet/filter/logdrop-1195 -j DROP inet6/filter/FORWARD -j limit-2137 inet6/filter/INPUT -j limit-2137 inet6/filter/OUTPUT -j limit-2137 inet6/filter/limit-2137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 inet6/filter/limit-2137 -j TEE --gateway fc00::2 inet6/filter/logdrop-1195 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1195 -j DROP Filter 2139 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2138 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2138 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2138 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2138 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 inet/filter/logdrop-1196 -m limit --limit 1/second -j LOG inet/filter/logdrop-1196 -j DROP inet6/filter/FORWARD -j limit-2138 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2138 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2138 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2138 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 inet6/filter/logdrop-1196 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1196 -j DROP Filter 2140 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2139 inet/filter/INPUT -j limit-2139 inet/filter/OUTPUT -j limit-2139 inet/filter/limit-2139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 inet/filter/logdrop-1197 -m limit --limit 1/second -j LOG inet/filter/logdrop-1197 -j DROP inet6/filter/FORWARD -j limit-2139 inet6/filter/INPUT -j limit-2139 inet6/filter/OUTPUT -j limit-2139 inet6/filter/limit-2139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 inet6/filter/logdrop-1197 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1197 -j DROP Filter 2141 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2140 inet/filter/FORWARD -j logaccept-final-56 inet/filter/INPUT -j limit-2140 inet/filter/INPUT -j logaccept-final-56 inet/filter/OUTPUT -j limit-2140 inet/filter/OUTPUT -j logaccept-final-56 inet/filter/limit-2140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 inet/filter/logaccept-final-56 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-56 -j ACCEPT inet/filter/logdrop-1198 -m limit --limit 1/second -j LOG inet/filter/logdrop-1198 -j DROP inet6/filter/FORWARD -j limit-2140 inet6/filter/FORWARD -j logaccept-final-56 inet6/filter/INPUT -j limit-2140 inet6/filter/INPUT -j logaccept-final-56 inet6/filter/OUTPUT -j limit-2140 inet6/filter/OUTPUT -j logaccept-final-56 inet6/filter/limit-2140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 inet6/filter/logaccept-final-56 -j ACCEPT inet6/filter/logdrop-1198 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1198 -j DROP Filter 2142 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2141 inet/filter/INPUT -j limit-2141 inet/filter/OUTPUT -j limit-2141 inet/filter/limit-2141 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 inet/filter/limit-2141 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1199 -m limit --limit 1/second -j LOG inet/filter/logdrop-1199 -j DROP inet6/filter/FORWARD -j limit-2141 inet6/filter/INPUT -j limit-2141 inet6/filter/OUTPUT -j limit-2141 inet6/filter/limit-2141 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 inet6/filter/logdrop-1199 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1199 -j DROP Filter 2143 {"flow-limit":{"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2142 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2142 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2142 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1200 inet/filter/limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1200 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1200 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1200 -j DROP inet6/filter/FORWARD -j limit-2142 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2142 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2142 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1200 inet6/filter/limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1200 -j TEE --gateway fc00::2 inet6/filter/logdrop-1200 -j DROP Filter 2144 {"action":"pass","flow-limit":{"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2143 inet/filter/INPUT -j limit-2143 inet/filter/OUTPUT -j limit-2143 inet/filter/limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1201 inet/filter/limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1201 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1201 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1201 -j DROP inet6/filter/FORWARD -j limit-2143 inet6/filter/INPUT -j limit-2143 inet6/filter/OUTPUT -j limit-2143 inet6/filter/limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1201 inet6/filter/limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1201 -j TEE --gateway fc00::2 inet6/filter/logdrop-1201 -j DROP Filter 2145 {"flow-limit":{"log":"mirror"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2144 inet/filter/FORWARD -j logaccept-final-57 inet/filter/INPUT -j limit-2144 inet/filter/INPUT -j logaccept-final-57 inet/filter/OUTPUT -j limit-2144 inet/filter/OUTPUT -j logaccept-final-57 inet/filter/limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1202 inet/filter/limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-57 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-57 -j ACCEPT inet/filter/logdrop-1202 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1202 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1202 -j DROP inet6/filter/FORWARD -j limit-2144 inet6/filter/FORWARD -j logaccept-final-57 inet6/filter/INPUT -j limit-2144 inet6/filter/INPUT -j logaccept-final-57 inet6/filter/OUTPUT -j limit-2144 inet6/filter/OUTPUT -j logaccept-final-57 inet6/filter/limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1202 inet6/filter/limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-57 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-57 -j ACCEPT inet6/filter/logdrop-1202 -j TEE --gateway fc00::2 inet6/filter/logdrop-1202 -j DROP Filter 2146 {"action":"pass","flow-limit":{"log":"mirror"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2145 inet/filter/INPUT -j limit-2145 inet/filter/OUTPUT -j limit-2145 inet/filter/limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1203 inet/filter/limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1203 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1203 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1203 -j DROP inet6/filter/FORWARD -j limit-2145 inet6/filter/INPUT -j limit-2145 inet6/filter/OUTPUT -j limit-2145 inet6/filter/limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1203 inet6/filter/limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1203 -j TEE --gateway fc00::2 inet6/filter/logdrop-1203 -j DROP Filter 2147 {"flow-limit":{"log":"mirror"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2146 inet/filter/FORWARD -j logaccept-final-58 inet/filter/INPUT -j limit-2146 inet/filter/INPUT -j logaccept-final-58 inet/filter/OUTPUT -j limit-2146 inet/filter/OUTPUT -j logaccept-final-58 inet/filter/limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1204 inet/filter/limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-58 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-58 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-58 -j ACCEPT inet/filter/logdrop-1204 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1204 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1204 -j DROP inet6/filter/FORWARD -j limit-2146 inet6/filter/FORWARD -j logaccept-final-58 inet6/filter/INPUT -j limit-2146 inet6/filter/INPUT -j logaccept-final-58 inet6/filter/OUTPUT -j limit-2146 inet6/filter/OUTPUT -j logaccept-final-58 inet6/filter/limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1204 inet6/filter/limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-58 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-58 -j ACCEPT inet6/filter/logdrop-1204 -j TEE --gateway fc00::2 inet6/filter/logdrop-1204 -j DROP Filter 2148 {"action":"pass","flow-limit":{"log":"mirror"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2147 inet/filter/INPUT -j limit-2147 inet/filter/OUTPUT -j limit-2147 inet/filter/limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1205 inet/filter/limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1205 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1205 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1205 -j DROP inet6/filter/FORWARD -j limit-2147 inet6/filter/INPUT -j limit-2147 inet6/filter/OUTPUT -j limit-2147 inet6/filter/limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1205 inet6/filter/limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1205 -j TEE --gateway fc00::2 inet6/filter/logdrop-1205 -j DROP Filter 2149 {"flow-limit":{"log":"mirror"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2148 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2148 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2148 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1206 inet/filter/limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1206 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1206 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1206 -j DROP inet6/filter/FORWARD -j limit-2148 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2148 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2148 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1206 inet6/filter/limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1206 -j TEE --gateway fc00::2 inet6/filter/logdrop-1206 -j DROP Filter 2150 {"action":"pass","flow-limit":{"log":"mirror"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2149 inet/filter/INPUT -j limit-2149 inet/filter/OUTPUT -j limit-2149 inet/filter/limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1207 inet/filter/limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1207 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1207 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1207 -j DROP inet6/filter/FORWARD -j limit-2149 inet6/filter/INPUT -j limit-2149 inet6/filter/OUTPUT -j limit-2149 inet6/filter/limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1207 inet6/filter/limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1207 -j TEE --gateway fc00::2 inet6/filter/logdrop-1207 -j DROP Filter 2151 {"flow-limit":{"log":"mirror"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2150 inet/filter/FORWARD -j logaccept-final-59 inet/filter/INPUT -j limit-2150 inet/filter/INPUT -j logaccept-final-59 inet/filter/OUTPUT -j limit-2150 inet/filter/OUTPUT -j logaccept-final-59 inet/filter/limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1208 inet/filter/limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-59 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-59 -j ACCEPT inet/filter/logdrop-1208 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1208 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1208 -j DROP inet6/filter/FORWARD -j limit-2150 inet6/filter/FORWARD -j logaccept-final-59 inet6/filter/INPUT -j limit-2150 inet6/filter/INPUT -j logaccept-final-59 inet6/filter/OUTPUT -j limit-2150 inet6/filter/OUTPUT -j logaccept-final-59 inet6/filter/limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1208 inet6/filter/limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-59 -j ACCEPT inet6/filter/logdrop-1208 -j TEE --gateway fc00::2 inet6/filter/logdrop-1208 -j DROP Filter 2152 {"action":"pass","flow-limit":{"log":"mirror"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2151 inet/filter/INPUT -j limit-2151 inet/filter/OUTPUT -j limit-2151 inet/filter/limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1209 inet/filter/limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1209 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1209 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1209 -j DROP inet6/filter/FORWARD -j limit-2151 inet6/filter/INPUT -j limit-2151 inet6/filter/OUTPUT -j limit-2151 inet6/filter/limit-2151 -m recent --name limit-2151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1209 inet6/filter/logdrop-1209 -j TEE --gateway fc00::2 inet6/filter/logdrop-1209 -j DROP Filter 2153 {"flow-limit":{"log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2152 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2152 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2152 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1210 inet/filter/limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1210 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1210 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1210 -j DROP inet6/filter/FORWARD -j limit-2152 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2152 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2152 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1210 inet6/filter/limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1210 -j TEE --gateway fc00::2 inet6/filter/logdrop-1210 -j DROP Filter 2154 {"action":"pass","flow-limit":{"log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2153 inet/filter/INPUT -j limit-2153 inet/filter/OUTPUT -j limit-2153 inet/filter/limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1211 inet/filter/limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1211 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1211 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1211 -j DROP inet6/filter/FORWARD -j limit-2153 inet6/filter/INPUT -j limit-2153 inet6/filter/OUTPUT -j limit-2153 inet6/filter/limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1211 inet6/filter/limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1211 -j TEE --gateway fc00::2 inet6/filter/logdrop-1211 -j DROP Filter 2155 {"flow-limit":{"log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2154 inet/filter/FORWARD -j logaccept-final-60 inet/filter/INPUT -j limit-2154 inet/filter/INPUT -j logaccept-final-60 inet/filter/OUTPUT -j limit-2154 inet/filter/OUTPUT -j logaccept-final-60 inet/filter/limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1212 inet/filter/limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-60 -j ACCEPT inet/filter/logdrop-1212 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1212 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1212 -j DROP inet6/filter/FORWARD -j limit-2154 inet6/filter/FORWARD -j logaccept-final-60 inet6/filter/INPUT -j limit-2154 inet6/filter/INPUT -j logaccept-final-60 inet6/filter/OUTPUT -j limit-2154 inet6/filter/OUTPUT -j logaccept-final-60 inet6/filter/limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1212 inet6/filter/limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-60 -j ACCEPT inet6/filter/logdrop-1212 -j TEE --gateway fc00::2 inet6/filter/logdrop-1212 -j DROP Filter 2156 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2155 inet/filter/INPUT -j limit-2155 inet/filter/OUTPUT -j limit-2155 inet/filter/limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1213 inet/filter/limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1213 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1213 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1213 -j DROP inet6/filter/FORWARD -j limit-2155 inet6/filter/INPUT -j limit-2155 inet6/filter/OUTPUT -j limit-2155 inet6/filter/limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1213 inet6/filter/limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1213 -j TEE --gateway fc00::2 inet6/filter/logdrop-1213 -j DROP Filter 2157 {"flow-limit":{"log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2156 inet/filter/FORWARD -j logaccept-final-61 inet/filter/INPUT -j limit-2156 inet/filter/INPUT -j logaccept-final-61 inet/filter/OUTPUT -j limit-2156 inet/filter/OUTPUT -j logaccept-final-61 inet/filter/limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1214 inet/filter/limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-61 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-61 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-61 -j ACCEPT inet/filter/logdrop-1214 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1214 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1214 -j DROP inet6/filter/FORWARD -j limit-2156 inet6/filter/FORWARD -j logaccept-final-61 inet6/filter/INPUT -j limit-2156 inet6/filter/INPUT -j logaccept-final-61 inet6/filter/OUTPUT -j limit-2156 inet6/filter/OUTPUT -j logaccept-final-61 inet6/filter/limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1214 inet6/filter/limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-61 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-61 -j ACCEPT inet6/filter/logdrop-1214 -j TEE --gateway fc00::2 inet6/filter/logdrop-1214 -j DROP Filter 2158 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2157 inet/filter/INPUT -j limit-2157 inet/filter/OUTPUT -j limit-2157 inet/filter/limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1215 inet/filter/limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1215 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1215 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1215 -j DROP inet6/filter/FORWARD -j limit-2157 inet6/filter/INPUT -j limit-2157 inet6/filter/OUTPUT -j limit-2157 inet6/filter/limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1215 inet6/filter/limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1215 -j TEE --gateway fc00::2 inet6/filter/logdrop-1215 -j DROP Filter 2159 {"flow-limit":{"log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2158 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2158 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2158 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1216 inet/filter/limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1216 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1216 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1216 -j DROP inet6/filter/FORWARD -j limit-2158 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2158 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2158 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1216 inet6/filter/limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1216 -j TEE --gateway fc00::2 inet6/filter/logdrop-1216 -j DROP Filter 2160 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2159 inet/filter/INPUT -j limit-2159 inet/filter/OUTPUT -j limit-2159 inet/filter/limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1217 inet/filter/limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1217 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1217 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1217 -j DROP inet6/filter/FORWARD -j limit-2159 inet6/filter/INPUT -j limit-2159 inet6/filter/OUTPUT -j limit-2159 inet6/filter/limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1217 inet6/filter/limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1217 -j TEE --gateway fc00::2 inet6/filter/logdrop-1217 -j DROP Filter 2161 {"flow-limit":{"log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2160 inet/filter/FORWARD -j logaccept-final-62 inet/filter/INPUT -j limit-2160 inet/filter/INPUT -j logaccept-final-62 inet/filter/OUTPUT -j limit-2160 inet/filter/OUTPUT -j logaccept-final-62 inet/filter/limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1218 inet/filter/limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-62 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-62 -j ACCEPT inet/filter/logdrop-1218 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1218 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1218 -j DROP inet6/filter/FORWARD -j limit-2160 inet6/filter/FORWARD -j logaccept-final-62 inet6/filter/INPUT -j limit-2160 inet6/filter/INPUT -j logaccept-final-62 inet6/filter/OUTPUT -j limit-2160 inet6/filter/OUTPUT -j logaccept-final-62 inet6/filter/limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1218 inet6/filter/limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-62 -j ACCEPT inet6/filter/logdrop-1218 -j TEE --gateway fc00::2 inet6/filter/logdrop-1218 -j DROP Filter 2162 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2161 inet/filter/INPUT -j limit-2161 inet/filter/OUTPUT -j limit-2161 inet/filter/limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1219 inet/filter/limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1219 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1219 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1219 -j DROP inet6/filter/FORWARD -j limit-2161 inet6/filter/INPUT -j limit-2161 inet6/filter/OUTPUT -j limit-2161 inet6/filter/limit-2161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1219 inet6/filter/logdrop-1219 -j TEE --gateway fc00::2 inet6/filter/logdrop-1219 -j DROP Filter 2163 {"flow-limit":{"log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2162 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2162 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2162 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2162 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 inet/filter/logdrop-1220 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1220 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1220 -j DROP inet6/filter/FORWARD -j limit-2162 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2162 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2162 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 inet6/filter/logdrop-1220 -j TEE --gateway fc00::2 inet6/filter/logdrop-1220 -j DROP Filter 2164 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2163 inet/filter/INPUT -j limit-2163 inet/filter/OUTPUT -j limit-2163 inet/filter/limit-2163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 inet/filter/logdrop-1221 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1221 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1221 -j DROP inet6/filter/FORWARD -j limit-2163 inet6/filter/INPUT -j limit-2163 inet6/filter/OUTPUT -j limit-2163 inet6/filter/limit-2163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 inet6/filter/logdrop-1221 -j TEE --gateway fc00::2 inet6/filter/logdrop-1221 -j DROP Filter 2165 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2164 inet/filter/FORWARD -j logaccept-final-63 inet/filter/INPUT -j limit-2164 inet/filter/INPUT -j logaccept-final-63 inet/filter/OUTPUT -j limit-2164 inet/filter/OUTPUT -j logaccept-final-63 inet/filter/limit-2164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 inet/filter/logaccept-final-63 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-63 -j ACCEPT inet/filter/logdrop-1222 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1222 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1222 -j DROP inet6/filter/FORWARD -j limit-2164 inet6/filter/FORWARD -j logaccept-final-63 inet6/filter/INPUT -j limit-2164 inet6/filter/INPUT -j logaccept-final-63 inet6/filter/OUTPUT -j limit-2164 inet6/filter/OUTPUT -j logaccept-final-63 inet6/filter/limit-2164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 inet6/filter/logaccept-final-63 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-63 -j ACCEPT inet6/filter/logdrop-1222 -j TEE --gateway fc00::2 inet6/filter/logdrop-1222 -j DROP Filter 2166 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2165 inet/filter/INPUT -j limit-2165 inet/filter/OUTPUT -j limit-2165 inet/filter/limit-2165 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 inet/filter/limit-2165 -m limit --limit 1/second -j LOG inet/filter/logdrop-1223 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1223 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1223 -j DROP inet6/filter/FORWARD -j limit-2165 inet6/filter/INPUT -j limit-2165 inet6/filter/OUTPUT -j limit-2165 inet6/filter/limit-2165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 inet6/filter/limit-2165 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1223 -j TEE --gateway fc00::2 inet6/filter/logdrop-1223 -j DROP Filter 2167 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2166 inet/filter/FORWARD -j logaccept-final-64 inet/filter/INPUT -j limit-2166 inet/filter/INPUT -j logaccept-final-64 inet/filter/OUTPUT -j limit-2166 inet/filter/OUTPUT -j logaccept-final-64 inet/filter/limit-2166 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 inet/filter/logaccept-final-64 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-64 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-64 -j ACCEPT inet/filter/logdrop-1224 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1224 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1224 -j DROP inet6/filter/FORWARD -j limit-2166 inet6/filter/FORWARD -j logaccept-final-64 inet6/filter/INPUT -j limit-2166 inet6/filter/INPUT -j logaccept-final-64 inet6/filter/OUTPUT -j limit-2166 inet6/filter/OUTPUT -j logaccept-final-64 inet6/filter/limit-2166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 inet6/filter/logaccept-final-64 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-64 -j ACCEPT inet6/filter/logdrop-1224 -j TEE --gateway fc00::2 inet6/filter/logdrop-1224 -j DROP Filter 2168 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2167 inet/filter/INPUT -j limit-2167 inet/filter/OUTPUT -j limit-2167 inet/filter/limit-2167 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 inet/filter/limit-2167 -j TEE --gateway 10.0.0.1 inet/filter/limit-2167 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1225 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1225 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1225 -j DROP inet6/filter/FORWARD -j limit-2167 inet6/filter/INPUT -j limit-2167 inet6/filter/OUTPUT -j limit-2167 inet6/filter/limit-2167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 inet6/filter/limit-2167 -j TEE --gateway fc00::2 inet6/filter/logdrop-1225 -j TEE --gateway fc00::2 inet6/filter/logdrop-1225 -j DROP Filter 2169 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2168 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2168 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2168 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 inet/filter/logdrop-1226 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1226 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1226 -j DROP inet6/filter/FORWARD -j limit-2168 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2168 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2168 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 inet6/filter/logdrop-1226 -j TEE --gateway fc00::2 inet6/filter/logdrop-1226 -j DROP Filter 2170 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2169 inet/filter/INPUT -j limit-2169 inet/filter/OUTPUT -j limit-2169 inet/filter/limit-2169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 inet/filter/logdrop-1227 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1227 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1227 -j DROP inet6/filter/FORWARD -j limit-2169 inet6/filter/INPUT -j limit-2169 inet6/filter/OUTPUT -j limit-2169 inet6/filter/limit-2169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 inet6/filter/logdrop-1227 -j TEE --gateway fc00::2 inet6/filter/logdrop-1227 -j DROP Filter 2171 {"flow-limit":{"log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2170 inet/filter/FORWARD -j logaccept-final-65 inet/filter/INPUT -j limit-2170 inet/filter/INPUT -j logaccept-final-65 inet/filter/OUTPUT -j limit-2170 inet/filter/OUTPUT -j logaccept-final-65 inet/filter/limit-2170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 inet/filter/logaccept-final-65 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-65 -j ACCEPT inet/filter/logdrop-1228 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1228 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1228 -j DROP inet6/filter/FORWARD -j limit-2170 inet6/filter/FORWARD -j logaccept-final-65 inet6/filter/INPUT -j limit-2170 inet6/filter/INPUT -j logaccept-final-65 inet6/filter/OUTPUT -j limit-2170 inet6/filter/OUTPUT -j logaccept-final-65 inet6/filter/limit-2170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 inet6/filter/logaccept-final-65 -j ACCEPT inet6/filter/logdrop-1228 -j TEE --gateway fc00::2 inet6/filter/logdrop-1228 -j DROP Filter 2172 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2171 inet/filter/INPUT -j limit-2171 inet/filter/OUTPUT -j limit-2171 inet/filter/limit-2171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 inet/filter/limit-2171 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1229 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1229 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1229 -j DROP inet6/filter/FORWARD -j limit-2171 inet6/filter/INPUT -j limit-2171 inet6/filter/OUTPUT -j limit-2171 inet6/filter/limit-2171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 inet6/filter/logdrop-1229 -j TEE --gateway fc00::2 inet6/filter/logdrop-1229 -j DROP Filter 2173 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2172 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2172 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2172 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1230 inet/filter/limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1230 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1230 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1230 -j DROP inet6/filter/FORWARD -j limit-2172 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2172 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2172 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1230 inet6/filter/limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1230 -j TEE --gateway fc00::2 inet6/filter/logdrop-1230 -j DROP Filter 2174 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2173 inet/filter/INPUT -j limit-2173 inet/filter/OUTPUT -j limit-2173 inet/filter/limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1231 inet/filter/limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1231 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1231 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1231 -j DROP inet6/filter/FORWARD -j limit-2173 inet6/filter/INPUT -j limit-2173 inet6/filter/OUTPUT -j limit-2173 inet6/filter/limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1231 inet6/filter/limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1231 -j TEE --gateway fc00::2 inet6/filter/logdrop-1231 -j DROP Filter 2175 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2174 inet/filter/FORWARD -j logaccept-final-66 inet/filter/INPUT -j limit-2174 inet/filter/INPUT -j logaccept-final-66 inet/filter/OUTPUT -j limit-2174 inet/filter/OUTPUT -j logaccept-final-66 inet/filter/limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1232 inet/filter/limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-66 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-66 -j ACCEPT inet/filter/logdrop-1232 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1232 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1232 -j DROP inet6/filter/FORWARD -j limit-2174 inet6/filter/FORWARD -j logaccept-final-66 inet6/filter/INPUT -j limit-2174 inet6/filter/INPUT -j logaccept-final-66 inet6/filter/OUTPUT -j limit-2174 inet6/filter/OUTPUT -j logaccept-final-66 inet6/filter/limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1232 inet6/filter/limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-66 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-66 -j ACCEPT inet6/filter/logdrop-1232 -j TEE --gateway fc00::2 inet6/filter/logdrop-1232 -j DROP Filter 2176 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2175 inet/filter/INPUT -j limit-2175 inet/filter/OUTPUT -j limit-2175 inet/filter/limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1233 inet/filter/limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1233 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1233 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1233 -j DROP inet6/filter/FORWARD -j limit-2175 inet6/filter/INPUT -j limit-2175 inet6/filter/OUTPUT -j limit-2175 inet6/filter/limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1233 inet6/filter/limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1233 -j TEE --gateway fc00::2 inet6/filter/logdrop-1233 -j DROP Filter 2177 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2176 inet/filter/FORWARD -j logaccept-final-67 inet/filter/INPUT -j limit-2176 inet/filter/INPUT -j logaccept-final-67 inet/filter/OUTPUT -j limit-2176 inet/filter/OUTPUT -j logaccept-final-67 inet/filter/limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1234 inet/filter/limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-67 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-67 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-67 -j ACCEPT inet/filter/logdrop-1234 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1234 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1234 -j DROP inet6/filter/FORWARD -j limit-2176 inet6/filter/FORWARD -j logaccept-final-67 inet6/filter/INPUT -j limit-2176 inet6/filter/INPUT -j logaccept-final-67 inet6/filter/OUTPUT -j limit-2176 inet6/filter/OUTPUT -j logaccept-final-67 inet6/filter/limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1234 inet6/filter/limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-67 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-67 -j ACCEPT inet6/filter/logdrop-1234 -j TEE --gateway fc00::2 inet6/filter/logdrop-1234 -j DROP Filter 2178 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2177 inet/filter/INPUT -j limit-2177 inet/filter/OUTPUT -j limit-2177 inet/filter/limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1235 inet/filter/limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1235 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1235 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1235 -j DROP inet6/filter/FORWARD -j limit-2177 inet6/filter/INPUT -j limit-2177 inet6/filter/OUTPUT -j limit-2177 inet6/filter/limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1235 inet6/filter/limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1235 -j TEE --gateway fc00::2 inet6/filter/logdrop-1235 -j DROP Filter 2179 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2178 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2178 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2178 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1236 inet/filter/limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1236 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1236 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1236 -j DROP inet6/filter/FORWARD -j limit-2178 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2178 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2178 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1236 inet6/filter/limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1236 -j TEE --gateway fc00::2 inet6/filter/logdrop-1236 -j DROP Filter 2180 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2179 inet/filter/INPUT -j limit-2179 inet/filter/OUTPUT -j limit-2179 inet/filter/limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1237 inet/filter/limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1237 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1237 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1237 -j DROP inet6/filter/FORWARD -j limit-2179 inet6/filter/INPUT -j limit-2179 inet6/filter/OUTPUT -j limit-2179 inet6/filter/limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1237 inet6/filter/limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1237 -j TEE --gateway fc00::2 inet6/filter/logdrop-1237 -j DROP Filter 2181 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2180 inet/filter/FORWARD -j logaccept-final-68 inet/filter/INPUT -j limit-2180 inet/filter/INPUT -j logaccept-final-68 inet/filter/OUTPUT -j limit-2180 inet/filter/OUTPUT -j logaccept-final-68 inet/filter/limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1238 inet/filter/limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-68 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-68 -j ACCEPT inet/filter/logdrop-1238 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1238 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1238 -j DROP inet6/filter/FORWARD -j limit-2180 inet6/filter/FORWARD -j logaccept-final-68 inet6/filter/INPUT -j limit-2180 inet6/filter/INPUT -j logaccept-final-68 inet6/filter/OUTPUT -j limit-2180 inet6/filter/OUTPUT -j logaccept-final-68 inet6/filter/limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1238 inet6/filter/limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-68 -j ACCEPT inet6/filter/logdrop-1238 -j TEE --gateway fc00::2 inet6/filter/logdrop-1238 -j DROP Filter 2182 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2181 inet/filter/INPUT -j limit-2181 inet/filter/OUTPUT -j limit-2181 inet/filter/limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1239 inet/filter/limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1239 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1239 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1239 -j DROP inet6/filter/FORWARD -j limit-2181 inet6/filter/INPUT -j limit-2181 inet6/filter/OUTPUT -j limit-2181 inet6/filter/limit-2181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1239 inet6/filter/logdrop-1239 -j TEE --gateway fc00::2 inet6/filter/logdrop-1239 -j DROP Filter 2183 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2182 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2182 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2182 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 inet/filter/logdrop-1240 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1240 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1240 -j DROP inet6/filter/FORWARD -j limit-2182 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2182 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2182 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 inet6/filter/logdrop-1240 -j TEE --gateway fc00::2 inet6/filter/logdrop-1240 -j DROP Filter 2184 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2183 inet/filter/INPUT -j limit-2183 inet/filter/OUTPUT -j limit-2183 inet/filter/limit-2183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 inet/filter/logdrop-1241 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1241 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1241 -j DROP inet6/filter/FORWARD -j limit-2183 inet6/filter/INPUT -j limit-2183 inet6/filter/OUTPUT -j limit-2183 inet6/filter/limit-2183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 inet6/filter/logdrop-1241 -j TEE --gateway fc00::2 inet6/filter/logdrop-1241 -j DROP Filter 2185 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2184 inet/filter/FORWARD -j logaccept-final-69 inet/filter/INPUT -j limit-2184 inet/filter/INPUT -j logaccept-final-69 inet/filter/OUTPUT -j limit-2184 inet/filter/OUTPUT -j logaccept-final-69 inet/filter/limit-2184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 inet/filter/logaccept-final-69 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-69 -j ACCEPT inet/filter/logdrop-1242 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1242 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1242 -j DROP inet6/filter/FORWARD -j limit-2184 inet6/filter/FORWARD -j logaccept-final-69 inet6/filter/INPUT -j limit-2184 inet6/filter/INPUT -j logaccept-final-69 inet6/filter/OUTPUT -j limit-2184 inet6/filter/OUTPUT -j logaccept-final-69 inet6/filter/limit-2184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 inet6/filter/logaccept-final-69 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-69 -j ACCEPT inet6/filter/logdrop-1242 -j TEE --gateway fc00::2 inet6/filter/logdrop-1242 -j DROP Filter 2186 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2185 inet/filter/INPUT -j limit-2185 inet/filter/OUTPUT -j limit-2185 inet/filter/limit-2185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 inet/filter/limit-2185 -m limit --limit 1/second -j LOG inet/filter/logdrop-1243 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1243 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1243 -j DROP inet6/filter/FORWARD -j limit-2185 inet6/filter/INPUT -j limit-2185 inet6/filter/OUTPUT -j limit-2185 inet6/filter/limit-2185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 inet6/filter/limit-2185 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1243 -j TEE --gateway fc00::2 inet6/filter/logdrop-1243 -j DROP Filter 2187 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2186 inet/filter/FORWARD -j logaccept-final-70 inet/filter/INPUT -j limit-2186 inet/filter/INPUT -j logaccept-final-70 inet/filter/OUTPUT -j limit-2186 inet/filter/OUTPUT -j logaccept-final-70 inet/filter/limit-2186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 inet/filter/logaccept-final-70 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-70 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-70 -j ACCEPT inet/filter/logdrop-1244 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1244 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1244 -j DROP inet6/filter/FORWARD -j limit-2186 inet6/filter/FORWARD -j logaccept-final-70 inet6/filter/INPUT -j limit-2186 inet6/filter/INPUT -j logaccept-final-70 inet6/filter/OUTPUT -j limit-2186 inet6/filter/OUTPUT -j logaccept-final-70 inet6/filter/limit-2186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 inet6/filter/logaccept-final-70 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-70 -j ACCEPT inet6/filter/logdrop-1244 -j TEE --gateway fc00::2 inet6/filter/logdrop-1244 -j DROP Filter 2188 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2187 inet/filter/INPUT -j limit-2187 inet/filter/OUTPUT -j limit-2187 inet/filter/limit-2187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 inet/filter/limit-2187 -j TEE --gateway 10.0.0.1 inet/filter/limit-2187 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1245 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1245 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1245 -j DROP inet6/filter/FORWARD -j limit-2187 inet6/filter/INPUT -j limit-2187 inet6/filter/OUTPUT -j limit-2187 inet6/filter/limit-2187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 inet6/filter/limit-2187 -j TEE --gateway fc00::2 inet6/filter/logdrop-1245 -j TEE --gateway fc00::2 inet6/filter/logdrop-1245 -j DROP Filter 2189 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2188 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2188 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2188 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 inet/filter/logdrop-1246 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1246 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1246 -j DROP inet6/filter/FORWARD -j limit-2188 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2188 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2188 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 inet6/filter/logdrop-1246 -j TEE --gateway fc00::2 inet6/filter/logdrop-1246 -j DROP Filter 2190 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2189 inet/filter/INPUT -j limit-2189 inet/filter/OUTPUT -j limit-2189 inet/filter/limit-2189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 inet/filter/logdrop-1247 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1247 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1247 -j DROP inet6/filter/FORWARD -j limit-2189 inet6/filter/INPUT -j limit-2189 inet6/filter/OUTPUT -j limit-2189 inet6/filter/limit-2189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 inet6/filter/logdrop-1247 -j TEE --gateway fc00::2 inet6/filter/logdrop-1247 -j DROP Filter 2191 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2190 inet/filter/FORWARD -j logaccept-final-71 inet/filter/INPUT -j limit-2190 inet/filter/INPUT -j logaccept-final-71 inet/filter/OUTPUT -j limit-2190 inet/filter/OUTPUT -j logaccept-final-71 inet/filter/limit-2190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 inet/filter/logaccept-final-71 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-71 -j ACCEPT inet/filter/logdrop-1248 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1248 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1248 -j DROP inet6/filter/FORWARD -j limit-2190 inet6/filter/FORWARD -j logaccept-final-71 inet6/filter/INPUT -j limit-2190 inet6/filter/INPUT -j logaccept-final-71 inet6/filter/OUTPUT -j limit-2190 inet6/filter/OUTPUT -j logaccept-final-71 inet6/filter/limit-2190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 inet6/filter/logaccept-final-71 -j ACCEPT inet6/filter/logdrop-1248 -j TEE --gateway fc00::2 inet6/filter/logdrop-1248 -j DROP Filter 2192 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2191 inet/filter/INPUT -j limit-2191 inet/filter/OUTPUT -j limit-2191 inet/filter/limit-2191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 inet/filter/limit-2191 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1249 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1249 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1249 -j DROP inet6/filter/FORWARD -j limit-2191 inet6/filter/INPUT -j limit-2191 inet6/filter/OUTPUT -j limit-2191 inet6/filter/limit-2191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 inet6/filter/logdrop-1249 -j TEE --gateway fc00::2 inet6/filter/logdrop-1249 -j DROP Filter 2193 {"flow-limit":{"log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2192 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2192 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2192 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1250 inet/filter/limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1250 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1250 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1250 -j DROP inet6/filter/FORWARD -j limit-2192 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2192 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2192 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1250 inet6/filter/limit-2192 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1250 -j TEE --gateway fc00::2 inet6/filter/logdrop-1250 -j DROP Filter 2194 {"action":"pass","flow-limit":{"log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2193 inet/filter/INPUT -j limit-2193 inet/filter/OUTPUT -j limit-2193 inet/filter/limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1251 inet/filter/limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1251 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1251 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1251 -j DROP inet6/filter/FORWARD -j limit-2193 inet6/filter/INPUT -j limit-2193 inet6/filter/OUTPUT -j limit-2193 inet6/filter/limit-2193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1251 inet6/filter/limit-2193 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1251 -j TEE --gateway fc00::2 inet6/filter/logdrop-1251 -j DROP Filter 2195 {"flow-limit":{"log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2194 inet/filter/FORWARD -j logaccept-final-72 inet/filter/INPUT -j limit-2194 inet/filter/INPUT -j logaccept-final-72 inet/filter/OUTPUT -j limit-2194 inet/filter/OUTPUT -j logaccept-final-72 inet/filter/limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1252 inet/filter/limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-72 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-72 -j ACCEPT inet/filter/logdrop-1252 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1252 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1252 -j DROP inet6/filter/FORWARD -j limit-2194 inet6/filter/FORWARD -j logaccept-final-72 inet6/filter/INPUT -j limit-2194 inet6/filter/INPUT -j logaccept-final-72 inet6/filter/OUTPUT -j limit-2194 inet6/filter/OUTPUT -j logaccept-final-72 inet6/filter/limit-2194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1252 inet6/filter/limit-2194 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-72 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-72 -j ACCEPT inet6/filter/logdrop-1252 -j TEE --gateway fc00::2 inet6/filter/logdrop-1252 -j DROP Filter 2196 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2195 inet/filter/INPUT -j limit-2195 inet/filter/OUTPUT -j limit-2195 inet/filter/limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1253 inet/filter/limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1253 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1253 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1253 -j DROP inet6/filter/FORWARD -j limit-2195 inet6/filter/INPUT -j limit-2195 inet6/filter/OUTPUT -j limit-2195 inet6/filter/limit-2195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1253 inet6/filter/limit-2195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1253 -j TEE --gateway fc00::2 inet6/filter/logdrop-1253 -j DROP Filter 2197 {"flow-limit":{"log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2196 inet/filter/FORWARD -j logaccept-final-73 inet/filter/INPUT -j limit-2196 inet/filter/INPUT -j logaccept-final-73 inet/filter/OUTPUT -j limit-2196 inet/filter/OUTPUT -j logaccept-final-73 inet/filter/limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1254 inet/filter/limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-73 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-73 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-73 -j ACCEPT inet/filter/logdrop-1254 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1254 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1254 -j DROP inet6/filter/FORWARD -j limit-2196 inet6/filter/FORWARD -j logaccept-final-73 inet6/filter/INPUT -j limit-2196 inet6/filter/INPUT -j logaccept-final-73 inet6/filter/OUTPUT -j limit-2196 inet6/filter/OUTPUT -j logaccept-final-73 inet6/filter/limit-2196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1254 inet6/filter/limit-2196 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-73 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-73 -j ACCEPT inet6/filter/logdrop-1254 -j TEE --gateway fc00::2 inet6/filter/logdrop-1254 -j DROP Filter 2198 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2197 inet/filter/INPUT -j limit-2197 inet/filter/OUTPUT -j limit-2197 inet/filter/limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1255 inet/filter/limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1255 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1255 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1255 -j DROP inet6/filter/FORWARD -j limit-2197 inet6/filter/INPUT -j limit-2197 inet6/filter/OUTPUT -j limit-2197 inet6/filter/limit-2197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1255 inet6/filter/limit-2197 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1255 -j TEE --gateway fc00::2 inet6/filter/logdrop-1255 -j DROP Filter 2199 {"flow-limit":{"log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2198 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2198 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2198 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1256 inet/filter/limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1256 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1256 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1256 -j DROP inet6/filter/FORWARD -j limit-2198 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2198 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2198 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1256 inet6/filter/limit-2198 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1256 -j TEE --gateway fc00::2 inet6/filter/logdrop-1256 -j DROP Filter 2200 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2199 inet/filter/INPUT -j limit-2199 inet/filter/OUTPUT -j limit-2199 inet/filter/limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1257 inet/filter/limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1257 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1257 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1257 -j DROP inet6/filter/FORWARD -j limit-2199 inet6/filter/INPUT -j limit-2199 inet6/filter/OUTPUT -j limit-2199 inet6/filter/limit-2199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1257 inet6/filter/limit-2199 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1257 -j TEE --gateway fc00::2 inet6/filter/logdrop-1257 -j DROP Filter 2201 {"flow-limit":{"log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2200 inet/filter/FORWARD -j logaccept-final-74 inet/filter/INPUT -j limit-2200 inet/filter/INPUT -j logaccept-final-74 inet/filter/OUTPUT -j limit-2200 inet/filter/OUTPUT -j logaccept-final-74 inet/filter/limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1258 inet/filter/limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-74 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-74 -j ACCEPT inet/filter/logdrop-1258 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1258 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1258 -j DROP inet6/filter/FORWARD -j limit-2200 inet6/filter/FORWARD -j logaccept-final-74 inet6/filter/INPUT -j limit-2200 inet6/filter/INPUT -j logaccept-final-74 inet6/filter/OUTPUT -j limit-2200 inet6/filter/OUTPUT -j logaccept-final-74 inet6/filter/limit-2200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1258 inet6/filter/limit-2200 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-74 -j ACCEPT inet6/filter/logdrop-1258 -j TEE --gateway fc00::2 inet6/filter/logdrop-1258 -j DROP Filter 2202 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2201 inet/filter/INPUT -j limit-2201 inet/filter/OUTPUT -j limit-2201 inet/filter/limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1259 inet/filter/limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1259 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1259 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1259 -j DROP inet6/filter/FORWARD -j limit-2201 inet6/filter/INPUT -j limit-2201 inet6/filter/OUTPUT -j limit-2201 inet6/filter/limit-2201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1259 inet6/filter/logdrop-1259 -j TEE --gateway fc00::2 inet6/filter/logdrop-1259 -j DROP Filter 2203 {"flow-limit":{"log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2202 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2202 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2202 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 inet/filter/logdrop-1260 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1260 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1260 -j DROP inet6/filter/FORWARD -j limit-2202 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2202 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2202 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 inet6/filter/logdrop-1260 -j TEE --gateway fc00::2 inet6/filter/logdrop-1260 -j DROP Filter 2204 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2203 inet/filter/INPUT -j limit-2203 inet/filter/OUTPUT -j limit-2203 inet/filter/limit-2203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 inet/filter/logdrop-1261 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1261 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1261 -j DROP inet6/filter/FORWARD -j limit-2203 inet6/filter/INPUT -j limit-2203 inet6/filter/OUTPUT -j limit-2203 inet6/filter/limit-2203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 inet6/filter/logdrop-1261 -j TEE --gateway fc00::2 inet6/filter/logdrop-1261 -j DROP Filter 2205 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2204 inet/filter/FORWARD -j logaccept-final-75 inet/filter/INPUT -j limit-2204 inet/filter/INPUT -j logaccept-final-75 inet/filter/OUTPUT -j limit-2204 inet/filter/OUTPUT -j logaccept-final-75 inet/filter/limit-2204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 inet/filter/logaccept-final-75 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-75 -j ACCEPT inet/filter/logdrop-1262 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1262 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1262 -j DROP inet6/filter/FORWARD -j limit-2204 inet6/filter/FORWARD -j logaccept-final-75 inet6/filter/INPUT -j limit-2204 inet6/filter/INPUT -j logaccept-final-75 inet6/filter/OUTPUT -j limit-2204 inet6/filter/OUTPUT -j logaccept-final-75 inet6/filter/limit-2204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 inet6/filter/logaccept-final-75 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-75 -j ACCEPT inet6/filter/logdrop-1262 -j TEE --gateway fc00::2 inet6/filter/logdrop-1262 -j DROP Filter 2206 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2205 inet/filter/INPUT -j limit-2205 inet/filter/OUTPUT -j limit-2205 inet/filter/limit-2205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 inet/filter/limit-2205 -m limit --limit 1/second -j LOG inet/filter/logdrop-1263 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1263 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1263 -j DROP inet6/filter/FORWARD -j limit-2205 inet6/filter/INPUT -j limit-2205 inet6/filter/OUTPUT -j limit-2205 inet6/filter/limit-2205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 inet6/filter/limit-2205 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1263 -j TEE --gateway fc00::2 inet6/filter/logdrop-1263 -j DROP Filter 2207 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2206 inet/filter/FORWARD -j logaccept-final-76 inet/filter/INPUT -j limit-2206 inet/filter/INPUT -j logaccept-final-76 inet/filter/OUTPUT -j limit-2206 inet/filter/OUTPUT -j logaccept-final-76 inet/filter/limit-2206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 inet/filter/logaccept-final-76 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-76 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-76 -j ACCEPT inet/filter/logdrop-1264 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1264 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1264 -j DROP inet6/filter/FORWARD -j limit-2206 inet6/filter/FORWARD -j logaccept-final-76 inet6/filter/INPUT -j limit-2206 inet6/filter/INPUT -j logaccept-final-76 inet6/filter/OUTPUT -j limit-2206 inet6/filter/OUTPUT -j logaccept-final-76 inet6/filter/limit-2206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 inet6/filter/logaccept-final-76 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-76 -j ACCEPT inet6/filter/logdrop-1264 -j TEE --gateway fc00::2 inet6/filter/logdrop-1264 -j DROP Filter 2208 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2207 inet/filter/INPUT -j limit-2207 inet/filter/OUTPUT -j limit-2207 inet/filter/limit-2207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 inet/filter/limit-2207 -j TEE --gateway 10.0.0.1 inet/filter/limit-2207 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1265 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1265 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1265 -j DROP inet6/filter/FORWARD -j limit-2207 inet6/filter/INPUT -j limit-2207 inet6/filter/OUTPUT -j limit-2207 inet6/filter/limit-2207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 inet6/filter/limit-2207 -j TEE --gateway fc00::2 inet6/filter/logdrop-1265 -j TEE --gateway fc00::2 inet6/filter/logdrop-1265 -j DROP Filter 2209 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2208 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2208 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2208 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 inet/filter/logdrop-1266 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1266 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1266 -j DROP inet6/filter/FORWARD -j limit-2208 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2208 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2208 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 inet6/filter/logdrop-1266 -j TEE --gateway fc00::2 inet6/filter/logdrop-1266 -j DROP Filter 2210 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2209 inet/filter/INPUT -j limit-2209 inet/filter/OUTPUT -j limit-2209 inet/filter/limit-2209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 inet/filter/logdrop-1267 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1267 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1267 -j DROP inet6/filter/FORWARD -j limit-2209 inet6/filter/INPUT -j limit-2209 inet6/filter/OUTPUT -j limit-2209 inet6/filter/limit-2209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 inet6/filter/logdrop-1267 -j TEE --gateway fc00::2 inet6/filter/logdrop-1267 -j DROP Filter 2211 {"flow-limit":{"log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2210 inet/filter/FORWARD -j logaccept-final-77 inet/filter/INPUT -j limit-2210 inet/filter/INPUT -j logaccept-final-77 inet/filter/OUTPUT -j limit-2210 inet/filter/OUTPUT -j logaccept-final-77 inet/filter/limit-2210 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 inet/filter/logaccept-final-77 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-77 -j ACCEPT inet/filter/logdrop-1268 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1268 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1268 -j DROP inet6/filter/FORWARD -j limit-2210 inet6/filter/FORWARD -j logaccept-final-77 inet6/filter/INPUT -j limit-2210 inet6/filter/INPUT -j logaccept-final-77 inet6/filter/OUTPUT -j limit-2210 inet6/filter/OUTPUT -j logaccept-final-77 inet6/filter/limit-2210 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 inet6/filter/logaccept-final-77 -j ACCEPT inet6/filter/logdrop-1268 -j TEE --gateway fc00::2 inet6/filter/logdrop-1268 -j DROP Filter 2212 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2211 inet/filter/INPUT -j limit-2211 inet/filter/OUTPUT -j limit-2211 inet/filter/limit-2211 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 inet/filter/limit-2211 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1269 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1269 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1269 -j DROP inet6/filter/FORWARD -j limit-2211 inet6/filter/INPUT -j limit-2211 inet6/filter/OUTPUT -j limit-2211 inet6/filter/limit-2211 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 inet6/filter/logdrop-1269 -j TEE --gateway fc00::2 inet6/filter/logdrop-1269 -j DROP Filter 2213 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2212 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2212 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2212 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1270 inet/filter/limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1270 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1270 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1270 -j DROP inet6/filter/FORWARD -j limit-2212 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2212 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2212 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1270 inet6/filter/limit-2212 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1270 -j TEE --gateway fc00::2 inet6/filter/logdrop-1270 -j DROP Filter 2214 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2213 inet/filter/INPUT -j limit-2213 inet/filter/OUTPUT -j limit-2213 inet/filter/limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1271 inet/filter/limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1271 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1271 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1271 -j DROP inet6/filter/FORWARD -j limit-2213 inet6/filter/INPUT -j limit-2213 inet6/filter/OUTPUT -j limit-2213 inet6/filter/limit-2213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1271 inet6/filter/limit-2213 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1271 -j TEE --gateway fc00::2 inet6/filter/logdrop-1271 -j DROP Filter 2215 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2214 inet/filter/FORWARD -j logaccept-final-78 inet/filter/INPUT -j limit-2214 inet/filter/INPUT -j logaccept-final-78 inet/filter/OUTPUT -j limit-2214 inet/filter/OUTPUT -j logaccept-final-78 inet/filter/limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1272 inet/filter/limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-78 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-78 -j ACCEPT inet/filter/logdrop-1272 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1272 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1272 -j DROP inet6/filter/FORWARD -j limit-2214 inet6/filter/FORWARD -j logaccept-final-78 inet6/filter/INPUT -j limit-2214 inet6/filter/INPUT -j logaccept-final-78 inet6/filter/OUTPUT -j limit-2214 inet6/filter/OUTPUT -j logaccept-final-78 inet6/filter/limit-2214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1272 inet6/filter/limit-2214 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-78 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-78 -j ACCEPT inet6/filter/logdrop-1272 -j TEE --gateway fc00::2 inet6/filter/logdrop-1272 -j DROP Filter 2216 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2215 inet/filter/INPUT -j limit-2215 inet/filter/OUTPUT -j limit-2215 inet/filter/limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1273 inet/filter/limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1273 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1273 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1273 -j DROP inet6/filter/FORWARD -j limit-2215 inet6/filter/INPUT -j limit-2215 inet6/filter/OUTPUT -j limit-2215 inet6/filter/limit-2215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1273 inet6/filter/limit-2215 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1273 -j TEE --gateway fc00::2 inet6/filter/logdrop-1273 -j DROP Filter 2217 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2216 inet/filter/FORWARD -j logaccept-final-79 inet/filter/INPUT -j limit-2216 inet/filter/INPUT -j logaccept-final-79 inet/filter/OUTPUT -j limit-2216 inet/filter/OUTPUT -j logaccept-final-79 inet/filter/limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1274 inet/filter/limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-79 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-79 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-79 -j ACCEPT inet/filter/logdrop-1274 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1274 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1274 -j DROP inet6/filter/FORWARD -j limit-2216 inet6/filter/FORWARD -j logaccept-final-79 inet6/filter/INPUT -j limit-2216 inet6/filter/INPUT -j logaccept-final-79 inet6/filter/OUTPUT -j limit-2216 inet6/filter/OUTPUT -j logaccept-final-79 inet6/filter/limit-2216 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1274 inet6/filter/limit-2216 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-79 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-79 -j ACCEPT inet6/filter/logdrop-1274 -j TEE --gateway fc00::2 inet6/filter/logdrop-1274 -j DROP Filter 2218 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2217 inet/filter/INPUT -j limit-2217 inet/filter/OUTPUT -j limit-2217 inet/filter/limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1275 inet/filter/limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1275 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1275 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1275 -j DROP inet6/filter/FORWARD -j limit-2217 inet6/filter/INPUT -j limit-2217 inet6/filter/OUTPUT -j limit-2217 inet6/filter/limit-2217 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1275 inet6/filter/limit-2217 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1275 -j TEE --gateway fc00::2 inet6/filter/logdrop-1275 -j DROP Filter 2219 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2218 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2218 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2218 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1276 inet/filter/limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1276 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1276 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1276 -j DROP inet6/filter/FORWARD -j limit-2218 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2218 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2218 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2218 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1276 inet6/filter/limit-2218 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1276 -j TEE --gateway fc00::2 inet6/filter/logdrop-1276 -j DROP Filter 2220 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2219 inet/filter/INPUT -j limit-2219 inet/filter/OUTPUT -j limit-2219 inet/filter/limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1277 inet/filter/limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1277 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1277 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1277 -j DROP inet6/filter/FORWARD -j limit-2219 inet6/filter/INPUT -j limit-2219 inet6/filter/OUTPUT -j limit-2219 inet6/filter/limit-2219 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1277 inet6/filter/limit-2219 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1277 -j TEE --gateway fc00::2 inet6/filter/logdrop-1277 -j DROP Filter 2221 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2220 inet/filter/FORWARD -j logaccept-final-80 inet/filter/INPUT -j limit-2220 inet/filter/INPUT -j logaccept-final-80 inet/filter/OUTPUT -j limit-2220 inet/filter/OUTPUT -j logaccept-final-80 inet/filter/limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1278 inet/filter/limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-80 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-80 -j ACCEPT inet/filter/logdrop-1278 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1278 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1278 -j DROP inet6/filter/FORWARD -j limit-2220 inet6/filter/FORWARD -j logaccept-final-80 inet6/filter/INPUT -j limit-2220 inet6/filter/INPUT -j logaccept-final-80 inet6/filter/OUTPUT -j limit-2220 inet6/filter/OUTPUT -j logaccept-final-80 inet6/filter/limit-2220 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1278 inet6/filter/limit-2220 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-80 -j ACCEPT inet6/filter/logdrop-1278 -j TEE --gateway fc00::2 inet6/filter/logdrop-1278 -j DROP Filter 2222 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2221 inet/filter/INPUT -j limit-2221 inet/filter/OUTPUT -j limit-2221 inet/filter/limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1279 inet/filter/limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1279 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1279 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1279 -j DROP inet6/filter/FORWARD -j limit-2221 inet6/filter/INPUT -j limit-2221 inet6/filter/OUTPUT -j limit-2221 inet6/filter/limit-2221 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1279 inet6/filter/logdrop-1279 -j TEE --gateway fc00::2 inet6/filter/logdrop-1279 -j DROP Filter 2223 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2222 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2222 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2222 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 inet/filter/logdrop-1280 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1280 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1280 -j DROP inet6/filter/FORWARD -j limit-2222 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2222 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2222 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 inet6/filter/logdrop-1280 -j TEE --gateway fc00::2 inet6/filter/logdrop-1280 -j DROP Filter 2224 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2223 inet/filter/INPUT -j limit-2223 inet/filter/OUTPUT -j limit-2223 inet/filter/limit-2223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 inet/filter/logdrop-1281 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1281 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1281 -j DROP inet6/filter/FORWARD -j limit-2223 inet6/filter/INPUT -j limit-2223 inet6/filter/OUTPUT -j limit-2223 inet6/filter/limit-2223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 inet6/filter/logdrop-1281 -j TEE --gateway fc00::2 inet6/filter/logdrop-1281 -j DROP Filter 2225 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2224 inet/filter/FORWARD -j logaccept-final-81 inet/filter/INPUT -j limit-2224 inet/filter/INPUT -j logaccept-final-81 inet/filter/OUTPUT -j limit-2224 inet/filter/OUTPUT -j logaccept-final-81 inet/filter/limit-2224 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 inet/filter/logaccept-final-81 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-81 -j ACCEPT inet/filter/logdrop-1282 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1282 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1282 -j DROP inet6/filter/FORWARD -j limit-2224 inet6/filter/FORWARD -j logaccept-final-81 inet6/filter/INPUT -j limit-2224 inet6/filter/INPUT -j logaccept-final-81 inet6/filter/OUTPUT -j limit-2224 inet6/filter/OUTPUT -j logaccept-final-81 inet6/filter/limit-2224 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 inet6/filter/logaccept-final-81 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-81 -j ACCEPT inet6/filter/logdrop-1282 -j TEE --gateway fc00::2 inet6/filter/logdrop-1282 -j DROP Filter 2226 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2225 inet/filter/INPUT -j limit-2225 inet/filter/OUTPUT -j limit-2225 inet/filter/limit-2225 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 inet/filter/limit-2225 -m limit --limit 1/second -j LOG inet/filter/logdrop-1283 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1283 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1283 -j DROP inet6/filter/FORWARD -j limit-2225 inet6/filter/INPUT -j limit-2225 inet6/filter/OUTPUT -j limit-2225 inet6/filter/limit-2225 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 inet6/filter/limit-2225 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1283 -j TEE --gateway fc00::2 inet6/filter/logdrop-1283 -j DROP Filter 2227 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2226 inet/filter/FORWARD -j logaccept-final-82 inet/filter/INPUT -j limit-2226 inet/filter/INPUT -j logaccept-final-82 inet/filter/OUTPUT -j limit-2226 inet/filter/OUTPUT -j logaccept-final-82 inet/filter/limit-2226 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 inet/filter/logaccept-final-82 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-82 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-82 -j ACCEPT inet/filter/logdrop-1284 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1284 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1284 -j DROP inet6/filter/FORWARD -j limit-2226 inet6/filter/FORWARD -j logaccept-final-82 inet6/filter/INPUT -j limit-2226 inet6/filter/INPUT -j logaccept-final-82 inet6/filter/OUTPUT -j limit-2226 inet6/filter/OUTPUT -j logaccept-final-82 inet6/filter/limit-2226 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 inet6/filter/logaccept-final-82 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-82 -j ACCEPT inet6/filter/logdrop-1284 -j TEE --gateway fc00::2 inet6/filter/logdrop-1284 -j DROP Filter 2228 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2227 inet/filter/INPUT -j limit-2227 inet/filter/OUTPUT -j limit-2227 inet/filter/limit-2227 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 inet/filter/limit-2227 -j TEE --gateway 10.0.0.1 inet/filter/limit-2227 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1285 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1285 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1285 -j DROP inet6/filter/FORWARD -j limit-2227 inet6/filter/INPUT -j limit-2227 inet6/filter/OUTPUT -j limit-2227 inet6/filter/limit-2227 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 inet6/filter/limit-2227 -j TEE --gateway fc00::2 inet6/filter/logdrop-1285 -j TEE --gateway fc00::2 inet6/filter/logdrop-1285 -j DROP Filter 2229 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2228 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2228 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2228 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2228 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 inet/filter/logdrop-1286 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1286 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1286 -j DROP inet6/filter/FORWARD -j limit-2228 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2228 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2228 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2228 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 inet6/filter/logdrop-1286 -j TEE --gateway fc00::2 inet6/filter/logdrop-1286 -j DROP Filter 2230 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2229 inet/filter/INPUT -j limit-2229 inet/filter/OUTPUT -j limit-2229 inet/filter/limit-2229 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 inet/filter/logdrop-1287 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1287 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1287 -j DROP inet6/filter/FORWARD -j limit-2229 inet6/filter/INPUT -j limit-2229 inet6/filter/OUTPUT -j limit-2229 inet6/filter/limit-2229 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 inet6/filter/logdrop-1287 -j TEE --gateway fc00::2 inet6/filter/logdrop-1287 -j DROP Filter 2231 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2230 inet/filter/FORWARD -j logaccept-final-83 inet/filter/INPUT -j limit-2230 inet/filter/INPUT -j logaccept-final-83 inet/filter/OUTPUT -j limit-2230 inet/filter/OUTPUT -j logaccept-final-83 inet/filter/limit-2230 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 inet/filter/logaccept-final-83 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-83 -j ACCEPT inet/filter/logdrop-1288 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1288 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1288 -j DROP inet6/filter/FORWARD -j limit-2230 inet6/filter/FORWARD -j logaccept-final-83 inet6/filter/INPUT -j limit-2230 inet6/filter/INPUT -j logaccept-final-83 inet6/filter/OUTPUT -j limit-2230 inet6/filter/OUTPUT -j logaccept-final-83 inet6/filter/limit-2230 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 inet6/filter/logaccept-final-83 -j ACCEPT inet6/filter/logdrop-1288 -j TEE --gateway fc00::2 inet6/filter/logdrop-1288 -j DROP Filter 2232 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2231 inet/filter/INPUT -j limit-2231 inet/filter/OUTPUT -j limit-2231 inet/filter/limit-2231 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 inet/filter/limit-2231 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1289 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1289 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1289 -j DROP inet6/filter/FORWARD -j limit-2231 inet6/filter/INPUT -j limit-2231 inet6/filter/OUTPUT -j limit-2231 inet6/filter/limit-2231 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 inet6/filter/logdrop-1289 -j TEE --gateway fc00::2 inet6/filter/logdrop-1289 -j DROP Filter 2233 {"flow-limit":{"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2232 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2232 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2232 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2232 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2232 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2232 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2234 {"action":"pass","flow-limit":{"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2233 inet/filter/INPUT -j limit-2233 inet/filter/OUTPUT -j limit-2233 inet/filter/limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2233 inet6/filter/INPUT -j limit-2233 inet6/filter/OUTPUT -j limit-2233 inet6/filter/limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2235 {"flow-limit":{"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2234 inet/filter/FORWARD -j logaccept-final-84 inet/filter/INPUT -j limit-2234 inet/filter/INPUT -j logaccept-final-84 inet/filter/OUTPUT -j limit-2234 inet/filter/OUTPUT -j logaccept-final-84 inet/filter/limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-84 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-84 -j ACCEPT inet6/filter/FORWARD -j limit-2234 inet6/filter/FORWARD -j logaccept-final-84 inet6/filter/INPUT -j limit-2234 inet6/filter/INPUT -j logaccept-final-84 inet6/filter/OUTPUT -j limit-2234 inet6/filter/OUTPUT -j logaccept-final-84 inet6/filter/limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-84 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-84 -j ACCEPT Filter 2236 {"action":"pass","flow-limit":{"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2235 inet/filter/INPUT -j limit-2235 inet/filter/OUTPUT -j limit-2235 inet/filter/limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2235 inet6/filter/INPUT -j limit-2235 inet6/filter/OUTPUT -j limit-2235 inet6/filter/limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2237 {"flow-limit":{"log":"none"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2236 inet/filter/FORWARD -j logaccept-final-85 inet/filter/INPUT -j limit-2236 inet/filter/INPUT -j logaccept-final-85 inet/filter/OUTPUT -j limit-2236 inet/filter/OUTPUT -j logaccept-final-85 inet/filter/limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-85 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-85 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-85 -j ACCEPT inet6/filter/FORWARD -j limit-2236 inet6/filter/FORWARD -j logaccept-final-85 inet6/filter/INPUT -j limit-2236 inet6/filter/INPUT -j logaccept-final-85 inet6/filter/OUTPUT -j limit-2236 inet6/filter/OUTPUT -j logaccept-final-85 inet6/filter/limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-85 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-85 -j ACCEPT Filter 2238 {"action":"pass","flow-limit":{"log":"none"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2237 inet/filter/INPUT -j limit-2237 inet/filter/OUTPUT -j limit-2237 inet/filter/limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2237 inet6/filter/INPUT -j limit-2237 inet6/filter/OUTPUT -j limit-2237 inet6/filter/limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2239 {"flow-limit":{"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2238 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2238 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2238 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2238 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2238 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2238 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2240 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2239 inet/filter/INPUT -j limit-2239 inet/filter/OUTPUT -j limit-2239 inet/filter/limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2239 inet6/filter/INPUT -j limit-2239 inet6/filter/OUTPUT -j limit-2239 inet6/filter/limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2241 {"flow-limit":{"log":"none"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2240 inet/filter/FORWARD -j logaccept-final-86 inet/filter/INPUT -j limit-2240 inet/filter/INPUT -j logaccept-final-86 inet/filter/OUTPUT -j limit-2240 inet/filter/OUTPUT -j logaccept-final-86 inet/filter/limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-86 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-86 -j ACCEPT inet6/filter/FORWARD -j limit-2240 inet6/filter/FORWARD -j logaccept-final-86 inet6/filter/INPUT -j limit-2240 inet6/filter/INPUT -j logaccept-final-86 inet6/filter/OUTPUT -j limit-2240 inet6/filter/OUTPUT -j logaccept-final-86 inet6/filter/limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-86 -j ACCEPT Filter 2242 {"action":"pass","flow-limit":{"log":"none"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2241 inet/filter/INPUT -j limit-2241 inet/filter/OUTPUT -j limit-2241 inet/filter/limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2241 inet6/filter/INPUT -j limit-2241 inet6/filter/OUTPUT -j limit-2241 inet6/filter/limit-2241 -m recent --name limit-2241 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 2243 {"flow-limit":{"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2242 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2242 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2242 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2242 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2242 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2242 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2244 {"action":"pass","flow-limit":{"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2243 inet/filter/INPUT -j limit-2243 inet/filter/OUTPUT -j limit-2243 inet/filter/limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2243 inet6/filter/INPUT -j limit-2243 inet6/filter/OUTPUT -j limit-2243 inet6/filter/limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2245 {"flow-limit":{"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2244 inet/filter/FORWARD -j logaccept-final-87 inet/filter/INPUT -j limit-2244 inet/filter/INPUT -j logaccept-final-87 inet/filter/OUTPUT -j limit-2244 inet/filter/OUTPUT -j logaccept-final-87 inet/filter/limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-87 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-87 -j ACCEPT inet6/filter/FORWARD -j limit-2244 inet6/filter/FORWARD -j logaccept-final-87 inet6/filter/INPUT -j limit-2244 inet6/filter/INPUT -j logaccept-final-87 inet6/filter/OUTPUT -j limit-2244 inet6/filter/OUTPUT -j logaccept-final-87 inet6/filter/limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-87 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-87 -j ACCEPT Filter 2246 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2245 inet/filter/INPUT -j limit-2245 inet/filter/OUTPUT -j limit-2245 inet/filter/limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2245 inet6/filter/INPUT -j limit-2245 inet6/filter/OUTPUT -j limit-2245 inet6/filter/limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2247 {"flow-limit":{"log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2246 inet/filter/FORWARD -j logaccept-final-88 inet/filter/INPUT -j limit-2246 inet/filter/INPUT -j logaccept-final-88 inet/filter/OUTPUT -j limit-2246 inet/filter/OUTPUT -j logaccept-final-88 inet/filter/limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-88 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-88 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-88 -j ACCEPT inet6/filter/FORWARD -j limit-2246 inet6/filter/FORWARD -j logaccept-final-88 inet6/filter/INPUT -j limit-2246 inet6/filter/INPUT -j logaccept-final-88 inet6/filter/OUTPUT -j limit-2246 inet6/filter/OUTPUT -j logaccept-final-88 inet6/filter/limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-88 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-88 -j ACCEPT Filter 2248 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2247 inet/filter/INPUT -j limit-2247 inet/filter/OUTPUT -j limit-2247 inet/filter/limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2247 inet6/filter/INPUT -j limit-2247 inet6/filter/OUTPUT -j limit-2247 inet6/filter/limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2249 {"flow-limit":{"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2248 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2248 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2248 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2248 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2248 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2248 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2250 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2249 inet/filter/INPUT -j limit-2249 inet/filter/OUTPUT -j limit-2249 inet/filter/limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2249 inet6/filter/INPUT -j limit-2249 inet6/filter/OUTPUT -j limit-2249 inet6/filter/limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2251 {"flow-limit":{"log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2250 inet/filter/FORWARD -j logaccept-final-89 inet/filter/INPUT -j limit-2250 inet/filter/INPUT -j logaccept-final-89 inet/filter/OUTPUT -j limit-2250 inet/filter/OUTPUT -j logaccept-final-89 inet/filter/limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-89 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-89 -j ACCEPT inet6/filter/FORWARD -j limit-2250 inet6/filter/FORWARD -j logaccept-final-89 inet6/filter/INPUT -j limit-2250 inet6/filter/INPUT -j logaccept-final-89 inet6/filter/OUTPUT -j limit-2250 inet6/filter/OUTPUT -j logaccept-final-89 inet6/filter/limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-89 -j ACCEPT Filter 2252 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2251 inet/filter/INPUT -j limit-2251 inet/filter/OUTPUT -j limit-2251 inet/filter/limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2251 inet6/filter/INPUT -j limit-2251 inet6/filter/OUTPUT -j limit-2251 inet6/filter/limit-2251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 2253 {"flow-limit":{"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2252 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2252 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2252 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2252 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2252 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2252 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2252 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2254 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2253 inet/filter/INPUT -j limit-2253 inet/filter/OUTPUT -j limit-2253 inet/filter/limit-2253 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2253 inet6/filter/INPUT -j limit-2253 inet6/filter/OUTPUT -j limit-2253 inet6/filter/limit-2253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2255 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2254 inet/filter/FORWARD -j logaccept-final-90 inet/filter/INPUT -j limit-2254 inet/filter/INPUT -j logaccept-final-90 inet/filter/OUTPUT -j limit-2254 inet/filter/OUTPUT -j logaccept-final-90 inet/filter/limit-2254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-90 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-90 -j ACCEPT inet6/filter/FORWARD -j limit-2254 inet6/filter/FORWARD -j logaccept-final-90 inet6/filter/INPUT -j limit-2254 inet6/filter/INPUT -j logaccept-final-90 inet6/filter/OUTPUT -j limit-2254 inet6/filter/OUTPUT -j logaccept-final-90 inet6/filter/limit-2254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-90 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-90 -j ACCEPT Filter 2256 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2255 inet/filter/INPUT -j limit-2255 inet/filter/OUTPUT -j limit-2255 inet/filter/limit-2255 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2255 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2255 inet6/filter/INPUT -j limit-2255 inet6/filter/OUTPUT -j limit-2255 inet6/filter/limit-2255 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2255 -m limit --limit 1/second -j LOG Filter 2257 {"flow-limit":{"log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2256 inet/filter/FORWARD -j logaccept-final-91 inet/filter/INPUT -j limit-2256 inet/filter/INPUT -j logaccept-final-91 inet/filter/OUTPUT -j limit-2256 inet/filter/OUTPUT -j logaccept-final-91 inet/filter/limit-2256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-91 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-91 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-91 -j ACCEPT inet6/filter/FORWARD -j limit-2256 inet6/filter/FORWARD -j logaccept-final-91 inet6/filter/INPUT -j limit-2256 inet6/filter/INPUT -j logaccept-final-91 inet6/filter/OUTPUT -j limit-2256 inet6/filter/OUTPUT -j logaccept-final-91 inet6/filter/limit-2256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-91 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-91 -j ACCEPT Filter 2258 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2257 inet/filter/INPUT -j limit-2257 inet/filter/OUTPUT -j limit-2257 inet/filter/limit-2257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2257 -j TEE --gateway 10.0.0.1 inet/filter/limit-2257 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2257 inet6/filter/INPUT -j limit-2257 inet6/filter/OUTPUT -j limit-2257 inet6/filter/limit-2257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2257 -j TEE --gateway fc00::2 Filter 2259 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2258 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2258 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2258 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2258 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2258 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2258 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2260 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2259 inet/filter/INPUT -j limit-2259 inet/filter/OUTPUT -j limit-2259 inet/filter/limit-2259 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2259 inet6/filter/INPUT -j limit-2259 inet6/filter/OUTPUT -j limit-2259 inet6/filter/limit-2259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2261 {"flow-limit":{"log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2260 inet/filter/FORWARD -j logaccept-final-92 inet/filter/INPUT -j limit-2260 inet/filter/INPUT -j logaccept-final-92 inet/filter/OUTPUT -j limit-2260 inet/filter/OUTPUT -j logaccept-final-92 inet/filter/limit-2260 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-92 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-92 -j ACCEPT inet6/filter/FORWARD -j limit-2260 inet6/filter/FORWARD -j logaccept-final-92 inet6/filter/INPUT -j limit-2260 inet6/filter/INPUT -j logaccept-final-92 inet6/filter/OUTPUT -j limit-2260 inet6/filter/OUTPUT -j logaccept-final-92 inet6/filter/limit-2260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-92 -j ACCEPT Filter 2262 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2261 inet/filter/INPUT -j limit-2261 inet/filter/OUTPUT -j limit-2261 inet/filter/limit-2261 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2261 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2261 inet6/filter/INPUT -j limit-2261 inet6/filter/OUTPUT -j limit-2261 inet6/filter/limit-2261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2263 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2262 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2262 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2262 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2262 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2262 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2262 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2264 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2263 inet/filter/INPUT -j limit-2263 inet/filter/OUTPUT -j limit-2263 inet/filter/limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2263 inet6/filter/INPUT -j limit-2263 inet6/filter/OUTPUT -j limit-2263 inet6/filter/limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2265 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2264 inet/filter/FORWARD -j logaccept-final-93 inet/filter/INPUT -j limit-2264 inet/filter/INPUT -j logaccept-final-93 inet/filter/OUTPUT -j limit-2264 inet/filter/OUTPUT -j logaccept-final-93 inet/filter/limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-93 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-93 -j ACCEPT inet6/filter/FORWARD -j limit-2264 inet6/filter/FORWARD -j logaccept-final-93 inet6/filter/INPUT -j limit-2264 inet6/filter/INPUT -j logaccept-final-93 inet6/filter/OUTPUT -j limit-2264 inet6/filter/OUTPUT -j logaccept-final-93 inet6/filter/limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-93 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-93 -j ACCEPT Filter 2266 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2265 inet/filter/INPUT -j limit-2265 inet/filter/OUTPUT -j limit-2265 inet/filter/limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2265 inet6/filter/INPUT -j limit-2265 inet6/filter/OUTPUT -j limit-2265 inet6/filter/limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2267 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2266 inet/filter/FORWARD -j logaccept-final-94 inet/filter/INPUT -j limit-2266 inet/filter/INPUT -j logaccept-final-94 inet/filter/OUTPUT -j limit-2266 inet/filter/OUTPUT -j logaccept-final-94 inet/filter/limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-94 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-94 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-94 -j ACCEPT inet6/filter/FORWARD -j limit-2266 inet6/filter/FORWARD -j logaccept-final-94 inet6/filter/INPUT -j limit-2266 inet6/filter/INPUT -j logaccept-final-94 inet6/filter/OUTPUT -j limit-2266 inet6/filter/OUTPUT -j logaccept-final-94 inet6/filter/limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-94 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-94 -j ACCEPT Filter 2268 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2267 inet/filter/INPUT -j limit-2267 inet/filter/OUTPUT -j limit-2267 inet/filter/limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2267 inet6/filter/INPUT -j limit-2267 inet6/filter/OUTPUT -j limit-2267 inet6/filter/limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2269 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2268 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2268 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2268 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2268 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2268 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2268 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2270 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2269 inet/filter/INPUT -j limit-2269 inet/filter/OUTPUT -j limit-2269 inet/filter/limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2269 inet6/filter/INPUT -j limit-2269 inet6/filter/OUTPUT -j limit-2269 inet6/filter/limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2271 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2270 inet/filter/FORWARD -j logaccept-final-95 inet/filter/INPUT -j limit-2270 inet/filter/INPUT -j logaccept-final-95 inet/filter/OUTPUT -j limit-2270 inet/filter/OUTPUT -j logaccept-final-95 inet/filter/limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-95 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-95 -j ACCEPT inet6/filter/FORWARD -j limit-2270 inet6/filter/FORWARD -j logaccept-final-95 inet6/filter/INPUT -j limit-2270 inet6/filter/INPUT -j logaccept-final-95 inet6/filter/OUTPUT -j limit-2270 inet6/filter/OUTPUT -j logaccept-final-95 inet6/filter/limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-95 -j ACCEPT Filter 2272 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2271 inet/filter/INPUT -j limit-2271 inet/filter/OUTPUT -j limit-2271 inet/filter/limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2271 inet6/filter/INPUT -j limit-2271 inet6/filter/OUTPUT -j limit-2271 inet6/filter/limit-2271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP Filter 2273 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2272 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2272 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2272 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2272 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2272 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2272 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2272 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2274 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2273 inet/filter/INPUT -j limit-2273 inet/filter/OUTPUT -j limit-2273 inet/filter/limit-2273 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2273 inet6/filter/INPUT -j limit-2273 inet6/filter/OUTPUT -j limit-2273 inet6/filter/limit-2273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2275 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2274 inet/filter/FORWARD -j logaccept-final-96 inet/filter/INPUT -j limit-2274 inet/filter/INPUT -j logaccept-final-96 inet/filter/OUTPUT -j limit-2274 inet/filter/OUTPUT -j logaccept-final-96 inet/filter/limit-2274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-96 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-96 -j ACCEPT inet6/filter/FORWARD -j limit-2274 inet6/filter/FORWARD -j logaccept-final-96 inet6/filter/INPUT -j limit-2274 inet6/filter/INPUT -j logaccept-final-96 inet6/filter/OUTPUT -j limit-2274 inet6/filter/OUTPUT -j logaccept-final-96 inet6/filter/limit-2274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-96 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-96 -j ACCEPT Filter 2276 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2275 inet/filter/INPUT -j limit-2275 inet/filter/OUTPUT -j limit-2275 inet/filter/limit-2275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2275 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2275 inet6/filter/INPUT -j limit-2275 inet6/filter/OUTPUT -j limit-2275 inet6/filter/limit-2275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2275 -m limit --limit 1/second -j LOG Filter 2277 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2276 inet/filter/FORWARD -j logaccept-final-97 inet/filter/INPUT -j limit-2276 inet/filter/INPUT -j logaccept-final-97 inet/filter/OUTPUT -j limit-2276 inet/filter/OUTPUT -j logaccept-final-97 inet/filter/limit-2276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-97 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-97 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-97 -j ACCEPT inet6/filter/FORWARD -j limit-2276 inet6/filter/FORWARD -j logaccept-final-97 inet6/filter/INPUT -j limit-2276 inet6/filter/INPUT -j logaccept-final-97 inet6/filter/OUTPUT -j limit-2276 inet6/filter/OUTPUT -j logaccept-final-97 inet6/filter/limit-2276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-97 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-97 -j ACCEPT Filter 2278 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2277 inet/filter/INPUT -j limit-2277 inet/filter/OUTPUT -j limit-2277 inet/filter/limit-2277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2277 -j TEE --gateway 10.0.0.1 inet/filter/limit-2277 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2277 inet6/filter/INPUT -j limit-2277 inet6/filter/OUTPUT -j limit-2277 inet6/filter/limit-2277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2277 -j TEE --gateway fc00::2 Filter 2279 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2278 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2278 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2278 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2278 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2278 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2278 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2280 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2279 inet/filter/INPUT -j limit-2279 inet/filter/OUTPUT -j limit-2279 inet/filter/limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2279 inet6/filter/INPUT -j limit-2279 inet6/filter/OUTPUT -j limit-2279 inet6/filter/limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2281 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2280 inet/filter/FORWARD -j logaccept-final-98 inet/filter/INPUT -j limit-2280 inet/filter/INPUT -j logaccept-final-98 inet/filter/OUTPUT -j limit-2280 inet/filter/OUTPUT -j logaccept-final-98 inet/filter/limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-98 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-98 -j ACCEPT inet6/filter/FORWARD -j limit-2280 inet6/filter/FORWARD -j logaccept-final-98 inet6/filter/INPUT -j limit-2280 inet6/filter/INPUT -j logaccept-final-98 inet6/filter/OUTPUT -j limit-2280 inet6/filter/OUTPUT -j logaccept-final-98 inet6/filter/limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-98 -j ACCEPT Filter 2282 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2281 inet/filter/INPUT -j limit-2281 inet/filter/OUTPUT -j limit-2281 inet/filter/limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2281 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2281 inet6/filter/INPUT -j limit-2281 inet6/filter/OUTPUT -j limit-2281 inet6/filter/limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2283 {"flow-limit":{"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2282 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2282 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2282 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2282 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2282 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2282 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2282 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2282 -m recent --name user:C --rsource --mask fe00:: --set Filter 2284 {"action":"pass","flow-limit":{"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2283 inet/filter/INPUT -j limit-2283 inet/filter/OUTPUT -j limit-2283 inet/filter/limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2283 inet6/filter/INPUT -j limit-2283 inet6/filter/OUTPUT -j limit-2283 inet6/filter/limit-2283 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2283 -m recent --name user:C --rsource --mask fe00:: --set Filter 2285 {"flow-limit":{"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2284 inet/filter/FORWARD -j logaccept-final-99 inet/filter/INPUT -j limit-2284 inet/filter/INPUT -j logaccept-final-99 inet/filter/OUTPUT -j limit-2284 inet/filter/OUTPUT -j logaccept-final-99 inet/filter/limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-99 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-99 -j ACCEPT inet6/filter/FORWARD -j limit-2284 inet6/filter/FORWARD -j logaccept-final-99 inet6/filter/INPUT -j limit-2284 inet6/filter/INPUT -j logaccept-final-99 inet6/filter/OUTPUT -j limit-2284 inet6/filter/OUTPUT -j logaccept-final-99 inet6/filter/limit-2284 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2284 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-99 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-99 -j ACCEPT Filter 2286 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2285 inet/filter/INPUT -j limit-2285 inet/filter/OUTPUT -j limit-2285 inet/filter/limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2285 inet6/filter/INPUT -j limit-2285 inet6/filter/OUTPUT -j limit-2285 inet6/filter/limit-2285 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2285 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2287 {"flow-limit":{"log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2286 inet/filter/FORWARD -j logaccept-final-100 inet/filter/INPUT -j limit-2286 inet/filter/INPUT -j logaccept-final-100 inet/filter/OUTPUT -j limit-2286 inet/filter/OUTPUT -j logaccept-final-100 inet/filter/limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-100 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-100 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-100 -j ACCEPT inet6/filter/FORWARD -j limit-2286 inet6/filter/FORWARD -j logaccept-final-100 inet6/filter/INPUT -j limit-2286 inet6/filter/INPUT -j logaccept-final-100 inet6/filter/OUTPUT -j limit-2286 inet6/filter/OUTPUT -j logaccept-final-100 inet6/filter/limit-2286 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2286 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-100 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-100 -j ACCEPT Filter 2288 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2287 inet/filter/INPUT -j limit-2287 inet/filter/OUTPUT -j limit-2287 inet/filter/limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2287 inet6/filter/INPUT -j limit-2287 inet6/filter/OUTPUT -j limit-2287 inet6/filter/limit-2287 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2287 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2289 {"flow-limit":{"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2288 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2288 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2288 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2288 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2288 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2288 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2288 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2288 -m recent --name user:C --rsource --mask fe00:: --set Filter 2290 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2289 inet/filter/INPUT -j limit-2289 inet/filter/OUTPUT -j limit-2289 inet/filter/limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2289 inet6/filter/INPUT -j limit-2289 inet6/filter/OUTPUT -j limit-2289 inet6/filter/limit-2289 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2289 -m recent --name user:C --rsource --mask fe00:: --set Filter 2291 {"flow-limit":{"log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2290 inet/filter/FORWARD -j logaccept-final-101 inet/filter/INPUT -j limit-2290 inet/filter/INPUT -j logaccept-final-101 inet/filter/OUTPUT -j limit-2290 inet/filter/OUTPUT -j logaccept-final-101 inet/filter/limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-101 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-101 -j ACCEPT inet6/filter/FORWARD -j limit-2290 inet6/filter/FORWARD -j logaccept-final-101 inet6/filter/INPUT -j limit-2290 inet6/filter/INPUT -j logaccept-final-101 inet6/filter/OUTPUT -j limit-2290 inet6/filter/OUTPUT -j logaccept-final-101 inet6/filter/limit-2290 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2290 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-101 -j ACCEPT Filter 2292 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2291 inet/filter/INPUT -j limit-2291 inet/filter/OUTPUT -j limit-2291 inet/filter/limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2291 inet6/filter/INPUT -j limit-2291 inet6/filter/OUTPUT -j limit-2291 inet6/filter/limit-2291 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 2293 {"flow-limit":{"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2292 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2292 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2292 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2292 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2292 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2292 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2292 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2292 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2294 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2293 inet/filter/INPUT -j limit-2293 inet/filter/OUTPUT -j limit-2293 inet/filter/limit-2293 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2293 inet6/filter/INPUT -j limit-2293 inet6/filter/OUTPUT -j limit-2293 inet6/filter/limit-2293 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2295 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2294 inet/filter/FORWARD -j logaccept-final-102 inet/filter/INPUT -j limit-2294 inet/filter/INPUT -j logaccept-final-102 inet/filter/OUTPUT -j limit-2294 inet/filter/OUTPUT -j logaccept-final-102 inet/filter/limit-2294 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-102 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-102 -j ACCEPT inet6/filter/FORWARD -j limit-2294 inet6/filter/FORWARD -j logaccept-final-102 inet6/filter/INPUT -j limit-2294 inet6/filter/INPUT -j logaccept-final-102 inet6/filter/OUTPUT -j limit-2294 inet6/filter/OUTPUT -j logaccept-final-102 inet6/filter/limit-2294 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-102 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-102 -j ACCEPT Filter 2296 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2295 inet/filter/INPUT -j limit-2295 inet/filter/OUTPUT -j limit-2295 inet/filter/limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2295 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2295 inet6/filter/INPUT -j limit-2295 inet6/filter/OUTPUT -j limit-2295 inet6/filter/limit-2295 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2295 -m limit --limit 1/second -j LOG Filter 2297 {"flow-limit":{"log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2296 inet/filter/FORWARD -j logaccept-final-103 inet/filter/INPUT -j limit-2296 inet/filter/INPUT -j logaccept-final-103 inet/filter/OUTPUT -j limit-2296 inet/filter/OUTPUT -j logaccept-final-103 inet/filter/limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-103 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-103 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-103 -j ACCEPT inet6/filter/FORWARD -j limit-2296 inet6/filter/FORWARD -j logaccept-final-103 inet6/filter/INPUT -j limit-2296 inet6/filter/INPUT -j logaccept-final-103 inet6/filter/OUTPUT -j limit-2296 inet6/filter/OUTPUT -j logaccept-final-103 inet6/filter/limit-2296 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-103 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-103 -j ACCEPT Filter 2298 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2297 inet/filter/INPUT -j limit-2297 inet/filter/OUTPUT -j limit-2297 inet/filter/limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2297 -j TEE --gateway 10.0.0.1 inet/filter/limit-2297 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2297 inet6/filter/INPUT -j limit-2297 inet6/filter/OUTPUT -j limit-2297 inet6/filter/limit-2297 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2297 -j TEE --gateway fc00::2 Filter 2299 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2298 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2298 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2298 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2298 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2298 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2298 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2298 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2300 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2299 inet/filter/INPUT -j limit-2299 inet/filter/OUTPUT -j limit-2299 inet/filter/limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2299 inet6/filter/INPUT -j limit-2299 inet6/filter/OUTPUT -j limit-2299 inet6/filter/limit-2299 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2301 {"flow-limit":{"log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2300 inet/filter/FORWARD -j logaccept-final-104 inet/filter/INPUT -j limit-2300 inet/filter/INPUT -j logaccept-final-104 inet/filter/OUTPUT -j limit-2300 inet/filter/OUTPUT -j logaccept-final-104 inet/filter/limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-104 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-104 -j ACCEPT inet6/filter/FORWARD -j limit-2300 inet6/filter/FORWARD -j logaccept-final-104 inet6/filter/INPUT -j limit-2300 inet6/filter/INPUT -j logaccept-final-104 inet6/filter/OUTPUT -j limit-2300 inet6/filter/OUTPUT -j logaccept-final-104 inet6/filter/limit-2300 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-104 -j ACCEPT Filter 2302 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2301 inet/filter/INPUT -j limit-2301 inet/filter/OUTPUT -j limit-2301 inet/filter/limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2301 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2301 inet6/filter/INPUT -j limit-2301 inet6/filter/OUTPUT -j limit-2301 inet6/filter/limit-2301 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2303 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2302 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2302 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2302 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2302 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2302 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2302 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2302 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2302 -m recent --name user:C --rdest --mask fe00:: --set Filter 2304 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2303 inet/filter/INPUT -j limit-2303 inet/filter/OUTPUT -j limit-2303 inet/filter/limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2303 inet6/filter/INPUT -j limit-2303 inet6/filter/OUTPUT -j limit-2303 inet6/filter/limit-2303 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2303 -m recent --name user:C --rdest --mask fe00:: --set Filter 2305 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2304 inet/filter/FORWARD -j logaccept-final-105 inet/filter/INPUT -j limit-2304 inet/filter/INPUT -j logaccept-final-105 inet/filter/OUTPUT -j limit-2304 inet/filter/OUTPUT -j logaccept-final-105 inet/filter/limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-105 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-105 -j ACCEPT inet6/filter/FORWARD -j limit-2304 inet6/filter/FORWARD -j logaccept-final-105 inet6/filter/INPUT -j limit-2304 inet6/filter/INPUT -j logaccept-final-105 inet6/filter/OUTPUT -j limit-2304 inet6/filter/OUTPUT -j logaccept-final-105 inet6/filter/limit-2304 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2304 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-105 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-105 -j ACCEPT Filter 2306 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2305 inet/filter/INPUT -j limit-2305 inet/filter/OUTPUT -j limit-2305 inet/filter/limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2305 inet6/filter/INPUT -j limit-2305 inet6/filter/OUTPUT -j limit-2305 inet6/filter/limit-2305 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2305 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2307 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2306 inet/filter/FORWARD -j logaccept-final-106 inet/filter/INPUT -j limit-2306 inet/filter/INPUT -j logaccept-final-106 inet/filter/OUTPUT -j limit-2306 inet/filter/OUTPUT -j logaccept-final-106 inet/filter/limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-106 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-106 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-106 -j ACCEPT inet6/filter/FORWARD -j limit-2306 inet6/filter/FORWARD -j logaccept-final-106 inet6/filter/INPUT -j limit-2306 inet6/filter/INPUT -j logaccept-final-106 inet6/filter/OUTPUT -j limit-2306 inet6/filter/OUTPUT -j logaccept-final-106 inet6/filter/limit-2306 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2306 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-106 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-106 -j ACCEPT Filter 2308 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2307 inet/filter/INPUT -j limit-2307 inet/filter/OUTPUT -j limit-2307 inet/filter/limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2307 inet6/filter/INPUT -j limit-2307 inet6/filter/OUTPUT -j limit-2307 inet6/filter/limit-2307 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2307 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2309 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2308 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2308 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2308 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2308 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2308 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2308 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2308 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2308 -m recent --name user:C --rdest --mask fe00:: --set Filter 2310 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2309 inet/filter/INPUT -j limit-2309 inet/filter/OUTPUT -j limit-2309 inet/filter/limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2309 inet6/filter/INPUT -j limit-2309 inet6/filter/OUTPUT -j limit-2309 inet6/filter/limit-2309 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2309 -m recent --name user:C --rdest --mask fe00:: --set Filter 2311 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2310 inet/filter/FORWARD -j logaccept-final-107 inet/filter/INPUT -j limit-2310 inet/filter/INPUT -j logaccept-final-107 inet/filter/OUTPUT -j limit-2310 inet/filter/OUTPUT -j logaccept-final-107 inet/filter/limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-107 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-107 -j ACCEPT inet6/filter/FORWARD -j limit-2310 inet6/filter/FORWARD -j logaccept-final-107 inet6/filter/INPUT -j limit-2310 inet6/filter/INPUT -j logaccept-final-107 inet6/filter/OUTPUT -j limit-2310 inet6/filter/OUTPUT -j logaccept-final-107 inet6/filter/limit-2310 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2310 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-107 -j ACCEPT Filter 2312 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2311 inet/filter/INPUT -j limit-2311 inet/filter/OUTPUT -j limit-2311 inet/filter/limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2311 inet6/filter/INPUT -j limit-2311 inet6/filter/OUTPUT -j limit-2311 inet6/filter/limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP Filter 2313 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2312 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2312 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2312 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2312 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2312 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2312 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2312 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2314 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2313 inet/filter/INPUT -j limit-2313 inet/filter/OUTPUT -j limit-2313 inet/filter/limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2313 inet6/filter/INPUT -j limit-2313 inet6/filter/OUTPUT -j limit-2313 inet6/filter/limit-2313 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2315 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2314 inet/filter/FORWARD -j logaccept-final-108 inet/filter/INPUT -j limit-2314 inet/filter/INPUT -j logaccept-final-108 inet/filter/OUTPUT -j limit-2314 inet/filter/OUTPUT -j logaccept-final-108 inet/filter/limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-108 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-108 -j ACCEPT inet6/filter/FORWARD -j limit-2314 inet6/filter/FORWARD -j logaccept-final-108 inet6/filter/INPUT -j limit-2314 inet6/filter/INPUT -j logaccept-final-108 inet6/filter/OUTPUT -j limit-2314 inet6/filter/OUTPUT -j logaccept-final-108 inet6/filter/limit-2314 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-108 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-108 -j ACCEPT Filter 2316 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2315 inet/filter/INPUT -j limit-2315 inet/filter/OUTPUT -j limit-2315 inet/filter/limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2315 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2315 inet6/filter/INPUT -j limit-2315 inet6/filter/OUTPUT -j limit-2315 inet6/filter/limit-2315 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2315 -m limit --limit 1/second -j LOG Filter 2317 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2316 inet/filter/FORWARD -j logaccept-final-109 inet/filter/INPUT -j limit-2316 inet/filter/INPUT -j logaccept-final-109 inet/filter/OUTPUT -j limit-2316 inet/filter/OUTPUT -j logaccept-final-109 inet/filter/limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-109 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-109 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-109 -j ACCEPT inet6/filter/FORWARD -j limit-2316 inet6/filter/FORWARD -j logaccept-final-109 inet6/filter/INPUT -j limit-2316 inet6/filter/INPUT -j logaccept-final-109 inet6/filter/OUTPUT -j limit-2316 inet6/filter/OUTPUT -j logaccept-final-109 inet6/filter/limit-2316 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-109 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-109 -j ACCEPT Filter 2318 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2317 inet/filter/INPUT -j limit-2317 inet/filter/OUTPUT -j limit-2317 inet/filter/limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2317 -j TEE --gateway 10.0.0.1 inet/filter/limit-2317 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2317 inet6/filter/INPUT -j limit-2317 inet6/filter/OUTPUT -j limit-2317 inet6/filter/limit-2317 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-2317 -j TEE --gateway fc00::2 Filter 2319 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2318 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2318 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2318 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2318 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2318 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2318 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2318 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2320 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2319 inet/filter/INPUT -j limit-2319 inet/filter/OUTPUT -j limit-2319 inet/filter/limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/FORWARD -j limit-2319 inet6/filter/INPUT -j limit-2319 inet6/filter/OUTPUT -j limit-2319 inet6/filter/limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2321 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2320 inet/filter/FORWARD -j logaccept-final-110 inet/filter/INPUT -j limit-2320 inet/filter/INPUT -j logaccept-final-110 inet/filter/OUTPUT -j limit-2320 inet/filter/OUTPUT -j logaccept-final-110 inet/filter/limit-2320 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/logaccept-final-110 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-110 -j ACCEPT inet6/filter/FORWARD -j limit-2320 inet6/filter/FORWARD -j logaccept-final-110 inet6/filter/INPUT -j limit-2320 inet6/filter/INPUT -j logaccept-final-110 inet6/filter/OUTPUT -j limit-2320 inet6/filter/OUTPUT -j logaccept-final-110 inet6/filter/limit-2320 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/logaccept-final-110 -j ACCEPT Filter 2322 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2321 inet/filter/INPUT -j limit-2321 inet/filter/OUTPUT -j limit-2321 inet/filter/limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-2321 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2321 inet6/filter/INPUT -j limit-2321 inet6/filter/OUTPUT -j limit-2321 inet6/filter/limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP Filter 2323 {"flow-limit":{"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2322 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2322 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2322 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1290 inet/filter/limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1290 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1290 -j DROP inet6/filter/FORWARD -j limit-2322 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2322 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2322 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1290 inet6/filter/limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1290 -j DROP Filter 2324 {"action":"pass","flow-limit":{"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2323 inet/filter/INPUT -j limit-2323 inet/filter/OUTPUT -j limit-2323 inet/filter/limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1291 inet/filter/limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1291 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1291 -j DROP inet6/filter/FORWARD -j limit-2323 inet6/filter/INPUT -j limit-2323 inet6/filter/OUTPUT -j limit-2323 inet6/filter/limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1291 inet6/filter/limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1291 -j DROP Filter 2325 {"flow-limit":{"log":"ulog"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2324 inet/filter/FORWARD -j logaccept-final-111 inet/filter/INPUT -j limit-2324 inet/filter/INPUT -j logaccept-final-111 inet/filter/OUTPUT -j limit-2324 inet/filter/OUTPUT -j logaccept-final-111 inet/filter/limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1292 inet/filter/limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-111 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-111 -j ACCEPT inet/filter/logdrop-1292 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1292 -j DROP inet6/filter/FORWARD -j limit-2324 inet6/filter/FORWARD -j logaccept-final-111 inet6/filter/INPUT -j limit-2324 inet6/filter/INPUT -j logaccept-final-111 inet6/filter/OUTPUT -j limit-2324 inet6/filter/OUTPUT -j logaccept-final-111 inet6/filter/limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1292 inet6/filter/limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-111 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-111 -j ACCEPT inet6/filter/logdrop-1292 -j DROP Filter 2326 {"action":"pass","flow-limit":{"log":"ulog"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2325 inet/filter/INPUT -j limit-2325 inet/filter/OUTPUT -j limit-2325 inet/filter/limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1293 inet/filter/limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1293 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1293 -j DROP inet6/filter/FORWARD -j limit-2325 inet6/filter/INPUT -j limit-2325 inet6/filter/OUTPUT -j limit-2325 inet6/filter/limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1293 inet6/filter/limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1293 -j DROP Filter 2327 {"flow-limit":{"log":"ulog"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2326 inet/filter/FORWARD -j logaccept-final-112 inet/filter/INPUT -j limit-2326 inet/filter/INPUT -j logaccept-final-112 inet/filter/OUTPUT -j limit-2326 inet/filter/OUTPUT -j logaccept-final-112 inet/filter/limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1294 inet/filter/limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-112 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-112 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-112 -j ACCEPT inet/filter/logdrop-1294 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1294 -j DROP inet6/filter/FORWARD -j limit-2326 inet6/filter/FORWARD -j logaccept-final-112 inet6/filter/INPUT -j limit-2326 inet6/filter/INPUT -j logaccept-final-112 inet6/filter/OUTPUT -j limit-2326 inet6/filter/OUTPUT -j logaccept-final-112 inet6/filter/limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1294 inet6/filter/limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-112 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-112 -j ACCEPT inet6/filter/logdrop-1294 -j DROP Filter 2328 {"action":"pass","flow-limit":{"log":"ulog"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2327 inet/filter/INPUT -j limit-2327 inet/filter/OUTPUT -j limit-2327 inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1295 inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1295 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1295 -j DROP inet6/filter/FORWARD -j limit-2327 inet6/filter/INPUT -j limit-2327 inet6/filter/OUTPUT -j limit-2327 inet6/filter/limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1295 inet6/filter/limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1295 -j DROP Filter 2329 {"flow-limit":{"log":"ulog"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2328 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2328 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2328 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1296 inet/filter/limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1296 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1296 -j DROP inet6/filter/FORWARD -j limit-2328 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2328 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2328 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1296 inet6/filter/limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1296 -j DROP Filter 2330 {"action":"pass","flow-limit":{"log":"ulog"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2329 inet/filter/INPUT -j limit-2329 inet/filter/OUTPUT -j limit-2329 inet/filter/limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1297 inet/filter/limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1297 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1297 -j DROP inet6/filter/FORWARD -j limit-2329 inet6/filter/INPUT -j limit-2329 inet6/filter/OUTPUT -j limit-2329 inet6/filter/limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1297 inet6/filter/limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1297 -j DROP Filter 2331 {"flow-limit":{"log":"ulog"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2330 inet/filter/FORWARD -j logaccept-final-113 inet/filter/INPUT -j limit-2330 inet/filter/INPUT -j logaccept-final-113 inet/filter/OUTPUT -j limit-2330 inet/filter/OUTPUT -j logaccept-final-113 inet/filter/limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1298 inet/filter/limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-113 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-113 -j ACCEPT inet/filter/logdrop-1298 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1298 -j DROP inet6/filter/FORWARD -j limit-2330 inet6/filter/FORWARD -j logaccept-final-113 inet6/filter/INPUT -j limit-2330 inet6/filter/INPUT -j logaccept-final-113 inet6/filter/OUTPUT -j limit-2330 inet6/filter/OUTPUT -j logaccept-final-113 inet6/filter/limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1298 inet6/filter/limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-113 -j ACCEPT inet6/filter/logdrop-1298 -j DROP Filter 2332 {"action":"pass","flow-limit":{"log":"ulog"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2331 inet/filter/INPUT -j limit-2331 inet/filter/OUTPUT -j limit-2331 inet/filter/limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1299 inet/filter/limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1299 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1299 -j DROP inet6/filter/FORWARD -j limit-2331 inet6/filter/INPUT -j limit-2331 inet6/filter/OUTPUT -j limit-2331 inet6/filter/limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1299 inet6/filter/logdrop-1299 -j DROP Filter 2333 {"flow-limit":{"log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2332 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2332 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2332 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1300 inet/filter/limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1300 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1300 -j DROP inet6/filter/FORWARD -j limit-2332 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2332 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2332 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1300 inet6/filter/limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1300 -j DROP Filter 2334 {"action":"pass","flow-limit":{"log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2333 inet/filter/INPUT -j limit-2333 inet/filter/OUTPUT -j limit-2333 inet/filter/limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1301 inet/filter/limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1301 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1301 -j DROP inet6/filter/FORWARD -j limit-2333 inet6/filter/INPUT -j limit-2333 inet6/filter/OUTPUT -j limit-2333 inet6/filter/limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1301 inet6/filter/limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1301 -j DROP Filter 2335 {"flow-limit":{"log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2334 inet/filter/FORWARD -j logaccept-final-114 inet/filter/INPUT -j limit-2334 inet/filter/INPUT -j logaccept-final-114 inet/filter/OUTPUT -j limit-2334 inet/filter/OUTPUT -j logaccept-final-114 inet/filter/limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1302 inet/filter/limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-114 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-114 -j ACCEPT inet/filter/logdrop-1302 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1302 -j DROP inet6/filter/FORWARD -j limit-2334 inet6/filter/FORWARD -j logaccept-final-114 inet6/filter/INPUT -j limit-2334 inet6/filter/INPUT -j logaccept-final-114 inet6/filter/OUTPUT -j limit-2334 inet6/filter/OUTPUT -j logaccept-final-114 inet6/filter/limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1302 inet6/filter/limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-114 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-114 -j ACCEPT inet6/filter/logdrop-1302 -j DROP Filter 2336 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2335 inet/filter/INPUT -j limit-2335 inet/filter/OUTPUT -j limit-2335 inet/filter/limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1303 inet/filter/limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1303 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1303 -j DROP inet6/filter/FORWARD -j limit-2335 inet6/filter/INPUT -j limit-2335 inet6/filter/OUTPUT -j limit-2335 inet6/filter/limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1303 inet6/filter/limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1303 -j DROP Filter 2337 {"flow-limit":{"log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2336 inet/filter/FORWARD -j logaccept-final-115 inet/filter/INPUT -j limit-2336 inet/filter/INPUT -j logaccept-final-115 inet/filter/OUTPUT -j limit-2336 inet/filter/OUTPUT -j logaccept-final-115 inet/filter/limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1304 inet/filter/limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-115 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-115 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-115 -j ACCEPT inet/filter/logdrop-1304 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1304 -j DROP inet6/filter/FORWARD -j limit-2336 inet6/filter/FORWARD -j logaccept-final-115 inet6/filter/INPUT -j limit-2336 inet6/filter/INPUT -j logaccept-final-115 inet6/filter/OUTPUT -j limit-2336 inet6/filter/OUTPUT -j logaccept-final-115 inet6/filter/limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1304 inet6/filter/limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-115 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-115 -j ACCEPT inet6/filter/logdrop-1304 -j DROP Filter 2338 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2337 inet/filter/INPUT -j limit-2337 inet/filter/OUTPUT -j limit-2337 inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1305 inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1305 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1305 -j DROP inet6/filter/FORWARD -j limit-2337 inet6/filter/INPUT -j limit-2337 inet6/filter/OUTPUT -j limit-2337 inet6/filter/limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1305 inet6/filter/limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1305 -j DROP Filter 2339 {"flow-limit":{"log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2338 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2338 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2338 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1306 inet/filter/limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1306 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1306 -j DROP inet6/filter/FORWARD -j limit-2338 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2338 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2338 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1306 inet6/filter/limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1306 -j DROP Filter 2340 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2339 inet/filter/INPUT -j limit-2339 inet/filter/OUTPUT -j limit-2339 inet/filter/limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1307 inet/filter/limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1307 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1307 -j DROP inet6/filter/FORWARD -j limit-2339 inet6/filter/INPUT -j limit-2339 inet6/filter/OUTPUT -j limit-2339 inet6/filter/limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1307 inet6/filter/limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1307 -j DROP Filter 2341 {"flow-limit":{"log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2340 inet/filter/FORWARD -j logaccept-final-116 inet/filter/INPUT -j limit-2340 inet/filter/INPUT -j logaccept-final-116 inet/filter/OUTPUT -j limit-2340 inet/filter/OUTPUT -j logaccept-final-116 inet/filter/limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1308 inet/filter/limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-116 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-116 -j ACCEPT inet/filter/logdrop-1308 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1308 -j DROP inet6/filter/FORWARD -j limit-2340 inet6/filter/FORWARD -j logaccept-final-116 inet6/filter/INPUT -j limit-2340 inet6/filter/INPUT -j logaccept-final-116 inet6/filter/OUTPUT -j limit-2340 inet6/filter/OUTPUT -j logaccept-final-116 inet6/filter/limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1308 inet6/filter/limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-116 -j ACCEPT inet6/filter/logdrop-1308 -j DROP Filter 2342 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2341 inet/filter/INPUT -j limit-2341 inet/filter/OUTPUT -j limit-2341 inet/filter/limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1309 inet/filter/limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1309 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1309 -j DROP inet6/filter/FORWARD -j limit-2341 inet6/filter/INPUT -j limit-2341 inet6/filter/OUTPUT -j limit-2341 inet6/filter/limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1309 inet6/filter/logdrop-1309 -j DROP Filter 2343 {"flow-limit":{"log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2342 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2342 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2342 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 inet/filter/logdrop-1310 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1310 -j DROP inet6/filter/FORWARD -j limit-2342 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2342 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2342 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 inet6/filter/logdrop-1310 -j DROP Filter 2344 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2343 inet/filter/INPUT -j limit-2343 inet/filter/OUTPUT -j limit-2343 inet/filter/limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 inet/filter/logdrop-1311 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1311 -j DROP inet6/filter/FORWARD -j limit-2343 inet6/filter/INPUT -j limit-2343 inet6/filter/OUTPUT -j limit-2343 inet6/filter/limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 inet6/filter/logdrop-1311 -j DROP Filter 2345 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2344 inet/filter/FORWARD -j logaccept-final-117 inet/filter/INPUT -j limit-2344 inet/filter/INPUT -j logaccept-final-117 inet/filter/OUTPUT -j limit-2344 inet/filter/OUTPUT -j logaccept-final-117 inet/filter/limit-2344 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 inet/filter/logaccept-final-117 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-117 -j ACCEPT inet/filter/logdrop-1312 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1312 -j DROP inet6/filter/FORWARD -j limit-2344 inet6/filter/FORWARD -j logaccept-final-117 inet6/filter/INPUT -j limit-2344 inet6/filter/INPUT -j logaccept-final-117 inet6/filter/OUTPUT -j limit-2344 inet6/filter/OUTPUT -j logaccept-final-117 inet6/filter/limit-2344 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 inet6/filter/logaccept-final-117 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-117 -j ACCEPT inet6/filter/logdrop-1312 -j DROP Filter 2346 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2345 inet/filter/INPUT -j limit-2345 inet/filter/OUTPUT -j limit-2345 inet/filter/limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 inet/filter/limit-2345 -m limit --limit 1/second -j LOG inet/filter/logdrop-1313 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1313 -j DROP inet6/filter/FORWARD -j limit-2345 inet6/filter/INPUT -j limit-2345 inet6/filter/OUTPUT -j limit-2345 inet6/filter/limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 inet6/filter/limit-2345 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1313 -j DROP Filter 2347 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2346 inet/filter/FORWARD -j logaccept-final-118 inet/filter/INPUT -j limit-2346 inet/filter/INPUT -j logaccept-final-118 inet/filter/OUTPUT -j limit-2346 inet/filter/OUTPUT -j logaccept-final-118 inet/filter/limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 inet/filter/logaccept-final-118 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-118 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-118 -j ACCEPT inet/filter/logdrop-1314 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1314 -j DROP inet6/filter/FORWARD -j limit-2346 inet6/filter/FORWARD -j logaccept-final-118 inet6/filter/INPUT -j limit-2346 inet6/filter/INPUT -j logaccept-final-118 inet6/filter/OUTPUT -j limit-2346 inet6/filter/OUTPUT -j logaccept-final-118 inet6/filter/limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 inet6/filter/logaccept-final-118 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-118 -j ACCEPT inet6/filter/logdrop-1314 -j DROP Filter 2348 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2347 inet/filter/INPUT -j limit-2347 inet/filter/OUTPUT -j limit-2347 inet/filter/limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 inet/filter/limit-2347 -j TEE --gateway 10.0.0.1 inet/filter/limit-2347 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1315 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1315 -j DROP inet6/filter/FORWARD -j limit-2347 inet6/filter/INPUT -j limit-2347 inet6/filter/OUTPUT -j limit-2347 inet6/filter/limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 inet6/filter/limit-2347 -j TEE --gateway fc00::2 inet6/filter/logdrop-1315 -j DROP Filter 2349 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2348 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2348 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2348 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2348 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 inet/filter/logdrop-1316 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1316 -j DROP inet6/filter/FORWARD -j limit-2348 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2348 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2348 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 inet6/filter/logdrop-1316 -j DROP Filter 2350 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2349 inet/filter/INPUT -j limit-2349 inet/filter/OUTPUT -j limit-2349 inet/filter/limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 inet/filter/logdrop-1317 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1317 -j DROP inet6/filter/FORWARD -j limit-2349 inet6/filter/INPUT -j limit-2349 inet6/filter/OUTPUT -j limit-2349 inet6/filter/limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 inet6/filter/logdrop-1317 -j DROP Filter 2351 {"flow-limit":{"log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2350 inet/filter/FORWARD -j logaccept-final-119 inet/filter/INPUT -j limit-2350 inet/filter/INPUT -j logaccept-final-119 inet/filter/OUTPUT -j limit-2350 inet/filter/OUTPUT -j logaccept-final-119 inet/filter/limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 inet/filter/logaccept-final-119 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-119 -j ACCEPT inet/filter/logdrop-1318 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1318 -j DROP inet6/filter/FORWARD -j limit-2350 inet6/filter/FORWARD -j logaccept-final-119 inet6/filter/INPUT -j limit-2350 inet6/filter/INPUT -j logaccept-final-119 inet6/filter/OUTPUT -j limit-2350 inet6/filter/OUTPUT -j logaccept-final-119 inet6/filter/limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 inet6/filter/logaccept-final-119 -j ACCEPT inet6/filter/logdrop-1318 -j DROP Filter 2352 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2351 inet/filter/INPUT -j limit-2351 inet/filter/OUTPUT -j limit-2351 inet/filter/limit-2351 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 inet/filter/limit-2351 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1319 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1319 -j DROP inet6/filter/FORWARD -j limit-2351 inet6/filter/INPUT -j limit-2351 inet6/filter/OUTPUT -j limit-2351 inet6/filter/limit-2351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 inet6/filter/logdrop-1319 -j DROP Filter 2353 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2352 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2352 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2352 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1320 inet/filter/limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1320 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1320 -j DROP inet6/filter/FORWARD -j limit-2352 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2352 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2352 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1320 inet6/filter/limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1320 -j DROP Filter 2354 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2353 inet/filter/INPUT -j limit-2353 inet/filter/OUTPUT -j limit-2353 inet/filter/limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1321 inet/filter/limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1321 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1321 -j DROP inet6/filter/FORWARD -j limit-2353 inet6/filter/INPUT -j limit-2353 inet6/filter/OUTPUT -j limit-2353 inet6/filter/limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1321 inet6/filter/limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1321 -j DROP Filter 2355 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2354 inet/filter/FORWARD -j logaccept-final-120 inet/filter/INPUT -j limit-2354 inet/filter/INPUT -j logaccept-final-120 inet/filter/OUTPUT -j limit-2354 inet/filter/OUTPUT -j logaccept-final-120 inet/filter/limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1322 inet/filter/limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-120 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-120 -j ACCEPT inet/filter/logdrop-1322 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1322 -j DROP inet6/filter/FORWARD -j limit-2354 inet6/filter/FORWARD -j logaccept-final-120 inet6/filter/INPUT -j limit-2354 inet6/filter/INPUT -j logaccept-final-120 inet6/filter/OUTPUT -j limit-2354 inet6/filter/OUTPUT -j logaccept-final-120 inet6/filter/limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1322 inet6/filter/limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-120 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-120 -j ACCEPT inet6/filter/logdrop-1322 -j DROP Filter 2356 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2355 inet/filter/INPUT -j limit-2355 inet/filter/OUTPUT -j limit-2355 inet/filter/limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1323 inet/filter/limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1323 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1323 -j DROP inet6/filter/FORWARD -j limit-2355 inet6/filter/INPUT -j limit-2355 inet6/filter/OUTPUT -j limit-2355 inet6/filter/limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1323 inet6/filter/limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1323 -j DROP Filter 2357 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2356 inet/filter/FORWARD -j logaccept-final-121 inet/filter/INPUT -j limit-2356 inet/filter/INPUT -j logaccept-final-121 inet/filter/OUTPUT -j limit-2356 inet/filter/OUTPUT -j logaccept-final-121 inet/filter/limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1324 inet/filter/limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-121 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-121 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-121 -j ACCEPT inet/filter/logdrop-1324 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1324 -j DROP inet6/filter/FORWARD -j limit-2356 inet6/filter/FORWARD -j logaccept-final-121 inet6/filter/INPUT -j limit-2356 inet6/filter/INPUT -j logaccept-final-121 inet6/filter/OUTPUT -j limit-2356 inet6/filter/OUTPUT -j logaccept-final-121 inet6/filter/limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1324 inet6/filter/limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-121 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-121 -j ACCEPT inet6/filter/logdrop-1324 -j DROP Filter 2358 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2357 inet/filter/INPUT -j limit-2357 inet/filter/OUTPUT -j limit-2357 inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1325 inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1325 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1325 -j DROP inet6/filter/FORWARD -j limit-2357 inet6/filter/INPUT -j limit-2357 inet6/filter/OUTPUT -j limit-2357 inet6/filter/limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1325 inet6/filter/limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1325 -j DROP Filter 2359 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2358 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2358 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2358 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1326 inet/filter/limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1326 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1326 -j DROP inet6/filter/FORWARD -j limit-2358 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2358 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2358 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1326 inet6/filter/limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1326 -j DROP Filter 2360 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2359 inet/filter/INPUT -j limit-2359 inet/filter/OUTPUT -j limit-2359 inet/filter/limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1327 inet/filter/limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1327 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1327 -j DROP inet6/filter/FORWARD -j limit-2359 inet6/filter/INPUT -j limit-2359 inet6/filter/OUTPUT -j limit-2359 inet6/filter/limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1327 inet6/filter/limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1327 -j DROP Filter 2361 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2360 inet/filter/FORWARD -j logaccept-final-122 inet/filter/INPUT -j limit-2360 inet/filter/INPUT -j logaccept-final-122 inet/filter/OUTPUT -j limit-2360 inet/filter/OUTPUT -j logaccept-final-122 inet/filter/limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1328 inet/filter/limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-122 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-122 -j ACCEPT inet/filter/logdrop-1328 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1328 -j DROP inet6/filter/FORWARD -j limit-2360 inet6/filter/FORWARD -j logaccept-final-122 inet6/filter/INPUT -j limit-2360 inet6/filter/INPUT -j logaccept-final-122 inet6/filter/OUTPUT -j limit-2360 inet6/filter/OUTPUT -j logaccept-final-122 inet6/filter/limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1328 inet6/filter/limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-122 -j ACCEPT inet6/filter/logdrop-1328 -j DROP Filter 2362 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2361 inet/filter/INPUT -j limit-2361 inet/filter/OUTPUT -j limit-2361 inet/filter/limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1329 inet/filter/limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1329 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1329 -j DROP inet6/filter/FORWARD -j limit-2361 inet6/filter/INPUT -j limit-2361 inet6/filter/OUTPUT -j limit-2361 inet6/filter/limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1329 inet6/filter/logdrop-1329 -j DROP Filter 2363 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2362 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2362 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2362 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 inet/filter/logdrop-1330 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1330 -j DROP inet6/filter/FORWARD -j limit-2362 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2362 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2362 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 inet6/filter/logdrop-1330 -j DROP Filter 2364 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2363 inet/filter/INPUT -j limit-2363 inet/filter/OUTPUT -j limit-2363 inet/filter/limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 inet/filter/logdrop-1331 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1331 -j DROP inet6/filter/FORWARD -j limit-2363 inet6/filter/INPUT -j limit-2363 inet6/filter/OUTPUT -j limit-2363 inet6/filter/limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 inet6/filter/logdrop-1331 -j DROP Filter 2365 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2364 inet/filter/FORWARD -j logaccept-final-123 inet/filter/INPUT -j limit-2364 inet/filter/INPUT -j logaccept-final-123 inet/filter/OUTPUT -j limit-2364 inet/filter/OUTPUT -j logaccept-final-123 inet/filter/limit-2364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 inet/filter/logaccept-final-123 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-123 -j ACCEPT inet/filter/logdrop-1332 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1332 -j DROP inet6/filter/FORWARD -j limit-2364 inet6/filter/FORWARD -j logaccept-final-123 inet6/filter/INPUT -j limit-2364 inet6/filter/INPUT -j logaccept-final-123 inet6/filter/OUTPUT -j limit-2364 inet6/filter/OUTPUT -j logaccept-final-123 inet6/filter/limit-2364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 inet6/filter/logaccept-final-123 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-123 -j ACCEPT inet6/filter/logdrop-1332 -j DROP Filter 2366 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2365 inet/filter/INPUT -j limit-2365 inet/filter/OUTPUT -j limit-2365 inet/filter/limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 inet/filter/limit-2365 -m limit --limit 1/second -j LOG inet/filter/logdrop-1333 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1333 -j DROP inet6/filter/FORWARD -j limit-2365 inet6/filter/INPUT -j limit-2365 inet6/filter/OUTPUT -j limit-2365 inet6/filter/limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 inet6/filter/limit-2365 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1333 -j DROP Filter 2367 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2366 inet/filter/FORWARD -j logaccept-final-124 inet/filter/INPUT -j limit-2366 inet/filter/INPUT -j logaccept-final-124 inet/filter/OUTPUT -j limit-2366 inet/filter/OUTPUT -j logaccept-final-124 inet/filter/limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 inet/filter/logaccept-final-124 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-124 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-124 -j ACCEPT inet/filter/logdrop-1334 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1334 -j DROP inet6/filter/FORWARD -j limit-2366 inet6/filter/FORWARD -j logaccept-final-124 inet6/filter/INPUT -j limit-2366 inet6/filter/INPUT -j logaccept-final-124 inet6/filter/OUTPUT -j limit-2366 inet6/filter/OUTPUT -j logaccept-final-124 inet6/filter/limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 inet6/filter/logaccept-final-124 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-124 -j ACCEPT inet6/filter/logdrop-1334 -j DROP Filter 2368 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2367 inet/filter/INPUT -j limit-2367 inet/filter/OUTPUT -j limit-2367 inet/filter/limit-2367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 inet/filter/limit-2367 -j TEE --gateway 10.0.0.1 inet/filter/limit-2367 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1335 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1335 -j DROP inet6/filter/FORWARD -j limit-2367 inet6/filter/INPUT -j limit-2367 inet6/filter/OUTPUT -j limit-2367 inet6/filter/limit-2367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 inet6/filter/limit-2367 -j TEE --gateway fc00::2 inet6/filter/logdrop-1335 -j DROP Filter 2369 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2368 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2368 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2368 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 inet/filter/logdrop-1336 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1336 -j DROP inet6/filter/FORWARD -j limit-2368 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2368 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2368 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 inet6/filter/logdrop-1336 -j DROP Filter 2370 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2369 inet/filter/INPUT -j limit-2369 inet/filter/OUTPUT -j limit-2369 inet/filter/limit-2369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 inet/filter/logdrop-1337 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1337 -j DROP inet6/filter/FORWARD -j limit-2369 inet6/filter/INPUT -j limit-2369 inet6/filter/OUTPUT -j limit-2369 inet6/filter/limit-2369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 inet6/filter/logdrop-1337 -j DROP Filter 2371 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2370 inet/filter/FORWARD -j logaccept-final-125 inet/filter/INPUT -j limit-2370 inet/filter/INPUT -j logaccept-final-125 inet/filter/OUTPUT -j limit-2370 inet/filter/OUTPUT -j logaccept-final-125 inet/filter/limit-2370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 inet/filter/logaccept-final-125 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-125 -j ACCEPT inet/filter/logdrop-1338 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1338 -j DROP inet6/filter/FORWARD -j limit-2370 inet6/filter/FORWARD -j logaccept-final-125 inet6/filter/INPUT -j limit-2370 inet6/filter/INPUT -j logaccept-final-125 inet6/filter/OUTPUT -j limit-2370 inet6/filter/OUTPUT -j logaccept-final-125 inet6/filter/limit-2370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 inet6/filter/logaccept-final-125 -j ACCEPT inet6/filter/logdrop-1338 -j DROP Filter 2372 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2371 inet/filter/INPUT -j limit-2371 inet/filter/OUTPUT -j limit-2371 inet/filter/limit-2371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 inet/filter/limit-2371 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1339 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1339 -j DROP inet6/filter/FORWARD -j limit-2371 inet6/filter/INPUT -j limit-2371 inet6/filter/OUTPUT -j limit-2371 inet6/filter/limit-2371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 inet6/filter/logdrop-1339 -j DROP Filter 2373 {"flow-limit":{"log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2372 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2372 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2372 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1340 inet/filter/limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1340 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1340 -j DROP inet6/filter/FORWARD -j limit-2372 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2372 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2372 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1340 inet6/filter/limit-2372 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1340 -j DROP Filter 2374 {"action":"pass","flow-limit":{"log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2373 inet/filter/INPUT -j limit-2373 inet/filter/OUTPUT -j limit-2373 inet/filter/limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1341 inet/filter/limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1341 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1341 -j DROP inet6/filter/FORWARD -j limit-2373 inet6/filter/INPUT -j limit-2373 inet6/filter/OUTPUT -j limit-2373 inet6/filter/limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1341 inet6/filter/limit-2373 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1341 -j DROP Filter 2375 {"flow-limit":{"log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2374 inet/filter/FORWARD -j logaccept-final-126 inet/filter/INPUT -j limit-2374 inet/filter/INPUT -j logaccept-final-126 inet/filter/OUTPUT -j limit-2374 inet/filter/OUTPUT -j logaccept-final-126 inet/filter/limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1342 inet/filter/limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-126 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-126 -j ACCEPT inet/filter/logdrop-1342 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1342 -j DROP inet6/filter/FORWARD -j limit-2374 inet6/filter/FORWARD -j logaccept-final-126 inet6/filter/INPUT -j limit-2374 inet6/filter/INPUT -j logaccept-final-126 inet6/filter/OUTPUT -j limit-2374 inet6/filter/OUTPUT -j logaccept-final-126 inet6/filter/limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1342 inet6/filter/limit-2374 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-126 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-126 -j ACCEPT inet6/filter/logdrop-1342 -j DROP Filter 2376 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2375 inet/filter/INPUT -j limit-2375 inet/filter/OUTPUT -j limit-2375 inet/filter/limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1343 inet/filter/limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1343 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1343 -j DROP inet6/filter/FORWARD -j limit-2375 inet6/filter/INPUT -j limit-2375 inet6/filter/OUTPUT -j limit-2375 inet6/filter/limit-2375 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1343 inet6/filter/limit-2375 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1343 -j DROP Filter 2377 {"flow-limit":{"log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2376 inet/filter/FORWARD -j logaccept-final-127 inet/filter/INPUT -j limit-2376 inet/filter/INPUT -j logaccept-final-127 inet/filter/OUTPUT -j limit-2376 inet/filter/OUTPUT -j logaccept-final-127 inet/filter/limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1344 inet/filter/limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-127 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-127 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-127 -j ACCEPT inet/filter/logdrop-1344 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1344 -j DROP inet6/filter/FORWARD -j limit-2376 inet6/filter/FORWARD -j logaccept-final-127 inet6/filter/INPUT -j limit-2376 inet6/filter/INPUT -j logaccept-final-127 inet6/filter/OUTPUT -j limit-2376 inet6/filter/OUTPUT -j logaccept-final-127 inet6/filter/limit-2376 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1344 inet6/filter/limit-2376 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-127 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-127 -j ACCEPT inet6/filter/logdrop-1344 -j DROP Filter 2378 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2377 inet/filter/INPUT -j limit-2377 inet/filter/OUTPUT -j limit-2377 inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1345 inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1345 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1345 -j DROP inet6/filter/FORWARD -j limit-2377 inet6/filter/INPUT -j limit-2377 inet6/filter/OUTPUT -j limit-2377 inet6/filter/limit-2377 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1345 inet6/filter/limit-2377 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1345 -j DROP Filter 2379 {"flow-limit":{"log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2378 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2378 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2378 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1346 inet/filter/limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1346 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1346 -j DROP inet6/filter/FORWARD -j limit-2378 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2378 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2378 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1346 inet6/filter/limit-2378 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1346 -j DROP Filter 2380 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2379 inet/filter/INPUT -j limit-2379 inet/filter/OUTPUT -j limit-2379 inet/filter/limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1347 inet/filter/limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1347 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1347 -j DROP inet6/filter/FORWARD -j limit-2379 inet6/filter/INPUT -j limit-2379 inet6/filter/OUTPUT -j limit-2379 inet6/filter/limit-2379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1347 inet6/filter/limit-2379 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1347 -j DROP Filter 2381 {"flow-limit":{"log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2380 inet/filter/FORWARD -j logaccept-final-128 inet/filter/INPUT -j limit-2380 inet/filter/INPUT -j logaccept-final-128 inet/filter/OUTPUT -j limit-2380 inet/filter/OUTPUT -j logaccept-final-128 inet/filter/limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1348 inet/filter/limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-128 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-128 -j ACCEPT inet/filter/logdrop-1348 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1348 -j DROP inet6/filter/FORWARD -j limit-2380 inet6/filter/FORWARD -j logaccept-final-128 inet6/filter/INPUT -j limit-2380 inet6/filter/INPUT -j logaccept-final-128 inet6/filter/OUTPUT -j limit-2380 inet6/filter/OUTPUT -j logaccept-final-128 inet6/filter/limit-2380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1348 inet6/filter/limit-2380 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-128 -j ACCEPT inet6/filter/logdrop-1348 -j DROP Filter 2382 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2381 inet/filter/INPUT -j limit-2381 inet/filter/OUTPUT -j limit-2381 inet/filter/limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1349 inet/filter/limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1349 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1349 -j DROP inet6/filter/FORWARD -j limit-2381 inet6/filter/INPUT -j limit-2381 inet6/filter/OUTPUT -j limit-2381 inet6/filter/limit-2381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1349 inet6/filter/logdrop-1349 -j DROP Filter 2383 {"flow-limit":{"log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2382 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2382 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2382 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 inet/filter/logdrop-1350 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1350 -j DROP inet6/filter/FORWARD -j limit-2382 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2382 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2382 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 inet6/filter/logdrop-1350 -j DROP Filter 2384 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2383 inet/filter/INPUT -j limit-2383 inet/filter/OUTPUT -j limit-2383 inet/filter/limit-2383 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 inet/filter/logdrop-1351 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1351 -j DROP inet6/filter/FORWARD -j limit-2383 inet6/filter/INPUT -j limit-2383 inet6/filter/OUTPUT -j limit-2383 inet6/filter/limit-2383 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 inet6/filter/logdrop-1351 -j DROP Filter 2385 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2384 inet/filter/FORWARD -j logaccept-final-129 inet/filter/INPUT -j limit-2384 inet/filter/INPUT -j logaccept-final-129 inet/filter/OUTPUT -j limit-2384 inet/filter/OUTPUT -j logaccept-final-129 inet/filter/limit-2384 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 inet/filter/logaccept-final-129 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-129 -j ACCEPT inet/filter/logdrop-1352 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1352 -j DROP inet6/filter/FORWARD -j limit-2384 inet6/filter/FORWARD -j logaccept-final-129 inet6/filter/INPUT -j limit-2384 inet6/filter/INPUT -j logaccept-final-129 inet6/filter/OUTPUT -j limit-2384 inet6/filter/OUTPUT -j logaccept-final-129 inet6/filter/limit-2384 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 inet6/filter/logaccept-final-129 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-129 -j ACCEPT inet6/filter/logdrop-1352 -j DROP Filter 2386 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2385 inet/filter/INPUT -j limit-2385 inet/filter/OUTPUT -j limit-2385 inet/filter/limit-2385 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 inet/filter/limit-2385 -m limit --limit 1/second -j LOG inet/filter/logdrop-1353 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1353 -j DROP inet6/filter/FORWARD -j limit-2385 inet6/filter/INPUT -j limit-2385 inet6/filter/OUTPUT -j limit-2385 inet6/filter/limit-2385 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 inet6/filter/limit-2385 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1353 -j DROP Filter 2387 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2386 inet/filter/FORWARD -j logaccept-final-130 inet/filter/INPUT -j limit-2386 inet/filter/INPUT -j logaccept-final-130 inet/filter/OUTPUT -j limit-2386 inet/filter/OUTPUT -j logaccept-final-130 inet/filter/limit-2386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 inet/filter/logaccept-final-130 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-130 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-130 -j ACCEPT inet/filter/logdrop-1354 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1354 -j DROP inet6/filter/FORWARD -j limit-2386 inet6/filter/FORWARD -j logaccept-final-130 inet6/filter/INPUT -j limit-2386 inet6/filter/INPUT -j logaccept-final-130 inet6/filter/OUTPUT -j limit-2386 inet6/filter/OUTPUT -j logaccept-final-130 inet6/filter/limit-2386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 inet6/filter/logaccept-final-130 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-130 -j ACCEPT inet6/filter/logdrop-1354 -j DROP Filter 2388 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2387 inet/filter/INPUT -j limit-2387 inet/filter/OUTPUT -j limit-2387 inet/filter/limit-2387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 inet/filter/limit-2387 -j TEE --gateway 10.0.0.1 inet/filter/limit-2387 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1355 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1355 -j DROP inet6/filter/FORWARD -j limit-2387 inet6/filter/INPUT -j limit-2387 inet6/filter/OUTPUT -j limit-2387 inet6/filter/limit-2387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 inet6/filter/limit-2387 -j TEE --gateway fc00::2 inet6/filter/logdrop-1355 -j DROP Filter 2389 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2388 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2388 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2388 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 inet/filter/logdrop-1356 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1356 -j DROP inet6/filter/FORWARD -j limit-2388 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2388 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2388 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 inet6/filter/logdrop-1356 -j DROP Filter 2390 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2389 inet/filter/INPUT -j limit-2389 inet/filter/OUTPUT -j limit-2389 inet/filter/limit-2389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 inet/filter/logdrop-1357 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1357 -j DROP inet6/filter/FORWARD -j limit-2389 inet6/filter/INPUT -j limit-2389 inet6/filter/OUTPUT -j limit-2389 inet6/filter/limit-2389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 inet6/filter/logdrop-1357 -j DROP Filter 2391 {"flow-limit":{"log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2390 inet/filter/FORWARD -j logaccept-final-131 inet/filter/INPUT -j limit-2390 inet/filter/INPUT -j logaccept-final-131 inet/filter/OUTPUT -j limit-2390 inet/filter/OUTPUT -j logaccept-final-131 inet/filter/limit-2390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 inet/filter/logaccept-final-131 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-131 -j ACCEPT inet/filter/logdrop-1358 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1358 -j DROP inet6/filter/FORWARD -j limit-2390 inet6/filter/FORWARD -j logaccept-final-131 inet6/filter/INPUT -j limit-2390 inet6/filter/INPUT -j logaccept-final-131 inet6/filter/OUTPUT -j limit-2390 inet6/filter/OUTPUT -j logaccept-final-131 inet6/filter/limit-2390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 inet6/filter/logaccept-final-131 -j ACCEPT inet6/filter/logdrop-1358 -j DROP Filter 2392 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2391 inet/filter/INPUT -j limit-2391 inet/filter/OUTPUT -j limit-2391 inet/filter/limit-2391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 inet/filter/limit-2391 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1359 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1359 -j DROP inet6/filter/FORWARD -j limit-2391 inet6/filter/INPUT -j limit-2391 inet6/filter/OUTPUT -j limit-2391 inet6/filter/limit-2391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 inet6/filter/logdrop-1359 -j DROP Filter 2393 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2392 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2392 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2392 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1360 inet/filter/limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1360 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1360 -j DROP inet6/filter/FORWARD -j limit-2392 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2392 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2392 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1360 inet6/filter/limit-2392 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1360 -j DROP Filter 2394 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2393 inet/filter/INPUT -j limit-2393 inet/filter/OUTPUT -j limit-2393 inet/filter/limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1361 inet/filter/limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1361 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1361 -j DROP inet6/filter/FORWARD -j limit-2393 inet6/filter/INPUT -j limit-2393 inet6/filter/OUTPUT -j limit-2393 inet6/filter/limit-2393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1361 inet6/filter/limit-2393 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1361 -j DROP Filter 2395 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2394 inet/filter/FORWARD -j logaccept-final-132 inet/filter/INPUT -j limit-2394 inet/filter/INPUT -j logaccept-final-132 inet/filter/OUTPUT -j limit-2394 inet/filter/OUTPUT -j logaccept-final-132 inet/filter/limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1362 inet/filter/limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-132 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-132 -j ACCEPT inet/filter/logdrop-1362 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1362 -j DROP inet6/filter/FORWARD -j limit-2394 inet6/filter/FORWARD -j logaccept-final-132 inet6/filter/INPUT -j limit-2394 inet6/filter/INPUT -j logaccept-final-132 inet6/filter/OUTPUT -j limit-2394 inet6/filter/OUTPUT -j logaccept-final-132 inet6/filter/limit-2394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1362 inet6/filter/limit-2394 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-132 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-132 -j ACCEPT inet6/filter/logdrop-1362 -j DROP Filter 2396 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2395 inet/filter/INPUT -j limit-2395 inet/filter/OUTPUT -j limit-2395 inet/filter/limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1363 inet/filter/limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1363 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1363 -j DROP inet6/filter/FORWARD -j limit-2395 inet6/filter/INPUT -j limit-2395 inet6/filter/OUTPUT -j limit-2395 inet6/filter/limit-2395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1363 inet6/filter/limit-2395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1363 -j DROP Filter 2397 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2396 inet/filter/FORWARD -j logaccept-final-133 inet/filter/INPUT -j limit-2396 inet/filter/INPUT -j logaccept-final-133 inet/filter/OUTPUT -j limit-2396 inet/filter/OUTPUT -j logaccept-final-133 inet/filter/limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1364 inet/filter/limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-133 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-133 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-133 -j ACCEPT inet/filter/logdrop-1364 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1364 -j DROP inet6/filter/FORWARD -j limit-2396 inet6/filter/FORWARD -j logaccept-final-133 inet6/filter/INPUT -j limit-2396 inet6/filter/INPUT -j logaccept-final-133 inet6/filter/OUTPUT -j limit-2396 inet6/filter/OUTPUT -j logaccept-final-133 inet6/filter/limit-2396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1364 inet6/filter/limit-2396 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-133 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-133 -j ACCEPT inet6/filter/logdrop-1364 -j DROP Filter 2398 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2397 inet/filter/INPUT -j limit-2397 inet/filter/OUTPUT -j limit-2397 inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1365 inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1365 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1365 -j DROP inet6/filter/FORWARD -j limit-2397 inet6/filter/INPUT -j limit-2397 inet6/filter/OUTPUT -j limit-2397 inet6/filter/limit-2397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1365 inet6/filter/limit-2397 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1365 -j DROP Filter 2399 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2398 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2398 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2398 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1366 inet/filter/limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1366 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1366 -j DROP inet6/filter/FORWARD -j limit-2398 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2398 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2398 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1366 inet6/filter/limit-2398 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1366 -j DROP Filter 2400 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2399 inet/filter/INPUT -j limit-2399 inet/filter/OUTPUT -j limit-2399 inet/filter/limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1367 inet/filter/limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1367 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1367 -j DROP inet6/filter/FORWARD -j limit-2399 inet6/filter/INPUT -j limit-2399 inet6/filter/OUTPUT -j limit-2399 inet6/filter/limit-2399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1367 inet6/filter/limit-2399 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1367 -j DROP Filter 2401 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2400 inet/filter/FORWARD -j logaccept-final-134 inet/filter/INPUT -j limit-2400 inet/filter/INPUT -j logaccept-final-134 inet/filter/OUTPUT -j limit-2400 inet/filter/OUTPUT -j logaccept-final-134 inet/filter/limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1368 inet/filter/limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-134 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-134 -j ACCEPT inet/filter/logdrop-1368 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1368 -j DROP inet6/filter/FORWARD -j limit-2400 inet6/filter/FORWARD -j logaccept-final-134 inet6/filter/INPUT -j limit-2400 inet6/filter/INPUT -j logaccept-final-134 inet6/filter/OUTPUT -j limit-2400 inet6/filter/OUTPUT -j logaccept-final-134 inet6/filter/limit-2400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1368 inet6/filter/limit-2400 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-134 -j ACCEPT inet6/filter/logdrop-1368 -j DROP Filter 2402 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2401 inet/filter/INPUT -j limit-2401 inet/filter/OUTPUT -j limit-2401 inet/filter/limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1369 inet/filter/limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1369 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1369 -j DROP inet6/filter/FORWARD -j limit-2401 inet6/filter/INPUT -j limit-2401 inet6/filter/OUTPUT -j limit-2401 inet6/filter/limit-2401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1369 inet6/filter/logdrop-1369 -j DROP Filter 2403 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2402 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2402 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2402 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 inet/filter/logdrop-1370 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1370 -j DROP inet6/filter/FORWARD -j limit-2402 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2402 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2402 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 inet6/filter/logdrop-1370 -j DROP Filter 2404 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2403 inet/filter/INPUT -j limit-2403 inet/filter/OUTPUT -j limit-2403 inet/filter/limit-2403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 inet/filter/logdrop-1371 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1371 -j DROP inet6/filter/FORWARD -j limit-2403 inet6/filter/INPUT -j limit-2403 inet6/filter/OUTPUT -j limit-2403 inet6/filter/limit-2403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 inet6/filter/logdrop-1371 -j DROP Filter 2405 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2404 inet/filter/FORWARD -j logaccept-final-135 inet/filter/INPUT -j limit-2404 inet/filter/INPUT -j logaccept-final-135 inet/filter/OUTPUT -j limit-2404 inet/filter/OUTPUT -j logaccept-final-135 inet/filter/limit-2404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 inet/filter/logaccept-final-135 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-135 -j ACCEPT inet/filter/logdrop-1372 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1372 -j DROP inet6/filter/FORWARD -j limit-2404 inet6/filter/FORWARD -j logaccept-final-135 inet6/filter/INPUT -j limit-2404 inet6/filter/INPUT -j logaccept-final-135 inet6/filter/OUTPUT -j limit-2404 inet6/filter/OUTPUT -j logaccept-final-135 inet6/filter/limit-2404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 inet6/filter/logaccept-final-135 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-135 -j ACCEPT inet6/filter/logdrop-1372 -j DROP Filter 2406 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2405 inet/filter/INPUT -j limit-2405 inet/filter/OUTPUT -j limit-2405 inet/filter/limit-2405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 inet/filter/limit-2405 -m limit --limit 1/second -j LOG inet/filter/logdrop-1373 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1373 -j DROP inet6/filter/FORWARD -j limit-2405 inet6/filter/INPUT -j limit-2405 inet6/filter/OUTPUT -j limit-2405 inet6/filter/limit-2405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 inet6/filter/limit-2405 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1373 -j DROP Filter 2407 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2406 inet/filter/FORWARD -j logaccept-final-136 inet/filter/INPUT -j limit-2406 inet/filter/INPUT -j logaccept-final-136 inet/filter/OUTPUT -j limit-2406 inet/filter/OUTPUT -j logaccept-final-136 inet/filter/limit-2406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 inet/filter/logaccept-final-136 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-136 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-136 -j ACCEPT inet/filter/logdrop-1374 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1374 -j DROP inet6/filter/FORWARD -j limit-2406 inet6/filter/FORWARD -j logaccept-final-136 inet6/filter/INPUT -j limit-2406 inet6/filter/INPUT -j logaccept-final-136 inet6/filter/OUTPUT -j limit-2406 inet6/filter/OUTPUT -j logaccept-final-136 inet6/filter/limit-2406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 inet6/filter/logaccept-final-136 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-136 -j ACCEPT inet6/filter/logdrop-1374 -j DROP Filter 2408 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2407 inet/filter/INPUT -j limit-2407 inet/filter/OUTPUT -j limit-2407 inet/filter/limit-2407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 inet/filter/limit-2407 -j TEE --gateway 10.0.0.1 inet/filter/limit-2407 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1375 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1375 -j DROP inet6/filter/FORWARD -j limit-2407 inet6/filter/INPUT -j limit-2407 inet6/filter/OUTPUT -j limit-2407 inet6/filter/limit-2407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 inet6/filter/limit-2407 -j TEE --gateway fc00::2 inet6/filter/logdrop-1375 -j DROP Filter 2409 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2408 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2408 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2408 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 inet/filter/logdrop-1376 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1376 -j DROP inet6/filter/FORWARD -j limit-2408 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2408 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2408 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 inet6/filter/logdrop-1376 -j DROP Filter 2410 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2409 inet/filter/INPUT -j limit-2409 inet/filter/OUTPUT -j limit-2409 inet/filter/limit-2409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 inet/filter/logdrop-1377 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1377 -j DROP inet6/filter/FORWARD -j limit-2409 inet6/filter/INPUT -j limit-2409 inet6/filter/OUTPUT -j limit-2409 inet6/filter/limit-2409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 inet6/filter/logdrop-1377 -j DROP Filter 2411 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2410 inet/filter/FORWARD -j logaccept-final-137 inet/filter/INPUT -j limit-2410 inet/filter/INPUT -j logaccept-final-137 inet/filter/OUTPUT -j limit-2410 inet/filter/OUTPUT -j logaccept-final-137 inet/filter/limit-2410 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 inet/filter/logaccept-final-137 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-137 -j ACCEPT inet/filter/logdrop-1378 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1378 -j DROP inet6/filter/FORWARD -j limit-2410 inet6/filter/FORWARD -j logaccept-final-137 inet6/filter/INPUT -j limit-2410 inet6/filter/INPUT -j logaccept-final-137 inet6/filter/OUTPUT -j limit-2410 inet6/filter/OUTPUT -j logaccept-final-137 inet6/filter/limit-2410 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 inet6/filter/logaccept-final-137 -j ACCEPT inet6/filter/logdrop-1378 -j DROP Filter 2412 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2411 inet/filter/INPUT -j limit-2411 inet/filter/OUTPUT -j limit-2411 inet/filter/limit-2411 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 inet/filter/limit-2411 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1379 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1379 -j DROP inet6/filter/FORWARD -j limit-2411 inet6/filter/INPUT -j limit-2411 inet6/filter/OUTPUT -j limit-2411 inet6/filter/limit-2411 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 inet6/filter/logdrop-1379 -j DROP Filter 2413 {"flow-limit":{"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-2412 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2412 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2412 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2412 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2412 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2412 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2414 {"action":"pass","flow-limit":{"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-2413 inet/filter/INPUT -j limit-2413 inet/filter/OUTPUT -j limit-2413 inet/filter/limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2413 inet6/filter/INPUT -j limit-2413 inet6/filter/OUTPUT -j limit-2413 inet6/filter/limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2415 {"flow-limit":{"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2414 inet/filter/FORWARD -j logaccept-final-138 inet/filter/INPUT -j limit-2414 inet/filter/INPUT -j logaccept-final-138 inet/filter/OUTPUT -j limit-2414 inet/filter/OUTPUT -j logaccept-final-138 inet/filter/limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-138 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-138 -j ACCEPT inet6/filter/FORWARD -j limit-2414 inet6/filter/FORWARD -j logaccept-final-138 inet6/filter/INPUT -j limit-2414 inet6/filter/INPUT -j logaccept-final-138 inet6/filter/OUTPUT -j limit-2414 inet6/filter/OUTPUT -j logaccept-final-138 inet6/filter/limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-138 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-138 -j ACCEPT Filter 2416 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2415 inet/filter/INPUT -j limit-2415 inet/filter/OUTPUT -j limit-2415 inet/filter/limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2415 inet6/filter/INPUT -j limit-2415 inet6/filter/OUTPUT -j limit-2415 inet6/filter/limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2417 {"flow-limit":{"interval":5,"log":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2416 inet/filter/FORWARD -j logaccept-final-139 inet/filter/INPUT -j limit-2416 inet/filter/INPUT -j logaccept-final-139 inet/filter/OUTPUT -j limit-2416 inet/filter/OUTPUT -j logaccept-final-139 inet/filter/limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-139 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-139 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-139 -j ACCEPT inet6/filter/FORWARD -j limit-2416 inet6/filter/FORWARD -j logaccept-final-139 inet6/filter/INPUT -j limit-2416 inet6/filter/INPUT -j logaccept-final-139 inet6/filter/OUTPUT -j limit-2416 inet6/filter/OUTPUT -j logaccept-final-139 inet6/filter/limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-139 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-139 -j ACCEPT Filter 2418 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2417 inet/filter/INPUT -j limit-2417 inet/filter/OUTPUT -j limit-2417 inet/filter/limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2417 inet6/filter/INPUT -j limit-2417 inet6/filter/OUTPUT -j limit-2417 inet6/filter/limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2419 {"flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2418 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2418 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2418 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2418 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2418 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2418 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2420 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2419 inet/filter/INPUT -j limit-2419 inet/filter/OUTPUT -j limit-2419 inet/filter/limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2419 inet6/filter/INPUT -j limit-2419 inet6/filter/OUTPUT -j limit-2419 inet6/filter/limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2421 {"flow-limit":{"interval":5,"log":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2420 inet/filter/FORWARD -j logaccept-final-140 inet/filter/INPUT -j limit-2420 inet/filter/INPUT -j logaccept-final-140 inet/filter/OUTPUT -j limit-2420 inet/filter/OUTPUT -j logaccept-final-140 inet/filter/limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-140 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-140 -j ACCEPT inet6/filter/FORWARD -j limit-2420 inet6/filter/FORWARD -j logaccept-final-140 inet6/filter/INPUT -j limit-2420 inet6/filter/INPUT -j logaccept-final-140 inet6/filter/OUTPUT -j limit-2420 inet6/filter/OUTPUT -j logaccept-final-140 inet6/filter/limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-140 -j ACCEPT Filter 2422 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2421 inet/filter/INPUT -j limit-2421 inet/filter/OUTPUT -j limit-2421 inet/filter/limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2421 inet6/filter/INPUT -j limit-2421 inet6/filter/OUTPUT -j limit-2421 inet6/filter/limit-2421 -m recent --name limit-2421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 2423 {"flow-limit":{"interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2422 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2422 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2422 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2422 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2422 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2422 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2424 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2423 inet/filter/INPUT -j limit-2423 inet/filter/OUTPUT -j limit-2423 inet/filter/limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2423 inet6/filter/INPUT -j limit-2423 inet6/filter/OUTPUT -j limit-2423 inet6/filter/limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2425 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2424 inet/filter/FORWARD -j logaccept-final-141 inet/filter/INPUT -j limit-2424 inet/filter/INPUT -j logaccept-final-141 inet/filter/OUTPUT -j limit-2424 inet/filter/OUTPUT -j logaccept-final-141 inet/filter/limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-141 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-141 -j ACCEPT inet6/filter/FORWARD -j limit-2424 inet6/filter/FORWARD -j logaccept-final-141 inet6/filter/INPUT -j limit-2424 inet6/filter/INPUT -j logaccept-final-141 inet6/filter/OUTPUT -j limit-2424 inet6/filter/OUTPUT -j logaccept-final-141 inet6/filter/limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-141 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-141 -j ACCEPT Filter 2426 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2425 inet/filter/INPUT -j limit-2425 inet/filter/OUTPUT -j limit-2425 inet/filter/limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2425 inet6/filter/INPUT -j limit-2425 inet6/filter/OUTPUT -j limit-2425 inet6/filter/limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2427 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2426 inet/filter/FORWARD -j logaccept-final-142 inet/filter/INPUT -j limit-2426 inet/filter/INPUT -j logaccept-final-142 inet/filter/OUTPUT -j limit-2426 inet/filter/OUTPUT -j logaccept-final-142 inet/filter/limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-142 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-142 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-142 -j ACCEPT inet6/filter/FORWARD -j limit-2426 inet6/filter/FORWARD -j logaccept-final-142 inet6/filter/INPUT -j limit-2426 inet6/filter/INPUT -j logaccept-final-142 inet6/filter/OUTPUT -j limit-2426 inet6/filter/OUTPUT -j logaccept-final-142 inet6/filter/limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-142 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-142 -j ACCEPT Filter 2428 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2427 inet/filter/INPUT -j limit-2427 inet/filter/OUTPUT -j limit-2427 inet/filter/limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2427 inet6/filter/INPUT -j limit-2427 inet6/filter/OUTPUT -j limit-2427 inet6/filter/limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2429 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2428 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2428 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2428 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2428 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2428 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2428 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2430 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2429 inet/filter/INPUT -j limit-2429 inet/filter/OUTPUT -j limit-2429 inet/filter/limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2429 inet6/filter/INPUT -j limit-2429 inet6/filter/OUTPUT -j limit-2429 inet6/filter/limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2431 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2430 inet/filter/FORWARD -j logaccept-final-143 inet/filter/INPUT -j limit-2430 inet/filter/INPUT -j logaccept-final-143 inet/filter/OUTPUT -j limit-2430 inet/filter/OUTPUT -j logaccept-final-143 inet/filter/limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-143 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-143 -j ACCEPT inet6/filter/FORWARD -j limit-2430 inet6/filter/FORWARD -j logaccept-final-143 inet6/filter/INPUT -j limit-2430 inet6/filter/INPUT -j logaccept-final-143 inet6/filter/OUTPUT -j limit-2430 inet6/filter/OUTPUT -j logaccept-final-143 inet6/filter/limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-143 -j ACCEPT Filter 2432 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2431 inet/filter/INPUT -j limit-2431 inet/filter/OUTPUT -j limit-2431 inet/filter/limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2431 inet6/filter/INPUT -j limit-2431 inet6/filter/OUTPUT -j limit-2431 inet6/filter/limit-2431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 2433 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2432 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2432 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2432 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2432 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2432 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2432 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2434 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2433 inet/filter/INPUT -j limit-2433 inet/filter/OUTPUT -j limit-2433 inet/filter/limit-2433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2433 inet6/filter/INPUT -j limit-2433 inet6/filter/OUTPUT -j limit-2433 inet6/filter/limit-2433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2435 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2434 inet/filter/FORWARD -j logaccept-final-144 inet/filter/INPUT -j limit-2434 inet/filter/INPUT -j logaccept-final-144 inet/filter/OUTPUT -j limit-2434 inet/filter/OUTPUT -j logaccept-final-144 inet/filter/limit-2434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-144 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-144 -j ACCEPT inet6/filter/FORWARD -j limit-2434 inet6/filter/FORWARD -j logaccept-final-144 inet6/filter/INPUT -j limit-2434 inet6/filter/INPUT -j logaccept-final-144 inet6/filter/OUTPUT -j limit-2434 inet6/filter/OUTPUT -j logaccept-final-144 inet6/filter/limit-2434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-144 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-144 -j ACCEPT Filter 2436 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2435 inet/filter/INPUT -j limit-2435 inet/filter/OUTPUT -j limit-2435 inet/filter/limit-2435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2435 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2435 inet6/filter/INPUT -j limit-2435 inet6/filter/OUTPUT -j limit-2435 inet6/filter/limit-2435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2435 -m limit --limit 1/second -j LOG Filter 2437 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2436 inet/filter/FORWARD -j logaccept-final-145 inet/filter/INPUT -j limit-2436 inet/filter/INPUT -j logaccept-final-145 inet/filter/OUTPUT -j limit-2436 inet/filter/OUTPUT -j logaccept-final-145 inet/filter/limit-2436 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-145 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-145 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-145 -j ACCEPT inet6/filter/FORWARD -j limit-2436 inet6/filter/FORWARD -j logaccept-final-145 inet6/filter/INPUT -j limit-2436 inet6/filter/INPUT -j logaccept-final-145 inet6/filter/OUTPUT -j limit-2436 inet6/filter/OUTPUT -j logaccept-final-145 inet6/filter/limit-2436 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-145 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-145 -j ACCEPT Filter 2438 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2437 inet/filter/INPUT -j limit-2437 inet/filter/OUTPUT -j limit-2437 inet/filter/limit-2437 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2437 -j TEE --gateway 10.0.0.1 inet/filter/limit-2437 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2437 inet6/filter/INPUT -j limit-2437 inet6/filter/OUTPUT -j limit-2437 inet6/filter/limit-2437 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2437 -j TEE --gateway fc00::2 Filter 2439 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2438 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2438 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2438 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2438 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2438 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2438 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2438 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2438 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2440 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2439 inet/filter/INPUT -j limit-2439 inet/filter/OUTPUT -j limit-2439 inet/filter/limit-2439 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2439 inet6/filter/INPUT -j limit-2439 inet6/filter/OUTPUT -j limit-2439 inet6/filter/limit-2439 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2441 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2440 inet/filter/FORWARD -j logaccept-final-146 inet/filter/INPUT -j limit-2440 inet/filter/INPUT -j logaccept-final-146 inet/filter/OUTPUT -j limit-2440 inet/filter/OUTPUT -j logaccept-final-146 inet/filter/limit-2440 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-146 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-146 -j ACCEPT inet6/filter/FORWARD -j limit-2440 inet6/filter/FORWARD -j logaccept-final-146 inet6/filter/INPUT -j limit-2440 inet6/filter/INPUT -j logaccept-final-146 inet6/filter/OUTPUT -j limit-2440 inet6/filter/OUTPUT -j logaccept-final-146 inet6/filter/limit-2440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-146 -j ACCEPT Filter 2442 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2441 inet/filter/INPUT -j limit-2441 inet/filter/OUTPUT -j limit-2441 inet/filter/limit-2441 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2441 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2441 inet6/filter/INPUT -j limit-2441 inet6/filter/OUTPUT -j limit-2441 inet6/filter/limit-2441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2443 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2442 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2442 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2442 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2442 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2442 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2442 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2444 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2443 inet/filter/INPUT -j limit-2443 inet/filter/OUTPUT -j limit-2443 inet/filter/limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2443 inet6/filter/INPUT -j limit-2443 inet6/filter/OUTPUT -j limit-2443 inet6/filter/limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2445 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2444 inet/filter/FORWARD -j logaccept-final-147 inet/filter/INPUT -j limit-2444 inet/filter/INPUT -j logaccept-final-147 inet/filter/OUTPUT -j limit-2444 inet/filter/OUTPUT -j logaccept-final-147 inet/filter/limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-147 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-147 -j ACCEPT inet6/filter/FORWARD -j limit-2444 inet6/filter/FORWARD -j logaccept-final-147 inet6/filter/INPUT -j limit-2444 inet6/filter/INPUT -j logaccept-final-147 inet6/filter/OUTPUT -j limit-2444 inet6/filter/OUTPUT -j logaccept-final-147 inet6/filter/limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-147 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-147 -j ACCEPT Filter 2446 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2445 inet/filter/INPUT -j limit-2445 inet/filter/OUTPUT -j limit-2445 inet/filter/limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2445 inet6/filter/INPUT -j limit-2445 inet6/filter/OUTPUT -j limit-2445 inet6/filter/limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2447 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2446 inet/filter/FORWARD -j logaccept-final-148 inet/filter/INPUT -j limit-2446 inet/filter/INPUT -j logaccept-final-148 inet/filter/OUTPUT -j limit-2446 inet/filter/OUTPUT -j logaccept-final-148 inet/filter/limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-148 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-148 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-148 -j ACCEPT inet6/filter/FORWARD -j limit-2446 inet6/filter/FORWARD -j logaccept-final-148 inet6/filter/INPUT -j limit-2446 inet6/filter/INPUT -j logaccept-final-148 inet6/filter/OUTPUT -j limit-2446 inet6/filter/OUTPUT -j logaccept-final-148 inet6/filter/limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-148 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-148 -j ACCEPT Filter 2448 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2447 inet/filter/INPUT -j limit-2447 inet/filter/OUTPUT -j limit-2447 inet/filter/limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2447 inet6/filter/INPUT -j limit-2447 inet6/filter/OUTPUT -j limit-2447 inet6/filter/limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2449 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2448 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2448 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2448 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2448 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2448 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2448 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2450 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2449 inet/filter/INPUT -j limit-2449 inet/filter/OUTPUT -j limit-2449 inet/filter/limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2449 inet6/filter/INPUT -j limit-2449 inet6/filter/OUTPUT -j limit-2449 inet6/filter/limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2451 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2450 inet/filter/FORWARD -j logaccept-final-149 inet/filter/INPUT -j limit-2450 inet/filter/INPUT -j logaccept-final-149 inet/filter/OUTPUT -j limit-2450 inet/filter/OUTPUT -j logaccept-final-149 inet/filter/limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-149 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-149 -j ACCEPT inet6/filter/FORWARD -j limit-2450 inet6/filter/FORWARD -j logaccept-final-149 inet6/filter/INPUT -j limit-2450 inet6/filter/INPUT -j logaccept-final-149 inet6/filter/OUTPUT -j limit-2450 inet6/filter/OUTPUT -j logaccept-final-149 inet6/filter/limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-149 -j ACCEPT Filter 2452 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2451 inet/filter/INPUT -j limit-2451 inet/filter/OUTPUT -j limit-2451 inet/filter/limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2451 inet6/filter/INPUT -j limit-2451 inet6/filter/OUTPUT -j limit-2451 inet6/filter/limit-2451 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 2453 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2452 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2452 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2452 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2452 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2452 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2452 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2452 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2454 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2453 inet/filter/INPUT -j limit-2453 inet/filter/OUTPUT -j limit-2453 inet/filter/limit-2453 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2453 inet6/filter/INPUT -j limit-2453 inet6/filter/OUTPUT -j limit-2453 inet6/filter/limit-2453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2455 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2454 inet/filter/FORWARD -j logaccept-final-150 inet/filter/INPUT -j limit-2454 inet/filter/INPUT -j logaccept-final-150 inet/filter/OUTPUT -j limit-2454 inet/filter/OUTPUT -j logaccept-final-150 inet/filter/limit-2454 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-150 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-150 -j ACCEPT inet6/filter/FORWARD -j limit-2454 inet6/filter/FORWARD -j logaccept-final-150 inet6/filter/INPUT -j limit-2454 inet6/filter/INPUT -j logaccept-final-150 inet6/filter/OUTPUT -j limit-2454 inet6/filter/OUTPUT -j logaccept-final-150 inet6/filter/limit-2454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-150 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-150 -j ACCEPT Filter 2456 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2455 inet/filter/INPUT -j limit-2455 inet/filter/OUTPUT -j limit-2455 inet/filter/limit-2455 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2455 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2455 inet6/filter/INPUT -j limit-2455 inet6/filter/OUTPUT -j limit-2455 inet6/filter/limit-2455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2455 -m limit --limit 1/second -j LOG Filter 2457 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2456 inet/filter/FORWARD -j logaccept-final-151 inet/filter/INPUT -j limit-2456 inet/filter/INPUT -j logaccept-final-151 inet/filter/OUTPUT -j limit-2456 inet/filter/OUTPUT -j logaccept-final-151 inet/filter/limit-2456 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-151 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-151 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-151 -j ACCEPT inet6/filter/FORWARD -j limit-2456 inet6/filter/FORWARD -j logaccept-final-151 inet6/filter/INPUT -j limit-2456 inet6/filter/INPUT -j logaccept-final-151 inet6/filter/OUTPUT -j limit-2456 inet6/filter/OUTPUT -j logaccept-final-151 inet6/filter/limit-2456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-151 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-151 -j ACCEPT Filter 2458 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2457 inet/filter/INPUT -j limit-2457 inet/filter/OUTPUT -j limit-2457 inet/filter/limit-2457 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2457 -j TEE --gateway 10.0.0.1 inet/filter/limit-2457 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2457 inet6/filter/INPUT -j limit-2457 inet6/filter/OUTPUT -j limit-2457 inet6/filter/limit-2457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2457 -j TEE --gateway fc00::2 Filter 2459 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2458 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2458 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2458 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2458 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2458 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2458 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2460 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2459 inet/filter/INPUT -j limit-2459 inet/filter/OUTPUT -j limit-2459 inet/filter/limit-2459 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2459 inet6/filter/INPUT -j limit-2459 inet6/filter/OUTPUT -j limit-2459 inet6/filter/limit-2459 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2461 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2460 inet/filter/FORWARD -j logaccept-final-152 inet/filter/INPUT -j limit-2460 inet/filter/INPUT -j logaccept-final-152 inet/filter/OUTPUT -j limit-2460 inet/filter/OUTPUT -j logaccept-final-152 inet/filter/limit-2460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-152 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-152 -j ACCEPT inet6/filter/FORWARD -j limit-2460 inet6/filter/FORWARD -j logaccept-final-152 inet6/filter/INPUT -j limit-2460 inet6/filter/INPUT -j logaccept-final-152 inet6/filter/OUTPUT -j limit-2460 inet6/filter/OUTPUT -j logaccept-final-152 inet6/filter/limit-2460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-152 -j ACCEPT Filter 2462 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2461 inet/filter/INPUT -j limit-2461 inet/filter/OUTPUT -j limit-2461 inet/filter/limit-2461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2461 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2461 inet6/filter/INPUT -j limit-2461 inet6/filter/OUTPUT -j limit-2461 inet6/filter/limit-2461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2463 {"flow-limit":{"interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2462 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2462 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2462 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2462 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2462 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2462 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2462 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2462 -m recent --name user:C --rsource --mask fe00:: --set Filter 2464 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2463 inet/filter/INPUT -j limit-2463 inet/filter/OUTPUT -j limit-2463 inet/filter/limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2463 inet6/filter/INPUT -j limit-2463 inet6/filter/OUTPUT -j limit-2463 inet6/filter/limit-2463 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2463 -m recent --name user:C --rsource --mask fe00:: --set Filter 2465 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2464 inet/filter/FORWARD -j logaccept-final-153 inet/filter/INPUT -j limit-2464 inet/filter/INPUT -j logaccept-final-153 inet/filter/OUTPUT -j limit-2464 inet/filter/OUTPUT -j logaccept-final-153 inet/filter/limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-153 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-153 -j ACCEPT inet6/filter/FORWARD -j limit-2464 inet6/filter/FORWARD -j logaccept-final-153 inet6/filter/INPUT -j limit-2464 inet6/filter/INPUT -j logaccept-final-153 inet6/filter/OUTPUT -j limit-2464 inet6/filter/OUTPUT -j logaccept-final-153 inet6/filter/limit-2464 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2464 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-153 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-153 -j ACCEPT Filter 2466 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2465 inet/filter/INPUT -j limit-2465 inet/filter/OUTPUT -j limit-2465 inet/filter/limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2465 inet6/filter/INPUT -j limit-2465 inet6/filter/OUTPUT -j limit-2465 inet6/filter/limit-2465 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2465 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2467 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2466 inet/filter/FORWARD -j logaccept-final-154 inet/filter/INPUT -j limit-2466 inet/filter/INPUT -j logaccept-final-154 inet/filter/OUTPUT -j limit-2466 inet/filter/OUTPUT -j logaccept-final-154 inet/filter/limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-154 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-154 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-154 -j ACCEPT inet6/filter/FORWARD -j limit-2466 inet6/filter/FORWARD -j logaccept-final-154 inet6/filter/INPUT -j limit-2466 inet6/filter/INPUT -j logaccept-final-154 inet6/filter/OUTPUT -j limit-2466 inet6/filter/OUTPUT -j logaccept-final-154 inet6/filter/limit-2466 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2466 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-154 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-154 -j ACCEPT Filter 2468 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2467 inet/filter/INPUT -j limit-2467 inet/filter/OUTPUT -j limit-2467 inet/filter/limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2467 inet6/filter/INPUT -j limit-2467 inet6/filter/OUTPUT -j limit-2467 inet6/filter/limit-2467 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2467 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2469 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2468 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2468 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2468 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2468 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2468 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2468 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2468 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2468 -m recent --name user:C --rsource --mask fe00:: --set Filter 2470 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2469 inet/filter/INPUT -j limit-2469 inet/filter/OUTPUT -j limit-2469 inet/filter/limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2469 inet6/filter/INPUT -j limit-2469 inet6/filter/OUTPUT -j limit-2469 inet6/filter/limit-2469 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2469 -m recent --name user:C --rsource --mask fe00:: --set Filter 2471 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2470 inet/filter/FORWARD -j logaccept-final-155 inet/filter/INPUT -j limit-2470 inet/filter/INPUT -j logaccept-final-155 inet/filter/OUTPUT -j limit-2470 inet/filter/OUTPUT -j logaccept-final-155 inet/filter/limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-155 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-155 -j ACCEPT inet6/filter/FORWARD -j limit-2470 inet6/filter/FORWARD -j logaccept-final-155 inet6/filter/INPUT -j limit-2470 inet6/filter/INPUT -j logaccept-final-155 inet6/filter/OUTPUT -j limit-2470 inet6/filter/OUTPUT -j logaccept-final-155 inet6/filter/limit-2470 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2470 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-155 -j ACCEPT Filter 2472 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2471 inet/filter/INPUT -j limit-2471 inet/filter/OUTPUT -j limit-2471 inet/filter/limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2471 inet6/filter/INPUT -j limit-2471 inet6/filter/OUTPUT -j limit-2471 inet6/filter/limit-2471 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 2473 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2472 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2472 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2472 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2472 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2472 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2472 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2472 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2472 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2474 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2473 inet/filter/INPUT -j limit-2473 inet/filter/OUTPUT -j limit-2473 inet/filter/limit-2473 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2473 inet6/filter/INPUT -j limit-2473 inet6/filter/OUTPUT -j limit-2473 inet6/filter/limit-2473 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2475 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2474 inet/filter/FORWARD -j logaccept-final-156 inet/filter/INPUT -j limit-2474 inet/filter/INPUT -j logaccept-final-156 inet/filter/OUTPUT -j limit-2474 inet/filter/OUTPUT -j logaccept-final-156 inet/filter/limit-2474 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-156 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-156 -j ACCEPT inet6/filter/FORWARD -j limit-2474 inet6/filter/FORWARD -j logaccept-final-156 inet6/filter/INPUT -j limit-2474 inet6/filter/INPUT -j logaccept-final-156 inet6/filter/OUTPUT -j limit-2474 inet6/filter/OUTPUT -j logaccept-final-156 inet6/filter/limit-2474 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-156 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-156 -j ACCEPT Filter 2476 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2475 inet/filter/INPUT -j limit-2475 inet/filter/OUTPUT -j limit-2475 inet/filter/limit-2475 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2475 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2475 inet6/filter/INPUT -j limit-2475 inet6/filter/OUTPUT -j limit-2475 inet6/filter/limit-2475 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2475 -m limit --limit 1/second -j LOG Filter 2477 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2476 inet/filter/FORWARD -j logaccept-final-157 inet/filter/INPUT -j limit-2476 inet/filter/INPUT -j logaccept-final-157 inet/filter/OUTPUT -j limit-2476 inet/filter/OUTPUT -j logaccept-final-157 inet/filter/limit-2476 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-157 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-157 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-157 -j ACCEPT inet6/filter/FORWARD -j limit-2476 inet6/filter/FORWARD -j logaccept-final-157 inet6/filter/INPUT -j limit-2476 inet6/filter/INPUT -j logaccept-final-157 inet6/filter/OUTPUT -j limit-2476 inet6/filter/OUTPUT -j logaccept-final-157 inet6/filter/limit-2476 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-157 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-157 -j ACCEPT Filter 2478 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2477 inet/filter/INPUT -j limit-2477 inet/filter/OUTPUT -j limit-2477 inet/filter/limit-2477 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2477 -j TEE --gateway 10.0.0.1 inet/filter/limit-2477 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2477 inet6/filter/INPUT -j limit-2477 inet6/filter/OUTPUT -j limit-2477 inet6/filter/limit-2477 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2477 -j TEE --gateway fc00::2 Filter 2479 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2478 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2478 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2478 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2478 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2478 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2478 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2478 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2478 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2480 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2479 inet/filter/INPUT -j limit-2479 inet/filter/OUTPUT -j limit-2479 inet/filter/limit-2479 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2479 inet6/filter/INPUT -j limit-2479 inet6/filter/OUTPUT -j limit-2479 inet6/filter/limit-2479 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2481 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2480 inet/filter/FORWARD -j logaccept-final-158 inet/filter/INPUT -j limit-2480 inet/filter/INPUT -j logaccept-final-158 inet/filter/OUTPUT -j limit-2480 inet/filter/OUTPUT -j logaccept-final-158 inet/filter/limit-2480 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-158 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-158 -j ACCEPT inet6/filter/FORWARD -j limit-2480 inet6/filter/FORWARD -j logaccept-final-158 inet6/filter/INPUT -j limit-2480 inet6/filter/INPUT -j logaccept-final-158 inet6/filter/OUTPUT -j limit-2480 inet6/filter/OUTPUT -j logaccept-final-158 inet6/filter/limit-2480 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-158 -j ACCEPT Filter 2482 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2481 inet/filter/INPUT -j limit-2481 inet/filter/OUTPUT -j limit-2481 inet/filter/limit-2481 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2481 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2481 inet6/filter/INPUT -j limit-2481 inet6/filter/OUTPUT -j limit-2481 inet6/filter/limit-2481 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2483 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2482 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2482 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2482 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2482 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2482 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2482 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2482 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2482 -m recent --name user:C --rdest --mask fe00:: --set Filter 2484 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2483 inet/filter/INPUT -j limit-2483 inet/filter/OUTPUT -j limit-2483 inet/filter/limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2483 inet6/filter/INPUT -j limit-2483 inet6/filter/OUTPUT -j limit-2483 inet6/filter/limit-2483 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2483 -m recent --name user:C --rdest --mask fe00:: --set Filter 2485 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2484 inet/filter/FORWARD -j logaccept-final-159 inet/filter/INPUT -j limit-2484 inet/filter/INPUT -j logaccept-final-159 inet/filter/OUTPUT -j limit-2484 inet/filter/OUTPUT -j logaccept-final-159 inet/filter/limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-159 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-159 -j ACCEPT inet6/filter/FORWARD -j limit-2484 inet6/filter/FORWARD -j logaccept-final-159 inet6/filter/INPUT -j limit-2484 inet6/filter/INPUT -j logaccept-final-159 inet6/filter/OUTPUT -j limit-2484 inet6/filter/OUTPUT -j logaccept-final-159 inet6/filter/limit-2484 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2484 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-159 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-159 -j ACCEPT Filter 2486 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2485 inet/filter/INPUT -j limit-2485 inet/filter/OUTPUT -j limit-2485 inet/filter/limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2485 inet6/filter/INPUT -j limit-2485 inet6/filter/OUTPUT -j limit-2485 inet6/filter/limit-2485 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2485 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2487 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2486 inet/filter/FORWARD -j logaccept-final-160 inet/filter/INPUT -j limit-2486 inet/filter/INPUT -j logaccept-final-160 inet/filter/OUTPUT -j limit-2486 inet/filter/OUTPUT -j logaccept-final-160 inet/filter/limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-160 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-160 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-160 -j ACCEPT inet6/filter/FORWARD -j limit-2486 inet6/filter/FORWARD -j logaccept-final-160 inet6/filter/INPUT -j limit-2486 inet6/filter/INPUT -j logaccept-final-160 inet6/filter/OUTPUT -j limit-2486 inet6/filter/OUTPUT -j logaccept-final-160 inet6/filter/limit-2486 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2486 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-160 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-160 -j ACCEPT Filter 2488 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2487 inet/filter/INPUT -j limit-2487 inet/filter/OUTPUT -j limit-2487 inet/filter/limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2487 inet6/filter/INPUT -j limit-2487 inet6/filter/OUTPUT -j limit-2487 inet6/filter/limit-2487 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2487 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2489 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2488 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2488 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2488 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2488 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2488 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2488 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2488 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2488 -m recent --name user:C --rdest --mask fe00:: --set Filter 2490 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2489 inet/filter/INPUT -j limit-2489 inet/filter/OUTPUT -j limit-2489 inet/filter/limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2489 inet6/filter/INPUT -j limit-2489 inet6/filter/OUTPUT -j limit-2489 inet6/filter/limit-2489 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2489 -m recent --name user:C --rdest --mask fe00:: --set Filter 2491 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2490 inet/filter/FORWARD -j logaccept-final-161 inet/filter/INPUT -j limit-2490 inet/filter/INPUT -j logaccept-final-161 inet/filter/OUTPUT -j limit-2490 inet/filter/OUTPUT -j logaccept-final-161 inet/filter/limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-161 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-161 -j ACCEPT inet6/filter/FORWARD -j limit-2490 inet6/filter/FORWARD -j logaccept-final-161 inet6/filter/INPUT -j limit-2490 inet6/filter/INPUT -j logaccept-final-161 inet6/filter/OUTPUT -j limit-2490 inet6/filter/OUTPUT -j logaccept-final-161 inet6/filter/limit-2490 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2490 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-161 -j ACCEPT Filter 2492 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2491 inet/filter/INPUT -j limit-2491 inet/filter/OUTPUT -j limit-2491 inet/filter/limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2491 inet6/filter/INPUT -j limit-2491 inet6/filter/OUTPUT -j limit-2491 inet6/filter/limit-2491 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 2493 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2492 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2492 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2492 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2492 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2492 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2492 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2492 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2492 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2494 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2493 inet/filter/INPUT -j limit-2493 inet/filter/OUTPUT -j limit-2493 inet/filter/limit-2493 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2493 inet6/filter/INPUT -j limit-2493 inet6/filter/OUTPUT -j limit-2493 inet6/filter/limit-2493 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2495 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2494 inet/filter/FORWARD -j logaccept-final-162 inet/filter/INPUT -j limit-2494 inet/filter/INPUT -j logaccept-final-162 inet/filter/OUTPUT -j limit-2494 inet/filter/OUTPUT -j logaccept-final-162 inet/filter/limit-2494 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-162 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-162 -j ACCEPT inet6/filter/FORWARD -j limit-2494 inet6/filter/FORWARD -j logaccept-final-162 inet6/filter/INPUT -j limit-2494 inet6/filter/INPUT -j logaccept-final-162 inet6/filter/OUTPUT -j limit-2494 inet6/filter/OUTPUT -j logaccept-final-162 inet6/filter/limit-2494 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-162 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-162 -j ACCEPT Filter 2496 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2495 inet/filter/INPUT -j limit-2495 inet/filter/OUTPUT -j limit-2495 inet/filter/limit-2495 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2495 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2495 inet6/filter/INPUT -j limit-2495 inet6/filter/OUTPUT -j limit-2495 inet6/filter/limit-2495 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2495 -m limit --limit 1/second -j LOG Filter 2497 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2496 inet/filter/FORWARD -j logaccept-final-163 inet/filter/INPUT -j limit-2496 inet/filter/INPUT -j logaccept-final-163 inet/filter/OUTPUT -j limit-2496 inet/filter/OUTPUT -j logaccept-final-163 inet/filter/limit-2496 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-163 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-163 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-163 -j ACCEPT inet6/filter/FORWARD -j limit-2496 inet6/filter/FORWARD -j logaccept-final-163 inet6/filter/INPUT -j limit-2496 inet6/filter/INPUT -j logaccept-final-163 inet6/filter/OUTPUT -j limit-2496 inet6/filter/OUTPUT -j logaccept-final-163 inet6/filter/limit-2496 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-163 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-163 -j ACCEPT Filter 2498 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2497 inet/filter/INPUT -j limit-2497 inet/filter/OUTPUT -j limit-2497 inet/filter/limit-2497 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2497 -j TEE --gateway 10.0.0.1 inet/filter/limit-2497 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2497 inet6/filter/INPUT -j limit-2497 inet6/filter/OUTPUT -j limit-2497 inet6/filter/limit-2497 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2497 -j TEE --gateway fc00::2 Filter 2499 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2498 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2498 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2498 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2498 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2498 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2498 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2498 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2498 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2500 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2499 inet/filter/INPUT -j limit-2499 inet/filter/OUTPUT -j limit-2499 inet/filter/limit-2499 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2499 inet6/filter/INPUT -j limit-2499 inet6/filter/OUTPUT -j limit-2499 inet6/filter/limit-2499 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2501 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2500 inet/filter/FORWARD -j logaccept-final-164 inet/filter/INPUT -j limit-2500 inet/filter/INPUT -j logaccept-final-164 inet/filter/OUTPUT -j limit-2500 inet/filter/OUTPUT -j logaccept-final-164 inet/filter/limit-2500 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-164 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-164 -j ACCEPT inet6/filter/FORWARD -j limit-2500 inet6/filter/FORWARD -j logaccept-final-164 inet6/filter/INPUT -j limit-2500 inet6/filter/INPUT -j logaccept-final-164 inet6/filter/OUTPUT -j limit-2500 inet6/filter/OUTPUT -j logaccept-final-164 inet6/filter/limit-2500 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-164 -j ACCEPT Filter 2502 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2501 inet/filter/INPUT -j limit-2501 inet/filter/OUTPUT -j limit-2501 inet/filter/limit-2501 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2501 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2501 inet6/filter/INPUT -j limit-2501 inet6/filter/OUTPUT -j limit-2501 inet6/filter/limit-2501 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2503 {"flow-limit":{"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-2502 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2502 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2502 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1380 inet/filter/limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1380 -m limit --limit 1/second -j LOG inet/filter/logdrop-1380 -j DROP inet6/filter/FORWARD -j limit-2502 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2502 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2502 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1380 inet6/filter/limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1380 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1380 -j DROP Filter 2504 {"action":"pass","flow-limit":{"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-2503 inet/filter/INPUT -j limit-2503 inet/filter/OUTPUT -j limit-2503 inet/filter/limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1381 inet/filter/limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1381 -m limit --limit 1/second -j LOG inet/filter/logdrop-1381 -j DROP inet6/filter/FORWARD -j limit-2503 inet6/filter/INPUT -j limit-2503 inet6/filter/OUTPUT -j limit-2503 inet6/filter/limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1381 inet6/filter/limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1381 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1381 -j DROP Filter 2505 {"flow-limit":{"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2504 inet/filter/FORWARD -j logaccept-final-165 inet/filter/INPUT -j limit-2504 inet/filter/INPUT -j logaccept-final-165 inet/filter/OUTPUT -j limit-2504 inet/filter/OUTPUT -j logaccept-final-165 inet/filter/limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1382 inet/filter/limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-165 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-165 -j ACCEPT inet/filter/logdrop-1382 -m limit --limit 1/second -j LOG inet/filter/logdrop-1382 -j DROP inet6/filter/FORWARD -j limit-2504 inet6/filter/FORWARD -j logaccept-final-165 inet6/filter/INPUT -j limit-2504 inet6/filter/INPUT -j logaccept-final-165 inet6/filter/OUTPUT -j limit-2504 inet6/filter/OUTPUT -j logaccept-final-165 inet6/filter/limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1382 inet6/filter/limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-165 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-165 -j ACCEPT inet6/filter/logdrop-1382 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1382 -j DROP Filter 2506 {"action":"pass","flow-limit":{"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2505 inet/filter/INPUT -j limit-2505 inet/filter/OUTPUT -j limit-2505 inet/filter/limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1383 inet/filter/limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1383 -m limit --limit 1/second -j LOG inet/filter/logdrop-1383 -j DROP inet6/filter/FORWARD -j limit-2505 inet6/filter/INPUT -j limit-2505 inet6/filter/OUTPUT -j limit-2505 inet6/filter/limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1383 inet6/filter/limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1383 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1383 -j DROP Filter 2507 {"flow-limit":{"interval":5},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2506 inet/filter/FORWARD -j logaccept-final-166 inet/filter/INPUT -j limit-2506 inet/filter/INPUT -j logaccept-final-166 inet/filter/OUTPUT -j limit-2506 inet/filter/OUTPUT -j logaccept-final-166 inet/filter/limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1384 inet/filter/limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-166 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-166 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-166 -j ACCEPT inet/filter/logdrop-1384 -m limit --limit 1/second -j LOG inet/filter/logdrop-1384 -j DROP inet6/filter/FORWARD -j limit-2506 inet6/filter/FORWARD -j logaccept-final-166 inet6/filter/INPUT -j limit-2506 inet6/filter/INPUT -j logaccept-final-166 inet6/filter/OUTPUT -j limit-2506 inet6/filter/OUTPUT -j logaccept-final-166 inet6/filter/limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1384 inet6/filter/limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-166 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-166 -j ACCEPT inet6/filter/logdrop-1384 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1384 -j DROP Filter 2508 {"action":"pass","flow-limit":{"interval":5},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2507 inet/filter/INPUT -j limit-2507 inet/filter/OUTPUT -j limit-2507 inet/filter/limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1385 inet/filter/limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1385 -m limit --limit 1/second -j LOG inet/filter/logdrop-1385 -j DROP inet6/filter/FORWARD -j limit-2507 inet6/filter/INPUT -j limit-2507 inet6/filter/OUTPUT -j limit-2507 inet6/filter/limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1385 inet6/filter/limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1385 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1385 -j DROP Filter 2509 {"flow-limit":{"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2508 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2508 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2508 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1386 inet/filter/limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1386 -m limit --limit 1/second -j LOG inet/filter/logdrop-1386 -j DROP inet6/filter/FORWARD -j limit-2508 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2508 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2508 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1386 inet6/filter/limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1386 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1386 -j DROP Filter 2510 {"action":"pass","flow-limit":{"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2509 inet/filter/INPUT -j limit-2509 inet/filter/OUTPUT -j limit-2509 inet/filter/limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1387 inet/filter/limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1387 -m limit --limit 1/second -j LOG inet/filter/logdrop-1387 -j DROP inet6/filter/FORWARD -j limit-2509 inet6/filter/INPUT -j limit-2509 inet6/filter/OUTPUT -j limit-2509 inet6/filter/limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1387 inet6/filter/limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1387 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1387 -j DROP Filter 2511 {"flow-limit":{"interval":5},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2510 inet/filter/FORWARD -j logaccept-final-167 inet/filter/INPUT -j limit-2510 inet/filter/INPUT -j logaccept-final-167 inet/filter/OUTPUT -j limit-2510 inet/filter/OUTPUT -j logaccept-final-167 inet/filter/limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1388 inet/filter/limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-167 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-167 -j ACCEPT inet/filter/logdrop-1388 -m limit --limit 1/second -j LOG inet/filter/logdrop-1388 -j DROP inet6/filter/FORWARD -j limit-2510 inet6/filter/FORWARD -j logaccept-final-167 inet6/filter/INPUT -j limit-2510 inet6/filter/INPUT -j logaccept-final-167 inet6/filter/OUTPUT -j limit-2510 inet6/filter/OUTPUT -j logaccept-final-167 inet6/filter/limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1388 inet6/filter/limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-167 -j ACCEPT inet6/filter/logdrop-1388 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1388 -j DROP Filter 2512 {"action":"pass","flow-limit":{"interval":5},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2511 inet/filter/INPUT -j limit-2511 inet/filter/OUTPUT -j limit-2511 inet/filter/limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1389 inet/filter/limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1389 -m limit --limit 1/second -j LOG inet/filter/logdrop-1389 -j DROP inet6/filter/FORWARD -j limit-2511 inet6/filter/INPUT -j limit-2511 inet6/filter/OUTPUT -j limit-2511 inet6/filter/limit-2511 -m recent --name limit-2511 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1389 inet6/filter/logdrop-1389 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1389 -j DROP Filter 2513 {"flow-limit":{"interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2512 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2512 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2512 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1390 inet/filter/limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1390 -m limit --limit 1/second -j LOG inet/filter/logdrop-1390 -j DROP inet6/filter/FORWARD -j limit-2512 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2512 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2512 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1390 inet6/filter/limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1390 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1390 -j DROP Filter 2514 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2513 inet/filter/INPUT -j limit-2513 inet/filter/OUTPUT -j limit-2513 inet/filter/limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1391 inet/filter/limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1391 -m limit --limit 1/second -j LOG inet/filter/logdrop-1391 -j DROP inet6/filter/FORWARD -j limit-2513 inet6/filter/INPUT -j limit-2513 inet6/filter/OUTPUT -j limit-2513 inet6/filter/limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1391 inet6/filter/limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1391 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1391 -j DROP Filter 2515 {"flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2514 inet/filter/FORWARD -j logaccept-final-168 inet/filter/INPUT -j limit-2514 inet/filter/INPUT -j logaccept-final-168 inet/filter/OUTPUT -j limit-2514 inet/filter/OUTPUT -j logaccept-final-168 inet/filter/limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1392 inet/filter/limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-168 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-168 -j ACCEPT inet/filter/logdrop-1392 -m limit --limit 1/second -j LOG inet/filter/logdrop-1392 -j DROP inet6/filter/FORWARD -j limit-2514 inet6/filter/FORWARD -j logaccept-final-168 inet6/filter/INPUT -j limit-2514 inet6/filter/INPUT -j logaccept-final-168 inet6/filter/OUTPUT -j limit-2514 inet6/filter/OUTPUT -j logaccept-final-168 inet6/filter/limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1392 inet6/filter/limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-168 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-168 -j ACCEPT inet6/filter/logdrop-1392 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1392 -j DROP Filter 2516 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2515 inet/filter/INPUT -j limit-2515 inet/filter/OUTPUT -j limit-2515 inet/filter/limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1393 inet/filter/limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1393 -m limit --limit 1/second -j LOG inet/filter/logdrop-1393 -j DROP inet6/filter/FORWARD -j limit-2515 inet6/filter/INPUT -j limit-2515 inet6/filter/OUTPUT -j limit-2515 inet6/filter/limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1393 inet6/filter/limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1393 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1393 -j DROP Filter 2517 {"flow-limit":{"interval":5,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2516 inet/filter/FORWARD -j logaccept-final-169 inet/filter/INPUT -j limit-2516 inet/filter/INPUT -j logaccept-final-169 inet/filter/OUTPUT -j limit-2516 inet/filter/OUTPUT -j logaccept-final-169 inet/filter/limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1394 inet/filter/limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-169 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-169 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-169 -j ACCEPT inet/filter/logdrop-1394 -m limit --limit 1/second -j LOG inet/filter/logdrop-1394 -j DROP inet6/filter/FORWARD -j limit-2516 inet6/filter/FORWARD -j logaccept-final-169 inet6/filter/INPUT -j limit-2516 inet6/filter/INPUT -j logaccept-final-169 inet6/filter/OUTPUT -j limit-2516 inet6/filter/OUTPUT -j logaccept-final-169 inet6/filter/limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1394 inet6/filter/limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-169 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-169 -j ACCEPT inet6/filter/logdrop-1394 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1394 -j DROP Filter 2518 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2517 inet/filter/INPUT -j limit-2517 inet/filter/OUTPUT -j limit-2517 inet/filter/limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1395 inet/filter/limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1395 -m limit --limit 1/second -j LOG inet/filter/logdrop-1395 -j DROP inet6/filter/FORWARD -j limit-2517 inet6/filter/INPUT -j limit-2517 inet6/filter/OUTPUT -j limit-2517 inet6/filter/limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1395 inet6/filter/limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1395 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1395 -j DROP Filter 2519 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2518 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2518 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2518 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1396 inet/filter/limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1396 -m limit --limit 1/second -j LOG inet/filter/logdrop-1396 -j DROP inet6/filter/FORWARD -j limit-2518 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2518 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2518 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1396 inet6/filter/limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1396 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1396 -j DROP Filter 2520 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2519 inet/filter/INPUT -j limit-2519 inet/filter/OUTPUT -j limit-2519 inet/filter/limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1397 inet/filter/limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1397 -m limit --limit 1/second -j LOG inet/filter/logdrop-1397 -j DROP inet6/filter/FORWARD -j limit-2519 inet6/filter/INPUT -j limit-2519 inet6/filter/OUTPUT -j limit-2519 inet6/filter/limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1397 inet6/filter/limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1397 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1397 -j DROP Filter 2521 {"flow-limit":{"interval":5,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2520 inet/filter/FORWARD -j logaccept-final-170 inet/filter/INPUT -j limit-2520 inet/filter/INPUT -j logaccept-final-170 inet/filter/OUTPUT -j limit-2520 inet/filter/OUTPUT -j logaccept-final-170 inet/filter/limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1398 inet/filter/limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-170 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-170 -j ACCEPT inet/filter/logdrop-1398 -m limit --limit 1/second -j LOG inet/filter/logdrop-1398 -j DROP inet6/filter/FORWARD -j limit-2520 inet6/filter/FORWARD -j logaccept-final-170 inet6/filter/INPUT -j limit-2520 inet6/filter/INPUT -j logaccept-final-170 inet6/filter/OUTPUT -j limit-2520 inet6/filter/OUTPUT -j logaccept-final-170 inet6/filter/limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1398 inet6/filter/limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-170 -j ACCEPT inet6/filter/logdrop-1398 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1398 -j DROP Filter 2522 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2521 inet/filter/INPUT -j limit-2521 inet/filter/OUTPUT -j limit-2521 inet/filter/limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1399 inet/filter/limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1399 -m limit --limit 1/second -j LOG inet/filter/logdrop-1399 -j DROP inet6/filter/FORWARD -j limit-2521 inet6/filter/INPUT -j limit-2521 inet6/filter/OUTPUT -j limit-2521 inet6/filter/limit-2521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1399 inet6/filter/logdrop-1399 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1399 -j DROP Filter 2523 {"flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2522 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2522 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2522 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2522 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 inet/filter/logdrop-1400 -m limit --limit 1/second -j LOG inet/filter/logdrop-1400 -j DROP inet6/filter/FORWARD -j limit-2522 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2522 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2522 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 inet6/filter/logdrop-1400 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1400 -j DROP Filter 2524 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2523 inet/filter/INPUT -j limit-2523 inet/filter/OUTPUT -j limit-2523 inet/filter/limit-2523 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 inet/filter/logdrop-1401 -m limit --limit 1/second -j LOG inet/filter/logdrop-1401 -j DROP inet6/filter/FORWARD -j limit-2523 inet6/filter/INPUT -j limit-2523 inet6/filter/OUTPUT -j limit-2523 inet6/filter/limit-2523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 inet6/filter/logdrop-1401 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1401 -j DROP Filter 2525 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2524 inet/filter/FORWARD -j logaccept-final-171 inet/filter/INPUT -j limit-2524 inet/filter/INPUT -j logaccept-final-171 inet/filter/OUTPUT -j limit-2524 inet/filter/OUTPUT -j logaccept-final-171 inet/filter/limit-2524 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 inet/filter/logaccept-final-171 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-171 -j ACCEPT inet/filter/logdrop-1402 -m limit --limit 1/second -j LOG inet/filter/logdrop-1402 -j DROP inet6/filter/FORWARD -j limit-2524 inet6/filter/FORWARD -j logaccept-final-171 inet6/filter/INPUT -j limit-2524 inet6/filter/INPUT -j logaccept-final-171 inet6/filter/OUTPUT -j limit-2524 inet6/filter/OUTPUT -j logaccept-final-171 inet6/filter/limit-2524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 inet6/filter/logaccept-final-171 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-171 -j ACCEPT inet6/filter/logdrop-1402 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1402 -j DROP Filter 2526 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2525 inet/filter/INPUT -j limit-2525 inet/filter/OUTPUT -j limit-2525 inet/filter/limit-2525 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 inet/filter/limit-2525 -m limit --limit 1/second -j LOG inet/filter/logdrop-1403 -m limit --limit 1/second -j LOG inet/filter/logdrop-1403 -j DROP inet6/filter/FORWARD -j limit-2525 inet6/filter/INPUT -j limit-2525 inet6/filter/OUTPUT -j limit-2525 inet6/filter/limit-2525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 inet6/filter/limit-2525 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1403 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1403 -j DROP Filter 2527 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2526 inet/filter/FORWARD -j logaccept-final-172 inet/filter/INPUT -j limit-2526 inet/filter/INPUT -j logaccept-final-172 inet/filter/OUTPUT -j limit-2526 inet/filter/OUTPUT -j logaccept-final-172 inet/filter/limit-2526 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 inet/filter/logaccept-final-172 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-172 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-172 -j ACCEPT inet/filter/logdrop-1404 -m limit --limit 1/second -j LOG inet/filter/logdrop-1404 -j DROP inet6/filter/FORWARD -j limit-2526 inet6/filter/FORWARD -j logaccept-final-172 inet6/filter/INPUT -j limit-2526 inet6/filter/INPUT -j logaccept-final-172 inet6/filter/OUTPUT -j limit-2526 inet6/filter/OUTPUT -j logaccept-final-172 inet6/filter/limit-2526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 inet6/filter/logaccept-final-172 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-172 -j ACCEPT inet6/filter/logdrop-1404 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1404 -j DROP Filter 2528 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2527 inet/filter/INPUT -j limit-2527 inet/filter/OUTPUT -j limit-2527 inet/filter/limit-2527 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 inet/filter/limit-2527 -j TEE --gateway 10.0.0.1 inet/filter/limit-2527 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1405 -m limit --limit 1/second -j LOG inet/filter/logdrop-1405 -j DROP inet6/filter/FORWARD -j limit-2527 inet6/filter/INPUT -j limit-2527 inet6/filter/OUTPUT -j limit-2527 inet6/filter/limit-2527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 inet6/filter/limit-2527 -j TEE --gateway fc00::2 inet6/filter/logdrop-1405 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1405 -j DROP Filter 2529 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2528 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2528 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2528 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 inet/filter/logdrop-1406 -m limit --limit 1/second -j LOG inet/filter/logdrop-1406 -j DROP inet6/filter/FORWARD -j limit-2528 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2528 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2528 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 inet6/filter/logdrop-1406 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1406 -j DROP Filter 2530 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2529 inet/filter/INPUT -j limit-2529 inet/filter/OUTPUT -j limit-2529 inet/filter/limit-2529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 inet/filter/logdrop-1407 -m limit --limit 1/second -j LOG inet/filter/logdrop-1407 -j DROP inet6/filter/FORWARD -j limit-2529 inet6/filter/INPUT -j limit-2529 inet6/filter/OUTPUT -j limit-2529 inet6/filter/limit-2529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 inet6/filter/logdrop-1407 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1407 -j DROP Filter 2531 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2530 inet/filter/FORWARD -j logaccept-final-173 inet/filter/INPUT -j limit-2530 inet/filter/INPUT -j logaccept-final-173 inet/filter/OUTPUT -j limit-2530 inet/filter/OUTPUT -j logaccept-final-173 inet/filter/limit-2530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 inet/filter/logaccept-final-173 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-173 -j ACCEPT inet/filter/logdrop-1408 -m limit --limit 1/second -j LOG inet/filter/logdrop-1408 -j DROP inet6/filter/FORWARD -j limit-2530 inet6/filter/FORWARD -j logaccept-final-173 inet6/filter/INPUT -j limit-2530 inet6/filter/INPUT -j logaccept-final-173 inet6/filter/OUTPUT -j limit-2530 inet6/filter/OUTPUT -j logaccept-final-173 inet6/filter/limit-2530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 inet6/filter/logaccept-final-173 -j ACCEPT inet6/filter/logdrop-1408 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1408 -j DROP Filter 2532 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2531 inet/filter/INPUT -j limit-2531 inet/filter/OUTPUT -j limit-2531 inet/filter/limit-2531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 inet/filter/limit-2531 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1409 -m limit --limit 1/second -j LOG inet/filter/logdrop-1409 -j DROP inet6/filter/FORWARD -j limit-2531 inet6/filter/INPUT -j limit-2531 inet6/filter/OUTPUT -j limit-2531 inet6/filter/limit-2531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 inet6/filter/logdrop-1409 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1409 -j DROP Filter 2533 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2532 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2532 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2532 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1410 inet/filter/limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1410 -m limit --limit 1/second -j LOG inet/filter/logdrop-1410 -j DROP inet6/filter/FORWARD -j limit-2532 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2532 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2532 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1410 inet6/filter/limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1410 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1410 -j DROP Filter 2534 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2533 inet/filter/INPUT -j limit-2533 inet/filter/OUTPUT -j limit-2533 inet/filter/limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1411 inet/filter/limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1411 -m limit --limit 1/second -j LOG inet/filter/logdrop-1411 -j DROP inet6/filter/FORWARD -j limit-2533 inet6/filter/INPUT -j limit-2533 inet6/filter/OUTPUT -j limit-2533 inet6/filter/limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1411 inet6/filter/limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1411 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1411 -j DROP Filter 2535 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2534 inet/filter/FORWARD -j logaccept-final-174 inet/filter/INPUT -j limit-2534 inet/filter/INPUT -j logaccept-final-174 inet/filter/OUTPUT -j limit-2534 inet/filter/OUTPUT -j logaccept-final-174 inet/filter/limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1412 inet/filter/limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-174 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-174 -j ACCEPT inet/filter/logdrop-1412 -m limit --limit 1/second -j LOG inet/filter/logdrop-1412 -j DROP inet6/filter/FORWARD -j limit-2534 inet6/filter/FORWARD -j logaccept-final-174 inet6/filter/INPUT -j limit-2534 inet6/filter/INPUT -j logaccept-final-174 inet6/filter/OUTPUT -j limit-2534 inet6/filter/OUTPUT -j logaccept-final-174 inet6/filter/limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1412 inet6/filter/limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-174 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-174 -j ACCEPT inet6/filter/logdrop-1412 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1412 -j DROP Filter 2536 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2535 inet/filter/INPUT -j limit-2535 inet/filter/OUTPUT -j limit-2535 inet/filter/limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1413 inet/filter/limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1413 -m limit --limit 1/second -j LOG inet/filter/logdrop-1413 -j DROP inet6/filter/FORWARD -j limit-2535 inet6/filter/INPUT -j limit-2535 inet6/filter/OUTPUT -j limit-2535 inet6/filter/limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1413 inet6/filter/limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1413 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1413 -j DROP Filter 2537 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2536 inet/filter/FORWARD -j logaccept-final-175 inet/filter/INPUT -j limit-2536 inet/filter/INPUT -j logaccept-final-175 inet/filter/OUTPUT -j limit-2536 inet/filter/OUTPUT -j logaccept-final-175 inet/filter/limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1414 inet/filter/limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-175 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-175 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-175 -j ACCEPT inet/filter/logdrop-1414 -m limit --limit 1/second -j LOG inet/filter/logdrop-1414 -j DROP inet6/filter/FORWARD -j limit-2536 inet6/filter/FORWARD -j logaccept-final-175 inet6/filter/INPUT -j limit-2536 inet6/filter/INPUT -j logaccept-final-175 inet6/filter/OUTPUT -j limit-2536 inet6/filter/OUTPUT -j logaccept-final-175 inet6/filter/limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1414 inet6/filter/limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-175 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-175 -j ACCEPT inet6/filter/logdrop-1414 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1414 -j DROP Filter 2538 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2537 inet/filter/INPUT -j limit-2537 inet/filter/OUTPUT -j limit-2537 inet/filter/limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1415 inet/filter/limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1415 -m limit --limit 1/second -j LOG inet/filter/logdrop-1415 -j DROP inet6/filter/FORWARD -j limit-2537 inet6/filter/INPUT -j limit-2537 inet6/filter/OUTPUT -j limit-2537 inet6/filter/limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1415 inet6/filter/limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1415 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1415 -j DROP Filter 2539 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2538 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2538 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2538 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1416 inet/filter/limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1416 -m limit --limit 1/second -j LOG inet/filter/logdrop-1416 -j DROP inet6/filter/FORWARD -j limit-2538 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2538 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2538 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1416 inet6/filter/limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1416 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1416 -j DROP Filter 2540 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2539 inet/filter/INPUT -j limit-2539 inet/filter/OUTPUT -j limit-2539 inet/filter/limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1417 inet/filter/limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1417 -m limit --limit 1/second -j LOG inet/filter/logdrop-1417 -j DROP inet6/filter/FORWARD -j limit-2539 inet6/filter/INPUT -j limit-2539 inet6/filter/OUTPUT -j limit-2539 inet6/filter/limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1417 inet6/filter/limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1417 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1417 -j DROP Filter 2541 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2540 inet/filter/FORWARD -j logaccept-final-176 inet/filter/INPUT -j limit-2540 inet/filter/INPUT -j logaccept-final-176 inet/filter/OUTPUT -j limit-2540 inet/filter/OUTPUT -j logaccept-final-176 inet/filter/limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1418 inet/filter/limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-176 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-176 -j ACCEPT inet/filter/logdrop-1418 -m limit --limit 1/second -j LOG inet/filter/logdrop-1418 -j DROP inet6/filter/FORWARD -j limit-2540 inet6/filter/FORWARD -j logaccept-final-176 inet6/filter/INPUT -j limit-2540 inet6/filter/INPUT -j logaccept-final-176 inet6/filter/OUTPUT -j limit-2540 inet6/filter/OUTPUT -j logaccept-final-176 inet6/filter/limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1418 inet6/filter/limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-176 -j ACCEPT inet6/filter/logdrop-1418 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1418 -j DROP Filter 2542 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2541 inet/filter/INPUT -j limit-2541 inet/filter/OUTPUT -j limit-2541 inet/filter/limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1419 inet/filter/limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1419 -m limit --limit 1/second -j LOG inet/filter/logdrop-1419 -j DROP inet6/filter/FORWARD -j limit-2541 inet6/filter/INPUT -j limit-2541 inet6/filter/OUTPUT -j limit-2541 inet6/filter/limit-2541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1419 inet6/filter/logdrop-1419 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1419 -j DROP Filter 2543 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2542 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2542 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2542 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2542 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 inet/filter/logdrop-1420 -m limit --limit 1/second -j LOG inet/filter/logdrop-1420 -j DROP inet6/filter/FORWARD -j limit-2542 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2542 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2542 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 inet6/filter/logdrop-1420 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1420 -j DROP Filter 2544 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2543 inet/filter/INPUT -j limit-2543 inet/filter/OUTPUT -j limit-2543 inet/filter/limit-2543 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 inet/filter/logdrop-1421 -m limit --limit 1/second -j LOG inet/filter/logdrop-1421 -j DROP inet6/filter/FORWARD -j limit-2543 inet6/filter/INPUT -j limit-2543 inet6/filter/OUTPUT -j limit-2543 inet6/filter/limit-2543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 inet6/filter/logdrop-1421 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1421 -j DROP Filter 2545 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2544 inet/filter/FORWARD -j logaccept-final-177 inet/filter/INPUT -j limit-2544 inet/filter/INPUT -j logaccept-final-177 inet/filter/OUTPUT -j limit-2544 inet/filter/OUTPUT -j logaccept-final-177 inet/filter/limit-2544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 inet/filter/logaccept-final-177 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-177 -j ACCEPT inet/filter/logdrop-1422 -m limit --limit 1/second -j LOG inet/filter/logdrop-1422 -j DROP inet6/filter/FORWARD -j limit-2544 inet6/filter/FORWARD -j logaccept-final-177 inet6/filter/INPUT -j limit-2544 inet6/filter/INPUT -j logaccept-final-177 inet6/filter/OUTPUT -j limit-2544 inet6/filter/OUTPUT -j logaccept-final-177 inet6/filter/limit-2544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 inet6/filter/logaccept-final-177 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-177 -j ACCEPT inet6/filter/logdrop-1422 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1422 -j DROP Filter 2546 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2545 inet/filter/INPUT -j limit-2545 inet/filter/OUTPUT -j limit-2545 inet/filter/limit-2545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 inet/filter/limit-2545 -m limit --limit 1/second -j LOG inet/filter/logdrop-1423 -m limit --limit 1/second -j LOG inet/filter/logdrop-1423 -j DROP inet6/filter/FORWARD -j limit-2545 inet6/filter/INPUT -j limit-2545 inet6/filter/OUTPUT -j limit-2545 inet6/filter/limit-2545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 inet6/filter/limit-2545 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1423 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1423 -j DROP Filter 2547 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2546 inet/filter/FORWARD -j logaccept-final-178 inet/filter/INPUT -j limit-2546 inet/filter/INPUT -j logaccept-final-178 inet/filter/OUTPUT -j limit-2546 inet/filter/OUTPUT -j logaccept-final-178 inet/filter/limit-2546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 inet/filter/logaccept-final-178 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-178 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-178 -j ACCEPT inet/filter/logdrop-1424 -m limit --limit 1/second -j LOG inet/filter/logdrop-1424 -j DROP inet6/filter/FORWARD -j limit-2546 inet6/filter/FORWARD -j logaccept-final-178 inet6/filter/INPUT -j limit-2546 inet6/filter/INPUT -j logaccept-final-178 inet6/filter/OUTPUT -j limit-2546 inet6/filter/OUTPUT -j logaccept-final-178 inet6/filter/limit-2546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 inet6/filter/logaccept-final-178 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-178 -j ACCEPT inet6/filter/logdrop-1424 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1424 -j DROP Filter 2548 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2547 inet/filter/INPUT -j limit-2547 inet/filter/OUTPUT -j limit-2547 inet/filter/limit-2547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 inet/filter/limit-2547 -j TEE --gateway 10.0.0.1 inet/filter/limit-2547 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1425 -m limit --limit 1/second -j LOG inet/filter/logdrop-1425 -j DROP inet6/filter/FORWARD -j limit-2547 inet6/filter/INPUT -j limit-2547 inet6/filter/OUTPUT -j limit-2547 inet6/filter/limit-2547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 inet6/filter/limit-2547 -j TEE --gateway fc00::2 inet6/filter/logdrop-1425 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1425 -j DROP Filter 2549 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2548 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2548 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2548 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 inet/filter/logdrop-1426 -m limit --limit 1/second -j LOG inet/filter/logdrop-1426 -j DROP inet6/filter/FORWARD -j limit-2548 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2548 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2548 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 inet6/filter/logdrop-1426 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1426 -j DROP Filter 2550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2549 inet/filter/INPUT -j limit-2549 inet/filter/OUTPUT -j limit-2549 inet/filter/limit-2549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 inet/filter/logdrop-1427 -m limit --limit 1/second -j LOG inet/filter/logdrop-1427 -j DROP inet6/filter/FORWARD -j limit-2549 inet6/filter/INPUT -j limit-2549 inet6/filter/OUTPUT -j limit-2549 inet6/filter/limit-2549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 inet6/filter/logdrop-1427 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1427 -j DROP Filter 2551 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2550 inet/filter/FORWARD -j logaccept-final-179 inet/filter/INPUT -j limit-2550 inet/filter/INPUT -j logaccept-final-179 inet/filter/OUTPUT -j limit-2550 inet/filter/OUTPUT -j logaccept-final-179 inet/filter/limit-2550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 inet/filter/logaccept-final-179 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-179 -j ACCEPT inet/filter/logdrop-1428 -m limit --limit 1/second -j LOG inet/filter/logdrop-1428 -j DROP inet6/filter/FORWARD -j limit-2550 inet6/filter/FORWARD -j logaccept-final-179 inet6/filter/INPUT -j limit-2550 inet6/filter/INPUT -j logaccept-final-179 inet6/filter/OUTPUT -j limit-2550 inet6/filter/OUTPUT -j logaccept-final-179 inet6/filter/limit-2550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 inet6/filter/logaccept-final-179 -j ACCEPT inet6/filter/logdrop-1428 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1428 -j DROP Filter 2552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2551 inet/filter/INPUT -j limit-2551 inet/filter/OUTPUT -j limit-2551 inet/filter/limit-2551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 inet/filter/limit-2551 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1429 -m limit --limit 1/second -j LOG inet/filter/logdrop-1429 -j DROP inet6/filter/FORWARD -j limit-2551 inet6/filter/INPUT -j limit-2551 inet6/filter/OUTPUT -j limit-2551 inet6/filter/limit-2551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 inet6/filter/logdrop-1429 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1429 -j DROP Filter 2553 {"flow-limit":{"interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2552 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2552 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2552 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1430 inet/filter/limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1430 -m limit --limit 1/second -j LOG inet/filter/logdrop-1430 -j DROP inet6/filter/FORWARD -j limit-2552 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2552 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2552 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1430 inet6/filter/limit-2552 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1430 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1430 -j DROP Filter 2554 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2553 inet/filter/INPUT -j limit-2553 inet/filter/OUTPUT -j limit-2553 inet/filter/limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1431 inet/filter/limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1431 -m limit --limit 1/second -j LOG inet/filter/logdrop-1431 -j DROP inet6/filter/FORWARD -j limit-2553 inet6/filter/INPUT -j limit-2553 inet6/filter/OUTPUT -j limit-2553 inet6/filter/limit-2553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1431 inet6/filter/limit-2553 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1431 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1431 -j DROP Filter 2555 {"flow-limit":{"interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2554 inet/filter/FORWARD -j logaccept-final-180 inet/filter/INPUT -j limit-2554 inet/filter/INPUT -j logaccept-final-180 inet/filter/OUTPUT -j limit-2554 inet/filter/OUTPUT -j logaccept-final-180 inet/filter/limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1432 inet/filter/limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-180 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-180 -j ACCEPT inet/filter/logdrop-1432 -m limit --limit 1/second -j LOG inet/filter/logdrop-1432 -j DROP inet6/filter/FORWARD -j limit-2554 inet6/filter/FORWARD -j logaccept-final-180 inet6/filter/INPUT -j limit-2554 inet6/filter/INPUT -j logaccept-final-180 inet6/filter/OUTPUT -j limit-2554 inet6/filter/OUTPUT -j logaccept-final-180 inet6/filter/limit-2554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1432 inet6/filter/limit-2554 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-180 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-180 -j ACCEPT inet6/filter/logdrop-1432 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1432 -j DROP Filter 2556 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2555 inet/filter/INPUT -j limit-2555 inet/filter/OUTPUT -j limit-2555 inet/filter/limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1433 inet/filter/limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1433 -m limit --limit 1/second -j LOG inet/filter/logdrop-1433 -j DROP inet6/filter/FORWARD -j limit-2555 inet6/filter/INPUT -j limit-2555 inet6/filter/OUTPUT -j limit-2555 inet6/filter/limit-2555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1433 inet6/filter/limit-2555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1433 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1433 -j DROP Filter 2557 {"flow-limit":{"interval":5,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2556 inet/filter/FORWARD -j logaccept-final-181 inet/filter/INPUT -j limit-2556 inet/filter/INPUT -j logaccept-final-181 inet/filter/OUTPUT -j limit-2556 inet/filter/OUTPUT -j logaccept-final-181 inet/filter/limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1434 inet/filter/limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-181 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-181 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-181 -j ACCEPT inet/filter/logdrop-1434 -m limit --limit 1/second -j LOG inet/filter/logdrop-1434 -j DROP inet6/filter/FORWARD -j limit-2556 inet6/filter/FORWARD -j logaccept-final-181 inet6/filter/INPUT -j limit-2556 inet6/filter/INPUT -j logaccept-final-181 inet6/filter/OUTPUT -j limit-2556 inet6/filter/OUTPUT -j logaccept-final-181 inet6/filter/limit-2556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1434 inet6/filter/limit-2556 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-181 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-181 -j ACCEPT inet6/filter/logdrop-1434 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1434 -j DROP Filter 2558 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2557 inet/filter/INPUT -j limit-2557 inet/filter/OUTPUT -j limit-2557 inet/filter/limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1435 inet/filter/limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1435 -m limit --limit 1/second -j LOG inet/filter/logdrop-1435 -j DROP inet6/filter/FORWARD -j limit-2557 inet6/filter/INPUT -j limit-2557 inet6/filter/OUTPUT -j limit-2557 inet6/filter/limit-2557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1435 inet6/filter/limit-2557 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1435 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1435 -j DROP Filter 2559 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2558 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2558 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2558 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1436 inet/filter/limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1436 -m limit --limit 1/second -j LOG inet/filter/logdrop-1436 -j DROP inet6/filter/FORWARD -j limit-2558 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2558 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2558 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1436 inet6/filter/limit-2558 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1436 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1436 -j DROP Filter 2560 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2559 inet/filter/INPUT -j limit-2559 inet/filter/OUTPUT -j limit-2559 inet/filter/limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1437 inet/filter/limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1437 -m limit --limit 1/second -j LOG inet/filter/logdrop-1437 -j DROP inet6/filter/FORWARD -j limit-2559 inet6/filter/INPUT -j limit-2559 inet6/filter/OUTPUT -j limit-2559 inet6/filter/limit-2559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1437 inet6/filter/limit-2559 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1437 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1437 -j DROP Filter 2561 {"flow-limit":{"interval":5,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2560 inet/filter/FORWARD -j logaccept-final-182 inet/filter/INPUT -j limit-2560 inet/filter/INPUT -j logaccept-final-182 inet/filter/OUTPUT -j limit-2560 inet/filter/OUTPUT -j logaccept-final-182 inet/filter/limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1438 inet/filter/limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-182 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-182 -j ACCEPT inet/filter/logdrop-1438 -m limit --limit 1/second -j LOG inet/filter/logdrop-1438 -j DROP inet6/filter/FORWARD -j limit-2560 inet6/filter/FORWARD -j logaccept-final-182 inet6/filter/INPUT -j limit-2560 inet6/filter/INPUT -j logaccept-final-182 inet6/filter/OUTPUT -j limit-2560 inet6/filter/OUTPUT -j logaccept-final-182 inet6/filter/limit-2560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1438 inet6/filter/limit-2560 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-182 -j ACCEPT inet6/filter/logdrop-1438 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1438 -j DROP Filter 2562 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2561 inet/filter/INPUT -j limit-2561 inet/filter/OUTPUT -j limit-2561 inet/filter/limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1439 inet/filter/limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1439 -m limit --limit 1/second -j LOG inet/filter/logdrop-1439 -j DROP inet6/filter/FORWARD -j limit-2561 inet6/filter/INPUT -j limit-2561 inet6/filter/OUTPUT -j limit-2561 inet6/filter/limit-2561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1439 inet6/filter/logdrop-1439 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1439 -j DROP Filter 2563 {"flow-limit":{"interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2562 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2562 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2562 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 inet/filter/logdrop-1440 -m limit --limit 1/second -j LOG inet/filter/logdrop-1440 -j DROP inet6/filter/FORWARD -j limit-2562 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2562 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2562 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 inet6/filter/logdrop-1440 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1440 -j DROP Filter 2564 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2563 inet/filter/INPUT -j limit-2563 inet/filter/OUTPUT -j limit-2563 inet/filter/limit-2563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 inet/filter/logdrop-1441 -m limit --limit 1/second -j LOG inet/filter/logdrop-1441 -j DROP inet6/filter/FORWARD -j limit-2563 inet6/filter/INPUT -j limit-2563 inet6/filter/OUTPUT -j limit-2563 inet6/filter/limit-2563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 inet6/filter/logdrop-1441 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1441 -j DROP Filter 2565 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2564 inet/filter/FORWARD -j logaccept-final-183 inet/filter/INPUT -j limit-2564 inet/filter/INPUT -j logaccept-final-183 inet/filter/OUTPUT -j limit-2564 inet/filter/OUTPUT -j logaccept-final-183 inet/filter/limit-2564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 inet/filter/logaccept-final-183 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-183 -j ACCEPT inet/filter/logdrop-1442 -m limit --limit 1/second -j LOG inet/filter/logdrop-1442 -j DROP inet6/filter/FORWARD -j limit-2564 inet6/filter/FORWARD -j logaccept-final-183 inet6/filter/INPUT -j limit-2564 inet6/filter/INPUT -j logaccept-final-183 inet6/filter/OUTPUT -j limit-2564 inet6/filter/OUTPUT -j logaccept-final-183 inet6/filter/limit-2564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 inet6/filter/logaccept-final-183 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-183 -j ACCEPT inet6/filter/logdrop-1442 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1442 -j DROP Filter 2566 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2565 inet/filter/INPUT -j limit-2565 inet/filter/OUTPUT -j limit-2565 inet/filter/limit-2565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 inet/filter/limit-2565 -m limit --limit 1/second -j LOG inet/filter/logdrop-1443 -m limit --limit 1/second -j LOG inet/filter/logdrop-1443 -j DROP inet6/filter/FORWARD -j limit-2565 inet6/filter/INPUT -j limit-2565 inet6/filter/OUTPUT -j limit-2565 inet6/filter/limit-2565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 inet6/filter/limit-2565 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1443 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1443 -j DROP Filter 2567 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2566 inet/filter/FORWARD -j logaccept-final-184 inet/filter/INPUT -j limit-2566 inet/filter/INPUT -j logaccept-final-184 inet/filter/OUTPUT -j limit-2566 inet/filter/OUTPUT -j logaccept-final-184 inet/filter/limit-2566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 inet/filter/logaccept-final-184 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-184 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-184 -j ACCEPT inet/filter/logdrop-1444 -m limit --limit 1/second -j LOG inet/filter/logdrop-1444 -j DROP inet6/filter/FORWARD -j limit-2566 inet6/filter/FORWARD -j logaccept-final-184 inet6/filter/INPUT -j limit-2566 inet6/filter/INPUT -j logaccept-final-184 inet6/filter/OUTPUT -j limit-2566 inet6/filter/OUTPUT -j logaccept-final-184 inet6/filter/limit-2566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 inet6/filter/logaccept-final-184 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-184 -j ACCEPT inet6/filter/logdrop-1444 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1444 -j DROP Filter 2568 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2567 inet/filter/INPUT -j limit-2567 inet/filter/OUTPUT -j limit-2567 inet/filter/limit-2567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 inet/filter/limit-2567 -j TEE --gateway 10.0.0.1 inet/filter/limit-2567 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1445 -m limit --limit 1/second -j LOG inet/filter/logdrop-1445 -j DROP inet6/filter/FORWARD -j limit-2567 inet6/filter/INPUT -j limit-2567 inet6/filter/OUTPUT -j limit-2567 inet6/filter/limit-2567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 inet6/filter/limit-2567 -j TEE --gateway fc00::2 inet6/filter/logdrop-1445 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1445 -j DROP Filter 2569 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2568 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2568 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2568 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2568 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 inet/filter/logdrop-1446 -m limit --limit 1/second -j LOG inet/filter/logdrop-1446 -j DROP inet6/filter/FORWARD -j limit-2568 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2568 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2568 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2568 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 inet6/filter/logdrop-1446 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1446 -j DROP Filter 2570 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2569 inet/filter/INPUT -j limit-2569 inet/filter/OUTPUT -j limit-2569 inet/filter/limit-2569 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 inet/filter/logdrop-1447 -m limit --limit 1/second -j LOG inet/filter/logdrop-1447 -j DROP inet6/filter/FORWARD -j limit-2569 inet6/filter/INPUT -j limit-2569 inet6/filter/OUTPUT -j limit-2569 inet6/filter/limit-2569 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 inet6/filter/logdrop-1447 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1447 -j DROP Filter 2571 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2570 inet/filter/FORWARD -j logaccept-final-185 inet/filter/INPUT -j limit-2570 inet/filter/INPUT -j logaccept-final-185 inet/filter/OUTPUT -j limit-2570 inet/filter/OUTPUT -j logaccept-final-185 inet/filter/limit-2570 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 inet/filter/logaccept-final-185 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-185 -j ACCEPT inet/filter/logdrop-1448 -m limit --limit 1/second -j LOG inet/filter/logdrop-1448 -j DROP inet6/filter/FORWARD -j limit-2570 inet6/filter/FORWARD -j logaccept-final-185 inet6/filter/INPUT -j limit-2570 inet6/filter/INPUT -j logaccept-final-185 inet6/filter/OUTPUT -j limit-2570 inet6/filter/OUTPUT -j logaccept-final-185 inet6/filter/limit-2570 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 inet6/filter/logaccept-final-185 -j ACCEPT inet6/filter/logdrop-1448 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1448 -j DROP Filter 2572 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2571 inet/filter/INPUT -j limit-2571 inet/filter/OUTPUT -j limit-2571 inet/filter/limit-2571 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 inet/filter/limit-2571 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1449 -m limit --limit 1/second -j LOG inet/filter/logdrop-1449 -j DROP inet6/filter/FORWARD -j limit-2571 inet6/filter/INPUT -j limit-2571 inet6/filter/OUTPUT -j limit-2571 inet6/filter/limit-2571 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 inet6/filter/logdrop-1449 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1449 -j DROP Filter 2573 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2572 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2572 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2572 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1450 inet/filter/limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1450 -m limit --limit 1/second -j LOG inet/filter/logdrop-1450 -j DROP inet6/filter/FORWARD -j limit-2572 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2572 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2572 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1450 inet6/filter/limit-2572 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1450 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1450 -j DROP Filter 2574 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2573 inet/filter/INPUT -j limit-2573 inet/filter/OUTPUT -j limit-2573 inet/filter/limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1451 inet/filter/limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1451 -m limit --limit 1/second -j LOG inet/filter/logdrop-1451 -j DROP inet6/filter/FORWARD -j limit-2573 inet6/filter/INPUT -j limit-2573 inet6/filter/OUTPUT -j limit-2573 inet6/filter/limit-2573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1451 inet6/filter/limit-2573 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1451 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1451 -j DROP Filter 2575 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2574 inet/filter/FORWARD -j logaccept-final-186 inet/filter/INPUT -j limit-2574 inet/filter/INPUT -j logaccept-final-186 inet/filter/OUTPUT -j limit-2574 inet/filter/OUTPUT -j logaccept-final-186 inet/filter/limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1452 inet/filter/limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-186 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-186 -j ACCEPT inet/filter/logdrop-1452 -m limit --limit 1/second -j LOG inet/filter/logdrop-1452 -j DROP inet6/filter/FORWARD -j limit-2574 inet6/filter/FORWARD -j logaccept-final-186 inet6/filter/INPUT -j limit-2574 inet6/filter/INPUT -j logaccept-final-186 inet6/filter/OUTPUT -j limit-2574 inet6/filter/OUTPUT -j logaccept-final-186 inet6/filter/limit-2574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1452 inet6/filter/limit-2574 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-186 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-186 -j ACCEPT inet6/filter/logdrop-1452 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1452 -j DROP Filter 2576 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2575 inet/filter/INPUT -j limit-2575 inet/filter/OUTPUT -j limit-2575 inet/filter/limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1453 inet/filter/limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1453 -m limit --limit 1/second -j LOG inet/filter/logdrop-1453 -j DROP inet6/filter/FORWARD -j limit-2575 inet6/filter/INPUT -j limit-2575 inet6/filter/OUTPUT -j limit-2575 inet6/filter/limit-2575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1453 inet6/filter/limit-2575 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1453 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1453 -j DROP Filter 2577 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2576 inet/filter/FORWARD -j logaccept-final-187 inet/filter/INPUT -j limit-2576 inet/filter/INPUT -j logaccept-final-187 inet/filter/OUTPUT -j limit-2576 inet/filter/OUTPUT -j logaccept-final-187 inet/filter/limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1454 inet/filter/limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-187 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-187 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-187 -j ACCEPT inet/filter/logdrop-1454 -m limit --limit 1/second -j LOG inet/filter/logdrop-1454 -j DROP inet6/filter/FORWARD -j limit-2576 inet6/filter/FORWARD -j logaccept-final-187 inet6/filter/INPUT -j limit-2576 inet6/filter/INPUT -j logaccept-final-187 inet6/filter/OUTPUT -j limit-2576 inet6/filter/OUTPUT -j logaccept-final-187 inet6/filter/limit-2576 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1454 inet6/filter/limit-2576 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-187 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-187 -j ACCEPT inet6/filter/logdrop-1454 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1454 -j DROP Filter 2578 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2577 inet/filter/INPUT -j limit-2577 inet/filter/OUTPUT -j limit-2577 inet/filter/limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1455 inet/filter/limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1455 -m limit --limit 1/second -j LOG inet/filter/logdrop-1455 -j DROP inet6/filter/FORWARD -j limit-2577 inet6/filter/INPUT -j limit-2577 inet6/filter/OUTPUT -j limit-2577 inet6/filter/limit-2577 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1455 inet6/filter/limit-2577 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1455 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1455 -j DROP Filter 2579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2578 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2578 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2578 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1456 inet/filter/limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1456 -m limit --limit 1/second -j LOG inet/filter/logdrop-1456 -j DROP inet6/filter/FORWARD -j limit-2578 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2578 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2578 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2578 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1456 inet6/filter/limit-2578 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1456 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1456 -j DROP Filter 2580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2579 inet/filter/INPUT -j limit-2579 inet/filter/OUTPUT -j limit-2579 inet/filter/limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1457 inet/filter/limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1457 -m limit --limit 1/second -j LOG inet/filter/logdrop-1457 -j DROP inet6/filter/FORWARD -j limit-2579 inet6/filter/INPUT -j limit-2579 inet6/filter/OUTPUT -j limit-2579 inet6/filter/limit-2579 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1457 inet6/filter/limit-2579 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1457 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1457 -j DROP Filter 2581 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2580 inet/filter/FORWARD -j logaccept-final-188 inet/filter/INPUT -j limit-2580 inet/filter/INPUT -j logaccept-final-188 inet/filter/OUTPUT -j limit-2580 inet/filter/OUTPUT -j logaccept-final-188 inet/filter/limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1458 inet/filter/limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-188 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-188 -j ACCEPT inet/filter/logdrop-1458 -m limit --limit 1/second -j LOG inet/filter/logdrop-1458 -j DROP inet6/filter/FORWARD -j limit-2580 inet6/filter/FORWARD -j logaccept-final-188 inet6/filter/INPUT -j limit-2580 inet6/filter/INPUT -j logaccept-final-188 inet6/filter/OUTPUT -j limit-2580 inet6/filter/OUTPUT -j logaccept-final-188 inet6/filter/limit-2580 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1458 inet6/filter/limit-2580 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-188 -j ACCEPT inet6/filter/logdrop-1458 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1458 -j DROP Filter 2582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2581 inet/filter/INPUT -j limit-2581 inet/filter/OUTPUT -j limit-2581 inet/filter/limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1459 inet/filter/limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1459 -m limit --limit 1/second -j LOG inet/filter/logdrop-1459 -j DROP inet6/filter/FORWARD -j limit-2581 inet6/filter/INPUT -j limit-2581 inet6/filter/OUTPUT -j limit-2581 inet6/filter/limit-2581 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1459 inet6/filter/logdrop-1459 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1459 -j DROP Filter 2583 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2582 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2582 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2582 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 inet/filter/logdrop-1460 -m limit --limit 1/second -j LOG inet/filter/logdrop-1460 -j DROP inet6/filter/FORWARD -j limit-2582 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2582 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2582 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 inet6/filter/logdrop-1460 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1460 -j DROP Filter 2584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2583 inet/filter/INPUT -j limit-2583 inet/filter/OUTPUT -j limit-2583 inet/filter/limit-2583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 inet/filter/logdrop-1461 -m limit --limit 1/second -j LOG inet/filter/logdrop-1461 -j DROP inet6/filter/FORWARD -j limit-2583 inet6/filter/INPUT -j limit-2583 inet6/filter/OUTPUT -j limit-2583 inet6/filter/limit-2583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 inet6/filter/logdrop-1461 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1461 -j DROP Filter 2585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2584 inet/filter/FORWARD -j logaccept-final-189 inet/filter/INPUT -j limit-2584 inet/filter/INPUT -j logaccept-final-189 inet/filter/OUTPUT -j limit-2584 inet/filter/OUTPUT -j logaccept-final-189 inet/filter/limit-2584 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 inet/filter/logaccept-final-189 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-189 -j ACCEPT inet/filter/logdrop-1462 -m limit --limit 1/second -j LOG inet/filter/logdrop-1462 -j DROP inet6/filter/FORWARD -j limit-2584 inet6/filter/FORWARD -j logaccept-final-189 inet6/filter/INPUT -j limit-2584 inet6/filter/INPUT -j logaccept-final-189 inet6/filter/OUTPUT -j limit-2584 inet6/filter/OUTPUT -j logaccept-final-189 inet6/filter/limit-2584 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 inet6/filter/logaccept-final-189 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-189 -j ACCEPT inet6/filter/logdrop-1462 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1462 -j DROP Filter 2586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2585 inet/filter/INPUT -j limit-2585 inet/filter/OUTPUT -j limit-2585 inet/filter/limit-2585 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 inet/filter/limit-2585 -m limit --limit 1/second -j LOG inet/filter/logdrop-1463 -m limit --limit 1/second -j LOG inet/filter/logdrop-1463 -j DROP inet6/filter/FORWARD -j limit-2585 inet6/filter/INPUT -j limit-2585 inet6/filter/OUTPUT -j limit-2585 inet6/filter/limit-2585 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 inet6/filter/limit-2585 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1463 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1463 -j DROP Filter 2587 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2586 inet/filter/FORWARD -j logaccept-final-190 inet/filter/INPUT -j limit-2586 inet/filter/INPUT -j logaccept-final-190 inet/filter/OUTPUT -j limit-2586 inet/filter/OUTPUT -j logaccept-final-190 inet/filter/limit-2586 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 inet/filter/logaccept-final-190 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-190 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-190 -j ACCEPT inet/filter/logdrop-1464 -m limit --limit 1/second -j LOG inet/filter/logdrop-1464 -j DROP inet6/filter/FORWARD -j limit-2586 inet6/filter/FORWARD -j logaccept-final-190 inet6/filter/INPUT -j limit-2586 inet6/filter/INPUT -j logaccept-final-190 inet6/filter/OUTPUT -j limit-2586 inet6/filter/OUTPUT -j logaccept-final-190 inet6/filter/limit-2586 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 inet6/filter/logaccept-final-190 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-190 -j ACCEPT inet6/filter/logdrop-1464 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1464 -j DROP Filter 2588 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2587 inet/filter/INPUT -j limit-2587 inet/filter/OUTPUT -j limit-2587 inet/filter/limit-2587 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 inet/filter/limit-2587 -j TEE --gateway 10.0.0.1 inet/filter/limit-2587 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1465 -m limit --limit 1/second -j LOG inet/filter/logdrop-1465 -j DROP inet6/filter/FORWARD -j limit-2587 inet6/filter/INPUT -j limit-2587 inet6/filter/OUTPUT -j limit-2587 inet6/filter/limit-2587 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 inet6/filter/limit-2587 -j TEE --gateway fc00::2 inet6/filter/logdrop-1465 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1465 -j DROP Filter 2589 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2588 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2588 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2588 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2588 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 inet/filter/logdrop-1466 -m limit --limit 1/second -j LOG inet/filter/logdrop-1466 -j DROP inet6/filter/FORWARD -j limit-2588 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2588 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2588 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2588 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 inet6/filter/logdrop-1466 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1466 -j DROP Filter 2590 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2589 inet/filter/INPUT -j limit-2589 inet/filter/OUTPUT -j limit-2589 inet/filter/limit-2589 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 inet/filter/logdrop-1467 -m limit --limit 1/second -j LOG inet/filter/logdrop-1467 -j DROP inet6/filter/FORWARD -j limit-2589 inet6/filter/INPUT -j limit-2589 inet6/filter/OUTPUT -j limit-2589 inet6/filter/limit-2589 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 inet6/filter/logdrop-1467 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1467 -j DROP Filter 2591 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2590 inet/filter/FORWARD -j logaccept-final-191 inet/filter/INPUT -j limit-2590 inet/filter/INPUT -j logaccept-final-191 inet/filter/OUTPUT -j limit-2590 inet/filter/OUTPUT -j logaccept-final-191 inet/filter/limit-2590 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 inet/filter/logaccept-final-191 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-191 -j ACCEPT inet/filter/logdrop-1468 -m limit --limit 1/second -j LOG inet/filter/logdrop-1468 -j DROP inet6/filter/FORWARD -j limit-2590 inet6/filter/FORWARD -j logaccept-final-191 inet6/filter/INPUT -j limit-2590 inet6/filter/INPUT -j logaccept-final-191 inet6/filter/OUTPUT -j limit-2590 inet6/filter/OUTPUT -j logaccept-final-191 inet6/filter/limit-2590 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 inet6/filter/logaccept-final-191 -j ACCEPT inet6/filter/logdrop-1468 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1468 -j DROP Filter 2592 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2591 inet/filter/INPUT -j limit-2591 inet/filter/OUTPUT -j limit-2591 inet/filter/limit-2591 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 inet/filter/limit-2591 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1469 -m limit --limit 1/second -j LOG inet/filter/logdrop-1469 -j DROP inet6/filter/FORWARD -j limit-2591 inet6/filter/INPUT -j limit-2591 inet6/filter/OUTPUT -j limit-2591 inet6/filter/limit-2591 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 inet6/filter/logdrop-1469 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1469 -j DROP Filter 2593 {"flow-limit":{"interval":5,"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2592 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2592 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2592 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1470 inet/filter/limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1470 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1470 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1470 -j DROP inet6/filter/FORWARD -j limit-2592 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2592 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2592 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1470 inet6/filter/limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1470 -j TEE --gateway fc00::2 inet6/filter/logdrop-1470 -j DROP Filter 2594 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2593 inet/filter/INPUT -j limit-2593 inet/filter/OUTPUT -j limit-2593 inet/filter/limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1471 inet/filter/limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1471 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1471 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1471 -j DROP inet6/filter/FORWARD -j limit-2593 inet6/filter/INPUT -j limit-2593 inet6/filter/OUTPUT -j limit-2593 inet6/filter/limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1471 inet6/filter/limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1471 -j TEE --gateway fc00::2 inet6/filter/logdrop-1471 -j DROP Filter 2595 {"flow-limit":{"interval":5,"log":"mirror"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2594 inet/filter/FORWARD -j logaccept-final-192 inet/filter/INPUT -j limit-2594 inet/filter/INPUT -j logaccept-final-192 inet/filter/OUTPUT -j limit-2594 inet/filter/OUTPUT -j logaccept-final-192 inet/filter/limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1472 inet/filter/limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-192 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-192 -j ACCEPT inet/filter/logdrop-1472 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1472 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1472 -j DROP inet6/filter/FORWARD -j limit-2594 inet6/filter/FORWARD -j logaccept-final-192 inet6/filter/INPUT -j limit-2594 inet6/filter/INPUT -j logaccept-final-192 inet6/filter/OUTPUT -j limit-2594 inet6/filter/OUTPUT -j logaccept-final-192 inet6/filter/limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1472 inet6/filter/limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-192 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-192 -j ACCEPT inet6/filter/logdrop-1472 -j TEE --gateway fc00::2 inet6/filter/logdrop-1472 -j DROP Filter 2596 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2595 inet/filter/INPUT -j limit-2595 inet/filter/OUTPUT -j limit-2595 inet/filter/limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1473 inet/filter/limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1473 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1473 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1473 -j DROP inet6/filter/FORWARD -j limit-2595 inet6/filter/INPUT -j limit-2595 inet6/filter/OUTPUT -j limit-2595 inet6/filter/limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1473 inet6/filter/limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1473 -j TEE --gateway fc00::2 inet6/filter/logdrop-1473 -j DROP Filter 2597 {"flow-limit":{"interval":5,"log":"mirror"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2596 inet/filter/FORWARD -j logaccept-final-193 inet/filter/INPUT -j limit-2596 inet/filter/INPUT -j logaccept-final-193 inet/filter/OUTPUT -j limit-2596 inet/filter/OUTPUT -j logaccept-final-193 inet/filter/limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1474 inet/filter/limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-193 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-193 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-193 -j ACCEPT inet/filter/logdrop-1474 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1474 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1474 -j DROP inet6/filter/FORWARD -j limit-2596 inet6/filter/FORWARD -j logaccept-final-193 inet6/filter/INPUT -j limit-2596 inet6/filter/INPUT -j logaccept-final-193 inet6/filter/OUTPUT -j limit-2596 inet6/filter/OUTPUT -j logaccept-final-193 inet6/filter/limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1474 inet6/filter/limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-193 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-193 -j ACCEPT inet6/filter/logdrop-1474 -j TEE --gateway fc00::2 inet6/filter/logdrop-1474 -j DROP Filter 2598 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2597 inet/filter/INPUT -j limit-2597 inet/filter/OUTPUT -j limit-2597 inet/filter/limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1475 inet/filter/limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1475 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1475 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1475 -j DROP inet6/filter/FORWARD -j limit-2597 inet6/filter/INPUT -j limit-2597 inet6/filter/OUTPUT -j limit-2597 inet6/filter/limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1475 inet6/filter/limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1475 -j TEE --gateway fc00::2 inet6/filter/logdrop-1475 -j DROP Filter 2599 {"flow-limit":{"interval":5,"log":"mirror"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2598 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2598 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2598 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1476 inet/filter/limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1476 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1476 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1476 -j DROP inet6/filter/FORWARD -j limit-2598 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2598 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2598 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1476 inet6/filter/limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1476 -j TEE --gateway fc00::2 inet6/filter/logdrop-1476 -j DROP Filter 2600 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2599 inet/filter/INPUT -j limit-2599 inet/filter/OUTPUT -j limit-2599 inet/filter/limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1477 inet/filter/limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1477 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1477 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1477 -j DROP inet6/filter/FORWARD -j limit-2599 inet6/filter/INPUT -j limit-2599 inet6/filter/OUTPUT -j limit-2599 inet6/filter/limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1477 inet6/filter/limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1477 -j TEE --gateway fc00::2 inet6/filter/logdrop-1477 -j DROP Filter 2601 {"flow-limit":{"interval":5,"log":"mirror"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2600 inet/filter/FORWARD -j logaccept-final-194 inet/filter/INPUT -j limit-2600 inet/filter/INPUT -j logaccept-final-194 inet/filter/OUTPUT -j limit-2600 inet/filter/OUTPUT -j logaccept-final-194 inet/filter/limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1478 inet/filter/limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-194 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-194 -j ACCEPT inet/filter/logdrop-1478 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1478 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1478 -j DROP inet6/filter/FORWARD -j limit-2600 inet6/filter/FORWARD -j logaccept-final-194 inet6/filter/INPUT -j limit-2600 inet6/filter/INPUT -j logaccept-final-194 inet6/filter/OUTPUT -j limit-2600 inet6/filter/OUTPUT -j logaccept-final-194 inet6/filter/limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1478 inet6/filter/limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-194 -j ACCEPT inet6/filter/logdrop-1478 -j TEE --gateway fc00::2 inet6/filter/logdrop-1478 -j DROP Filter 2602 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2601 inet/filter/INPUT -j limit-2601 inet/filter/OUTPUT -j limit-2601 inet/filter/limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1479 inet/filter/limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1479 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1479 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1479 -j DROP inet6/filter/FORWARD -j limit-2601 inet6/filter/INPUT -j limit-2601 inet6/filter/OUTPUT -j limit-2601 inet6/filter/limit-2601 -m recent --name limit-2601 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1479 inet6/filter/logdrop-1479 -j TEE --gateway fc00::2 inet6/filter/logdrop-1479 -j DROP Filter 2603 {"flow-limit":{"interval":5,"log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2602 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2602 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2602 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1480 inet/filter/limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1480 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1480 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1480 -j DROP inet6/filter/FORWARD -j limit-2602 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2602 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2602 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1480 inet6/filter/limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1480 -j TEE --gateway fc00::2 inet6/filter/logdrop-1480 -j DROP Filter 2604 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2603 inet/filter/INPUT -j limit-2603 inet/filter/OUTPUT -j limit-2603 inet/filter/limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1481 inet/filter/limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1481 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1481 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1481 -j DROP inet6/filter/FORWARD -j limit-2603 inet6/filter/INPUT -j limit-2603 inet6/filter/OUTPUT -j limit-2603 inet6/filter/limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1481 inet6/filter/limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1481 -j TEE --gateway fc00::2 inet6/filter/logdrop-1481 -j DROP Filter 2605 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2604 inet/filter/FORWARD -j logaccept-final-195 inet/filter/INPUT -j limit-2604 inet/filter/INPUT -j logaccept-final-195 inet/filter/OUTPUT -j limit-2604 inet/filter/OUTPUT -j logaccept-final-195 inet/filter/limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1482 inet/filter/limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-195 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-195 -j ACCEPT inet/filter/logdrop-1482 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1482 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1482 -j DROP inet6/filter/FORWARD -j limit-2604 inet6/filter/FORWARD -j logaccept-final-195 inet6/filter/INPUT -j limit-2604 inet6/filter/INPUT -j logaccept-final-195 inet6/filter/OUTPUT -j limit-2604 inet6/filter/OUTPUT -j logaccept-final-195 inet6/filter/limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1482 inet6/filter/limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-195 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-195 -j ACCEPT inet6/filter/logdrop-1482 -j TEE --gateway fc00::2 inet6/filter/logdrop-1482 -j DROP Filter 2606 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2605 inet/filter/INPUT -j limit-2605 inet/filter/OUTPUT -j limit-2605 inet/filter/limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1483 inet/filter/limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1483 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1483 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1483 -j DROP inet6/filter/FORWARD -j limit-2605 inet6/filter/INPUT -j limit-2605 inet6/filter/OUTPUT -j limit-2605 inet6/filter/limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1483 inet6/filter/limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1483 -j TEE --gateway fc00::2 inet6/filter/logdrop-1483 -j DROP Filter 2607 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2606 inet/filter/FORWARD -j logaccept-final-196 inet/filter/INPUT -j limit-2606 inet/filter/INPUT -j logaccept-final-196 inet/filter/OUTPUT -j limit-2606 inet/filter/OUTPUT -j logaccept-final-196 inet/filter/limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1484 inet/filter/limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-196 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-196 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-196 -j ACCEPT inet/filter/logdrop-1484 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1484 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1484 -j DROP inet6/filter/FORWARD -j limit-2606 inet6/filter/FORWARD -j logaccept-final-196 inet6/filter/INPUT -j limit-2606 inet6/filter/INPUT -j logaccept-final-196 inet6/filter/OUTPUT -j limit-2606 inet6/filter/OUTPUT -j logaccept-final-196 inet6/filter/limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1484 inet6/filter/limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-196 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-196 -j ACCEPT inet6/filter/logdrop-1484 -j TEE --gateway fc00::2 inet6/filter/logdrop-1484 -j DROP Filter 2608 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2607 inet/filter/INPUT -j limit-2607 inet/filter/OUTPUT -j limit-2607 inet/filter/limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1485 inet/filter/limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1485 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1485 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1485 -j DROP inet6/filter/FORWARD -j limit-2607 inet6/filter/INPUT -j limit-2607 inet6/filter/OUTPUT -j limit-2607 inet6/filter/limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1485 inet6/filter/limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1485 -j TEE --gateway fc00::2 inet6/filter/logdrop-1485 -j DROP Filter 2609 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2608 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2608 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2608 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1486 inet/filter/limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1486 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1486 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1486 -j DROP inet6/filter/FORWARD -j limit-2608 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2608 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2608 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1486 inet6/filter/limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1486 -j TEE --gateway fc00::2 inet6/filter/logdrop-1486 -j DROP Filter 2610 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2609 inet/filter/INPUT -j limit-2609 inet/filter/OUTPUT -j limit-2609 inet/filter/limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1487 inet/filter/limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1487 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1487 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1487 -j DROP inet6/filter/FORWARD -j limit-2609 inet6/filter/INPUT -j limit-2609 inet6/filter/OUTPUT -j limit-2609 inet6/filter/limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1487 inet6/filter/limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1487 -j TEE --gateway fc00::2 inet6/filter/logdrop-1487 -j DROP Filter 2611 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2610 inet/filter/FORWARD -j logaccept-final-197 inet/filter/INPUT -j limit-2610 inet/filter/INPUT -j logaccept-final-197 inet/filter/OUTPUT -j limit-2610 inet/filter/OUTPUT -j logaccept-final-197 inet/filter/limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1488 inet/filter/limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-197 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-197 -j ACCEPT inet/filter/logdrop-1488 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1488 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1488 -j DROP inet6/filter/FORWARD -j limit-2610 inet6/filter/FORWARD -j logaccept-final-197 inet6/filter/INPUT -j limit-2610 inet6/filter/INPUT -j logaccept-final-197 inet6/filter/OUTPUT -j limit-2610 inet6/filter/OUTPUT -j logaccept-final-197 inet6/filter/limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1488 inet6/filter/limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-197 -j ACCEPT inet6/filter/logdrop-1488 -j TEE --gateway fc00::2 inet6/filter/logdrop-1488 -j DROP Filter 2612 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2611 inet/filter/INPUT -j limit-2611 inet/filter/OUTPUT -j limit-2611 inet/filter/limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1489 inet/filter/limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1489 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1489 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1489 -j DROP inet6/filter/FORWARD -j limit-2611 inet6/filter/INPUT -j limit-2611 inet6/filter/OUTPUT -j limit-2611 inet6/filter/limit-2611 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1489 inet6/filter/logdrop-1489 -j TEE --gateway fc00::2 inet6/filter/logdrop-1489 -j DROP Filter 2613 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2612 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2612 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2612 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2612 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 inet/filter/logdrop-1490 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1490 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1490 -j DROP inet6/filter/FORWARD -j limit-2612 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2612 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2612 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2612 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 inet6/filter/logdrop-1490 -j TEE --gateway fc00::2 inet6/filter/logdrop-1490 -j DROP Filter 2614 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2613 inet/filter/INPUT -j limit-2613 inet/filter/OUTPUT -j limit-2613 inet/filter/limit-2613 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 inet/filter/logdrop-1491 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1491 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1491 -j DROP inet6/filter/FORWARD -j limit-2613 inet6/filter/INPUT -j limit-2613 inet6/filter/OUTPUT -j limit-2613 inet6/filter/limit-2613 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 inet6/filter/logdrop-1491 -j TEE --gateway fc00::2 inet6/filter/logdrop-1491 -j DROP Filter 2615 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2614 inet/filter/FORWARD -j logaccept-final-198 inet/filter/INPUT -j limit-2614 inet/filter/INPUT -j logaccept-final-198 inet/filter/OUTPUT -j limit-2614 inet/filter/OUTPUT -j logaccept-final-198 inet/filter/limit-2614 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 inet/filter/logaccept-final-198 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-198 -j ACCEPT inet/filter/logdrop-1492 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1492 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1492 -j DROP inet6/filter/FORWARD -j limit-2614 inet6/filter/FORWARD -j logaccept-final-198 inet6/filter/INPUT -j limit-2614 inet6/filter/INPUT -j logaccept-final-198 inet6/filter/OUTPUT -j limit-2614 inet6/filter/OUTPUT -j logaccept-final-198 inet6/filter/limit-2614 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 inet6/filter/logaccept-final-198 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-198 -j ACCEPT inet6/filter/logdrop-1492 -j TEE --gateway fc00::2 inet6/filter/logdrop-1492 -j DROP Filter 2616 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2615 inet/filter/INPUT -j limit-2615 inet/filter/OUTPUT -j limit-2615 inet/filter/limit-2615 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 inet/filter/limit-2615 -m limit --limit 1/second -j LOG inet/filter/logdrop-1493 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1493 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1493 -j DROP inet6/filter/FORWARD -j limit-2615 inet6/filter/INPUT -j limit-2615 inet6/filter/OUTPUT -j limit-2615 inet6/filter/limit-2615 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 inet6/filter/limit-2615 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1493 -j TEE --gateway fc00::2 inet6/filter/logdrop-1493 -j DROP Filter 2617 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2616 inet/filter/FORWARD -j logaccept-final-199 inet/filter/INPUT -j limit-2616 inet/filter/INPUT -j logaccept-final-199 inet/filter/OUTPUT -j limit-2616 inet/filter/OUTPUT -j logaccept-final-199 inet/filter/limit-2616 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 inet/filter/logaccept-final-199 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-199 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-199 -j ACCEPT inet/filter/logdrop-1494 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1494 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1494 -j DROP inet6/filter/FORWARD -j limit-2616 inet6/filter/FORWARD -j logaccept-final-199 inet6/filter/INPUT -j limit-2616 inet6/filter/INPUT -j logaccept-final-199 inet6/filter/OUTPUT -j limit-2616 inet6/filter/OUTPUT -j logaccept-final-199 inet6/filter/limit-2616 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 inet6/filter/logaccept-final-199 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-199 -j ACCEPT inet6/filter/logdrop-1494 -j TEE --gateway fc00::2 inet6/filter/logdrop-1494 -j DROP Filter 2618 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2617 inet/filter/INPUT -j limit-2617 inet/filter/OUTPUT -j limit-2617 inet/filter/limit-2617 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 inet/filter/limit-2617 -j TEE --gateway 10.0.0.1 inet/filter/limit-2617 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1495 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1495 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1495 -j DROP inet6/filter/FORWARD -j limit-2617 inet6/filter/INPUT -j limit-2617 inet6/filter/OUTPUT -j limit-2617 inet6/filter/limit-2617 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 inet6/filter/limit-2617 -j TEE --gateway fc00::2 inet6/filter/logdrop-1495 -j TEE --gateway fc00::2 inet6/filter/logdrop-1495 -j DROP Filter 2619 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2618 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2618 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2618 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2618 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 inet/filter/logdrop-1496 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1496 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1496 -j DROP inet6/filter/FORWARD -j limit-2618 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2618 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2618 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2618 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 inet6/filter/logdrop-1496 -j TEE --gateway fc00::2 inet6/filter/logdrop-1496 -j DROP Filter 2620 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2619 inet/filter/INPUT -j limit-2619 inet/filter/OUTPUT -j limit-2619 inet/filter/limit-2619 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 inet/filter/logdrop-1497 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1497 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1497 -j DROP inet6/filter/FORWARD -j limit-2619 inet6/filter/INPUT -j limit-2619 inet6/filter/OUTPUT -j limit-2619 inet6/filter/limit-2619 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 inet6/filter/logdrop-1497 -j TEE --gateway fc00::2 inet6/filter/logdrop-1497 -j DROP Filter 2621 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2620 inet/filter/FORWARD -j logaccept-final-200 inet/filter/INPUT -j limit-2620 inet/filter/INPUT -j logaccept-final-200 inet/filter/OUTPUT -j limit-2620 inet/filter/OUTPUT -j logaccept-final-200 inet/filter/limit-2620 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 inet/filter/logaccept-final-200 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-200 -j ACCEPT inet/filter/logdrop-1498 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1498 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1498 -j DROP inet6/filter/FORWARD -j limit-2620 inet6/filter/FORWARD -j logaccept-final-200 inet6/filter/INPUT -j limit-2620 inet6/filter/INPUT -j logaccept-final-200 inet6/filter/OUTPUT -j limit-2620 inet6/filter/OUTPUT -j logaccept-final-200 inet6/filter/limit-2620 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 inet6/filter/logaccept-final-200 -j ACCEPT inet6/filter/logdrop-1498 -j TEE --gateway fc00::2 inet6/filter/logdrop-1498 -j DROP Filter 2622 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2621 inet/filter/INPUT -j limit-2621 inet/filter/OUTPUT -j limit-2621 inet/filter/limit-2621 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 inet/filter/limit-2621 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1499 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1499 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1499 -j DROP inet6/filter/FORWARD -j limit-2621 inet6/filter/INPUT -j limit-2621 inet6/filter/OUTPUT -j limit-2621 inet6/filter/limit-2621 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 inet6/filter/logdrop-1499 -j TEE --gateway fc00::2 inet6/filter/logdrop-1499 -j DROP Filter 2623 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2622 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2622 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2622 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1500 inet/filter/limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1500 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1500 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1500 -j DROP inet6/filter/FORWARD -j limit-2622 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2622 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2622 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1500 inet6/filter/limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1500 -j TEE --gateway fc00::2 inet6/filter/logdrop-1500 -j DROP Filter 2624 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2623 inet/filter/INPUT -j limit-2623 inet/filter/OUTPUT -j limit-2623 inet/filter/limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1501 inet/filter/limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1501 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1501 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1501 -j DROP inet6/filter/FORWARD -j limit-2623 inet6/filter/INPUT -j limit-2623 inet6/filter/OUTPUT -j limit-2623 inet6/filter/limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1501 inet6/filter/limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1501 -j TEE --gateway fc00::2 inet6/filter/logdrop-1501 -j DROP Filter 2625 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2624 inet/filter/FORWARD -j logaccept-final-201 inet/filter/INPUT -j limit-2624 inet/filter/INPUT -j logaccept-final-201 inet/filter/OUTPUT -j limit-2624 inet/filter/OUTPUT -j logaccept-final-201 inet/filter/limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1502 inet/filter/limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-201 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-201 -j ACCEPT inet/filter/logdrop-1502 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1502 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1502 -j DROP inet6/filter/FORWARD -j limit-2624 inet6/filter/FORWARD -j logaccept-final-201 inet6/filter/INPUT -j limit-2624 inet6/filter/INPUT -j logaccept-final-201 inet6/filter/OUTPUT -j limit-2624 inet6/filter/OUTPUT -j logaccept-final-201 inet6/filter/limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1502 inet6/filter/limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-201 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-201 -j ACCEPT inet6/filter/logdrop-1502 -j TEE --gateway fc00::2 inet6/filter/logdrop-1502 -j DROP Filter 2626 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2625 inet/filter/INPUT -j limit-2625 inet/filter/OUTPUT -j limit-2625 inet/filter/limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1503 inet/filter/limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1503 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1503 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1503 -j DROP inet6/filter/FORWARD -j limit-2625 inet6/filter/INPUT -j limit-2625 inet6/filter/OUTPUT -j limit-2625 inet6/filter/limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1503 inet6/filter/limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1503 -j TEE --gateway fc00::2 inet6/filter/logdrop-1503 -j DROP Filter 2627 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2626 inet/filter/FORWARD -j logaccept-final-202 inet/filter/INPUT -j limit-2626 inet/filter/INPUT -j logaccept-final-202 inet/filter/OUTPUT -j limit-2626 inet/filter/OUTPUT -j logaccept-final-202 inet/filter/limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1504 inet/filter/limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-202 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-202 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-202 -j ACCEPT inet/filter/logdrop-1504 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1504 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1504 -j DROP inet6/filter/FORWARD -j limit-2626 inet6/filter/FORWARD -j logaccept-final-202 inet6/filter/INPUT -j limit-2626 inet6/filter/INPUT -j logaccept-final-202 inet6/filter/OUTPUT -j limit-2626 inet6/filter/OUTPUT -j logaccept-final-202 inet6/filter/limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1504 inet6/filter/limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-202 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-202 -j ACCEPT inet6/filter/logdrop-1504 -j TEE --gateway fc00::2 inet6/filter/logdrop-1504 -j DROP Filter 2628 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2627 inet/filter/INPUT -j limit-2627 inet/filter/OUTPUT -j limit-2627 inet/filter/limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1505 inet/filter/limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1505 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1505 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1505 -j DROP inet6/filter/FORWARD -j limit-2627 inet6/filter/INPUT -j limit-2627 inet6/filter/OUTPUT -j limit-2627 inet6/filter/limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1505 inet6/filter/limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1505 -j TEE --gateway fc00::2 inet6/filter/logdrop-1505 -j DROP Filter 2629 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2628 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2628 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2628 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1506 inet/filter/limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1506 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1506 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1506 -j DROP inet6/filter/FORWARD -j limit-2628 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2628 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2628 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1506 inet6/filter/limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1506 -j TEE --gateway fc00::2 inet6/filter/logdrop-1506 -j DROP Filter 2630 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2629 inet/filter/INPUT -j limit-2629 inet/filter/OUTPUT -j limit-2629 inet/filter/limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1507 inet/filter/limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1507 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1507 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1507 -j DROP inet6/filter/FORWARD -j limit-2629 inet6/filter/INPUT -j limit-2629 inet6/filter/OUTPUT -j limit-2629 inet6/filter/limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1507 inet6/filter/limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1507 -j TEE --gateway fc00::2 inet6/filter/logdrop-1507 -j DROP Filter 2631 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2630 inet/filter/FORWARD -j logaccept-final-203 inet/filter/INPUT -j limit-2630 inet/filter/INPUT -j logaccept-final-203 inet/filter/OUTPUT -j limit-2630 inet/filter/OUTPUT -j logaccept-final-203 inet/filter/limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1508 inet/filter/limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-203 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-203 -j ACCEPT inet/filter/logdrop-1508 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1508 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1508 -j DROP inet6/filter/FORWARD -j limit-2630 inet6/filter/FORWARD -j logaccept-final-203 inet6/filter/INPUT -j limit-2630 inet6/filter/INPUT -j logaccept-final-203 inet6/filter/OUTPUT -j limit-2630 inet6/filter/OUTPUT -j logaccept-final-203 inet6/filter/limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1508 inet6/filter/limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-203 -j ACCEPT inet6/filter/logdrop-1508 -j TEE --gateway fc00::2 inet6/filter/logdrop-1508 -j DROP Filter 2632 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2631 inet/filter/INPUT -j limit-2631 inet/filter/OUTPUT -j limit-2631 inet/filter/limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1509 inet/filter/limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1509 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1509 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1509 -j DROP inet6/filter/FORWARD -j limit-2631 inet6/filter/INPUT -j limit-2631 inet6/filter/OUTPUT -j limit-2631 inet6/filter/limit-2631 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1509 inet6/filter/logdrop-1509 -j TEE --gateway fc00::2 inet6/filter/logdrop-1509 -j DROP Filter 2633 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2632 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2632 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2632 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2632 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 inet/filter/logdrop-1510 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1510 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1510 -j DROP inet6/filter/FORWARD -j limit-2632 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2632 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2632 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2632 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 inet6/filter/logdrop-1510 -j TEE --gateway fc00::2 inet6/filter/logdrop-1510 -j DROP Filter 2634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2633 inet/filter/INPUT -j limit-2633 inet/filter/OUTPUT -j limit-2633 inet/filter/limit-2633 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 inet/filter/logdrop-1511 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1511 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1511 -j DROP inet6/filter/FORWARD -j limit-2633 inet6/filter/INPUT -j limit-2633 inet6/filter/OUTPUT -j limit-2633 inet6/filter/limit-2633 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 inet6/filter/logdrop-1511 -j TEE --gateway fc00::2 inet6/filter/logdrop-1511 -j DROP Filter 2635 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2634 inet/filter/FORWARD -j logaccept-final-204 inet/filter/INPUT -j limit-2634 inet/filter/INPUT -j logaccept-final-204 inet/filter/OUTPUT -j limit-2634 inet/filter/OUTPUT -j logaccept-final-204 inet/filter/limit-2634 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 inet/filter/logaccept-final-204 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-204 -j ACCEPT inet/filter/logdrop-1512 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1512 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1512 -j DROP inet6/filter/FORWARD -j limit-2634 inet6/filter/FORWARD -j logaccept-final-204 inet6/filter/INPUT -j limit-2634 inet6/filter/INPUT -j logaccept-final-204 inet6/filter/OUTPUT -j limit-2634 inet6/filter/OUTPUT -j logaccept-final-204 inet6/filter/limit-2634 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 inet6/filter/logaccept-final-204 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-204 -j ACCEPT inet6/filter/logdrop-1512 -j TEE --gateway fc00::2 inet6/filter/logdrop-1512 -j DROP Filter 2636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2635 inet/filter/INPUT -j limit-2635 inet/filter/OUTPUT -j limit-2635 inet/filter/limit-2635 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 inet/filter/limit-2635 -m limit --limit 1/second -j LOG inet/filter/logdrop-1513 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1513 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1513 -j DROP inet6/filter/FORWARD -j limit-2635 inet6/filter/INPUT -j limit-2635 inet6/filter/OUTPUT -j limit-2635 inet6/filter/limit-2635 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 inet6/filter/limit-2635 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1513 -j TEE --gateway fc00::2 inet6/filter/logdrop-1513 -j DROP Filter 2637 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2636 inet/filter/FORWARD -j logaccept-final-205 inet/filter/INPUT -j limit-2636 inet/filter/INPUT -j logaccept-final-205 inet/filter/OUTPUT -j limit-2636 inet/filter/OUTPUT -j logaccept-final-205 inet/filter/limit-2636 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 inet/filter/logaccept-final-205 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-205 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-205 -j ACCEPT inet/filter/logdrop-1514 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1514 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1514 -j DROP inet6/filter/FORWARD -j limit-2636 inet6/filter/FORWARD -j logaccept-final-205 inet6/filter/INPUT -j limit-2636 inet6/filter/INPUT -j logaccept-final-205 inet6/filter/OUTPUT -j limit-2636 inet6/filter/OUTPUT -j logaccept-final-205 inet6/filter/limit-2636 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 inet6/filter/logaccept-final-205 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-205 -j ACCEPT inet6/filter/logdrop-1514 -j TEE --gateway fc00::2 inet6/filter/logdrop-1514 -j DROP Filter 2638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2637 inet/filter/INPUT -j limit-2637 inet/filter/OUTPUT -j limit-2637 inet/filter/limit-2637 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 inet/filter/limit-2637 -j TEE --gateway 10.0.0.1 inet/filter/limit-2637 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1515 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1515 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1515 -j DROP inet6/filter/FORWARD -j limit-2637 inet6/filter/INPUT -j limit-2637 inet6/filter/OUTPUT -j limit-2637 inet6/filter/limit-2637 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 inet6/filter/limit-2637 -j TEE --gateway fc00::2 inet6/filter/logdrop-1515 -j TEE --gateway fc00::2 inet6/filter/logdrop-1515 -j DROP Filter 2639 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2638 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2638 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2638 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2638 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 inet/filter/logdrop-1516 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1516 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1516 -j DROP inet6/filter/FORWARD -j limit-2638 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2638 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2638 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2638 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 inet6/filter/logdrop-1516 -j TEE --gateway fc00::2 inet6/filter/logdrop-1516 -j DROP Filter 2640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2639 inet/filter/INPUT -j limit-2639 inet/filter/OUTPUT -j limit-2639 inet/filter/limit-2639 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 inet/filter/logdrop-1517 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1517 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1517 -j DROP inet6/filter/FORWARD -j limit-2639 inet6/filter/INPUT -j limit-2639 inet6/filter/OUTPUT -j limit-2639 inet6/filter/limit-2639 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 inet6/filter/logdrop-1517 -j TEE --gateway fc00::2 inet6/filter/logdrop-1517 -j DROP Filter 2641 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2640 inet/filter/FORWARD -j logaccept-final-206 inet/filter/INPUT -j limit-2640 inet/filter/INPUT -j logaccept-final-206 inet/filter/OUTPUT -j limit-2640 inet/filter/OUTPUT -j logaccept-final-206 inet/filter/limit-2640 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 inet/filter/logaccept-final-206 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-206 -j ACCEPT inet/filter/logdrop-1518 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1518 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1518 -j DROP inet6/filter/FORWARD -j limit-2640 inet6/filter/FORWARD -j logaccept-final-206 inet6/filter/INPUT -j limit-2640 inet6/filter/INPUT -j logaccept-final-206 inet6/filter/OUTPUT -j limit-2640 inet6/filter/OUTPUT -j logaccept-final-206 inet6/filter/limit-2640 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 inet6/filter/logaccept-final-206 -j ACCEPT inet6/filter/logdrop-1518 -j TEE --gateway fc00::2 inet6/filter/logdrop-1518 -j DROP Filter 2642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2641 inet/filter/INPUT -j limit-2641 inet/filter/OUTPUT -j limit-2641 inet/filter/limit-2641 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 inet/filter/limit-2641 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1519 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1519 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1519 -j DROP inet6/filter/FORWARD -j limit-2641 inet6/filter/INPUT -j limit-2641 inet6/filter/OUTPUT -j limit-2641 inet6/filter/limit-2641 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 inet6/filter/logdrop-1519 -j TEE --gateway fc00::2 inet6/filter/logdrop-1519 -j DROP Filter 2643 {"flow-limit":{"interval":5,"log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2642 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2642 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2642 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1520 inet/filter/limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1520 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1520 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1520 -j DROP inet6/filter/FORWARD -j limit-2642 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2642 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2642 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2642 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1520 inet6/filter/limit-2642 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1520 -j TEE --gateway fc00::2 inet6/filter/logdrop-1520 -j DROP Filter 2644 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2643 inet/filter/INPUT -j limit-2643 inet/filter/OUTPUT -j limit-2643 inet/filter/limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1521 inet/filter/limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1521 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1521 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1521 -j DROP inet6/filter/FORWARD -j limit-2643 inet6/filter/INPUT -j limit-2643 inet6/filter/OUTPUT -j limit-2643 inet6/filter/limit-2643 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1521 inet6/filter/limit-2643 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1521 -j TEE --gateway fc00::2 inet6/filter/logdrop-1521 -j DROP Filter 2645 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2644 inet/filter/FORWARD -j logaccept-final-207 inet/filter/INPUT -j limit-2644 inet/filter/INPUT -j logaccept-final-207 inet/filter/OUTPUT -j limit-2644 inet/filter/OUTPUT -j logaccept-final-207 inet/filter/limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1522 inet/filter/limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-207 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-207 -j ACCEPT inet/filter/logdrop-1522 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1522 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1522 -j DROP inet6/filter/FORWARD -j limit-2644 inet6/filter/FORWARD -j logaccept-final-207 inet6/filter/INPUT -j limit-2644 inet6/filter/INPUT -j logaccept-final-207 inet6/filter/OUTPUT -j limit-2644 inet6/filter/OUTPUT -j logaccept-final-207 inet6/filter/limit-2644 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1522 inet6/filter/limit-2644 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-207 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-207 -j ACCEPT inet6/filter/logdrop-1522 -j TEE --gateway fc00::2 inet6/filter/logdrop-1522 -j DROP Filter 2646 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2645 inet/filter/INPUT -j limit-2645 inet/filter/OUTPUT -j limit-2645 inet/filter/limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1523 inet/filter/limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1523 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1523 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1523 -j DROP inet6/filter/FORWARD -j limit-2645 inet6/filter/INPUT -j limit-2645 inet6/filter/OUTPUT -j limit-2645 inet6/filter/limit-2645 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1523 inet6/filter/limit-2645 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1523 -j TEE --gateway fc00::2 inet6/filter/logdrop-1523 -j DROP Filter 2647 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2646 inet/filter/FORWARD -j logaccept-final-208 inet/filter/INPUT -j limit-2646 inet/filter/INPUT -j logaccept-final-208 inet/filter/OUTPUT -j limit-2646 inet/filter/OUTPUT -j logaccept-final-208 inet/filter/limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1524 inet/filter/limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-208 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-208 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-208 -j ACCEPT inet/filter/logdrop-1524 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1524 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1524 -j DROP inet6/filter/FORWARD -j limit-2646 inet6/filter/FORWARD -j logaccept-final-208 inet6/filter/INPUT -j limit-2646 inet6/filter/INPUT -j logaccept-final-208 inet6/filter/OUTPUT -j limit-2646 inet6/filter/OUTPUT -j logaccept-final-208 inet6/filter/limit-2646 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1524 inet6/filter/limit-2646 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-208 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-208 -j ACCEPT inet6/filter/logdrop-1524 -j TEE --gateway fc00::2 inet6/filter/logdrop-1524 -j DROP Filter 2648 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2647 inet/filter/INPUT -j limit-2647 inet/filter/OUTPUT -j limit-2647 inet/filter/limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1525 inet/filter/limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1525 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1525 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1525 -j DROP inet6/filter/FORWARD -j limit-2647 inet6/filter/INPUT -j limit-2647 inet6/filter/OUTPUT -j limit-2647 inet6/filter/limit-2647 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1525 inet6/filter/limit-2647 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1525 -j TEE --gateway fc00::2 inet6/filter/logdrop-1525 -j DROP Filter 2649 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2648 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2648 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2648 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1526 inet/filter/limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1526 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1526 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1526 -j DROP inet6/filter/FORWARD -j limit-2648 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2648 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2648 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2648 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1526 inet6/filter/limit-2648 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1526 -j TEE --gateway fc00::2 inet6/filter/logdrop-1526 -j DROP Filter 2650 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2649 inet/filter/INPUT -j limit-2649 inet/filter/OUTPUT -j limit-2649 inet/filter/limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1527 inet/filter/limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1527 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1527 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1527 -j DROP inet6/filter/FORWARD -j limit-2649 inet6/filter/INPUT -j limit-2649 inet6/filter/OUTPUT -j limit-2649 inet6/filter/limit-2649 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1527 inet6/filter/limit-2649 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1527 -j TEE --gateway fc00::2 inet6/filter/logdrop-1527 -j DROP Filter 2651 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2650 inet/filter/FORWARD -j logaccept-final-209 inet/filter/INPUT -j limit-2650 inet/filter/INPUT -j logaccept-final-209 inet/filter/OUTPUT -j limit-2650 inet/filter/OUTPUT -j logaccept-final-209 inet/filter/limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1528 inet/filter/limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-209 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-209 -j ACCEPT inet/filter/logdrop-1528 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1528 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1528 -j DROP inet6/filter/FORWARD -j limit-2650 inet6/filter/FORWARD -j logaccept-final-209 inet6/filter/INPUT -j limit-2650 inet6/filter/INPUT -j logaccept-final-209 inet6/filter/OUTPUT -j limit-2650 inet6/filter/OUTPUT -j logaccept-final-209 inet6/filter/limit-2650 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1528 inet6/filter/limit-2650 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-209 -j ACCEPT inet6/filter/logdrop-1528 -j TEE --gateway fc00::2 inet6/filter/logdrop-1528 -j DROP Filter 2652 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2651 inet/filter/INPUT -j limit-2651 inet/filter/OUTPUT -j limit-2651 inet/filter/limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1529 inet/filter/limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1529 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1529 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1529 -j DROP inet6/filter/FORWARD -j limit-2651 inet6/filter/INPUT -j limit-2651 inet6/filter/OUTPUT -j limit-2651 inet6/filter/limit-2651 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1529 inet6/filter/logdrop-1529 -j TEE --gateway fc00::2 inet6/filter/logdrop-1529 -j DROP Filter 2653 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2652 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2652 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2652 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2652 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 inet/filter/logdrop-1530 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1530 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1530 -j DROP inet6/filter/FORWARD -j limit-2652 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2652 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2652 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2652 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 inet6/filter/logdrop-1530 -j TEE --gateway fc00::2 inet6/filter/logdrop-1530 -j DROP Filter 2654 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2653 inet/filter/INPUT -j limit-2653 inet/filter/OUTPUT -j limit-2653 inet/filter/limit-2653 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 inet/filter/logdrop-1531 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1531 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1531 -j DROP inet6/filter/FORWARD -j limit-2653 inet6/filter/INPUT -j limit-2653 inet6/filter/OUTPUT -j limit-2653 inet6/filter/limit-2653 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 inet6/filter/logdrop-1531 -j TEE --gateway fc00::2 inet6/filter/logdrop-1531 -j DROP Filter 2655 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2654 inet/filter/FORWARD -j logaccept-final-210 inet/filter/INPUT -j limit-2654 inet/filter/INPUT -j logaccept-final-210 inet/filter/OUTPUT -j limit-2654 inet/filter/OUTPUT -j logaccept-final-210 inet/filter/limit-2654 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 inet/filter/logaccept-final-210 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-210 -j ACCEPT inet/filter/logdrop-1532 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1532 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1532 -j DROP inet6/filter/FORWARD -j limit-2654 inet6/filter/FORWARD -j logaccept-final-210 inet6/filter/INPUT -j limit-2654 inet6/filter/INPUT -j logaccept-final-210 inet6/filter/OUTPUT -j limit-2654 inet6/filter/OUTPUT -j logaccept-final-210 inet6/filter/limit-2654 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 inet6/filter/logaccept-final-210 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-210 -j ACCEPT inet6/filter/logdrop-1532 -j TEE --gateway fc00::2 inet6/filter/logdrop-1532 -j DROP Filter 2656 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2655 inet/filter/INPUT -j limit-2655 inet/filter/OUTPUT -j limit-2655 inet/filter/limit-2655 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 inet/filter/limit-2655 -m limit --limit 1/second -j LOG inet/filter/logdrop-1533 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1533 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1533 -j DROP inet6/filter/FORWARD -j limit-2655 inet6/filter/INPUT -j limit-2655 inet6/filter/OUTPUT -j limit-2655 inet6/filter/limit-2655 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 inet6/filter/limit-2655 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1533 -j TEE --gateway fc00::2 inet6/filter/logdrop-1533 -j DROP Filter 2657 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2656 inet/filter/FORWARD -j logaccept-final-211 inet/filter/INPUT -j limit-2656 inet/filter/INPUT -j logaccept-final-211 inet/filter/OUTPUT -j limit-2656 inet/filter/OUTPUT -j logaccept-final-211 inet/filter/limit-2656 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 inet/filter/logaccept-final-211 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-211 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-211 -j ACCEPT inet/filter/logdrop-1534 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1534 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1534 -j DROP inet6/filter/FORWARD -j limit-2656 inet6/filter/FORWARD -j logaccept-final-211 inet6/filter/INPUT -j limit-2656 inet6/filter/INPUT -j logaccept-final-211 inet6/filter/OUTPUT -j limit-2656 inet6/filter/OUTPUT -j logaccept-final-211 inet6/filter/limit-2656 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 inet6/filter/logaccept-final-211 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-211 -j ACCEPT inet6/filter/logdrop-1534 -j TEE --gateway fc00::2 inet6/filter/logdrop-1534 -j DROP Filter 2658 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2657 inet/filter/INPUT -j limit-2657 inet/filter/OUTPUT -j limit-2657 inet/filter/limit-2657 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 inet/filter/limit-2657 -j TEE --gateway 10.0.0.1 inet/filter/limit-2657 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1535 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1535 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1535 -j DROP inet6/filter/FORWARD -j limit-2657 inet6/filter/INPUT -j limit-2657 inet6/filter/OUTPUT -j limit-2657 inet6/filter/limit-2657 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 inet6/filter/limit-2657 -j TEE --gateway fc00::2 inet6/filter/logdrop-1535 -j TEE --gateway fc00::2 inet6/filter/logdrop-1535 -j DROP Filter 2659 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2658 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2658 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2658 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2658 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 inet/filter/logdrop-1536 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1536 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1536 -j DROP inet6/filter/FORWARD -j limit-2658 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2658 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2658 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2658 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 inet6/filter/logdrop-1536 -j TEE --gateway fc00::2 inet6/filter/logdrop-1536 -j DROP Filter 2660 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2659 inet/filter/INPUT -j limit-2659 inet/filter/OUTPUT -j limit-2659 inet/filter/limit-2659 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 inet/filter/logdrop-1537 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1537 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1537 -j DROP inet6/filter/FORWARD -j limit-2659 inet6/filter/INPUT -j limit-2659 inet6/filter/OUTPUT -j limit-2659 inet6/filter/limit-2659 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 inet6/filter/logdrop-1537 -j TEE --gateway fc00::2 inet6/filter/logdrop-1537 -j DROP Filter 2661 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2660 inet/filter/FORWARD -j logaccept-final-212 inet/filter/INPUT -j limit-2660 inet/filter/INPUT -j logaccept-final-212 inet/filter/OUTPUT -j limit-2660 inet/filter/OUTPUT -j logaccept-final-212 inet/filter/limit-2660 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 inet/filter/logaccept-final-212 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-212 -j ACCEPT inet/filter/logdrop-1538 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1538 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1538 -j DROP inet6/filter/FORWARD -j limit-2660 inet6/filter/FORWARD -j logaccept-final-212 inet6/filter/INPUT -j limit-2660 inet6/filter/INPUT -j logaccept-final-212 inet6/filter/OUTPUT -j limit-2660 inet6/filter/OUTPUT -j logaccept-final-212 inet6/filter/limit-2660 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 inet6/filter/logaccept-final-212 -j ACCEPT inet6/filter/logdrop-1538 -j TEE --gateway fc00::2 inet6/filter/logdrop-1538 -j DROP Filter 2662 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2661 inet/filter/INPUT -j limit-2661 inet/filter/OUTPUT -j limit-2661 inet/filter/limit-2661 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 inet/filter/limit-2661 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1539 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1539 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1539 -j DROP inet6/filter/FORWARD -j limit-2661 inet6/filter/INPUT -j limit-2661 inet6/filter/OUTPUT -j limit-2661 inet6/filter/limit-2661 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 inet6/filter/logdrop-1539 -j TEE --gateway fc00::2 inet6/filter/logdrop-1539 -j DROP Filter 2663 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2662 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2662 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2662 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1540 inet/filter/limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1540 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1540 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1540 -j DROP inet6/filter/FORWARD -j limit-2662 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2662 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2662 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2662 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1540 inet6/filter/limit-2662 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1540 -j TEE --gateway fc00::2 inet6/filter/logdrop-1540 -j DROP Filter 2664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2663 inet/filter/INPUT -j limit-2663 inet/filter/OUTPUT -j limit-2663 inet/filter/limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1541 inet/filter/limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1541 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1541 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1541 -j DROP inet6/filter/FORWARD -j limit-2663 inet6/filter/INPUT -j limit-2663 inet6/filter/OUTPUT -j limit-2663 inet6/filter/limit-2663 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1541 inet6/filter/limit-2663 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1541 -j TEE --gateway fc00::2 inet6/filter/logdrop-1541 -j DROP Filter 2665 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2664 inet/filter/FORWARD -j logaccept-final-213 inet/filter/INPUT -j limit-2664 inet/filter/INPUT -j logaccept-final-213 inet/filter/OUTPUT -j limit-2664 inet/filter/OUTPUT -j logaccept-final-213 inet/filter/limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1542 inet/filter/limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-213 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-213 -j ACCEPT inet/filter/logdrop-1542 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1542 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1542 -j DROP inet6/filter/FORWARD -j limit-2664 inet6/filter/FORWARD -j logaccept-final-213 inet6/filter/INPUT -j limit-2664 inet6/filter/INPUT -j logaccept-final-213 inet6/filter/OUTPUT -j limit-2664 inet6/filter/OUTPUT -j logaccept-final-213 inet6/filter/limit-2664 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1542 inet6/filter/limit-2664 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-213 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-213 -j ACCEPT inet6/filter/logdrop-1542 -j TEE --gateway fc00::2 inet6/filter/logdrop-1542 -j DROP Filter 2666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2665 inet/filter/INPUT -j limit-2665 inet/filter/OUTPUT -j limit-2665 inet/filter/limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1543 inet/filter/limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1543 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1543 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1543 -j DROP inet6/filter/FORWARD -j limit-2665 inet6/filter/INPUT -j limit-2665 inet6/filter/OUTPUT -j limit-2665 inet6/filter/limit-2665 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1543 inet6/filter/limit-2665 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1543 -j TEE --gateway fc00::2 inet6/filter/logdrop-1543 -j DROP Filter 2667 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2666 inet/filter/FORWARD -j logaccept-final-214 inet/filter/INPUT -j limit-2666 inet/filter/INPUT -j logaccept-final-214 inet/filter/OUTPUT -j limit-2666 inet/filter/OUTPUT -j logaccept-final-214 inet/filter/limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1544 inet/filter/limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-214 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-214 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-214 -j ACCEPT inet/filter/logdrop-1544 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1544 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1544 -j DROP inet6/filter/FORWARD -j limit-2666 inet6/filter/FORWARD -j logaccept-final-214 inet6/filter/INPUT -j limit-2666 inet6/filter/INPUT -j logaccept-final-214 inet6/filter/OUTPUT -j limit-2666 inet6/filter/OUTPUT -j logaccept-final-214 inet6/filter/limit-2666 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1544 inet6/filter/limit-2666 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-214 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-214 -j ACCEPT inet6/filter/logdrop-1544 -j TEE --gateway fc00::2 inet6/filter/logdrop-1544 -j DROP Filter 2668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2667 inet/filter/INPUT -j limit-2667 inet/filter/OUTPUT -j limit-2667 inet/filter/limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1545 inet/filter/limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1545 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1545 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1545 -j DROP inet6/filter/FORWARD -j limit-2667 inet6/filter/INPUT -j limit-2667 inet6/filter/OUTPUT -j limit-2667 inet6/filter/limit-2667 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1545 inet6/filter/limit-2667 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1545 -j TEE --gateway fc00::2 inet6/filter/logdrop-1545 -j DROP Filter 2669 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2668 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2668 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2668 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1546 inet/filter/limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1546 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1546 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1546 -j DROP inet6/filter/FORWARD -j limit-2668 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2668 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2668 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2668 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1546 inet6/filter/limit-2668 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1546 -j TEE --gateway fc00::2 inet6/filter/logdrop-1546 -j DROP Filter 2670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2669 inet/filter/INPUT -j limit-2669 inet/filter/OUTPUT -j limit-2669 inet/filter/limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1547 inet/filter/limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1547 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1547 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1547 -j DROP inet6/filter/FORWARD -j limit-2669 inet6/filter/INPUT -j limit-2669 inet6/filter/OUTPUT -j limit-2669 inet6/filter/limit-2669 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1547 inet6/filter/limit-2669 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1547 -j TEE --gateway fc00::2 inet6/filter/logdrop-1547 -j DROP Filter 2671 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2670 inet/filter/FORWARD -j logaccept-final-215 inet/filter/INPUT -j limit-2670 inet/filter/INPUT -j logaccept-final-215 inet/filter/OUTPUT -j limit-2670 inet/filter/OUTPUT -j logaccept-final-215 inet/filter/limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1548 inet/filter/limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-215 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-215 -j ACCEPT inet/filter/logdrop-1548 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1548 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1548 -j DROP inet6/filter/FORWARD -j limit-2670 inet6/filter/FORWARD -j logaccept-final-215 inet6/filter/INPUT -j limit-2670 inet6/filter/INPUT -j logaccept-final-215 inet6/filter/OUTPUT -j limit-2670 inet6/filter/OUTPUT -j logaccept-final-215 inet6/filter/limit-2670 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1548 inet6/filter/limit-2670 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-215 -j ACCEPT inet6/filter/logdrop-1548 -j TEE --gateway fc00::2 inet6/filter/logdrop-1548 -j DROP Filter 2672 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2671 inet/filter/INPUT -j limit-2671 inet/filter/OUTPUT -j limit-2671 inet/filter/limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1549 inet/filter/limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1549 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1549 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1549 -j DROP inet6/filter/FORWARD -j limit-2671 inet6/filter/INPUT -j limit-2671 inet6/filter/OUTPUT -j limit-2671 inet6/filter/limit-2671 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1549 inet6/filter/logdrop-1549 -j TEE --gateway fc00::2 inet6/filter/logdrop-1549 -j DROP Filter 2673 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2672 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2672 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2672 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2672 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 inet/filter/logdrop-1550 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1550 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1550 -j DROP inet6/filter/FORWARD -j limit-2672 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2672 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2672 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2672 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 inet6/filter/logdrop-1550 -j TEE --gateway fc00::2 inet6/filter/logdrop-1550 -j DROP Filter 2674 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2673 inet/filter/INPUT -j limit-2673 inet/filter/OUTPUT -j limit-2673 inet/filter/limit-2673 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 inet/filter/logdrop-1551 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1551 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1551 -j DROP inet6/filter/FORWARD -j limit-2673 inet6/filter/INPUT -j limit-2673 inet6/filter/OUTPUT -j limit-2673 inet6/filter/limit-2673 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 inet6/filter/logdrop-1551 -j TEE --gateway fc00::2 inet6/filter/logdrop-1551 -j DROP Filter 2675 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2674 inet/filter/FORWARD -j logaccept-final-216 inet/filter/INPUT -j limit-2674 inet/filter/INPUT -j logaccept-final-216 inet/filter/OUTPUT -j limit-2674 inet/filter/OUTPUT -j logaccept-final-216 inet/filter/limit-2674 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 inet/filter/logaccept-final-216 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-216 -j ACCEPT inet/filter/logdrop-1552 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1552 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1552 -j DROP inet6/filter/FORWARD -j limit-2674 inet6/filter/FORWARD -j logaccept-final-216 inet6/filter/INPUT -j limit-2674 inet6/filter/INPUT -j logaccept-final-216 inet6/filter/OUTPUT -j limit-2674 inet6/filter/OUTPUT -j logaccept-final-216 inet6/filter/limit-2674 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 inet6/filter/logaccept-final-216 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-216 -j ACCEPT inet6/filter/logdrop-1552 -j TEE --gateway fc00::2 inet6/filter/logdrop-1552 -j DROP Filter 2676 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2675 inet/filter/INPUT -j limit-2675 inet/filter/OUTPUT -j limit-2675 inet/filter/limit-2675 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 inet/filter/limit-2675 -m limit --limit 1/second -j LOG inet/filter/logdrop-1553 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1553 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1553 -j DROP inet6/filter/FORWARD -j limit-2675 inet6/filter/INPUT -j limit-2675 inet6/filter/OUTPUT -j limit-2675 inet6/filter/limit-2675 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 inet6/filter/limit-2675 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1553 -j TEE --gateway fc00::2 inet6/filter/logdrop-1553 -j DROP Filter 2677 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2676 inet/filter/FORWARD -j logaccept-final-217 inet/filter/INPUT -j limit-2676 inet/filter/INPUT -j logaccept-final-217 inet/filter/OUTPUT -j limit-2676 inet/filter/OUTPUT -j logaccept-final-217 inet/filter/limit-2676 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 inet/filter/logaccept-final-217 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-217 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-217 -j ACCEPT inet/filter/logdrop-1554 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1554 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1554 -j DROP inet6/filter/FORWARD -j limit-2676 inet6/filter/FORWARD -j logaccept-final-217 inet6/filter/INPUT -j limit-2676 inet6/filter/INPUT -j logaccept-final-217 inet6/filter/OUTPUT -j limit-2676 inet6/filter/OUTPUT -j logaccept-final-217 inet6/filter/limit-2676 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 inet6/filter/logaccept-final-217 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-217 -j ACCEPT inet6/filter/logdrop-1554 -j TEE --gateway fc00::2 inet6/filter/logdrop-1554 -j DROP Filter 2678 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2677 inet/filter/INPUT -j limit-2677 inet/filter/OUTPUT -j limit-2677 inet/filter/limit-2677 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 inet/filter/limit-2677 -j TEE --gateway 10.0.0.1 inet/filter/limit-2677 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1555 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1555 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1555 -j DROP inet6/filter/FORWARD -j limit-2677 inet6/filter/INPUT -j limit-2677 inet6/filter/OUTPUT -j limit-2677 inet6/filter/limit-2677 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 inet6/filter/limit-2677 -j TEE --gateway fc00::2 inet6/filter/logdrop-1555 -j TEE --gateway fc00::2 inet6/filter/logdrop-1555 -j DROP Filter 2679 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2678 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2678 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2678 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2678 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 inet/filter/logdrop-1556 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1556 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1556 -j DROP inet6/filter/FORWARD -j limit-2678 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2678 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2678 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2678 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 inet6/filter/logdrop-1556 -j TEE --gateway fc00::2 inet6/filter/logdrop-1556 -j DROP Filter 2680 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2679 inet/filter/INPUT -j limit-2679 inet/filter/OUTPUT -j limit-2679 inet/filter/limit-2679 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 inet/filter/logdrop-1557 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1557 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1557 -j DROP inet6/filter/FORWARD -j limit-2679 inet6/filter/INPUT -j limit-2679 inet6/filter/OUTPUT -j limit-2679 inet6/filter/limit-2679 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 inet6/filter/logdrop-1557 -j TEE --gateway fc00::2 inet6/filter/logdrop-1557 -j DROP Filter 2681 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2680 inet/filter/FORWARD -j logaccept-final-218 inet/filter/INPUT -j limit-2680 inet/filter/INPUT -j logaccept-final-218 inet/filter/OUTPUT -j limit-2680 inet/filter/OUTPUT -j logaccept-final-218 inet/filter/limit-2680 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 inet/filter/logaccept-final-218 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-218 -j ACCEPT inet/filter/logdrop-1558 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1558 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1558 -j DROP inet6/filter/FORWARD -j limit-2680 inet6/filter/FORWARD -j logaccept-final-218 inet6/filter/INPUT -j limit-2680 inet6/filter/INPUT -j logaccept-final-218 inet6/filter/OUTPUT -j limit-2680 inet6/filter/OUTPUT -j logaccept-final-218 inet6/filter/limit-2680 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 inet6/filter/logaccept-final-218 -j ACCEPT inet6/filter/logdrop-1558 -j TEE --gateway fc00::2 inet6/filter/logdrop-1558 -j DROP Filter 2682 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2681 inet/filter/INPUT -j limit-2681 inet/filter/OUTPUT -j limit-2681 inet/filter/limit-2681 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 inet/filter/limit-2681 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1559 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1559 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1559 -j DROP inet6/filter/FORWARD -j limit-2681 inet6/filter/INPUT -j limit-2681 inet6/filter/OUTPUT -j limit-2681 inet6/filter/limit-2681 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 inet6/filter/logdrop-1559 -j TEE --gateway fc00::2 inet6/filter/logdrop-1559 -j DROP Filter 2683 {"flow-limit":{"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2682 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2682 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2682 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2682 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2682 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2682 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2684 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2683 inet/filter/INPUT -j limit-2683 inet/filter/OUTPUT -j limit-2683 inet/filter/limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2683 inet6/filter/INPUT -j limit-2683 inet6/filter/OUTPUT -j limit-2683 inet6/filter/limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2685 {"flow-limit":{"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2684 inet/filter/FORWARD -j logaccept-final-219 inet/filter/INPUT -j limit-2684 inet/filter/INPUT -j logaccept-final-219 inet/filter/OUTPUT -j limit-2684 inet/filter/OUTPUT -j logaccept-final-219 inet/filter/limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-219 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-219 -j ACCEPT inet6/filter/FORWARD -j limit-2684 inet6/filter/FORWARD -j logaccept-final-219 inet6/filter/INPUT -j limit-2684 inet6/filter/INPUT -j logaccept-final-219 inet6/filter/OUTPUT -j limit-2684 inet6/filter/OUTPUT -j logaccept-final-219 inet6/filter/limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-219 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-219 -j ACCEPT Filter 2686 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2685 inet/filter/INPUT -j limit-2685 inet/filter/OUTPUT -j limit-2685 inet/filter/limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2685 inet6/filter/INPUT -j limit-2685 inet6/filter/OUTPUT -j limit-2685 inet6/filter/limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2687 {"flow-limit":{"interval":5,"log":"none"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2686 inet/filter/FORWARD -j logaccept-final-220 inet/filter/INPUT -j limit-2686 inet/filter/INPUT -j logaccept-final-220 inet/filter/OUTPUT -j limit-2686 inet/filter/OUTPUT -j logaccept-final-220 inet/filter/limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-220 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-220 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-220 -j ACCEPT inet6/filter/FORWARD -j limit-2686 inet6/filter/FORWARD -j logaccept-final-220 inet6/filter/INPUT -j limit-2686 inet6/filter/INPUT -j logaccept-final-220 inet6/filter/OUTPUT -j limit-2686 inet6/filter/OUTPUT -j logaccept-final-220 inet6/filter/limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-220 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-220 -j ACCEPT Filter 2688 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2687 inet/filter/INPUT -j limit-2687 inet/filter/OUTPUT -j limit-2687 inet/filter/limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2687 inet6/filter/INPUT -j limit-2687 inet6/filter/OUTPUT -j limit-2687 inet6/filter/limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2689 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2688 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2688 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2688 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2688 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2688 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2688 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2690 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2689 inet/filter/INPUT -j limit-2689 inet/filter/OUTPUT -j limit-2689 inet/filter/limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2689 inet6/filter/INPUT -j limit-2689 inet6/filter/OUTPUT -j limit-2689 inet6/filter/limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2691 {"flow-limit":{"interval":5,"log":"none"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2690 inet/filter/FORWARD -j logaccept-final-221 inet/filter/INPUT -j limit-2690 inet/filter/INPUT -j logaccept-final-221 inet/filter/OUTPUT -j limit-2690 inet/filter/OUTPUT -j logaccept-final-221 inet/filter/limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-221 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-221 -j ACCEPT inet6/filter/FORWARD -j limit-2690 inet6/filter/FORWARD -j logaccept-final-221 inet6/filter/INPUT -j limit-2690 inet6/filter/INPUT -j logaccept-final-221 inet6/filter/OUTPUT -j limit-2690 inet6/filter/OUTPUT -j logaccept-final-221 inet6/filter/limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-221 -j ACCEPT Filter 2692 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2691 inet/filter/INPUT -j limit-2691 inet/filter/OUTPUT -j limit-2691 inet/filter/limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2691 inet6/filter/INPUT -j limit-2691 inet6/filter/OUTPUT -j limit-2691 inet6/filter/limit-2691 -m recent --name limit-2691 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 2693 {"flow-limit":{"interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2692 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2692 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2692 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2692 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2692 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2692 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2694 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2693 inet/filter/INPUT -j limit-2693 inet/filter/OUTPUT -j limit-2693 inet/filter/limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2693 inet6/filter/INPUT -j limit-2693 inet6/filter/OUTPUT -j limit-2693 inet6/filter/limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2695 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2694 inet/filter/FORWARD -j logaccept-final-222 inet/filter/INPUT -j limit-2694 inet/filter/INPUT -j logaccept-final-222 inet/filter/OUTPUT -j limit-2694 inet/filter/OUTPUT -j logaccept-final-222 inet/filter/limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-222 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-222 -j ACCEPT inet6/filter/FORWARD -j limit-2694 inet6/filter/FORWARD -j logaccept-final-222 inet6/filter/INPUT -j limit-2694 inet6/filter/INPUT -j logaccept-final-222 inet6/filter/OUTPUT -j limit-2694 inet6/filter/OUTPUT -j logaccept-final-222 inet6/filter/limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-222 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-222 -j ACCEPT Filter 2696 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2695 inet/filter/INPUT -j limit-2695 inet/filter/OUTPUT -j limit-2695 inet/filter/limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2695 inet6/filter/INPUT -j limit-2695 inet6/filter/OUTPUT -j limit-2695 inet6/filter/limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2697 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2696 inet/filter/FORWARD -j logaccept-final-223 inet/filter/INPUT -j limit-2696 inet/filter/INPUT -j logaccept-final-223 inet/filter/OUTPUT -j limit-2696 inet/filter/OUTPUT -j logaccept-final-223 inet/filter/limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-223 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-223 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-223 -j ACCEPT inet6/filter/FORWARD -j limit-2696 inet6/filter/FORWARD -j logaccept-final-223 inet6/filter/INPUT -j limit-2696 inet6/filter/INPUT -j logaccept-final-223 inet6/filter/OUTPUT -j limit-2696 inet6/filter/OUTPUT -j logaccept-final-223 inet6/filter/limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-223 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-223 -j ACCEPT Filter 2698 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2697 inet/filter/INPUT -j limit-2697 inet/filter/OUTPUT -j limit-2697 inet/filter/limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2697 inet6/filter/INPUT -j limit-2697 inet6/filter/OUTPUT -j limit-2697 inet6/filter/limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2699 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2698 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2698 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2698 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2698 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2698 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2698 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2700 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2699 inet/filter/INPUT -j limit-2699 inet/filter/OUTPUT -j limit-2699 inet/filter/limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2699 inet6/filter/INPUT -j limit-2699 inet6/filter/OUTPUT -j limit-2699 inet6/filter/limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2701 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2700 inet/filter/FORWARD -j logaccept-final-224 inet/filter/INPUT -j limit-2700 inet/filter/INPUT -j logaccept-final-224 inet/filter/OUTPUT -j limit-2700 inet/filter/OUTPUT -j logaccept-final-224 inet/filter/limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-224 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-224 -j ACCEPT inet6/filter/FORWARD -j limit-2700 inet6/filter/FORWARD -j logaccept-final-224 inet6/filter/INPUT -j limit-2700 inet6/filter/INPUT -j logaccept-final-224 inet6/filter/OUTPUT -j limit-2700 inet6/filter/OUTPUT -j logaccept-final-224 inet6/filter/limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-224 -j ACCEPT Filter 2702 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2701 inet/filter/INPUT -j limit-2701 inet/filter/OUTPUT -j limit-2701 inet/filter/limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2701 inet6/filter/INPUT -j limit-2701 inet6/filter/OUTPUT -j limit-2701 inet6/filter/limit-2701 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 2703 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2702 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2702 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2702 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2702 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2702 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2702 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2702 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2702 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2704 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2703 inet/filter/INPUT -j limit-2703 inet/filter/OUTPUT -j limit-2703 inet/filter/limit-2703 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2703 inet6/filter/INPUT -j limit-2703 inet6/filter/OUTPUT -j limit-2703 inet6/filter/limit-2703 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2705 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2704 inet/filter/FORWARD -j logaccept-final-225 inet/filter/INPUT -j limit-2704 inet/filter/INPUT -j logaccept-final-225 inet/filter/OUTPUT -j limit-2704 inet/filter/OUTPUT -j logaccept-final-225 inet/filter/limit-2704 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-225 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-225 -j ACCEPT inet6/filter/FORWARD -j limit-2704 inet6/filter/FORWARD -j logaccept-final-225 inet6/filter/INPUT -j limit-2704 inet6/filter/INPUT -j logaccept-final-225 inet6/filter/OUTPUT -j limit-2704 inet6/filter/OUTPUT -j logaccept-final-225 inet6/filter/limit-2704 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-225 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-225 -j ACCEPT Filter 2706 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2705 inet/filter/INPUT -j limit-2705 inet/filter/OUTPUT -j limit-2705 inet/filter/limit-2705 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2705 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2705 inet6/filter/INPUT -j limit-2705 inet6/filter/OUTPUT -j limit-2705 inet6/filter/limit-2705 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2705 -m limit --limit 1/second -j LOG Filter 2707 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2706 inet/filter/FORWARD -j logaccept-final-226 inet/filter/INPUT -j limit-2706 inet/filter/INPUT -j logaccept-final-226 inet/filter/OUTPUT -j limit-2706 inet/filter/OUTPUT -j logaccept-final-226 inet/filter/limit-2706 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-226 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-226 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-226 -j ACCEPT inet6/filter/FORWARD -j limit-2706 inet6/filter/FORWARD -j logaccept-final-226 inet6/filter/INPUT -j limit-2706 inet6/filter/INPUT -j logaccept-final-226 inet6/filter/OUTPUT -j limit-2706 inet6/filter/OUTPUT -j logaccept-final-226 inet6/filter/limit-2706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-226 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-226 -j ACCEPT Filter 2708 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2707 inet/filter/INPUT -j limit-2707 inet/filter/OUTPUT -j limit-2707 inet/filter/limit-2707 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2707 -j TEE --gateway 10.0.0.1 inet/filter/limit-2707 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2707 inet6/filter/INPUT -j limit-2707 inet6/filter/OUTPUT -j limit-2707 inet6/filter/limit-2707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2707 -j TEE --gateway fc00::2 Filter 2709 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2708 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2708 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2708 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2708 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2708 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2708 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2708 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2709 inet/filter/INPUT -j limit-2709 inet/filter/OUTPUT -j limit-2709 inet/filter/limit-2709 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2709 inet6/filter/INPUT -j limit-2709 inet6/filter/OUTPUT -j limit-2709 inet6/filter/limit-2709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2711 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2710 inet/filter/FORWARD -j logaccept-final-227 inet/filter/INPUT -j limit-2710 inet/filter/INPUT -j logaccept-final-227 inet/filter/OUTPUT -j limit-2710 inet/filter/OUTPUT -j logaccept-final-227 inet/filter/limit-2710 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-227 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-227 -j ACCEPT inet6/filter/FORWARD -j limit-2710 inet6/filter/FORWARD -j logaccept-final-227 inet6/filter/INPUT -j limit-2710 inet6/filter/INPUT -j logaccept-final-227 inet6/filter/OUTPUT -j limit-2710 inet6/filter/OUTPUT -j logaccept-final-227 inet6/filter/limit-2710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-227 -j ACCEPT Filter 2712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2711 inet/filter/INPUT -j limit-2711 inet/filter/OUTPUT -j limit-2711 inet/filter/limit-2711 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2711 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2711 inet6/filter/INPUT -j limit-2711 inet6/filter/OUTPUT -j limit-2711 inet6/filter/limit-2711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2713 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2712 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2712 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2712 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2712 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2712 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2712 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2714 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2713 inet/filter/INPUT -j limit-2713 inet/filter/OUTPUT -j limit-2713 inet/filter/limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2713 inet6/filter/INPUT -j limit-2713 inet6/filter/OUTPUT -j limit-2713 inet6/filter/limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2715 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2714 inet/filter/FORWARD -j logaccept-final-228 inet/filter/INPUT -j limit-2714 inet/filter/INPUT -j logaccept-final-228 inet/filter/OUTPUT -j limit-2714 inet/filter/OUTPUT -j logaccept-final-228 inet/filter/limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-228 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-228 -j ACCEPT inet6/filter/FORWARD -j limit-2714 inet6/filter/FORWARD -j logaccept-final-228 inet6/filter/INPUT -j limit-2714 inet6/filter/INPUT -j logaccept-final-228 inet6/filter/OUTPUT -j limit-2714 inet6/filter/OUTPUT -j logaccept-final-228 inet6/filter/limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-228 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-228 -j ACCEPT Filter 2716 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2715 inet/filter/INPUT -j limit-2715 inet/filter/OUTPUT -j limit-2715 inet/filter/limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2715 inet6/filter/INPUT -j limit-2715 inet6/filter/OUTPUT -j limit-2715 inet6/filter/limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG Filter 2717 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2716 inet/filter/FORWARD -j logaccept-final-229 inet/filter/INPUT -j limit-2716 inet/filter/INPUT -j logaccept-final-229 inet/filter/OUTPUT -j limit-2716 inet/filter/OUTPUT -j logaccept-final-229 inet/filter/limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-229 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-229 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-229 -j ACCEPT inet6/filter/FORWARD -j limit-2716 inet6/filter/FORWARD -j logaccept-final-229 inet6/filter/INPUT -j limit-2716 inet6/filter/INPUT -j logaccept-final-229 inet6/filter/OUTPUT -j limit-2716 inet6/filter/OUTPUT -j logaccept-final-229 inet6/filter/limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-229 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-229 -j ACCEPT Filter 2718 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2717 inet/filter/INPUT -j limit-2717 inet/filter/OUTPUT -j limit-2717 inet/filter/limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2717 inet6/filter/INPUT -j limit-2717 inet6/filter/OUTPUT -j limit-2717 inet6/filter/limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 Filter 2719 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2718 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2718 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2718 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2718 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2718 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2718 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2720 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2719 inet/filter/INPUT -j limit-2719 inet/filter/OUTPUT -j limit-2719 inet/filter/limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -j limit-2719 inet6/filter/INPUT -j limit-2719 inet6/filter/OUTPUT -j limit-2719 inet6/filter/limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 2721 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2720 inet/filter/FORWARD -j logaccept-final-230 inet/filter/INPUT -j limit-2720 inet/filter/INPUT -j logaccept-final-230 inet/filter/OUTPUT -j limit-2720 inet/filter/OUTPUT -j logaccept-final-230 inet/filter/limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-230 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-230 -j ACCEPT inet6/filter/FORWARD -j limit-2720 inet6/filter/FORWARD -j logaccept-final-230 inet6/filter/INPUT -j limit-2720 inet6/filter/INPUT -j logaccept-final-230 inet6/filter/OUTPUT -j limit-2720 inet6/filter/OUTPUT -j logaccept-final-230 inet6/filter/limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-230 -j ACCEPT Filter 2722 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2721 inet/filter/INPUT -j limit-2721 inet/filter/OUTPUT -j limit-2721 inet/filter/limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2721 inet6/filter/INPUT -j limit-2721 inet6/filter/OUTPUT -j limit-2721 inet6/filter/limit-2721 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP Filter 2723 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2722 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2722 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2722 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2722 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2722 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2722 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2722 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2724 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2723 inet/filter/INPUT -j limit-2723 inet/filter/OUTPUT -j limit-2723 inet/filter/limit-2723 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2723 inet6/filter/INPUT -j limit-2723 inet6/filter/OUTPUT -j limit-2723 inet6/filter/limit-2723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2725 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2724 inet/filter/FORWARD -j logaccept-final-231 inet/filter/INPUT -j limit-2724 inet/filter/INPUT -j logaccept-final-231 inet/filter/OUTPUT -j limit-2724 inet/filter/OUTPUT -j logaccept-final-231 inet/filter/limit-2724 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-231 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-231 -j ACCEPT inet6/filter/FORWARD -j limit-2724 inet6/filter/FORWARD -j logaccept-final-231 inet6/filter/INPUT -j limit-2724 inet6/filter/INPUT -j logaccept-final-231 inet6/filter/OUTPUT -j limit-2724 inet6/filter/OUTPUT -j logaccept-final-231 inet6/filter/limit-2724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-231 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-231 -j ACCEPT Filter 2726 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2725 inet/filter/INPUT -j limit-2725 inet/filter/OUTPUT -j limit-2725 inet/filter/limit-2725 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2725 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2725 inet6/filter/INPUT -j limit-2725 inet6/filter/OUTPUT -j limit-2725 inet6/filter/limit-2725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2725 -m limit --limit 1/second -j LOG Filter 2727 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2726 inet/filter/FORWARD -j logaccept-final-232 inet/filter/INPUT -j limit-2726 inet/filter/INPUT -j logaccept-final-232 inet/filter/OUTPUT -j limit-2726 inet/filter/OUTPUT -j logaccept-final-232 inet/filter/limit-2726 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-232 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-232 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-232 -j ACCEPT inet6/filter/FORWARD -j limit-2726 inet6/filter/FORWARD -j logaccept-final-232 inet6/filter/INPUT -j limit-2726 inet6/filter/INPUT -j logaccept-final-232 inet6/filter/OUTPUT -j limit-2726 inet6/filter/OUTPUT -j logaccept-final-232 inet6/filter/limit-2726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-232 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-232 -j ACCEPT Filter 2728 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2727 inet/filter/INPUT -j limit-2727 inet/filter/OUTPUT -j limit-2727 inet/filter/limit-2727 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2727 -j TEE --gateway 10.0.0.1 inet/filter/limit-2727 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2727 inet6/filter/INPUT -j limit-2727 inet6/filter/OUTPUT -j limit-2727 inet6/filter/limit-2727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2727 -j TEE --gateway fc00::2 Filter 2729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2728 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2728 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2728 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2728 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2728 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2728 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2728 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2729 inet/filter/INPUT -j limit-2729 inet/filter/OUTPUT -j limit-2729 inet/filter/limit-2729 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2729 inet6/filter/INPUT -j limit-2729 inet6/filter/OUTPUT -j limit-2729 inet6/filter/limit-2729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2730 inet/filter/FORWARD -j logaccept-final-233 inet/filter/INPUT -j limit-2730 inet/filter/INPUT -j logaccept-final-233 inet/filter/OUTPUT -j limit-2730 inet/filter/OUTPUT -j logaccept-final-233 inet/filter/limit-2730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-233 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-233 -j ACCEPT inet6/filter/FORWARD -j limit-2730 inet6/filter/FORWARD -j logaccept-final-233 inet6/filter/INPUT -j limit-2730 inet6/filter/INPUT -j logaccept-final-233 inet6/filter/OUTPUT -j limit-2730 inet6/filter/OUTPUT -j logaccept-final-233 inet6/filter/limit-2730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-233 -j ACCEPT Filter 2732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2731 inet/filter/INPUT -j limit-2731 inet/filter/OUTPUT -j limit-2731 inet/filter/limit-2731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2731 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2731 inet6/filter/INPUT -j limit-2731 inet6/filter/OUTPUT -j limit-2731 inet6/filter/limit-2731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2733 {"flow-limit":{"interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2732 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2732 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2732 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2732 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2732 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2732 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2732 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2732 -m recent --name user:C --rsource --mask fe00:: --set Filter 2734 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2733 inet/filter/INPUT -j limit-2733 inet/filter/OUTPUT -j limit-2733 inet/filter/limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2733 inet6/filter/INPUT -j limit-2733 inet6/filter/OUTPUT -j limit-2733 inet6/filter/limit-2733 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2733 -m recent --name user:C --rsource --mask fe00:: --set Filter 2735 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2734 inet/filter/FORWARD -j logaccept-final-234 inet/filter/INPUT -j limit-2734 inet/filter/INPUT -j logaccept-final-234 inet/filter/OUTPUT -j limit-2734 inet/filter/OUTPUT -j logaccept-final-234 inet/filter/limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-234 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-234 -j ACCEPT inet6/filter/FORWARD -j limit-2734 inet6/filter/FORWARD -j logaccept-final-234 inet6/filter/INPUT -j limit-2734 inet6/filter/INPUT -j logaccept-final-234 inet6/filter/OUTPUT -j limit-2734 inet6/filter/OUTPUT -j logaccept-final-234 inet6/filter/limit-2734 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2734 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-234 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-234 -j ACCEPT Filter 2736 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2735 inet/filter/INPUT -j limit-2735 inet/filter/OUTPUT -j limit-2735 inet/filter/limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2735 inet6/filter/INPUT -j limit-2735 inet6/filter/OUTPUT -j limit-2735 inet6/filter/limit-2735 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2735 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2737 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2736 inet/filter/FORWARD -j logaccept-final-235 inet/filter/INPUT -j limit-2736 inet/filter/INPUT -j logaccept-final-235 inet/filter/OUTPUT -j limit-2736 inet/filter/OUTPUT -j logaccept-final-235 inet/filter/limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-235 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-235 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-235 -j ACCEPT inet6/filter/FORWARD -j limit-2736 inet6/filter/FORWARD -j logaccept-final-235 inet6/filter/INPUT -j limit-2736 inet6/filter/INPUT -j logaccept-final-235 inet6/filter/OUTPUT -j limit-2736 inet6/filter/OUTPUT -j logaccept-final-235 inet6/filter/limit-2736 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2736 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-235 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-235 -j ACCEPT Filter 2738 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2737 inet/filter/INPUT -j limit-2737 inet/filter/OUTPUT -j limit-2737 inet/filter/limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2737 inet6/filter/INPUT -j limit-2737 inet6/filter/OUTPUT -j limit-2737 inet6/filter/limit-2737 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2737 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2739 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2738 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2738 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2738 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2738 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2738 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2738 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2738 -m recent --name user:C --rsource --mask fe00:: --set Filter 2740 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2739 inet/filter/INPUT -j limit-2739 inet/filter/OUTPUT -j limit-2739 inet/filter/limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2739 inet6/filter/INPUT -j limit-2739 inet6/filter/OUTPUT -j limit-2739 inet6/filter/limit-2739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2739 -m recent --name user:C --rsource --mask fe00:: --set Filter 2741 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2740 inet/filter/FORWARD -j logaccept-final-236 inet/filter/INPUT -j limit-2740 inet/filter/INPUT -j logaccept-final-236 inet/filter/OUTPUT -j limit-2740 inet/filter/OUTPUT -j logaccept-final-236 inet/filter/limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-236 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-236 -j ACCEPT inet6/filter/FORWARD -j limit-2740 inet6/filter/FORWARD -j logaccept-final-236 inet6/filter/INPUT -j limit-2740 inet6/filter/INPUT -j logaccept-final-236 inet6/filter/OUTPUT -j limit-2740 inet6/filter/OUTPUT -j logaccept-final-236 inet6/filter/limit-2740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2740 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-236 -j ACCEPT Filter 2742 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2741 inet/filter/INPUT -j limit-2741 inet/filter/OUTPUT -j limit-2741 inet/filter/limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2741 inet6/filter/INPUT -j limit-2741 inet6/filter/OUTPUT -j limit-2741 inet6/filter/limit-2741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 2743 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2742 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2742 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2742 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2742 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2742 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2742 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2742 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2742 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2744 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2743 inet/filter/INPUT -j limit-2743 inet/filter/OUTPUT -j limit-2743 inet/filter/limit-2743 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2743 inet6/filter/INPUT -j limit-2743 inet6/filter/OUTPUT -j limit-2743 inet6/filter/limit-2743 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2745 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2744 inet/filter/FORWARD -j logaccept-final-237 inet/filter/INPUT -j limit-2744 inet/filter/INPUT -j logaccept-final-237 inet/filter/OUTPUT -j limit-2744 inet/filter/OUTPUT -j logaccept-final-237 inet/filter/limit-2744 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-237 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-237 -j ACCEPT inet6/filter/FORWARD -j limit-2744 inet6/filter/FORWARD -j logaccept-final-237 inet6/filter/INPUT -j limit-2744 inet6/filter/INPUT -j logaccept-final-237 inet6/filter/OUTPUT -j limit-2744 inet6/filter/OUTPUT -j logaccept-final-237 inet6/filter/limit-2744 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-237 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-237 -j ACCEPT Filter 2746 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2745 inet/filter/INPUT -j limit-2745 inet/filter/OUTPUT -j limit-2745 inet/filter/limit-2745 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2745 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2745 inet6/filter/INPUT -j limit-2745 inet6/filter/OUTPUT -j limit-2745 inet6/filter/limit-2745 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2745 -m limit --limit 1/second -j LOG Filter 2747 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2746 inet/filter/FORWARD -j logaccept-final-238 inet/filter/INPUT -j limit-2746 inet/filter/INPUT -j logaccept-final-238 inet/filter/OUTPUT -j limit-2746 inet/filter/OUTPUT -j logaccept-final-238 inet/filter/limit-2746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-238 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-238 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-238 -j ACCEPT inet6/filter/FORWARD -j limit-2746 inet6/filter/FORWARD -j logaccept-final-238 inet6/filter/INPUT -j limit-2746 inet6/filter/INPUT -j logaccept-final-238 inet6/filter/OUTPUT -j limit-2746 inet6/filter/OUTPUT -j logaccept-final-238 inet6/filter/limit-2746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-238 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-238 -j ACCEPT Filter 2748 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2747 inet/filter/INPUT -j limit-2747 inet/filter/OUTPUT -j limit-2747 inet/filter/limit-2747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2747 -j TEE --gateway 10.0.0.1 inet/filter/limit-2747 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2747 inet6/filter/INPUT -j limit-2747 inet6/filter/OUTPUT -j limit-2747 inet6/filter/limit-2747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2747 -j TEE --gateway fc00::2 Filter 2749 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2748 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2748 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2748 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2748 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2748 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2748 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2750 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2749 inet/filter/INPUT -j limit-2749 inet/filter/OUTPUT -j limit-2749 inet/filter/limit-2749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2749 inet6/filter/INPUT -j limit-2749 inet6/filter/OUTPUT -j limit-2749 inet6/filter/limit-2749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2751 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2750 inet/filter/FORWARD -j logaccept-final-239 inet/filter/INPUT -j limit-2750 inet/filter/INPUT -j logaccept-final-239 inet/filter/OUTPUT -j limit-2750 inet/filter/OUTPUT -j logaccept-final-239 inet/filter/limit-2750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-239 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-239 -j ACCEPT inet6/filter/FORWARD -j limit-2750 inet6/filter/FORWARD -j logaccept-final-239 inet6/filter/INPUT -j limit-2750 inet6/filter/INPUT -j logaccept-final-239 inet6/filter/OUTPUT -j limit-2750 inet6/filter/OUTPUT -j logaccept-final-239 inet6/filter/limit-2750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-239 -j ACCEPT Filter 2752 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2751 inet/filter/INPUT -j limit-2751 inet/filter/OUTPUT -j limit-2751 inet/filter/limit-2751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2751 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2751 inet6/filter/INPUT -j limit-2751 inet6/filter/OUTPUT -j limit-2751 inet6/filter/limit-2751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2753 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2752 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2752 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2752 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2752 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2752 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2752 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2752 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2752 -m recent --name user:C --rdest --mask fe00:: --set Filter 2754 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2753 inet/filter/INPUT -j limit-2753 inet/filter/OUTPUT -j limit-2753 inet/filter/limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2753 inet6/filter/INPUT -j limit-2753 inet6/filter/OUTPUT -j limit-2753 inet6/filter/limit-2753 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2753 -m recent --name user:C --rdest --mask fe00:: --set Filter 2755 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2754 inet/filter/FORWARD -j logaccept-final-240 inet/filter/INPUT -j limit-2754 inet/filter/INPUT -j logaccept-final-240 inet/filter/OUTPUT -j limit-2754 inet/filter/OUTPUT -j logaccept-final-240 inet/filter/limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-240 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-240 -j ACCEPT inet6/filter/FORWARD -j limit-2754 inet6/filter/FORWARD -j logaccept-final-240 inet6/filter/INPUT -j limit-2754 inet6/filter/INPUT -j logaccept-final-240 inet6/filter/OUTPUT -j limit-2754 inet6/filter/OUTPUT -j logaccept-final-240 inet6/filter/limit-2754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2754 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-240 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-240 -j ACCEPT Filter 2756 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2755 inet/filter/INPUT -j limit-2755 inet/filter/OUTPUT -j limit-2755 inet/filter/limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2755 inet6/filter/INPUT -j limit-2755 inet6/filter/OUTPUT -j limit-2755 inet6/filter/limit-2755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2755 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG Filter 2757 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2756 inet/filter/FORWARD -j logaccept-final-241 inet/filter/INPUT -j limit-2756 inet/filter/INPUT -j logaccept-final-241 inet/filter/OUTPUT -j limit-2756 inet/filter/OUTPUT -j logaccept-final-241 inet/filter/limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-241 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-241 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-241 -j ACCEPT inet6/filter/FORWARD -j limit-2756 inet6/filter/FORWARD -j logaccept-final-241 inet6/filter/INPUT -j limit-2756 inet6/filter/INPUT -j logaccept-final-241 inet6/filter/OUTPUT -j limit-2756 inet6/filter/OUTPUT -j logaccept-final-241 inet6/filter/limit-2756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2756 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-241 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-241 -j ACCEPT Filter 2758 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2757 inet/filter/INPUT -j limit-2757 inet/filter/OUTPUT -j limit-2757 inet/filter/limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2757 inet6/filter/INPUT -j limit-2757 inet6/filter/OUTPUT -j limit-2757 inet6/filter/limit-2757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2757 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 Filter 2759 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2758 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2758 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2758 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2758 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2758 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2758 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2758 -m recent --name user:C --rdest --mask fe00:: --set Filter 2760 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2759 inet/filter/INPUT -j limit-2759 inet/filter/OUTPUT -j limit-2759 inet/filter/limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/FORWARD -j limit-2759 inet6/filter/INPUT -j limit-2759 inet6/filter/OUTPUT -j limit-2759 inet6/filter/limit-2759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2759 -m recent --name user:C --rdest --mask fe00:: --set Filter 2761 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2760 inet/filter/FORWARD -j logaccept-final-242 inet/filter/INPUT -j limit-2760 inet/filter/INPUT -j logaccept-final-242 inet/filter/OUTPUT -j limit-2760 inet/filter/OUTPUT -j logaccept-final-242 inet/filter/limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-242 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-242 -j ACCEPT inet6/filter/FORWARD -j limit-2760 inet6/filter/FORWARD -j logaccept-final-242 inet6/filter/INPUT -j limit-2760 inet6/filter/INPUT -j logaccept-final-242 inet6/filter/OUTPUT -j limit-2760 inet6/filter/OUTPUT -j logaccept-final-242 inet6/filter/limit-2760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2760 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-242 -j ACCEPT Filter 2762 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2761 inet/filter/INPUT -j limit-2761 inet/filter/OUTPUT -j limit-2761 inet/filter/limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2761 inet6/filter/INPUT -j limit-2761 inet6/filter/OUTPUT -j limit-2761 inet6/filter/limit-2761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP Filter 2763 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2762 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2762 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2762 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2762 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2762 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2762 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2764 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2763 inet/filter/INPUT -j limit-2763 inet/filter/OUTPUT -j limit-2763 inet/filter/limit-2763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2763 inet6/filter/INPUT -j limit-2763 inet6/filter/OUTPUT -j limit-2763 inet6/filter/limit-2763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2765 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2764 inet/filter/FORWARD -j logaccept-final-243 inet/filter/INPUT -j limit-2764 inet/filter/INPUT -j logaccept-final-243 inet/filter/OUTPUT -j limit-2764 inet/filter/OUTPUT -j logaccept-final-243 inet/filter/limit-2764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-243 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-243 -j ACCEPT inet6/filter/FORWARD -j limit-2764 inet6/filter/FORWARD -j logaccept-final-243 inet6/filter/INPUT -j limit-2764 inet6/filter/INPUT -j logaccept-final-243 inet6/filter/OUTPUT -j limit-2764 inet6/filter/OUTPUT -j logaccept-final-243 inet6/filter/limit-2764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-243 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-243 -j ACCEPT Filter 2766 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2765 inet/filter/INPUT -j limit-2765 inet/filter/OUTPUT -j limit-2765 inet/filter/limit-2765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2765 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j limit-2765 inet6/filter/INPUT -j limit-2765 inet6/filter/OUTPUT -j limit-2765 inet6/filter/limit-2765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2765 -m limit --limit 1/second -j LOG Filter 2767 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2766 inet/filter/FORWARD -j logaccept-final-244 inet/filter/INPUT -j limit-2766 inet/filter/INPUT -j logaccept-final-244 inet/filter/OUTPUT -j limit-2766 inet/filter/OUTPUT -j logaccept-final-244 inet/filter/limit-2766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-244 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-244 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-244 -j ACCEPT inet6/filter/FORWARD -j limit-2766 inet6/filter/FORWARD -j logaccept-final-244 inet6/filter/INPUT -j limit-2766 inet6/filter/INPUT -j logaccept-final-244 inet6/filter/OUTPUT -j limit-2766 inet6/filter/OUTPUT -j logaccept-final-244 inet6/filter/limit-2766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-244 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-244 -j ACCEPT Filter 2768 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2767 inet/filter/INPUT -j limit-2767 inet/filter/OUTPUT -j limit-2767 inet/filter/limit-2767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2767 -j TEE --gateway 10.0.0.1 inet/filter/limit-2767 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j limit-2767 inet6/filter/INPUT -j limit-2767 inet6/filter/OUTPUT -j limit-2767 inet6/filter/limit-2767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-2767 -j TEE --gateway fc00::2 Filter 2769 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2768 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2768 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2768 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2768 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2768 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2768 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2770 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2769 inet/filter/INPUT -j limit-2769 inet/filter/OUTPUT -j limit-2769 inet/filter/limit-2769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/FORWARD -j limit-2769 inet6/filter/INPUT -j limit-2769 inet6/filter/OUTPUT -j limit-2769 inet6/filter/limit-2769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2771 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2770 inet/filter/FORWARD -j logaccept-final-245 inet/filter/INPUT -j limit-2770 inet/filter/INPUT -j logaccept-final-245 inet/filter/OUTPUT -j limit-2770 inet/filter/OUTPUT -j logaccept-final-245 inet/filter/limit-2770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/logaccept-final-245 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-245 -j ACCEPT inet6/filter/FORWARD -j limit-2770 inet6/filter/FORWARD -j logaccept-final-245 inet6/filter/INPUT -j limit-2770 inet6/filter/INPUT -j logaccept-final-245 inet6/filter/OUTPUT -j limit-2770 inet6/filter/OUTPUT -j logaccept-final-245 inet6/filter/limit-2770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/logaccept-final-245 -j ACCEPT Filter 2772 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2771 inet/filter/INPUT -j limit-2771 inet/filter/OUTPUT -j limit-2771 inet/filter/limit-2771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-2771 -m limit --limit 12/minute -j ULOG inet6/filter/FORWARD -j limit-2771 inet6/filter/INPUT -j limit-2771 inet6/filter/OUTPUT -j limit-2771 inet6/filter/limit-2771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP Filter 2773 {"flow-limit":{"interval":5,"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2772 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2772 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2772 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1560 inet/filter/limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1560 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1560 -j DROP inet6/filter/FORWARD -j limit-2772 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2772 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2772 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1560 inet6/filter/limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1560 -j DROP Filter 2774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2773 inet/filter/INPUT -j limit-2773 inet/filter/OUTPUT -j limit-2773 inet/filter/limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1561 inet/filter/limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1561 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1561 -j DROP inet6/filter/FORWARD -j limit-2773 inet6/filter/INPUT -j limit-2773 inet6/filter/OUTPUT -j limit-2773 inet6/filter/limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1561 inet6/filter/limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1561 -j DROP Filter 2775 {"flow-limit":{"interval":5,"log":"ulog"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2774 inet/filter/FORWARD -j logaccept-final-246 inet/filter/INPUT -j limit-2774 inet/filter/INPUT -j logaccept-final-246 inet/filter/OUTPUT -j limit-2774 inet/filter/OUTPUT -j logaccept-final-246 inet/filter/limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1562 inet/filter/limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-246 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-246 -j ACCEPT inet/filter/logdrop-1562 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1562 -j DROP inet6/filter/FORWARD -j limit-2774 inet6/filter/FORWARD -j logaccept-final-246 inet6/filter/INPUT -j limit-2774 inet6/filter/INPUT -j logaccept-final-246 inet6/filter/OUTPUT -j limit-2774 inet6/filter/OUTPUT -j logaccept-final-246 inet6/filter/limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1562 inet6/filter/limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-246 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-246 -j ACCEPT inet6/filter/logdrop-1562 -j DROP Filter 2776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2775 inet/filter/INPUT -j limit-2775 inet/filter/OUTPUT -j limit-2775 inet/filter/limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1563 inet/filter/limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1563 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1563 -j DROP inet6/filter/FORWARD -j limit-2775 inet6/filter/INPUT -j limit-2775 inet6/filter/OUTPUT -j limit-2775 inet6/filter/limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1563 inet6/filter/limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1563 -j DROP Filter 2777 {"flow-limit":{"interval":5,"log":"ulog"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2776 inet/filter/FORWARD -j logaccept-final-247 inet/filter/INPUT -j limit-2776 inet/filter/INPUT -j logaccept-final-247 inet/filter/OUTPUT -j limit-2776 inet/filter/OUTPUT -j logaccept-final-247 inet/filter/limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1564 inet/filter/limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-247 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-247 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-247 -j ACCEPT inet/filter/logdrop-1564 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1564 -j DROP inet6/filter/FORWARD -j limit-2776 inet6/filter/FORWARD -j logaccept-final-247 inet6/filter/INPUT -j limit-2776 inet6/filter/INPUT -j logaccept-final-247 inet6/filter/OUTPUT -j limit-2776 inet6/filter/OUTPUT -j logaccept-final-247 inet6/filter/limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1564 inet6/filter/limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-247 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-247 -j ACCEPT inet6/filter/logdrop-1564 -j DROP Filter 2778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2777 inet/filter/INPUT -j limit-2777 inet/filter/OUTPUT -j limit-2777 inet/filter/limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1565 inet/filter/limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1565 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1565 -j DROP inet6/filter/FORWARD -j limit-2777 inet6/filter/INPUT -j limit-2777 inet6/filter/OUTPUT -j limit-2777 inet6/filter/limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1565 inet6/filter/limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1565 -j DROP Filter 2779 {"flow-limit":{"interval":5,"log":"ulog"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2778 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2778 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2778 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1566 inet/filter/limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1566 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1566 -j DROP inet6/filter/FORWARD -j limit-2778 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2778 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2778 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1566 inet6/filter/limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1566 -j DROP Filter 2780 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2779 inet/filter/INPUT -j limit-2779 inet/filter/OUTPUT -j limit-2779 inet/filter/limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1567 inet/filter/limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1567 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1567 -j DROP inet6/filter/FORWARD -j limit-2779 inet6/filter/INPUT -j limit-2779 inet6/filter/OUTPUT -j limit-2779 inet6/filter/limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1567 inet6/filter/limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1567 -j DROP Filter 2781 {"flow-limit":{"interval":5,"log":"ulog"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2780 inet/filter/FORWARD -j logaccept-final-248 inet/filter/INPUT -j limit-2780 inet/filter/INPUT -j logaccept-final-248 inet/filter/OUTPUT -j limit-2780 inet/filter/OUTPUT -j logaccept-final-248 inet/filter/limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1568 inet/filter/limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-248 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-248 -j ACCEPT inet/filter/logdrop-1568 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1568 -j DROP inet6/filter/FORWARD -j limit-2780 inet6/filter/FORWARD -j logaccept-final-248 inet6/filter/INPUT -j limit-2780 inet6/filter/INPUT -j logaccept-final-248 inet6/filter/OUTPUT -j limit-2780 inet6/filter/OUTPUT -j logaccept-final-248 inet6/filter/limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1568 inet6/filter/limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-248 -j ACCEPT inet6/filter/logdrop-1568 -j DROP Filter 2782 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2781 inet/filter/INPUT -j limit-2781 inet/filter/OUTPUT -j limit-2781 inet/filter/limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1569 inet/filter/limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1569 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1569 -j DROP inet6/filter/FORWARD -j limit-2781 inet6/filter/INPUT -j limit-2781 inet6/filter/OUTPUT -j limit-2781 inet6/filter/limit-2781 -m recent --name limit-2781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1569 inet6/filter/logdrop-1569 -j DROP Filter 2783 {"flow-limit":{"interval":5,"log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2782 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2782 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2782 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1570 inet/filter/limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1570 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1570 -j DROP inet6/filter/FORWARD -j limit-2782 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2782 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2782 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1570 inet6/filter/limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1570 -j DROP Filter 2784 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2783 inet/filter/INPUT -j limit-2783 inet/filter/OUTPUT -j limit-2783 inet/filter/limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1571 inet/filter/limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1571 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1571 -j DROP inet6/filter/FORWARD -j limit-2783 inet6/filter/INPUT -j limit-2783 inet6/filter/OUTPUT -j limit-2783 inet6/filter/limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1571 inet6/filter/limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1571 -j DROP Filter 2785 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2784 inet/filter/FORWARD -j logaccept-final-249 inet/filter/INPUT -j limit-2784 inet/filter/INPUT -j logaccept-final-249 inet/filter/OUTPUT -j limit-2784 inet/filter/OUTPUT -j logaccept-final-249 inet/filter/limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1572 inet/filter/limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-249 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-249 -j ACCEPT inet/filter/logdrop-1572 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1572 -j DROP inet6/filter/FORWARD -j limit-2784 inet6/filter/FORWARD -j logaccept-final-249 inet6/filter/INPUT -j limit-2784 inet6/filter/INPUT -j logaccept-final-249 inet6/filter/OUTPUT -j limit-2784 inet6/filter/OUTPUT -j logaccept-final-249 inet6/filter/limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1572 inet6/filter/limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-249 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-249 -j ACCEPT inet6/filter/logdrop-1572 -j DROP Filter 2786 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2785 inet/filter/INPUT -j limit-2785 inet/filter/OUTPUT -j limit-2785 inet/filter/limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1573 inet/filter/limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1573 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1573 -j DROP inet6/filter/FORWARD -j limit-2785 inet6/filter/INPUT -j limit-2785 inet6/filter/OUTPUT -j limit-2785 inet6/filter/limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1573 inet6/filter/limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1573 -j DROP Filter 2787 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2786 inet/filter/FORWARD -j logaccept-final-250 inet/filter/INPUT -j limit-2786 inet/filter/INPUT -j logaccept-final-250 inet/filter/OUTPUT -j limit-2786 inet/filter/OUTPUT -j logaccept-final-250 inet/filter/limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1574 inet/filter/limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-250 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-250 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-250 -j ACCEPT inet/filter/logdrop-1574 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1574 -j DROP inet6/filter/FORWARD -j limit-2786 inet6/filter/FORWARD -j logaccept-final-250 inet6/filter/INPUT -j limit-2786 inet6/filter/INPUT -j logaccept-final-250 inet6/filter/OUTPUT -j limit-2786 inet6/filter/OUTPUT -j logaccept-final-250 inet6/filter/limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1574 inet6/filter/limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-250 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-250 -j ACCEPT inet6/filter/logdrop-1574 -j DROP Filter 2788 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2787 inet/filter/INPUT -j limit-2787 inet/filter/OUTPUT -j limit-2787 inet/filter/limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1575 inet/filter/limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1575 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1575 -j DROP inet6/filter/FORWARD -j limit-2787 inet6/filter/INPUT -j limit-2787 inet6/filter/OUTPUT -j limit-2787 inet6/filter/limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1575 inet6/filter/limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1575 -j DROP Filter 2789 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2788 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2788 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2788 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1576 inet/filter/limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1576 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1576 -j DROP inet6/filter/FORWARD -j limit-2788 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2788 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2788 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1576 inet6/filter/limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1576 -j DROP Filter 2790 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2789 inet/filter/INPUT -j limit-2789 inet/filter/OUTPUT -j limit-2789 inet/filter/limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1577 inet/filter/limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-1577 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1577 -j DROP inet6/filter/FORWARD -j limit-2789 inet6/filter/INPUT -j limit-2789 inet6/filter/OUTPUT -j limit-2789 inet6/filter/limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1577 inet6/filter/limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1577 -j DROP Filter 2791 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2790 inet/filter/FORWARD -j logaccept-final-251 inet/filter/INPUT -j limit-2790 inet/filter/INPUT -j logaccept-final-251 inet/filter/OUTPUT -j limit-2790 inet/filter/OUTPUT -j logaccept-final-251 inet/filter/limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1578 inet/filter/limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logaccept-final-251 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-251 -j ACCEPT inet/filter/logdrop-1578 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1578 -j DROP inet6/filter/FORWARD -j limit-2790 inet6/filter/FORWARD -j logaccept-final-251 inet6/filter/INPUT -j limit-2790 inet6/filter/INPUT -j logaccept-final-251 inet6/filter/OUTPUT -j limit-2790 inet6/filter/OUTPUT -j logaccept-final-251 inet6/filter/limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1578 inet6/filter/limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-251 -j ACCEPT inet6/filter/logdrop-1578 -j DROP Filter 2792 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2791 inet/filter/INPUT -j limit-2791 inet/filter/OUTPUT -j limit-2791 inet/filter/limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1579 inet/filter/limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1579 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1579 -j DROP inet6/filter/FORWARD -j limit-2791 inet6/filter/INPUT -j limit-2791 inet6/filter/OUTPUT -j limit-2791 inet6/filter/limit-2791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1579 inet6/filter/logdrop-1579 -j DROP Filter 2793 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2792 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2792 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2792 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 inet/filter/logdrop-1580 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1580 -j DROP inet6/filter/FORWARD -j limit-2792 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2792 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2792 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 inet6/filter/logdrop-1580 -j DROP Filter 2794 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2793 inet/filter/INPUT -j limit-2793 inet/filter/OUTPUT -j limit-2793 inet/filter/limit-2793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 inet/filter/logdrop-1581 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1581 -j DROP inet6/filter/FORWARD -j limit-2793 inet6/filter/INPUT -j limit-2793 inet6/filter/OUTPUT -j limit-2793 inet6/filter/limit-2793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 inet6/filter/logdrop-1581 -j DROP Filter 2795 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2794 inet/filter/FORWARD -j logaccept-final-252 inet/filter/INPUT -j limit-2794 inet/filter/INPUT -j logaccept-final-252 inet/filter/OUTPUT -j limit-2794 inet/filter/OUTPUT -j logaccept-final-252 inet/filter/limit-2794 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 inet/filter/logaccept-final-252 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-252 -j ACCEPT inet/filter/logdrop-1582 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1582 -j DROP inet6/filter/FORWARD -j limit-2794 inet6/filter/FORWARD -j logaccept-final-252 inet6/filter/INPUT -j limit-2794 inet6/filter/INPUT -j logaccept-final-252 inet6/filter/OUTPUT -j limit-2794 inet6/filter/OUTPUT -j logaccept-final-252 inet6/filter/limit-2794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 inet6/filter/logaccept-final-252 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-252 -j ACCEPT inet6/filter/logdrop-1582 -j DROP Filter 2796 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2795 inet/filter/INPUT -j limit-2795 inet/filter/OUTPUT -j limit-2795 inet/filter/limit-2795 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 inet/filter/limit-2795 -m limit --limit 1/second -j LOG inet/filter/logdrop-1583 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1583 -j DROP inet6/filter/FORWARD -j limit-2795 inet6/filter/INPUT -j limit-2795 inet6/filter/OUTPUT -j limit-2795 inet6/filter/limit-2795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 inet6/filter/limit-2795 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1583 -j DROP Filter 2797 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2796 inet/filter/FORWARD -j logaccept-final-253 inet/filter/INPUT -j limit-2796 inet/filter/INPUT -j logaccept-final-253 inet/filter/OUTPUT -j limit-2796 inet/filter/OUTPUT -j logaccept-final-253 inet/filter/limit-2796 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 inet/filter/logaccept-final-253 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-253 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-253 -j ACCEPT inet/filter/logdrop-1584 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1584 -j DROP inet6/filter/FORWARD -j limit-2796 inet6/filter/FORWARD -j logaccept-final-253 inet6/filter/INPUT -j limit-2796 inet6/filter/INPUT -j logaccept-final-253 inet6/filter/OUTPUT -j limit-2796 inet6/filter/OUTPUT -j logaccept-final-253 inet6/filter/limit-2796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 inet6/filter/logaccept-final-253 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-253 -j ACCEPT inet6/filter/logdrop-1584 -j DROP Filter 2798 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2797 inet/filter/INPUT -j limit-2797 inet/filter/OUTPUT -j limit-2797 inet/filter/limit-2797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 inet/filter/limit-2797 -j TEE --gateway 10.0.0.1 inet/filter/limit-2797 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1585 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1585 -j DROP inet6/filter/FORWARD -j limit-2797 inet6/filter/INPUT -j limit-2797 inet6/filter/OUTPUT -j limit-2797 inet6/filter/limit-2797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 inet6/filter/limit-2797 -j TEE --gateway fc00::2 inet6/filter/logdrop-1585 -j DROP Filter 2799 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2798 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2798 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2798 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2798 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 inet/filter/logdrop-1586 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1586 -j DROP inet6/filter/FORWARD -j limit-2798 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2798 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2798 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2798 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 inet6/filter/logdrop-1586 -j DROP Filter 2800 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2799 inet/filter/INPUT -j limit-2799 inet/filter/OUTPUT -j limit-2799 inet/filter/limit-2799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 inet/filter/logdrop-1587 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1587 -j DROP inet6/filter/FORWARD -j limit-2799 inet6/filter/INPUT -j limit-2799 inet6/filter/OUTPUT -j limit-2799 inet6/filter/limit-2799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 inet6/filter/logdrop-1587 -j DROP Filter 2801 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2800 inet/filter/FORWARD -j logaccept-final-254 inet/filter/INPUT -j limit-2800 inet/filter/INPUT -j logaccept-final-254 inet/filter/OUTPUT -j limit-2800 inet/filter/OUTPUT -j logaccept-final-254 inet/filter/limit-2800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 inet/filter/logaccept-final-254 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-254 -j ACCEPT inet/filter/logdrop-1588 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1588 -j DROP inet6/filter/FORWARD -j limit-2800 inet6/filter/FORWARD -j logaccept-final-254 inet6/filter/INPUT -j limit-2800 inet6/filter/INPUT -j logaccept-final-254 inet6/filter/OUTPUT -j limit-2800 inet6/filter/OUTPUT -j logaccept-final-254 inet6/filter/limit-2800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 inet6/filter/logaccept-final-254 -j ACCEPT inet6/filter/logdrop-1588 -j DROP Filter 2802 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2801 inet/filter/INPUT -j limit-2801 inet/filter/OUTPUT -j limit-2801 inet/filter/limit-2801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 inet/filter/limit-2801 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1589 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1589 -j DROP inet6/filter/FORWARD -j limit-2801 inet6/filter/INPUT -j limit-2801 inet6/filter/OUTPUT -j limit-2801 inet6/filter/limit-2801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 inet6/filter/logdrop-1589 -j DROP Filter 2803 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2802 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2802 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2802 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1590 inet/filter/limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1590 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1590 -j DROP inet6/filter/FORWARD -j limit-2802 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2802 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2802 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1590 inet6/filter/limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1590 -j DROP Filter 2804 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"}} (filter-limit) inet/filter/FORWARD -j limit-2803 inet/filter/INPUT -j limit-2803 inet/filter/OUTPUT -j limit-2803 inet/filter/limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1591 inet/filter/limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1591 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1591 -j DROP inet6/filter/FORWARD -j limit-2803 inet6/filter/INPUT -j limit-2803 inet6/filter/OUTPUT -j limit-2803 inet6/filter/limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1591 inet6/filter/limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1591 -j DROP Filter 2805 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2804 inet/filter/FORWARD -j logaccept-final-255 inet/filter/INPUT -j limit-2804 inet/filter/INPUT -j logaccept-final-255 inet/filter/OUTPUT -j limit-2804 inet/filter/OUTPUT -j logaccept-final-255 inet/filter/limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1592 inet/filter/limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-255 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-255 -j ACCEPT inet/filter/logdrop-1592 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1592 -j DROP inet6/filter/FORWARD -j limit-2804 inet6/filter/FORWARD -j logaccept-final-255 inet6/filter/INPUT -j limit-2804 inet6/filter/INPUT -j logaccept-final-255 inet6/filter/OUTPUT -j limit-2804 inet6/filter/OUTPUT -j logaccept-final-255 inet6/filter/limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1592 inet6/filter/limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-255 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-255 -j ACCEPT inet6/filter/logdrop-1592 -j DROP Filter 2806 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2805 inet/filter/INPUT -j limit-2805 inet/filter/OUTPUT -j limit-2805 inet/filter/limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1593 inet/filter/limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1593 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1593 -j DROP inet6/filter/FORWARD -j limit-2805 inet6/filter/INPUT -j limit-2805 inet6/filter/OUTPUT -j limit-2805 inet6/filter/limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1593 inet6/filter/limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1593 -j DROP Filter 2807 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2806 inet/filter/FORWARD -j logaccept-final-256 inet/filter/INPUT -j limit-2806 inet/filter/INPUT -j logaccept-final-256 inet/filter/OUTPUT -j limit-2806 inet/filter/OUTPUT -j logaccept-final-256 inet/filter/limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1594 inet/filter/limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-256 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-256 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-256 -j ACCEPT inet/filter/logdrop-1594 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1594 -j DROP inet6/filter/FORWARD -j limit-2806 inet6/filter/FORWARD -j logaccept-final-256 inet6/filter/INPUT -j limit-2806 inet6/filter/INPUT -j logaccept-final-256 inet6/filter/OUTPUT -j limit-2806 inet6/filter/OUTPUT -j logaccept-final-256 inet6/filter/limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1594 inet6/filter/limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-256 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-256 -j ACCEPT inet6/filter/logdrop-1594 -j DROP Filter 2808 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2807 inet/filter/INPUT -j limit-2807 inet/filter/OUTPUT -j limit-2807 inet/filter/limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1595 inet/filter/limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1595 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1595 -j DROP inet6/filter/FORWARD -j limit-2807 inet6/filter/INPUT -j limit-2807 inet6/filter/OUTPUT -j limit-2807 inet6/filter/limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1595 inet6/filter/limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1595 -j DROP Filter 2809 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2808 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2808 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2808 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1596 inet/filter/limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1596 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1596 -j DROP inet6/filter/FORWARD -j limit-2808 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2808 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2808 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1596 inet6/filter/limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1596 -j DROP Filter 2810 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2809 inet/filter/INPUT -j limit-2809 inet/filter/OUTPUT -j limit-2809 inet/filter/limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1597 inet/filter/limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-1597 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1597 -j DROP inet6/filter/FORWARD -j limit-2809 inet6/filter/INPUT -j limit-2809 inet6/filter/OUTPUT -j limit-2809 inet6/filter/limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1597 inet6/filter/limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-1597 -j DROP Filter 2811 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2810 inet/filter/FORWARD -j logaccept-final-257 inet/filter/INPUT -j limit-2810 inet/filter/INPUT -j logaccept-final-257 inet/filter/OUTPUT -j limit-2810 inet/filter/OUTPUT -j logaccept-final-257 inet/filter/limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1598 inet/filter/limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logaccept-final-257 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-257 -j ACCEPT inet/filter/logdrop-1598 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1598 -j DROP inet6/filter/FORWARD -j limit-2810 inet6/filter/FORWARD -j logaccept-final-257 inet6/filter/INPUT -j limit-2810 inet6/filter/INPUT -j logaccept-final-257 inet6/filter/OUTPUT -j limit-2810 inet6/filter/OUTPUT -j logaccept-final-257 inet6/filter/limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1598 inet6/filter/limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logaccept-final-257 -j ACCEPT inet6/filter/logdrop-1598 -j DROP Filter 2812 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2811 inet/filter/INPUT -j limit-2811 inet/filter/OUTPUT -j limit-2811 inet/filter/limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1599 inet/filter/limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1599 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1599 -j DROP inet6/filter/FORWARD -j limit-2811 inet6/filter/INPUT -j limit-2811 inet6/filter/OUTPUT -j limit-2811 inet6/filter/limit-2811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1599 inet6/filter/logdrop-1599 -j DROP Filter 2813 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2812 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2812 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2812 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2812 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 inet/filter/logdrop-1600 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1600 -j DROP inet6/filter/FORWARD -j limit-2812 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2812 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2812 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 inet6/filter/logdrop-1600 -j DROP Filter 2814 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2813 inet/filter/INPUT -j limit-2813 inet/filter/OUTPUT -j limit-2813 inet/filter/limit-2813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 inet/filter/logdrop-1601 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1601 -j DROP inet6/filter/FORWARD -j limit-2813 inet6/filter/INPUT -j limit-2813 inet6/filter/OUTPUT -j limit-2813 inet6/filter/limit-2813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 inet6/filter/logdrop-1601 -j DROP Filter 2815 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2814 inet/filter/FORWARD -j logaccept-final-258 inet/filter/INPUT -j limit-2814 inet/filter/INPUT -j logaccept-final-258 inet/filter/OUTPUT -j limit-2814 inet/filter/OUTPUT -j logaccept-final-258 inet/filter/limit-2814 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 inet/filter/logaccept-final-258 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-258 -j ACCEPT inet/filter/logdrop-1602 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1602 -j DROP inet6/filter/FORWARD -j limit-2814 inet6/filter/FORWARD -j logaccept-final-258 inet6/filter/INPUT -j limit-2814 inet6/filter/INPUT -j logaccept-final-258 inet6/filter/OUTPUT -j limit-2814 inet6/filter/OUTPUT -j logaccept-final-258 inet6/filter/limit-2814 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 inet6/filter/logaccept-final-258 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-258 -j ACCEPT inet6/filter/logdrop-1602 -j DROP Filter 2816 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2815 inet/filter/INPUT -j limit-2815 inet/filter/OUTPUT -j limit-2815 inet/filter/limit-2815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 inet/filter/limit-2815 -m limit --limit 1/second -j LOG inet/filter/logdrop-1603 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1603 -j DROP inet6/filter/FORWARD -j limit-2815 inet6/filter/INPUT -j limit-2815 inet6/filter/OUTPUT -j limit-2815 inet6/filter/limit-2815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 inet6/filter/limit-2815 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1603 -j DROP Filter 2817 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2816 inet/filter/FORWARD -j logaccept-final-259 inet/filter/INPUT -j limit-2816 inet/filter/INPUT -j logaccept-final-259 inet/filter/OUTPUT -j limit-2816 inet/filter/OUTPUT -j logaccept-final-259 inet/filter/limit-2816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 inet/filter/logaccept-final-259 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-259 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-259 -j ACCEPT inet/filter/logdrop-1604 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1604 -j DROP inet6/filter/FORWARD -j limit-2816 inet6/filter/FORWARD -j logaccept-final-259 inet6/filter/INPUT -j limit-2816 inet6/filter/INPUT -j logaccept-final-259 inet6/filter/OUTPUT -j limit-2816 inet6/filter/OUTPUT -j logaccept-final-259 inet6/filter/limit-2816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 inet6/filter/logaccept-final-259 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-259 -j ACCEPT inet6/filter/logdrop-1604 -j DROP Filter 2818 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2817 inet/filter/INPUT -j limit-2817 inet/filter/OUTPUT -j limit-2817 inet/filter/limit-2817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 inet/filter/limit-2817 -j TEE --gateway 10.0.0.1 inet/filter/limit-2817 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1605 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1605 -j DROP inet6/filter/FORWARD -j limit-2817 inet6/filter/INPUT -j limit-2817 inet6/filter/OUTPUT -j limit-2817 inet6/filter/limit-2817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 inet6/filter/limit-2817 -j TEE --gateway fc00::2 inet6/filter/logdrop-1605 -j DROP Filter 2819 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2818 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2818 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2818 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2818 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 inet/filter/logdrop-1606 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1606 -j DROP inet6/filter/FORWARD -j limit-2818 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2818 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2818 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2818 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 inet6/filter/logdrop-1606 -j DROP Filter 2820 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2819 inet/filter/INPUT -j limit-2819 inet/filter/OUTPUT -j limit-2819 inet/filter/limit-2819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 inet/filter/logdrop-1607 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1607 -j DROP inet6/filter/FORWARD -j limit-2819 inet6/filter/INPUT -j limit-2819 inet6/filter/OUTPUT -j limit-2819 inet6/filter/limit-2819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 inet6/filter/logdrop-1607 -j DROP Filter 2821 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2820 inet/filter/FORWARD -j logaccept-final-260 inet/filter/INPUT -j limit-2820 inet/filter/INPUT -j logaccept-final-260 inet/filter/OUTPUT -j limit-2820 inet/filter/OUTPUT -j logaccept-final-260 inet/filter/limit-2820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 inet/filter/logaccept-final-260 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-260 -j ACCEPT inet/filter/logdrop-1608 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1608 -j DROP inet6/filter/FORWARD -j limit-2820 inet6/filter/FORWARD -j logaccept-final-260 inet6/filter/INPUT -j limit-2820 inet6/filter/INPUT -j logaccept-final-260 inet6/filter/OUTPUT -j limit-2820 inet6/filter/OUTPUT -j logaccept-final-260 inet6/filter/limit-2820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 inet6/filter/logaccept-final-260 -j ACCEPT inet6/filter/logdrop-1608 -j DROP Filter 2822 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2821 inet/filter/INPUT -j limit-2821 inet/filter/OUTPUT -j limit-2821 inet/filter/limit-2821 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 inet/filter/limit-2821 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1609 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1609 -j DROP inet6/filter/FORWARD -j limit-2821 inet6/filter/INPUT -j limit-2821 inet6/filter/OUTPUT -j limit-2821 inet6/filter/limit-2821 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 inet6/filter/logdrop-1609 -j DROP Filter 2823 {"flow-limit":{"interval":5,"log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2822 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2822 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2822 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1610 inet/filter/limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1610 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1610 -j DROP inet6/filter/FORWARD -j limit-2822 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2822 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2822 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1610 inet6/filter/limit-2822 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1610 -j DROP Filter 2824 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2823 inet/filter/INPUT -j limit-2823 inet/filter/OUTPUT -j limit-2823 inet/filter/limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1611 inet/filter/limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1611 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1611 -j DROP inet6/filter/FORWARD -j limit-2823 inet6/filter/INPUT -j limit-2823 inet6/filter/OUTPUT -j limit-2823 inet6/filter/limit-2823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1611 inet6/filter/limit-2823 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1611 -j DROP Filter 2825 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2824 inet/filter/FORWARD -j logaccept-final-261 inet/filter/INPUT -j limit-2824 inet/filter/INPUT -j logaccept-final-261 inet/filter/OUTPUT -j limit-2824 inet/filter/OUTPUT -j logaccept-final-261 inet/filter/limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1612 inet/filter/limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-261 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-261 -j ACCEPT inet/filter/logdrop-1612 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1612 -j DROP inet6/filter/FORWARD -j limit-2824 inet6/filter/FORWARD -j logaccept-final-261 inet6/filter/INPUT -j limit-2824 inet6/filter/INPUT -j logaccept-final-261 inet6/filter/OUTPUT -j limit-2824 inet6/filter/OUTPUT -j logaccept-final-261 inet6/filter/limit-2824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1612 inet6/filter/limit-2824 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-261 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-261 -j ACCEPT inet6/filter/logdrop-1612 -j DROP Filter 2826 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2825 inet/filter/INPUT -j limit-2825 inet/filter/OUTPUT -j limit-2825 inet/filter/limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1613 inet/filter/limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1613 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1613 -j DROP inet6/filter/FORWARD -j limit-2825 inet6/filter/INPUT -j limit-2825 inet6/filter/OUTPUT -j limit-2825 inet6/filter/limit-2825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1613 inet6/filter/limit-2825 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1613 -j DROP Filter 2827 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2826 inet/filter/FORWARD -j logaccept-final-262 inet/filter/INPUT -j limit-2826 inet/filter/INPUT -j logaccept-final-262 inet/filter/OUTPUT -j limit-2826 inet/filter/OUTPUT -j logaccept-final-262 inet/filter/limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1614 inet/filter/limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-262 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-262 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-262 -j ACCEPT inet/filter/logdrop-1614 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1614 -j DROP inet6/filter/FORWARD -j limit-2826 inet6/filter/FORWARD -j logaccept-final-262 inet6/filter/INPUT -j limit-2826 inet6/filter/INPUT -j logaccept-final-262 inet6/filter/OUTPUT -j limit-2826 inet6/filter/OUTPUT -j logaccept-final-262 inet6/filter/limit-2826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1614 inet6/filter/limit-2826 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-262 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-262 -j ACCEPT inet6/filter/logdrop-1614 -j DROP Filter 2828 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2827 inet/filter/INPUT -j limit-2827 inet/filter/OUTPUT -j limit-2827 inet/filter/limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1615 inet/filter/limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1615 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1615 -j DROP inet6/filter/FORWARD -j limit-2827 inet6/filter/INPUT -j limit-2827 inet6/filter/OUTPUT -j limit-2827 inet6/filter/limit-2827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1615 inet6/filter/limit-2827 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1615 -j DROP Filter 2829 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2828 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2828 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2828 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1616 inet/filter/limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1616 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1616 -j DROP inet6/filter/FORWARD -j limit-2828 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2828 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2828 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1616 inet6/filter/limit-2828 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1616 -j DROP Filter 2830 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2829 inet/filter/INPUT -j limit-2829 inet/filter/OUTPUT -j limit-2829 inet/filter/limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1617 inet/filter/limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-1617 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1617 -j DROP inet6/filter/FORWARD -j limit-2829 inet6/filter/INPUT -j limit-2829 inet6/filter/OUTPUT -j limit-2829 inet6/filter/limit-2829 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1617 inet6/filter/limit-2829 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-1617 -j DROP Filter 2831 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2830 inet/filter/FORWARD -j logaccept-final-263 inet/filter/INPUT -j limit-2830 inet/filter/INPUT -j logaccept-final-263 inet/filter/OUTPUT -j limit-2830 inet/filter/OUTPUT -j logaccept-final-263 inet/filter/limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1618 inet/filter/limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logaccept-final-263 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-263 -j ACCEPT inet/filter/logdrop-1618 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1618 -j DROP inet6/filter/FORWARD -j limit-2830 inet6/filter/FORWARD -j logaccept-final-263 inet6/filter/INPUT -j limit-2830 inet6/filter/INPUT -j logaccept-final-263 inet6/filter/OUTPUT -j limit-2830 inet6/filter/OUTPUT -j logaccept-final-263 inet6/filter/limit-2830 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1618 inet6/filter/limit-2830 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logaccept-final-263 -j ACCEPT inet6/filter/logdrop-1618 -j DROP Filter 2832 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2831 inet/filter/INPUT -j limit-2831 inet/filter/OUTPUT -j limit-2831 inet/filter/limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1619 inet/filter/limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1619 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1619 -j DROP inet6/filter/FORWARD -j limit-2831 inet6/filter/INPUT -j limit-2831 inet6/filter/OUTPUT -j limit-2831 inet6/filter/limit-2831 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1619 inet6/filter/logdrop-1619 -j DROP Filter 2833 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2832 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2832 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2832 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 inet/filter/logdrop-1620 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1620 -j DROP inet6/filter/FORWARD -j limit-2832 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2832 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2832 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 inet6/filter/logdrop-1620 -j DROP Filter 2834 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2833 inet/filter/INPUT -j limit-2833 inet/filter/OUTPUT -j limit-2833 inet/filter/limit-2833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 inet/filter/logdrop-1621 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1621 -j DROP inet6/filter/FORWARD -j limit-2833 inet6/filter/INPUT -j limit-2833 inet6/filter/OUTPUT -j limit-2833 inet6/filter/limit-2833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 inet6/filter/logdrop-1621 -j DROP Filter 2835 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2834 inet/filter/FORWARD -j logaccept-final-264 inet/filter/INPUT -j limit-2834 inet/filter/INPUT -j logaccept-final-264 inet/filter/OUTPUT -j limit-2834 inet/filter/OUTPUT -j logaccept-final-264 inet/filter/limit-2834 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 inet/filter/logaccept-final-264 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-264 -j ACCEPT inet/filter/logdrop-1622 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1622 -j DROP inet6/filter/FORWARD -j limit-2834 inet6/filter/FORWARD -j logaccept-final-264 inet6/filter/INPUT -j limit-2834 inet6/filter/INPUT -j logaccept-final-264 inet6/filter/OUTPUT -j limit-2834 inet6/filter/OUTPUT -j logaccept-final-264 inet6/filter/limit-2834 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 inet6/filter/logaccept-final-264 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-264 -j ACCEPT inet6/filter/logdrop-1622 -j DROP Filter 2836 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2835 inet/filter/INPUT -j limit-2835 inet/filter/OUTPUT -j limit-2835 inet/filter/limit-2835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 inet/filter/limit-2835 -m limit --limit 1/second -j LOG inet/filter/logdrop-1623 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1623 -j DROP inet6/filter/FORWARD -j limit-2835 inet6/filter/INPUT -j limit-2835 inet6/filter/OUTPUT -j limit-2835 inet6/filter/limit-2835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 inet6/filter/limit-2835 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1623 -j DROP Filter 2837 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2836 inet/filter/FORWARD -j logaccept-final-265 inet/filter/INPUT -j limit-2836 inet/filter/INPUT -j logaccept-final-265 inet/filter/OUTPUT -j limit-2836 inet/filter/OUTPUT -j logaccept-final-265 inet/filter/limit-2836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 inet/filter/logaccept-final-265 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-265 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-265 -j ACCEPT inet/filter/logdrop-1624 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1624 -j DROP inet6/filter/FORWARD -j limit-2836 inet6/filter/FORWARD -j logaccept-final-265 inet6/filter/INPUT -j limit-2836 inet6/filter/INPUT -j logaccept-final-265 inet6/filter/OUTPUT -j limit-2836 inet6/filter/OUTPUT -j logaccept-final-265 inet6/filter/limit-2836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 inet6/filter/logaccept-final-265 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-265 -j ACCEPT inet6/filter/logdrop-1624 -j DROP Filter 2838 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2837 inet/filter/INPUT -j limit-2837 inet/filter/OUTPUT -j limit-2837 inet/filter/limit-2837 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 inet/filter/limit-2837 -j TEE --gateway 10.0.0.1 inet/filter/limit-2837 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1625 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1625 -j DROP inet6/filter/FORWARD -j limit-2837 inet6/filter/INPUT -j limit-2837 inet6/filter/OUTPUT -j limit-2837 inet6/filter/limit-2837 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 inet6/filter/limit-2837 -j TEE --gateway fc00::2 inet6/filter/logdrop-1625 -j DROP Filter 2839 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2838 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2838 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2838 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2838 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 inet/filter/logdrop-1626 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1626 -j DROP inet6/filter/FORWARD -j limit-2838 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2838 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2838 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2838 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 inet6/filter/logdrop-1626 -j DROP Filter 2840 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2839 inet/filter/INPUT -j limit-2839 inet/filter/OUTPUT -j limit-2839 inet/filter/limit-2839 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 inet/filter/logdrop-1627 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1627 -j DROP inet6/filter/FORWARD -j limit-2839 inet6/filter/INPUT -j limit-2839 inet6/filter/OUTPUT -j limit-2839 inet6/filter/limit-2839 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 inet6/filter/logdrop-1627 -j DROP Filter 2841 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2840 inet/filter/FORWARD -j logaccept-final-266 inet/filter/INPUT -j limit-2840 inet/filter/INPUT -j logaccept-final-266 inet/filter/OUTPUT -j limit-2840 inet/filter/OUTPUT -j logaccept-final-266 inet/filter/limit-2840 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 inet/filter/logaccept-final-266 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-266 -j ACCEPT inet/filter/logdrop-1628 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1628 -j DROP inet6/filter/FORWARD -j limit-2840 inet6/filter/FORWARD -j logaccept-final-266 inet6/filter/INPUT -j limit-2840 inet6/filter/INPUT -j logaccept-final-266 inet6/filter/OUTPUT -j limit-2840 inet6/filter/OUTPUT -j logaccept-final-266 inet6/filter/limit-2840 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 inet6/filter/logaccept-final-266 -j ACCEPT inet6/filter/logdrop-1628 -j DROP Filter 2842 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2841 inet/filter/INPUT -j limit-2841 inet/filter/OUTPUT -j limit-2841 inet/filter/limit-2841 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 inet/filter/limit-2841 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1629 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1629 -j DROP inet6/filter/FORWARD -j limit-2841 inet6/filter/INPUT -j limit-2841 inet6/filter/OUTPUT -j limit-2841 inet6/filter/limit-2841 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 inet6/filter/logdrop-1629 -j DROP Filter 2843 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2842 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2842 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2842 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1630 inet/filter/limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1630 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1630 -j DROP inet6/filter/FORWARD -j limit-2842 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2842 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2842 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1630 inet6/filter/limit-2842 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1630 -j DROP Filter 2844 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"}} (filter-limit) inet/filter/FORWARD -j limit-2843 inet/filter/INPUT -j limit-2843 inet/filter/OUTPUT -j limit-2843 inet/filter/limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1631 inet/filter/limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1631 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1631 -j DROP inet6/filter/FORWARD -j limit-2843 inet6/filter/INPUT -j limit-2843 inet6/filter/OUTPUT -j limit-2843 inet6/filter/limit-2843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1631 inet6/filter/limit-2843 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1631 -j DROP Filter 2845 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2844 inet/filter/FORWARD -j logaccept-final-267 inet/filter/INPUT -j limit-2844 inet/filter/INPUT -j logaccept-final-267 inet/filter/OUTPUT -j limit-2844 inet/filter/OUTPUT -j logaccept-final-267 inet/filter/limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1632 inet/filter/limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-267 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-267 -j ACCEPT inet/filter/logdrop-1632 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1632 -j DROP inet6/filter/FORWARD -j limit-2844 inet6/filter/FORWARD -j logaccept-final-267 inet6/filter/INPUT -j limit-2844 inet6/filter/INPUT -j logaccept-final-267 inet6/filter/OUTPUT -j limit-2844 inet6/filter/OUTPUT -j logaccept-final-267 inet6/filter/limit-2844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1632 inet6/filter/limit-2844 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-267 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-267 -j ACCEPT inet6/filter/logdrop-1632 -j DROP Filter 2846 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2845 inet/filter/INPUT -j limit-2845 inet/filter/OUTPUT -j limit-2845 inet/filter/limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1633 inet/filter/limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-1633 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1633 -j DROP inet6/filter/FORWARD -j limit-2845 inet6/filter/INPUT -j limit-2845 inet6/filter/OUTPUT -j limit-2845 inet6/filter/limit-2845 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1633 inet6/filter/limit-2845 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-1633 -j DROP Filter 2847 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2846 inet/filter/FORWARD -j logaccept-final-268 inet/filter/INPUT -j limit-2846 inet/filter/INPUT -j logaccept-final-268 inet/filter/OUTPUT -j limit-2846 inet/filter/OUTPUT -j logaccept-final-268 inet/filter/limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1634 inet/filter/limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-268 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-268 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-268 -j ACCEPT inet/filter/logdrop-1634 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1634 -j DROP inet6/filter/FORWARD -j limit-2846 inet6/filter/FORWARD -j logaccept-final-268 inet6/filter/INPUT -j limit-2846 inet6/filter/INPUT -j logaccept-final-268 inet6/filter/OUTPUT -j limit-2846 inet6/filter/OUTPUT -j logaccept-final-268 inet6/filter/limit-2846 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1634 inet6/filter/limit-2846 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-268 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-268 -j ACCEPT inet6/filter/logdrop-1634 -j DROP Filter 2848 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2847 inet/filter/INPUT -j limit-2847 inet/filter/OUTPUT -j limit-2847 inet/filter/limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1635 inet/filter/limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1635 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1635 -j DROP inet6/filter/FORWARD -j limit-2847 inet6/filter/INPUT -j limit-2847 inet6/filter/OUTPUT -j limit-2847 inet6/filter/limit-2847 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1635 inet6/filter/limit-2847 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-1635 -j DROP Filter 2849 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2848 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2848 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2848 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1636 inet/filter/limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1636 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1636 -j DROP inet6/filter/FORWARD -j limit-2848 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2848 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2848 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2848 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1636 inet6/filter/limit-2848 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1636 -j DROP Filter 2850 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2849 inet/filter/INPUT -j limit-2849 inet/filter/OUTPUT -j limit-2849 inet/filter/limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1637 inet/filter/limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-1637 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1637 -j DROP inet6/filter/FORWARD -j limit-2849 inet6/filter/INPUT -j limit-2849 inet6/filter/OUTPUT -j limit-2849 inet6/filter/limit-2849 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1637 inet6/filter/limit-2849 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-1637 -j DROP Filter 2851 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2850 inet/filter/FORWARD -j logaccept-final-269 inet/filter/INPUT -j limit-2850 inet/filter/INPUT -j logaccept-final-269 inet/filter/OUTPUT -j limit-2850 inet/filter/OUTPUT -j logaccept-final-269 inet/filter/limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1638 inet/filter/limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logaccept-final-269 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-269 -j ACCEPT inet/filter/logdrop-1638 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1638 -j DROP inet6/filter/FORWARD -j limit-2850 inet6/filter/FORWARD -j logaccept-final-269 inet6/filter/INPUT -j limit-2850 inet6/filter/INPUT -j logaccept-final-269 inet6/filter/OUTPUT -j limit-2850 inet6/filter/OUTPUT -j logaccept-final-269 inet6/filter/limit-2850 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1638 inet6/filter/limit-2850 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logaccept-final-269 -j ACCEPT inet6/filter/logdrop-1638 -j DROP Filter 2852 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2851 inet/filter/INPUT -j limit-2851 inet/filter/OUTPUT -j limit-2851 inet/filter/limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1639 inet/filter/limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1639 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1639 -j DROP inet6/filter/FORWARD -j limit-2851 inet6/filter/INPUT -j limit-2851 inet6/filter/OUTPUT -j limit-2851 inet6/filter/limit-2851 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1639 inet6/filter/logdrop-1639 -j DROP Filter 2853 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2852 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2852 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2852 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 inet/filter/logdrop-1640 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1640 -j DROP inet6/filter/FORWARD -j limit-2852 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2852 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2852 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 inet6/filter/logdrop-1640 -j DROP Filter 2854 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false}} (filter-limit) inet/filter/FORWARD -j limit-2853 inet/filter/INPUT -j limit-2853 inet/filter/OUTPUT -j limit-2853 inet/filter/limit-2853 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 inet/filter/logdrop-1641 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1641 -j DROP inet6/filter/FORWARD -j limit-2853 inet6/filter/INPUT -j limit-2853 inet6/filter/OUTPUT -j limit-2853 inet6/filter/limit-2853 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 inet6/filter/logdrop-1641 -j DROP Filter 2855 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2854 inet/filter/FORWARD -j logaccept-final-270 inet/filter/INPUT -j limit-2854 inet/filter/INPUT -j logaccept-final-270 inet/filter/OUTPUT -j limit-2854 inet/filter/OUTPUT -j logaccept-final-270 inet/filter/limit-2854 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 inet/filter/logaccept-final-270 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-270 -j ACCEPT inet/filter/logdrop-1642 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1642 -j DROP inet6/filter/FORWARD -j limit-2854 inet6/filter/FORWARD -j logaccept-final-270 inet6/filter/INPUT -j limit-2854 inet6/filter/INPUT -j logaccept-final-270 inet6/filter/OUTPUT -j limit-2854 inet6/filter/OUTPUT -j logaccept-final-270 inet6/filter/limit-2854 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 inet6/filter/logaccept-final-270 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-270 -j ACCEPT inet6/filter/logdrop-1642 -j DROP Filter 2856 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2855 inet/filter/INPUT -j limit-2855 inet/filter/OUTPUT -j limit-2855 inet/filter/limit-2855 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 inet/filter/limit-2855 -m limit --limit 1/second -j LOG inet/filter/logdrop-1643 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1643 -j DROP inet6/filter/FORWARD -j limit-2855 inet6/filter/INPUT -j limit-2855 inet6/filter/OUTPUT -j limit-2855 inet6/filter/limit-2855 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 inet6/filter/limit-2855 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1643 -j DROP Filter 2857 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2856 inet/filter/FORWARD -j logaccept-final-271 inet/filter/INPUT -j limit-2856 inet/filter/INPUT -j logaccept-final-271 inet/filter/OUTPUT -j limit-2856 inet/filter/OUTPUT -j logaccept-final-271 inet/filter/limit-2856 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 inet/filter/logaccept-final-271 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-271 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-271 -j ACCEPT inet/filter/logdrop-1644 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1644 -j DROP inet6/filter/FORWARD -j limit-2856 inet6/filter/FORWARD -j logaccept-final-271 inet6/filter/INPUT -j limit-2856 inet6/filter/INPUT -j logaccept-final-271 inet6/filter/OUTPUT -j limit-2856 inet6/filter/OUTPUT -j logaccept-final-271 inet6/filter/limit-2856 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 inet6/filter/logaccept-final-271 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-271 -j ACCEPT inet6/filter/logdrop-1644 -j DROP Filter 2858 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2857 inet/filter/INPUT -j limit-2857 inet/filter/OUTPUT -j limit-2857 inet/filter/limit-2857 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 inet/filter/limit-2857 -j TEE --gateway 10.0.0.1 inet/filter/limit-2857 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1645 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1645 -j DROP inet6/filter/FORWARD -j limit-2857 inet6/filter/INPUT -j limit-2857 inet6/filter/OUTPUT -j limit-2857 inet6/filter/limit-2857 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 inet6/filter/limit-2857 -j TEE --gateway fc00::2 inet6/filter/logdrop-1645 -j DROP Filter 2859 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2858 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2858 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2858 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2858 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 inet/filter/logdrop-1646 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1646 -j DROP inet6/filter/FORWARD -j limit-2858 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2858 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2858 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2858 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 inet6/filter/logdrop-1646 -j DROP Filter 2860 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2859 inet/filter/INPUT -j limit-2859 inet/filter/OUTPUT -j limit-2859 inet/filter/limit-2859 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 inet/filter/logdrop-1647 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1647 -j DROP inet6/filter/FORWARD -j limit-2859 inet6/filter/INPUT -j limit-2859 inet6/filter/OUTPUT -j limit-2859 inet6/filter/limit-2859 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 inet6/filter/logdrop-1647 -j DROP Filter 2861 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2860 inet/filter/FORWARD -j logaccept-final-272 inet/filter/INPUT -j limit-2860 inet/filter/INPUT -j logaccept-final-272 inet/filter/OUTPUT -j limit-2860 inet/filter/OUTPUT -j logaccept-final-272 inet/filter/limit-2860 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 inet/filter/logaccept-final-272 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-272 -j ACCEPT inet/filter/logdrop-1648 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1648 -j DROP inet6/filter/FORWARD -j limit-2860 inet6/filter/FORWARD -j logaccept-final-272 inet6/filter/INPUT -j limit-2860 inet6/filter/INPUT -j logaccept-final-272 inet6/filter/OUTPUT -j limit-2860 inet6/filter/OUTPUT -j logaccept-final-272 inet6/filter/limit-2860 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 inet6/filter/logaccept-final-272 -j ACCEPT inet6/filter/logdrop-1648 -j DROP Filter 2862 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2861 inet/filter/INPUT -j limit-2861 inet/filter/OUTPUT -j limit-2861 inet/filter/limit-2861 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 inet/filter/limit-2861 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1649 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1649 -j DROP inet6/filter/FORWARD -j limit-2861 inet6/filter/INPUT -j limit-2861 inet6/filter/OUTPUT -j limit-2861 inet6/filter/limit-2861 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 inet6/filter/logdrop-1649 -j DROP Filter 2863 {"flow-limit":150} (filter-limit) inet/filter/FORWARD -j limit-2862 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2862 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2862 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2862 -j RETURN inet/filter/limit-2862 -m limit --limit 1/second -j LOG inet/filter/limit-2862 -j DROP inet6/filter/FORWARD -j limit-2862 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2862 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2862 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2862 -j RETURN inet6/filter/limit-2862 -m limit --limit 1/second -j LOG inet6/filter/limit-2862 -j DROP Filter 2864 {"action":"pass","flow-limit":150} (filter-limit) inet/filter/FORWARD -j limit-2863 inet/filter/INPUT -j limit-2863 inet/filter/OUTPUT -j limit-2863 inet/filter/limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2863 -j RETURN inet/filter/limit-2863 -m limit --limit 1/second -j LOG inet/filter/limit-2863 -j DROP inet6/filter/FORWARD -j limit-2863 inet6/filter/INPUT -j limit-2863 inet6/filter/OUTPUT -j limit-2863 inet6/filter/limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2863 -j RETURN inet6/filter/limit-2863 -m limit --limit 1/second -j LOG inet6/filter/limit-2863 -j DROP Filter 2865 {"flow-limit":150,"log":true} (filter-limit) inet/filter/FORWARD -j limit-2864 inet/filter/FORWARD -j logaccept-final-273 inet/filter/INPUT -j limit-2864 inet/filter/INPUT -j logaccept-final-273 inet/filter/OUTPUT -j limit-2864 inet/filter/OUTPUT -j logaccept-final-273 inet/filter/limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2864 -j RETURN inet/filter/limit-2864 -m limit --limit 1/second -j LOG inet/filter/limit-2864 -j DROP inet/filter/logaccept-final-273 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-273 -j ACCEPT inet6/filter/FORWARD -j limit-2864 inet6/filter/FORWARD -j logaccept-final-273 inet6/filter/INPUT -j limit-2864 inet6/filter/INPUT -j logaccept-final-273 inet6/filter/OUTPUT -j limit-2864 inet6/filter/OUTPUT -j logaccept-final-273 inet6/filter/limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2864 -j RETURN inet6/filter/limit-2864 -m limit --limit 1/second -j LOG inet6/filter/limit-2864 -j DROP inet6/filter/logaccept-final-273 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-273 -j ACCEPT Filter 2866 {"flow-limit":150,"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2865 inet/filter/FORWARD -j logaccept-final-274 inet/filter/INPUT -j limit-2865 inet/filter/INPUT -j logaccept-final-274 inet/filter/OUTPUT -j limit-2865 inet/filter/OUTPUT -j logaccept-final-274 inet/filter/limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2865 -j RETURN inet/filter/limit-2865 -m limit --limit 1/second -j LOG inet/filter/limit-2865 -j DROP inet/filter/logaccept-final-274 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-274 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-274 -j ACCEPT inet6/filter/FORWARD -j limit-2865 inet6/filter/FORWARD -j logaccept-final-274 inet6/filter/INPUT -j limit-2865 inet6/filter/INPUT -j logaccept-final-274 inet6/filter/OUTPUT -j limit-2865 inet6/filter/OUTPUT -j logaccept-final-274 inet6/filter/limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2865 -j RETURN inet6/filter/limit-2865 -m limit --limit 1/second -j LOG inet6/filter/limit-2865 -j DROP inet6/filter/logaccept-final-274 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-274 -j ACCEPT Filter 2867 {"flow-limit":150,"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2866 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2866 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2866 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2866 -j RETURN inet/filter/limit-2866 -m limit --limit 1/second -j LOG inet/filter/limit-2866 -j DROP inet6/filter/FORWARD -j limit-2866 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2866 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2866 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2866 -j RETURN inet6/filter/limit-2866 -m limit --limit 1/second -j LOG inet6/filter/limit-2866 -j DROP Filter 2868 {"flow-limit":150,"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2867 inet/filter/FORWARD -j logaccept-final-275 inet/filter/INPUT -j limit-2867 inet/filter/INPUT -j logaccept-final-275 inet/filter/OUTPUT -j limit-2867 inet/filter/OUTPUT -j logaccept-final-275 inet/filter/limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2867 -j RETURN inet/filter/limit-2867 -m limit --limit 1/second -j LOG inet/filter/limit-2867 -j DROP inet/filter/logaccept-final-275 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-275 -j ACCEPT inet6/filter/FORWARD -j limit-2867 inet6/filter/FORWARD -j logaccept-final-275 inet6/filter/INPUT -j limit-2867 inet6/filter/INPUT -j logaccept-final-275 inet6/filter/OUTPUT -j limit-2867 inet6/filter/OUTPUT -j logaccept-final-275 inet6/filter/limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2867 -j RETURN inet6/filter/limit-2867 -m limit --limit 1/second -j LOG inet6/filter/limit-2867 -j DROP inet6/filter/logaccept-final-275 -j ACCEPT Filter 2869 {"flow-limit":{"count":150,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-2868 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2868 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2868 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2868 -j RETURN inet/filter/limit-2868 -j DROP inet6/filter/FORWARD -j limit-2868 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2868 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2868 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2868 -j RETURN inet6/filter/limit-2868 -j DROP Filter 2870 {"action":"pass","flow-limit":{"count":150,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-2869 inet/filter/INPUT -j limit-2869 inet/filter/OUTPUT -j limit-2869 inet/filter/limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2869 -j RETURN inet/filter/limit-2869 -j DROP inet6/filter/FORWARD -j limit-2869 inet6/filter/INPUT -j limit-2869 inet6/filter/OUTPUT -j limit-2869 inet6/filter/limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2869 -j RETURN inet6/filter/limit-2869 -j DROP Filter 2871 {"flow-limit":{"count":150,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2870 inet/filter/FORWARD -j logaccept-final-276 inet/filter/INPUT -j limit-2870 inet/filter/INPUT -j logaccept-final-276 inet/filter/OUTPUT -j limit-2870 inet/filter/OUTPUT -j logaccept-final-276 inet/filter/limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2870 -j RETURN inet/filter/limit-2870 -j DROP inet/filter/logaccept-final-276 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-276 -j ACCEPT inet6/filter/FORWARD -j limit-2870 inet6/filter/FORWARD -j logaccept-final-276 inet6/filter/INPUT -j limit-2870 inet6/filter/INPUT -j logaccept-final-276 inet6/filter/OUTPUT -j limit-2870 inet6/filter/OUTPUT -j logaccept-final-276 inet6/filter/limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2870 -j RETURN inet6/filter/limit-2870 -j DROP inet6/filter/logaccept-final-276 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-276 -j ACCEPT Filter 2872 {"flow-limit":{"count":150,"log":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2871 inet/filter/FORWARD -j logaccept-final-277 inet/filter/INPUT -j limit-2871 inet/filter/INPUT -j logaccept-final-277 inet/filter/OUTPUT -j limit-2871 inet/filter/OUTPUT -j logaccept-final-277 inet/filter/limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2871 -j RETURN inet/filter/limit-2871 -j DROP inet/filter/logaccept-final-277 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-277 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-277 -j ACCEPT inet6/filter/FORWARD -j limit-2871 inet6/filter/FORWARD -j logaccept-final-277 inet6/filter/INPUT -j limit-2871 inet6/filter/INPUT -j logaccept-final-277 inet6/filter/OUTPUT -j limit-2871 inet6/filter/OUTPUT -j logaccept-final-277 inet6/filter/limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2871 -j RETURN inet6/filter/limit-2871 -j DROP inet6/filter/logaccept-final-277 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-277 -j ACCEPT Filter 2873 {"flow-limit":{"count":150,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2872 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2872 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2872 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2872 -j RETURN inet/filter/limit-2872 -j DROP inet6/filter/FORWARD -j limit-2872 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2872 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2872 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2872 -j RETURN inet6/filter/limit-2872 -j DROP Filter 2874 {"flow-limit":{"count":150,"log":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2873 inet/filter/FORWARD -j logaccept-final-278 inet/filter/INPUT -j limit-2873 inet/filter/INPUT -j logaccept-final-278 inet/filter/OUTPUT -j limit-2873 inet/filter/OUTPUT -j logaccept-final-278 inet/filter/limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2873 -j RETURN inet/filter/limit-2873 -j DROP inet/filter/logaccept-final-278 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-278 -j ACCEPT inet6/filter/FORWARD -j limit-2873 inet6/filter/FORWARD -j logaccept-final-278 inet6/filter/INPUT -j limit-2873 inet6/filter/INPUT -j logaccept-final-278 inet6/filter/OUTPUT -j limit-2873 inet6/filter/OUTPUT -j logaccept-final-278 inet6/filter/limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2873 -j RETURN inet6/filter/limit-2873 -j DROP inet6/filter/logaccept-final-278 -j ACCEPT Filter 2875 {"flow-limit":{"count":150}} (filter-limit) inet/filter/FORWARD -j limit-2874 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2874 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2874 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2874 -j RETURN inet/filter/limit-2874 -m limit --limit 1/second -j LOG inet/filter/limit-2874 -j DROP inet6/filter/FORWARD -j limit-2874 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2874 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2874 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2874 -j RETURN inet6/filter/limit-2874 -m limit --limit 1/second -j LOG inet6/filter/limit-2874 -j DROP Filter 2876 {"action":"pass","flow-limit":{"count":150}} (filter-limit) inet/filter/FORWARD -j limit-2875 inet/filter/INPUT -j limit-2875 inet/filter/OUTPUT -j limit-2875 inet/filter/limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2875 -j RETURN inet/filter/limit-2875 -m limit --limit 1/second -j LOG inet/filter/limit-2875 -j DROP inet6/filter/FORWARD -j limit-2875 inet6/filter/INPUT -j limit-2875 inet6/filter/OUTPUT -j limit-2875 inet6/filter/limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2875 -j RETURN inet6/filter/limit-2875 -m limit --limit 1/second -j LOG inet6/filter/limit-2875 -j DROP Filter 2877 {"flow-limit":{"count":150},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2876 inet/filter/FORWARD -j logaccept-final-279 inet/filter/INPUT -j limit-2876 inet/filter/INPUT -j logaccept-final-279 inet/filter/OUTPUT -j limit-2876 inet/filter/OUTPUT -j logaccept-final-279 inet/filter/limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2876 -j RETURN inet/filter/limit-2876 -m limit --limit 1/second -j LOG inet/filter/limit-2876 -j DROP inet/filter/logaccept-final-279 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-279 -j ACCEPT inet6/filter/FORWARD -j limit-2876 inet6/filter/FORWARD -j logaccept-final-279 inet6/filter/INPUT -j limit-2876 inet6/filter/INPUT -j logaccept-final-279 inet6/filter/OUTPUT -j limit-2876 inet6/filter/OUTPUT -j logaccept-final-279 inet6/filter/limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2876 -j RETURN inet6/filter/limit-2876 -m limit --limit 1/second -j LOG inet6/filter/limit-2876 -j DROP inet6/filter/logaccept-final-279 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-279 -j ACCEPT Filter 2878 {"flow-limit":{"count":150},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2877 inet/filter/FORWARD -j logaccept-final-280 inet/filter/INPUT -j limit-2877 inet/filter/INPUT -j logaccept-final-280 inet/filter/OUTPUT -j limit-2877 inet/filter/OUTPUT -j logaccept-final-280 inet/filter/limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2877 -j RETURN inet/filter/limit-2877 -m limit --limit 1/second -j LOG inet/filter/limit-2877 -j DROP inet/filter/logaccept-final-280 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-280 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-280 -j ACCEPT inet6/filter/FORWARD -j limit-2877 inet6/filter/FORWARD -j logaccept-final-280 inet6/filter/INPUT -j limit-2877 inet6/filter/INPUT -j logaccept-final-280 inet6/filter/OUTPUT -j limit-2877 inet6/filter/OUTPUT -j logaccept-final-280 inet6/filter/limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2877 -j RETURN inet6/filter/limit-2877 -m limit --limit 1/second -j LOG inet6/filter/limit-2877 -j DROP inet6/filter/logaccept-final-280 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-280 -j ACCEPT Filter 2879 {"flow-limit":{"count":150},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2878 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2878 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2878 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2878 -j RETURN inet/filter/limit-2878 -m limit --limit 1/second -j LOG inet/filter/limit-2878 -j DROP inet6/filter/FORWARD -j limit-2878 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2878 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2878 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2878 -j RETURN inet6/filter/limit-2878 -m limit --limit 1/second -j LOG inet6/filter/limit-2878 -j DROP Filter 2880 {"flow-limit":{"count":150},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2879 inet/filter/FORWARD -j logaccept-final-281 inet/filter/INPUT -j limit-2879 inet/filter/INPUT -j logaccept-final-281 inet/filter/OUTPUT -j limit-2879 inet/filter/OUTPUT -j logaccept-final-281 inet/filter/limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2879 -j RETURN inet/filter/limit-2879 -m limit --limit 1/second -j LOG inet/filter/limit-2879 -j DROP inet/filter/logaccept-final-281 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-281 -j ACCEPT inet6/filter/FORWARD -j limit-2879 inet6/filter/FORWARD -j logaccept-final-281 inet6/filter/INPUT -j limit-2879 inet6/filter/INPUT -j logaccept-final-281 inet6/filter/OUTPUT -j limit-2879 inet6/filter/OUTPUT -j logaccept-final-281 inet6/filter/limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2879 -j RETURN inet6/filter/limit-2879 -m limit --limit 1/second -j LOG inet6/filter/limit-2879 -j DROP inet6/filter/logaccept-final-281 -j ACCEPT Filter 2881 {"flow-limit":{"count":150,"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2880 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2880 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2880 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2880 -j RETURN inet/filter/limit-2880 -j TEE --gateway 10.0.0.1 inet/filter/limit-2880 -j TEE --gateway 10.0.0.2 inet/filter/limit-2880 -j DROP inet6/filter/FORWARD -j limit-2880 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2880 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2880 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2880 -j RETURN inet6/filter/limit-2880 -j TEE --gateway fc00::2 inet6/filter/limit-2880 -j DROP Filter 2882 {"action":"pass","flow-limit":{"count":150,"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2881 inet/filter/INPUT -j limit-2881 inet/filter/OUTPUT -j limit-2881 inet/filter/limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2881 -j RETURN inet/filter/limit-2881 -j TEE --gateway 10.0.0.1 inet/filter/limit-2881 -j TEE --gateway 10.0.0.2 inet/filter/limit-2881 -j DROP inet6/filter/FORWARD -j limit-2881 inet6/filter/INPUT -j limit-2881 inet6/filter/OUTPUT -j limit-2881 inet6/filter/limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2881 -j RETURN inet6/filter/limit-2881 -j TEE --gateway fc00::2 inet6/filter/limit-2881 -j DROP Filter 2883 {"flow-limit":{"count":150,"log":"mirror"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2882 inet/filter/FORWARD -j logaccept-final-282 inet/filter/INPUT -j limit-2882 inet/filter/INPUT -j logaccept-final-282 inet/filter/OUTPUT -j limit-2882 inet/filter/OUTPUT -j logaccept-final-282 inet/filter/limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2882 -j RETURN inet/filter/limit-2882 -j TEE --gateway 10.0.0.1 inet/filter/limit-2882 -j TEE --gateway 10.0.0.2 inet/filter/limit-2882 -j DROP inet/filter/logaccept-final-282 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-282 -j ACCEPT inet6/filter/FORWARD -j limit-2882 inet6/filter/FORWARD -j logaccept-final-282 inet6/filter/INPUT -j limit-2882 inet6/filter/INPUT -j logaccept-final-282 inet6/filter/OUTPUT -j limit-2882 inet6/filter/OUTPUT -j logaccept-final-282 inet6/filter/limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2882 -j RETURN inet6/filter/limit-2882 -j TEE --gateway fc00::2 inet6/filter/limit-2882 -j DROP inet6/filter/logaccept-final-282 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-282 -j ACCEPT Filter 2884 {"flow-limit":{"count":150,"log":"mirror"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2883 inet/filter/FORWARD -j logaccept-final-283 inet/filter/INPUT -j limit-2883 inet/filter/INPUT -j logaccept-final-283 inet/filter/OUTPUT -j limit-2883 inet/filter/OUTPUT -j logaccept-final-283 inet/filter/limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2883 -j RETURN inet/filter/limit-2883 -j TEE --gateway 10.0.0.1 inet/filter/limit-2883 -j TEE --gateway 10.0.0.2 inet/filter/limit-2883 -j DROP inet/filter/logaccept-final-283 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-283 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-283 -j ACCEPT inet6/filter/FORWARD -j limit-2883 inet6/filter/FORWARD -j logaccept-final-283 inet6/filter/INPUT -j limit-2883 inet6/filter/INPUT -j logaccept-final-283 inet6/filter/OUTPUT -j limit-2883 inet6/filter/OUTPUT -j logaccept-final-283 inet6/filter/limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2883 -j RETURN inet6/filter/limit-2883 -j TEE --gateway fc00::2 inet6/filter/limit-2883 -j DROP inet6/filter/logaccept-final-283 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-283 -j ACCEPT Filter 2885 {"flow-limit":{"count":150,"log":"mirror"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2884 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2884 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2884 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2884 -j RETURN inet/filter/limit-2884 -j TEE --gateway 10.0.0.1 inet/filter/limit-2884 -j TEE --gateway 10.0.0.2 inet/filter/limit-2884 -j DROP inet6/filter/FORWARD -j limit-2884 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2884 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2884 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2884 -j RETURN inet6/filter/limit-2884 -j TEE --gateway fc00::2 inet6/filter/limit-2884 -j DROP Filter 2886 {"flow-limit":{"count":150,"log":"mirror"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2885 inet/filter/FORWARD -j logaccept-final-284 inet/filter/INPUT -j limit-2885 inet/filter/INPUT -j logaccept-final-284 inet/filter/OUTPUT -j limit-2885 inet/filter/OUTPUT -j logaccept-final-284 inet/filter/limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2885 -j RETURN inet/filter/limit-2885 -j TEE --gateway 10.0.0.1 inet/filter/limit-2885 -j TEE --gateway 10.0.0.2 inet/filter/limit-2885 -j DROP inet/filter/logaccept-final-284 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-284 -j ACCEPT inet6/filter/FORWARD -j limit-2885 inet6/filter/FORWARD -j logaccept-final-284 inet6/filter/INPUT -j limit-2885 inet6/filter/INPUT -j logaccept-final-284 inet6/filter/OUTPUT -j limit-2885 inet6/filter/OUTPUT -j logaccept-final-284 inet6/filter/limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2885 -j RETURN inet6/filter/limit-2885 -j TEE --gateway fc00::2 inet6/filter/limit-2885 -j DROP inet6/filter/logaccept-final-284 -j ACCEPT Filter 2887 {"flow-limit":{"count":150,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2886 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2886 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2886 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2886 -j RETURN inet/filter/limit-2886 -j DROP inet6/filter/FORWARD -j limit-2886 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2886 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2886 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2886 -j RETURN inet6/filter/limit-2886 -j DROP Filter 2888 {"action":"pass","flow-limit":{"count":150,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2887 inet/filter/INPUT -j limit-2887 inet/filter/OUTPUT -j limit-2887 inet/filter/limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2887 -j RETURN inet/filter/limit-2887 -j DROP inet6/filter/FORWARD -j limit-2887 inet6/filter/INPUT -j limit-2887 inet6/filter/OUTPUT -j limit-2887 inet6/filter/limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2887 -j RETURN inet6/filter/limit-2887 -j DROP Filter 2889 {"flow-limit":{"count":150,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2888 inet/filter/FORWARD -j logaccept-final-285 inet/filter/INPUT -j limit-2888 inet/filter/INPUT -j logaccept-final-285 inet/filter/OUTPUT -j limit-2888 inet/filter/OUTPUT -j logaccept-final-285 inet/filter/limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2888 -j RETURN inet/filter/limit-2888 -j DROP inet/filter/logaccept-final-285 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-285 -j ACCEPT inet6/filter/FORWARD -j limit-2888 inet6/filter/FORWARD -j logaccept-final-285 inet6/filter/INPUT -j limit-2888 inet6/filter/INPUT -j logaccept-final-285 inet6/filter/OUTPUT -j limit-2888 inet6/filter/OUTPUT -j logaccept-final-285 inet6/filter/limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2888 -j RETURN inet6/filter/limit-2888 -j DROP inet6/filter/logaccept-final-285 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-285 -j ACCEPT Filter 2890 {"flow-limit":{"count":150,"log":"none"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2889 inet/filter/FORWARD -j logaccept-final-286 inet/filter/INPUT -j limit-2889 inet/filter/INPUT -j logaccept-final-286 inet/filter/OUTPUT -j limit-2889 inet/filter/OUTPUT -j logaccept-final-286 inet/filter/limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2889 -j RETURN inet/filter/limit-2889 -j DROP inet/filter/logaccept-final-286 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-286 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-286 -j ACCEPT inet6/filter/FORWARD -j limit-2889 inet6/filter/FORWARD -j logaccept-final-286 inet6/filter/INPUT -j limit-2889 inet6/filter/INPUT -j logaccept-final-286 inet6/filter/OUTPUT -j limit-2889 inet6/filter/OUTPUT -j logaccept-final-286 inet6/filter/limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2889 -j RETURN inet6/filter/limit-2889 -j DROP inet6/filter/logaccept-final-286 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-286 -j ACCEPT Filter 2891 {"flow-limit":{"count":150,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2890 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2890 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2890 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2890 -j RETURN inet/filter/limit-2890 -j DROP inet6/filter/FORWARD -j limit-2890 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2890 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2890 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2890 -j RETURN inet6/filter/limit-2890 -j DROP Filter 2892 {"flow-limit":{"count":150,"log":"none"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2891 inet/filter/FORWARD -j logaccept-final-287 inet/filter/INPUT -j limit-2891 inet/filter/INPUT -j logaccept-final-287 inet/filter/OUTPUT -j limit-2891 inet/filter/OUTPUT -j logaccept-final-287 inet/filter/limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2891 -j RETURN inet/filter/limit-2891 -j DROP inet/filter/logaccept-final-287 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-287 -j ACCEPT inet6/filter/FORWARD -j limit-2891 inet6/filter/FORWARD -j logaccept-final-287 inet6/filter/INPUT -j limit-2891 inet6/filter/INPUT -j logaccept-final-287 inet6/filter/OUTPUT -j limit-2891 inet6/filter/OUTPUT -j logaccept-final-287 inet6/filter/limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2891 -j RETURN inet6/filter/limit-2891 -j DROP inet6/filter/logaccept-final-287 -j ACCEPT Filter 2893 {"flow-limit":{"count":150,"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2892 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2892 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2892 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2892 -j RETURN inet/filter/limit-2892 -m limit --limit 12/minute -j ULOG inet/filter/limit-2892 -j DROP inet6/filter/FORWARD -j limit-2892 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2892 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2892 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2892 -j RETURN inet6/filter/limit-2892 -j DROP Filter 2894 {"action":"pass","flow-limit":{"count":150,"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2893 inet/filter/INPUT -j limit-2893 inet/filter/OUTPUT -j limit-2893 inet/filter/limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2893 -j RETURN inet/filter/limit-2893 -m limit --limit 12/minute -j ULOG inet/filter/limit-2893 -j DROP inet6/filter/FORWARD -j limit-2893 inet6/filter/INPUT -j limit-2893 inet6/filter/OUTPUT -j limit-2893 inet6/filter/limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2893 -j RETURN inet6/filter/limit-2893 -j DROP Filter 2895 {"flow-limit":{"count":150,"log":"ulog"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2894 inet/filter/FORWARD -j logaccept-final-288 inet/filter/INPUT -j limit-2894 inet/filter/INPUT -j logaccept-final-288 inet/filter/OUTPUT -j limit-2894 inet/filter/OUTPUT -j logaccept-final-288 inet/filter/limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2894 -j RETURN inet/filter/limit-2894 -m limit --limit 12/minute -j ULOG inet/filter/limit-2894 -j DROP inet/filter/logaccept-final-288 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-288 -j ACCEPT inet6/filter/FORWARD -j limit-2894 inet6/filter/FORWARD -j logaccept-final-288 inet6/filter/INPUT -j limit-2894 inet6/filter/INPUT -j logaccept-final-288 inet6/filter/OUTPUT -j limit-2894 inet6/filter/OUTPUT -j logaccept-final-288 inet6/filter/limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2894 -j RETURN inet6/filter/limit-2894 -j DROP inet6/filter/logaccept-final-288 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-288 -j ACCEPT Filter 2896 {"flow-limit":{"count":150,"log":"ulog"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2895 inet/filter/FORWARD -j logaccept-final-289 inet/filter/INPUT -j limit-2895 inet/filter/INPUT -j logaccept-final-289 inet/filter/OUTPUT -j limit-2895 inet/filter/OUTPUT -j logaccept-final-289 inet/filter/limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2895 -j RETURN inet/filter/limit-2895 -m limit --limit 12/minute -j ULOG inet/filter/limit-2895 -j DROP inet/filter/logaccept-final-289 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-289 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-289 -j ACCEPT inet6/filter/FORWARD -j limit-2895 inet6/filter/FORWARD -j logaccept-final-289 inet6/filter/INPUT -j limit-2895 inet6/filter/INPUT -j logaccept-final-289 inet6/filter/OUTPUT -j limit-2895 inet6/filter/OUTPUT -j logaccept-final-289 inet6/filter/limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2895 -j RETURN inet6/filter/limit-2895 -j DROP inet6/filter/logaccept-final-289 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-289 -j ACCEPT Filter 2897 {"flow-limit":{"count":150,"log":"ulog"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2896 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2896 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2896 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2896 -j RETURN inet/filter/limit-2896 -m limit --limit 12/minute -j ULOG inet/filter/limit-2896 -j DROP inet6/filter/FORWARD -j limit-2896 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2896 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2896 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2896 -j RETURN inet6/filter/limit-2896 -j DROP Filter 2898 {"flow-limit":{"count":150,"log":"ulog"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2897 inet/filter/FORWARD -j logaccept-final-290 inet/filter/INPUT -j limit-2897 inet/filter/INPUT -j logaccept-final-290 inet/filter/OUTPUT -j limit-2897 inet/filter/OUTPUT -j logaccept-final-290 inet/filter/limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2897 -j RETURN inet/filter/limit-2897 -m limit --limit 12/minute -j ULOG inet/filter/limit-2897 -j DROP inet/filter/logaccept-final-290 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-290 -j ACCEPT inet6/filter/FORWARD -j limit-2897 inet6/filter/FORWARD -j logaccept-final-290 inet6/filter/INPUT -j limit-2897 inet6/filter/INPUT -j logaccept-final-290 inet6/filter/OUTPUT -j limit-2897 inet6/filter/OUTPUT -j logaccept-final-290 inet6/filter/limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2897 -j RETURN inet6/filter/limit-2897 -j DROP inet6/filter/logaccept-final-290 -j ACCEPT Filter 2899 {"flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-2898 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2898 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2898 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2898 -j RETURN inet/filter/limit-2898 -j DROP inet6/filter/FORWARD -j limit-2898 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2898 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2898 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2898 -j RETURN inet6/filter/limit-2898 -j DROP Filter 2900 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) inet/filter/FORWARD -j limit-2899 inet/filter/INPUT -j limit-2899 inet/filter/OUTPUT -j limit-2899 inet/filter/limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2899 -j RETURN inet/filter/limit-2899 -j DROP inet6/filter/FORWARD -j limit-2899 inet6/filter/INPUT -j limit-2899 inet6/filter/OUTPUT -j limit-2899 inet6/filter/limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2899 -j RETURN inet6/filter/limit-2899 -j DROP Filter 2901 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2900 inet/filter/FORWARD -j logaccept-final-291 inet/filter/INPUT -j limit-2900 inet/filter/INPUT -j logaccept-final-291 inet/filter/OUTPUT -j limit-2900 inet/filter/OUTPUT -j logaccept-final-291 inet/filter/limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2900 -j RETURN inet/filter/limit-2900 -j DROP inet/filter/logaccept-final-291 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-291 -j ACCEPT inet6/filter/FORWARD -j limit-2900 inet6/filter/FORWARD -j logaccept-final-291 inet6/filter/INPUT -j limit-2900 inet6/filter/INPUT -j logaccept-final-291 inet6/filter/OUTPUT -j limit-2900 inet6/filter/OUTPUT -j logaccept-final-291 inet6/filter/limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2900 -j RETURN inet6/filter/limit-2900 -j DROP inet6/filter/logaccept-final-291 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-291 -j ACCEPT Filter 2902 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2901 inet/filter/FORWARD -j logaccept-final-292 inet/filter/INPUT -j limit-2901 inet/filter/INPUT -j logaccept-final-292 inet/filter/OUTPUT -j limit-2901 inet/filter/OUTPUT -j logaccept-final-292 inet/filter/limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2901 -j RETURN inet/filter/limit-2901 -j DROP inet/filter/logaccept-final-292 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-292 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-292 -j ACCEPT inet6/filter/FORWARD -j limit-2901 inet6/filter/FORWARD -j logaccept-final-292 inet6/filter/INPUT -j limit-2901 inet6/filter/INPUT -j logaccept-final-292 inet6/filter/OUTPUT -j limit-2901 inet6/filter/OUTPUT -j logaccept-final-292 inet6/filter/limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2901 -j RETURN inet6/filter/limit-2901 -j DROP inet6/filter/logaccept-final-292 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-292 -j ACCEPT Filter 2903 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2902 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2902 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2902 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2902 -j RETURN inet/filter/limit-2902 -j DROP inet6/filter/FORWARD -j limit-2902 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2902 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2902 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2902 -j RETURN inet6/filter/limit-2902 -j DROP Filter 2904 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2903 inet/filter/FORWARD -j logaccept-final-293 inet/filter/INPUT -j limit-2903 inet/filter/INPUT -j logaccept-final-293 inet/filter/OUTPUT -j limit-2903 inet/filter/OUTPUT -j logaccept-final-293 inet/filter/limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2903 -j RETURN inet/filter/limit-2903 -j DROP inet/filter/logaccept-final-293 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-293 -j ACCEPT inet6/filter/FORWARD -j limit-2903 inet6/filter/FORWARD -j logaccept-final-293 inet6/filter/INPUT -j limit-2903 inet6/filter/INPUT -j logaccept-final-293 inet6/filter/OUTPUT -j limit-2903 inet6/filter/OUTPUT -j logaccept-final-293 inet6/filter/limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2903 -j RETURN inet6/filter/limit-2903 -j DROP inet6/filter/logaccept-final-293 -j ACCEPT Filter 2905 {"flow-limit":{"count":150,"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-2904 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2904 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2904 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2904 -j RETURN inet/filter/limit-2904 -m limit --limit 1/second -j LOG inet/filter/limit-2904 -j DROP inet6/filter/FORWARD -j limit-2904 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2904 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2904 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2904 -j RETURN inet6/filter/limit-2904 -m limit --limit 1/second -j LOG inet6/filter/limit-2904 -j DROP Filter 2906 {"action":"pass","flow-limit":{"count":150,"interval":5}} (filter-limit) inet/filter/FORWARD -j limit-2905 inet/filter/INPUT -j limit-2905 inet/filter/OUTPUT -j limit-2905 inet/filter/limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2905 -j RETURN inet/filter/limit-2905 -m limit --limit 1/second -j LOG inet/filter/limit-2905 -j DROP inet6/filter/FORWARD -j limit-2905 inet6/filter/INPUT -j limit-2905 inet6/filter/OUTPUT -j limit-2905 inet6/filter/limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2905 -j RETURN inet6/filter/limit-2905 -m limit --limit 1/second -j LOG inet6/filter/limit-2905 -j DROP Filter 2907 {"flow-limit":{"count":150,"interval":5},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2906 inet/filter/FORWARD -j logaccept-final-294 inet/filter/INPUT -j limit-2906 inet/filter/INPUT -j logaccept-final-294 inet/filter/OUTPUT -j limit-2906 inet/filter/OUTPUT -j logaccept-final-294 inet/filter/limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2906 -j RETURN inet/filter/limit-2906 -m limit --limit 1/second -j LOG inet/filter/limit-2906 -j DROP inet/filter/logaccept-final-294 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-294 -j ACCEPT inet6/filter/FORWARD -j limit-2906 inet6/filter/FORWARD -j logaccept-final-294 inet6/filter/INPUT -j limit-2906 inet6/filter/INPUT -j logaccept-final-294 inet6/filter/OUTPUT -j limit-2906 inet6/filter/OUTPUT -j logaccept-final-294 inet6/filter/limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2906 -j RETURN inet6/filter/limit-2906 -m limit --limit 1/second -j LOG inet6/filter/limit-2906 -j DROP inet6/filter/logaccept-final-294 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-294 -j ACCEPT Filter 2908 {"flow-limit":{"count":150,"interval":5},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2907 inet/filter/FORWARD -j logaccept-final-295 inet/filter/INPUT -j limit-2907 inet/filter/INPUT -j logaccept-final-295 inet/filter/OUTPUT -j limit-2907 inet/filter/OUTPUT -j logaccept-final-295 inet/filter/limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2907 -j RETURN inet/filter/limit-2907 -m limit --limit 1/second -j LOG inet/filter/limit-2907 -j DROP inet/filter/logaccept-final-295 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-295 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-295 -j ACCEPT inet6/filter/FORWARD -j limit-2907 inet6/filter/FORWARD -j logaccept-final-295 inet6/filter/INPUT -j limit-2907 inet6/filter/INPUT -j logaccept-final-295 inet6/filter/OUTPUT -j limit-2907 inet6/filter/OUTPUT -j logaccept-final-295 inet6/filter/limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2907 -j RETURN inet6/filter/limit-2907 -m limit --limit 1/second -j LOG inet6/filter/limit-2907 -j DROP inet6/filter/logaccept-final-295 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-295 -j ACCEPT Filter 2909 {"flow-limit":{"count":150,"interval":5},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2908 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2908 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2908 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2908 -j RETURN inet/filter/limit-2908 -m limit --limit 1/second -j LOG inet/filter/limit-2908 -j DROP inet6/filter/FORWARD -j limit-2908 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2908 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2908 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2908 -j RETURN inet6/filter/limit-2908 -m limit --limit 1/second -j LOG inet6/filter/limit-2908 -j DROP Filter 2910 {"flow-limit":{"count":150,"interval":5},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2909 inet/filter/FORWARD -j logaccept-final-296 inet/filter/INPUT -j limit-2909 inet/filter/INPUT -j logaccept-final-296 inet/filter/OUTPUT -j limit-2909 inet/filter/OUTPUT -j logaccept-final-296 inet/filter/limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2909 -j RETURN inet/filter/limit-2909 -m limit --limit 1/second -j LOG inet/filter/limit-2909 -j DROP inet/filter/logaccept-final-296 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-296 -j ACCEPT inet6/filter/FORWARD -j limit-2909 inet6/filter/FORWARD -j logaccept-final-296 inet6/filter/INPUT -j limit-2909 inet6/filter/INPUT -j logaccept-final-296 inet6/filter/OUTPUT -j limit-2909 inet6/filter/OUTPUT -j logaccept-final-296 inet6/filter/limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2909 -j RETURN inet6/filter/limit-2909 -m limit --limit 1/second -j LOG inet6/filter/limit-2909 -j DROP inet6/filter/logaccept-final-296 -j ACCEPT Filter 2911 {"flow-limit":{"count":150,"interval":5,"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2910 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2910 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2910 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2910 -j RETURN inet/filter/limit-2910 -j TEE --gateway 10.0.0.1 inet/filter/limit-2910 -j TEE --gateway 10.0.0.2 inet/filter/limit-2910 -j DROP inet6/filter/FORWARD -j limit-2910 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2910 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2910 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2910 -j RETURN inet6/filter/limit-2910 -j TEE --gateway fc00::2 inet6/filter/limit-2910 -j DROP Filter 2912 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"mirror"}} (filter-limit) inet/filter/FORWARD -j limit-2911 inet/filter/INPUT -j limit-2911 inet/filter/OUTPUT -j limit-2911 inet/filter/limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2911 -j RETURN inet/filter/limit-2911 -j TEE --gateway 10.0.0.1 inet/filter/limit-2911 -j TEE --gateway 10.0.0.2 inet/filter/limit-2911 -j DROP inet6/filter/FORWARD -j limit-2911 inet6/filter/INPUT -j limit-2911 inet6/filter/OUTPUT -j limit-2911 inet6/filter/limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2911 -j RETURN inet6/filter/limit-2911 -j TEE --gateway fc00::2 inet6/filter/limit-2911 -j DROP Filter 2913 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2912 inet/filter/FORWARD -j logaccept-final-297 inet/filter/INPUT -j limit-2912 inet/filter/INPUT -j logaccept-final-297 inet/filter/OUTPUT -j limit-2912 inet/filter/OUTPUT -j logaccept-final-297 inet/filter/limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2912 -j RETURN inet/filter/limit-2912 -j TEE --gateway 10.0.0.1 inet/filter/limit-2912 -j TEE --gateway 10.0.0.2 inet/filter/limit-2912 -j DROP inet/filter/logaccept-final-297 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-297 -j ACCEPT inet6/filter/FORWARD -j limit-2912 inet6/filter/FORWARD -j logaccept-final-297 inet6/filter/INPUT -j limit-2912 inet6/filter/INPUT -j logaccept-final-297 inet6/filter/OUTPUT -j limit-2912 inet6/filter/OUTPUT -j logaccept-final-297 inet6/filter/limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2912 -j RETURN inet6/filter/limit-2912 -j TEE --gateway fc00::2 inet6/filter/limit-2912 -j DROP inet6/filter/logaccept-final-297 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-297 -j ACCEPT Filter 2914 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2913 inet/filter/FORWARD -j logaccept-final-298 inet/filter/INPUT -j limit-2913 inet/filter/INPUT -j logaccept-final-298 inet/filter/OUTPUT -j limit-2913 inet/filter/OUTPUT -j logaccept-final-298 inet/filter/limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2913 -j RETURN inet/filter/limit-2913 -j TEE --gateway 10.0.0.1 inet/filter/limit-2913 -j TEE --gateway 10.0.0.2 inet/filter/limit-2913 -j DROP inet/filter/logaccept-final-298 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-298 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-298 -j ACCEPT inet6/filter/FORWARD -j limit-2913 inet6/filter/FORWARD -j logaccept-final-298 inet6/filter/INPUT -j limit-2913 inet6/filter/INPUT -j logaccept-final-298 inet6/filter/OUTPUT -j limit-2913 inet6/filter/OUTPUT -j logaccept-final-298 inet6/filter/limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2913 -j RETURN inet6/filter/limit-2913 -j TEE --gateway fc00::2 inet6/filter/limit-2913 -j DROP inet6/filter/logaccept-final-298 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-298 -j ACCEPT Filter 2915 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2914 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2914 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2914 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2914 -j RETURN inet/filter/limit-2914 -j TEE --gateway 10.0.0.1 inet/filter/limit-2914 -j TEE --gateway 10.0.0.2 inet/filter/limit-2914 -j DROP inet6/filter/FORWARD -j limit-2914 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2914 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2914 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2914 -j RETURN inet6/filter/limit-2914 -j TEE --gateway fc00::2 inet6/filter/limit-2914 -j DROP Filter 2916 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2915 inet/filter/FORWARD -j logaccept-final-299 inet/filter/INPUT -j limit-2915 inet/filter/INPUT -j logaccept-final-299 inet/filter/OUTPUT -j limit-2915 inet/filter/OUTPUT -j logaccept-final-299 inet/filter/limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2915 -j RETURN inet/filter/limit-2915 -j TEE --gateway 10.0.0.1 inet/filter/limit-2915 -j TEE --gateway 10.0.0.2 inet/filter/limit-2915 -j DROP inet/filter/logaccept-final-299 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-299 -j ACCEPT inet6/filter/FORWARD -j limit-2915 inet6/filter/FORWARD -j logaccept-final-299 inet6/filter/INPUT -j limit-2915 inet6/filter/INPUT -j logaccept-final-299 inet6/filter/OUTPUT -j limit-2915 inet6/filter/OUTPUT -j logaccept-final-299 inet6/filter/limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2915 -j RETURN inet6/filter/limit-2915 -j TEE --gateway fc00::2 inet6/filter/limit-2915 -j DROP inet6/filter/logaccept-final-299 -j ACCEPT Filter 2917 {"flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2916 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2916 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2916 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2916 -j RETURN inet/filter/limit-2916 -j DROP inet6/filter/FORWARD -j limit-2916 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2916 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2916 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2916 -j RETURN inet6/filter/limit-2916 -j DROP Filter 2918 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) inet/filter/FORWARD -j limit-2917 inet/filter/INPUT -j limit-2917 inet/filter/OUTPUT -j limit-2917 inet/filter/limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2917 -j RETURN inet/filter/limit-2917 -j DROP inet6/filter/FORWARD -j limit-2917 inet6/filter/INPUT -j limit-2917 inet6/filter/OUTPUT -j limit-2917 inet6/filter/limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2917 -j RETURN inet6/filter/limit-2917 -j DROP Filter 2919 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2918 inet/filter/FORWARD -j logaccept-final-300 inet/filter/INPUT -j limit-2918 inet/filter/INPUT -j logaccept-final-300 inet/filter/OUTPUT -j limit-2918 inet/filter/OUTPUT -j logaccept-final-300 inet/filter/limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2918 -j RETURN inet/filter/limit-2918 -j DROP inet/filter/logaccept-final-300 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-300 -j ACCEPT inet6/filter/FORWARD -j limit-2918 inet6/filter/FORWARD -j logaccept-final-300 inet6/filter/INPUT -j limit-2918 inet6/filter/INPUT -j logaccept-final-300 inet6/filter/OUTPUT -j limit-2918 inet6/filter/OUTPUT -j logaccept-final-300 inet6/filter/limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2918 -j RETURN inet6/filter/limit-2918 -j DROP inet6/filter/logaccept-final-300 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-300 -j ACCEPT Filter 2920 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2919 inet/filter/FORWARD -j logaccept-final-301 inet/filter/INPUT -j limit-2919 inet/filter/INPUT -j logaccept-final-301 inet/filter/OUTPUT -j limit-2919 inet/filter/OUTPUT -j logaccept-final-301 inet/filter/limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2919 -j RETURN inet/filter/limit-2919 -j DROP inet/filter/logaccept-final-301 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-301 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-301 -j ACCEPT inet6/filter/FORWARD -j limit-2919 inet6/filter/FORWARD -j logaccept-final-301 inet6/filter/INPUT -j limit-2919 inet6/filter/INPUT -j logaccept-final-301 inet6/filter/OUTPUT -j limit-2919 inet6/filter/OUTPUT -j logaccept-final-301 inet6/filter/limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2919 -j RETURN inet6/filter/limit-2919 -j DROP inet6/filter/logaccept-final-301 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-301 -j ACCEPT Filter 2921 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2920 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2920 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2920 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2920 -j RETURN inet/filter/limit-2920 -j DROP inet6/filter/FORWARD -j limit-2920 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2920 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2920 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2920 -j RETURN inet6/filter/limit-2920 -j DROP Filter 2922 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2921 inet/filter/FORWARD -j logaccept-final-302 inet/filter/INPUT -j limit-2921 inet/filter/INPUT -j logaccept-final-302 inet/filter/OUTPUT -j limit-2921 inet/filter/OUTPUT -j logaccept-final-302 inet/filter/limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2921 -j RETURN inet/filter/limit-2921 -j DROP inet/filter/logaccept-final-302 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-302 -j ACCEPT inet6/filter/FORWARD -j limit-2921 inet6/filter/FORWARD -j logaccept-final-302 inet6/filter/INPUT -j limit-2921 inet6/filter/INPUT -j logaccept-final-302 inet6/filter/OUTPUT -j limit-2921 inet6/filter/OUTPUT -j logaccept-final-302 inet6/filter/limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2921 -j RETURN inet6/filter/limit-2921 -j DROP inet6/filter/logaccept-final-302 -j ACCEPT Filter 2923 {"flow-limit":{"count":150,"interval":5,"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2922 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2922 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2922 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2922 -j RETURN inet/filter/limit-2922 -m limit --limit 12/minute -j ULOG inet/filter/limit-2922 -j DROP inet6/filter/FORWARD -j limit-2922 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2922 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2922 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2922 -j RETURN inet6/filter/limit-2922 -j DROP Filter 2924 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"}} (filter-limit) inet/filter/FORWARD -j limit-2923 inet/filter/INPUT -j limit-2923 inet/filter/OUTPUT -j limit-2923 inet/filter/limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2923 -j RETURN inet/filter/limit-2923 -m limit --limit 12/minute -j ULOG inet/filter/limit-2923 -j DROP inet6/filter/FORWARD -j limit-2923 inet6/filter/INPUT -j limit-2923 inet6/filter/OUTPUT -j limit-2923 inet6/filter/limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2923 -j RETURN inet6/filter/limit-2923 -j DROP Filter 2925 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":true} (filter-limit) inet/filter/FORWARD -j limit-2924 inet/filter/FORWARD -j logaccept-final-303 inet/filter/INPUT -j limit-2924 inet/filter/INPUT -j logaccept-final-303 inet/filter/OUTPUT -j limit-2924 inet/filter/OUTPUT -j logaccept-final-303 inet/filter/limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2924 -j RETURN inet/filter/limit-2924 -m limit --limit 12/minute -j ULOG inet/filter/limit-2924 -j DROP inet/filter/logaccept-final-303 -m limit --limit 1/second -j LOG inet/filter/logaccept-final-303 -j ACCEPT inet6/filter/FORWARD -j limit-2924 inet6/filter/FORWARD -j logaccept-final-303 inet6/filter/INPUT -j limit-2924 inet6/filter/INPUT -j logaccept-final-303 inet6/filter/OUTPUT -j limit-2924 inet6/filter/OUTPUT -j logaccept-final-303 inet6/filter/limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2924 -j RETURN inet6/filter/limit-2924 -j DROP inet6/filter/logaccept-final-303 -m limit --limit 1/second -j LOG inet6/filter/logaccept-final-303 -j ACCEPT Filter 2926 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"mirror"} (filter-limit) inet/filter/FORWARD -j limit-2925 inet/filter/FORWARD -j logaccept-final-304 inet/filter/INPUT -j limit-2925 inet/filter/INPUT -j logaccept-final-304 inet/filter/OUTPUT -j limit-2925 inet/filter/OUTPUT -j logaccept-final-304 inet/filter/limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2925 -j RETURN inet/filter/limit-2925 -m limit --limit 12/minute -j ULOG inet/filter/limit-2925 -j DROP inet/filter/logaccept-final-304 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-final-304 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-final-304 -j ACCEPT inet6/filter/FORWARD -j limit-2925 inet6/filter/FORWARD -j logaccept-final-304 inet6/filter/INPUT -j limit-2925 inet6/filter/INPUT -j logaccept-final-304 inet6/filter/OUTPUT -j limit-2925 inet6/filter/OUTPUT -j logaccept-final-304 inet6/filter/limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2925 -j RETURN inet6/filter/limit-2925 -j DROP inet6/filter/logaccept-final-304 -j TEE --gateway fc00::2 inet6/filter/logaccept-final-304 -j ACCEPT Filter 2927 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"none"} (filter-limit) inet/filter/FORWARD -j limit-2926 inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j limit-2926 inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j limit-2926 inet/filter/OUTPUT -j ACCEPT inet/filter/limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2926 -j RETURN inet/filter/limit-2926 -m limit --limit 12/minute -j ULOG inet/filter/limit-2926 -j DROP inet6/filter/FORWARD -j limit-2926 inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j limit-2926 inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j limit-2926 inet6/filter/OUTPUT -j ACCEPT inet6/filter/limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2926 -j RETURN inet6/filter/limit-2926 -j DROP Filter 2928 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"log":"ulog"} (filter-limit) inet/filter/FORWARD -j limit-2927 inet/filter/FORWARD -j logaccept-final-305 inet/filter/INPUT -j limit-2927 inet/filter/INPUT -j logaccept-final-305 inet/filter/OUTPUT -j limit-2927 inet/filter/OUTPUT -j logaccept-final-305 inet/filter/limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN inet/filter/limit-2927 -m limit --limit 12/minute -j ULOG inet/filter/limit-2927 -j DROP inet/filter/logaccept-final-305 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-final-305 -j ACCEPT inet6/filter/FORWARD -j limit-2927 inet6/filter/FORWARD -j logaccept-final-305 inet6/filter/INPUT -j limit-2927 inet6/filter/INPUT -j logaccept-final-305 inet6/filter/OUTPUT -j limit-2927 inet6/filter/OUTPUT -j logaccept-final-305 inet6/filter/limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN inet6/filter/limit-2927 -j DROP inet6/filter/logaccept-final-305 -j ACCEPT Filter 2929 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 inet/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-0 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-0 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 inet6/filter/limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-0 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-0 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2930 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 inet/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 inet/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-1 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 inet6/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 inet6/filter/limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-1 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2931 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 inet/filter/limit-ntp-2 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-2 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-2 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 inet6/filter/limit-ntp-2 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-2 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-2 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2932 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 inet/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 inet/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-3 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-3 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 inet6/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 inet6/filter/limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-3 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-3 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2933 {"flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 inet/filter/limit-ntp-4 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-4 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-4 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-4 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 inet6/filter/limit-ntp-4 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-4 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-4 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2934 {"action":"pass","flow-limit":1,"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 inet/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 inet/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-5 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 inet6/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 inet6/filter/limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-5 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2935 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 inet/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-6 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-6 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 inet6/filter/limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-6 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-6 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2936 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 inet/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 inet/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-7 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-7 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 inet6/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 inet6/filter/limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-7 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-7 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2937 {"flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 inet/filter/limit-ntp-8 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-8 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-8 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 inet6/filter/limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-8 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-8 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2938 {"action":"pass","flow-limit":1,"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 inet/filter/limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 inet/filter/limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-9 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-9 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 inet6/filter/limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 inet6/filter/logdrop-ntp-9 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-9 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2939 {"flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2940 {"action":"pass","flow-limit":{"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 inet/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 inet6/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2941 {"flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-12 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-12 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2942 {"action":"pass","flow-limit":{"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 inet/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 inet6/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2943 {"flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-14 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-14 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-14 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2944 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 inet/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 inet6/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2945 {"flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2946 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 inet/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 inet6/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2947 {"flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-18 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2948 {"action":"pass","flow-limit":{"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 inet/filter/limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 inet6/filter/limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2949 {"flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2950 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 inet/filter/limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 inet6/filter/limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2951 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-22 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-22 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2952 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 inet/filter/limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 inet6/filter/limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2953 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-24 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-24 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-24 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2954 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 inet/filter/limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 inet6/filter/limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2955 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2956 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 inet/filter/limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 inet6/filter/limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2957 {"flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-28 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2958 {"action":"pass","flow-limit":{"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 inet/filter/limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 inet6/filter/limit-ntp-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2959 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-30 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-30 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2960 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2961 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-32 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-32 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-32 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-32 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2962 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 inet/filter/limit-ntp-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-33 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 inet6/filter/limit-ntp-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-33 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2963 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-34 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-34 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-34 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-34 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-34 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2964 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 inet/filter/limit-ntp-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-35 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-35 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 inet6/filter/limit-ntp-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-35 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2965 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-36 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-36 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2966 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2967 {"flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-38 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-38 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-38 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2968 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 inet/filter/limit-ntp-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-39 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 inet6/filter/limit-ntp-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2969 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2970 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 inet/filter/limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 inet6/filter/limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2971 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-42 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-42 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2972 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 inet/filter/limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 inet6/filter/limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2973 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-44 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-44 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-44 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2974 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 inet/filter/limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 inet6/filter/limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2975 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2976 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 inet/filter/limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 inet6/filter/limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2977 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-48 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2978 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 inet/filter/limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 inet6/filter/limit-ntp-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2979 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-50 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-50 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2980 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2981 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-52 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-52 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-52 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-52 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2982 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 inet/filter/limit-ntp-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-53 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 inet6/filter/limit-ntp-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-53 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2983 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-54 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-54 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-54 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-54 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-54 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2984 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 inet/filter/limit-ntp-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-55 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-55 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 inet6/filter/limit-ntp-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-55 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2985 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-56 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-56 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2986 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2987 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-58 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-58 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-58 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2988 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 inet/filter/limit-ntp-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-59 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 inet6/filter/limit-ntp-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2989 {"flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2990 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 inet/filter/limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 inet6/filter/limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2991 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-62 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-62 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2992 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 inet/filter/limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 inet6/filter/limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2993 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-64 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-64 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-64 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2994 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 inet/filter/limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 inet6/filter/limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2995 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2996 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 inet/filter/limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 inet6/filter/limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2997 {"flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-68 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2998 {"action":"pass","flow-limit":{"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 inet/filter/limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 inet6/filter/limit-ntp-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 2999 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-70 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-70 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3000 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3001 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-72 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-72 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-72 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-72 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3002 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 inet/filter/limit-ntp-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-73 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 inet6/filter/limit-ntp-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-73 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3003 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-74 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-74 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-74 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-74 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-74 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3004 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 inet/filter/limit-ntp-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-75 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-75 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 inet6/filter/limit-ntp-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-75 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3005 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-76 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-76 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3006 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3007 {"flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-78 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-78 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-78 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3008 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 inet/filter/limit-ntp-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-79 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 inet6/filter/limit-ntp-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3009 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3010 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 inet/filter/limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 inet6/filter/limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3011 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-82 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-82 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3012 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 inet/filter/limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 inet6/filter/limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3013 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-84 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-84 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-84 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3014 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 inet/filter/limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 inet6/filter/limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3015 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3016 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 inet/filter/limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 inet6/filter/limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3017 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-88 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3018 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 inet/filter/limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 inet6/filter/limit-ntp-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3019 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-90 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-90 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3020 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3021 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-92 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-92 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-92 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-92 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3022 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 inet/filter/limit-ntp-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-93 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 inet6/filter/limit-ntp-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-93 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3023 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-94 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-94 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-94 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-94 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-94 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3024 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 inet/filter/limit-ntp-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-95 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-95 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 inet6/filter/limit-ntp-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-95 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3025 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-96 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-96 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3026 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3027 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-98 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-98 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-98 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3028 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 inet/filter/limit-ntp-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-99 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 inet6/filter/limit-ntp-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3029 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 inet/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-10 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-10 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 inet6/filter/limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-10 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-10 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3030 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 inet/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 inet/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-11 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-11 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 inet6/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 inet6/filter/limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-11 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-11 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3031 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 inet/filter/limit-ntp-102 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-12 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-12 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 inet6/filter/limit-ntp-102 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-12 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-12 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3032 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 inet/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 inet/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-13 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-13 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 inet6/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 inet6/filter/limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-13 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-13 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3033 {"flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 inet/filter/limit-ntp-104 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-104 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-14 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-14 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 inet6/filter/limit-ntp-104 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-14 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-14 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3034 {"action":"pass","flow-limit":{},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 inet/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 inet/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-15 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-15 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 inet6/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 inet6/filter/limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-15 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-15 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3035 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 inet/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-16 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-16 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 inet6/filter/limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-16 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-16 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3036 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 inet/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 inet/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-17 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-17 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 inet6/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 inet6/filter/limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-17 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-17 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3037 {"flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 inet/filter/limit-ntp-108 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-18 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-18 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 inet6/filter/limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-18 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-18 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3038 {"action":"pass","flow-limit":{},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 inet/filter/limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 inet/filter/limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-19 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-19 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 inet6/filter/limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 inet6/filter/logdrop-ntp-19 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-19 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3039 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 inet/filter/limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-20 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-20 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 inet6/filter/limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-20 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-20 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3040 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 inet/filter/limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 inet/filter/limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-21 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-21 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 inet6/filter/limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 inet6/filter/limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-21 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-21 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3041 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 inet/filter/limit-ntp-112 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-22 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-22 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 inet6/filter/limit-ntp-112 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-22 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-22 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3042 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 inet/filter/limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 inet/filter/limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-23 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-23 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 inet6/filter/limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 inet6/filter/limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-23 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-23 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3043 {"flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 inet/filter/limit-ntp-114 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-114 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-24 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-24 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 inet6/filter/limit-ntp-114 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-24 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-24 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3044 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 inet/filter/limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 inet/filter/limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-25 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-25 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 inet6/filter/limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 inet6/filter/limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-25 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-25 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3045 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 inet/filter/limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-26 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-26 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 inet6/filter/limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-26 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-26 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3046 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 inet/filter/limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 inet/filter/limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-27 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-27 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 inet6/filter/limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 inet6/filter/limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-27 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-27 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3047 {"flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 inet/filter/limit-ntp-118 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-28 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-28 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 inet6/filter/limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-28 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-28 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3048 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 inet/filter/limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 inet/filter/limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-29 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-29 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 inet6/filter/limit-ntp-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 inet6/filter/logdrop-ntp-29 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-29 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3049 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 inet/filter/limit-ntp-120 -j ACCEPT inet/filter/logdrop-ntp-30 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-30 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 inet6/filter/limit-ntp-120 -j ACCEPT inet6/filter/logdrop-ntp-30 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-30 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3050 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 inet/filter/logdrop-ntp-31 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-31 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 inet6/filter/logdrop-ntp-31 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-31 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3051 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 inet/filter/limit-ntp-122 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-122 -j ACCEPT inet/filter/logdrop-ntp-32 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-32 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 inet6/filter/limit-ntp-122 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-122 -j ACCEPT inet6/filter/logdrop-ntp-32 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-32 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3052 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 inet/filter/limit-ntp-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 inet/filter/limit-ntp-123 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-33 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-33 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 inet6/filter/limit-ntp-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 inet6/filter/limit-ntp-123 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-33 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-33 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3053 {"flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 inet/filter/limit-ntp-124 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-124 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-124 -j ACCEPT inet/filter/logdrop-ntp-34 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-34 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 inet6/filter/limit-ntp-124 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-124 -j ACCEPT inet6/filter/logdrop-ntp-34 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-34 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3054 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 inet/filter/limit-ntp-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 inet/filter/limit-ntp-125 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-125 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-35 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-35 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 inet6/filter/limit-ntp-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 inet6/filter/limit-ntp-125 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-35 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-35 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3055 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 inet/filter/limit-ntp-126 -j ACCEPT inet/filter/logdrop-ntp-36 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-36 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 inet6/filter/limit-ntp-126 -j ACCEPT inet6/filter/logdrop-ntp-36 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-36 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3056 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 inet/filter/logdrop-ntp-37 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-37 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 inet6/filter/logdrop-ntp-37 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-37 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3057 {"flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 inet/filter/limit-ntp-128 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-128 -j ACCEPT inet/filter/logdrop-ntp-38 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-38 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 inet6/filter/limit-ntp-128 -j ACCEPT inet6/filter/logdrop-ntp-38 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-38 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3058 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 inet/filter/limit-ntp-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 inet/filter/limit-ntp-129 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-39 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-39 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 inet6/filter/limit-ntp-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 inet6/filter/logdrop-ntp-39 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-39 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3059 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 inet/filter/limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-40 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-40 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 inet6/filter/limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-40 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-40 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3060 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 inet/filter/limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 inet/filter/limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-41 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-41 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 inet6/filter/limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 inet6/filter/limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-41 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-41 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3061 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 inet/filter/limit-ntp-132 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-42 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-42 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 inet6/filter/limit-ntp-132 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-42 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-42 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3062 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 inet/filter/limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 inet/filter/limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-43 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-43 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 inet6/filter/limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 inet6/filter/limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-43 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-43 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3063 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 inet/filter/limit-ntp-134 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-134 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-44 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-44 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 inet6/filter/limit-ntp-134 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-44 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-44 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3064 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 inet/filter/limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 inet/filter/limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-45 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-45 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 inet6/filter/limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 inet6/filter/limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-45 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-45 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3065 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 inet/filter/limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-46 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-46 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 inet6/filter/limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-46 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-46 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3066 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 inet/filter/limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 inet/filter/limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-47 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-47 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 inet6/filter/limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 inet6/filter/limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-47 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-47 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3067 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 inet/filter/limit-ntp-138 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-48 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-48 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 inet6/filter/limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-48 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-48 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3068 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 inet/filter/limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 inet/filter/limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-49 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-49 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 inet6/filter/limit-ntp-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 inet6/filter/logdrop-ntp-49 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-49 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3069 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 inet/filter/limit-ntp-140 -j ACCEPT inet/filter/logdrop-ntp-50 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-50 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 inet6/filter/limit-ntp-140 -j ACCEPT inet6/filter/logdrop-ntp-50 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-50 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3070 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 inet/filter/logdrop-ntp-51 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-51 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 inet6/filter/logdrop-ntp-51 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-51 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3071 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 inet/filter/limit-ntp-142 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-142 -j ACCEPT inet/filter/logdrop-ntp-52 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-52 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 inet6/filter/limit-ntp-142 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-142 -j ACCEPT inet6/filter/logdrop-ntp-52 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-52 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3072 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 inet/filter/limit-ntp-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 inet/filter/limit-ntp-143 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-53 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-53 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 inet6/filter/limit-ntp-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 inet6/filter/limit-ntp-143 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-53 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-53 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3073 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 inet/filter/limit-ntp-144 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-144 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-144 -j ACCEPT inet/filter/logdrop-ntp-54 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-54 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 inet6/filter/limit-ntp-144 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-144 -j ACCEPT inet6/filter/logdrop-ntp-54 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-54 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3074 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 inet/filter/limit-ntp-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 inet/filter/limit-ntp-145 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-145 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-55 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-55 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 inet6/filter/limit-ntp-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 inet6/filter/limit-ntp-145 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-55 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-55 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3075 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 inet/filter/limit-ntp-146 -j ACCEPT inet/filter/logdrop-ntp-56 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-56 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 inet6/filter/limit-ntp-146 -j ACCEPT inet6/filter/logdrop-ntp-56 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-56 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3076 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 inet/filter/logdrop-ntp-57 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-57 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 inet6/filter/logdrop-ntp-57 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-57 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3077 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 inet/filter/limit-ntp-148 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-148 -j ACCEPT inet/filter/logdrop-ntp-58 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-58 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 inet6/filter/limit-ntp-148 -j ACCEPT inet6/filter/logdrop-ntp-58 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-58 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3078 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 inet/filter/limit-ntp-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 inet/filter/limit-ntp-149 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-59 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-59 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 inet6/filter/limit-ntp-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 inet6/filter/logdrop-ntp-59 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-59 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3079 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 inet/filter/limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-60 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-60 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 inet6/filter/limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-60 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-60 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3080 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 inet/filter/limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 inet/filter/limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-61 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-61 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 inet6/filter/limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 inet6/filter/limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-61 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-61 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3081 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 inet/filter/limit-ntp-152 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-62 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-62 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 inet6/filter/limit-ntp-152 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-62 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-62 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3082 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 inet/filter/limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 inet/filter/limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-63 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-63 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 inet6/filter/limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 inet6/filter/limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-63 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-63 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3083 {"flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 inet/filter/limit-ntp-154 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-154 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-64 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-64 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 inet6/filter/limit-ntp-154 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-64 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-64 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3084 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 inet/filter/limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 inet/filter/limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-65 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-65 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 inet6/filter/limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 inet6/filter/limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-65 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-65 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3085 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 inet/filter/limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-66 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-66 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 inet6/filter/limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-66 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-66 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3086 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 inet/filter/limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 inet/filter/limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-67 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-67 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 inet6/filter/limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 inet6/filter/limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-67 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-67 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3087 {"flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 inet/filter/limit-ntp-158 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-68 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-68 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 inet6/filter/limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-68 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-68 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3088 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 inet/filter/limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 inet/filter/limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-69 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-69 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 inet6/filter/limit-ntp-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 inet6/filter/logdrop-ntp-69 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-69 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3089 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 inet/filter/limit-ntp-160 -j ACCEPT inet/filter/logdrop-ntp-70 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-70 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 inet6/filter/limit-ntp-160 -j ACCEPT inet6/filter/logdrop-ntp-70 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-70 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3090 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 inet/filter/logdrop-ntp-71 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-71 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 inet6/filter/logdrop-ntp-71 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-71 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3091 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 inet/filter/limit-ntp-162 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-162 -j ACCEPT inet/filter/logdrop-ntp-72 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-72 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 inet6/filter/limit-ntp-162 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-162 -j ACCEPT inet6/filter/logdrop-ntp-72 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-72 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3092 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 inet/filter/limit-ntp-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 inet/filter/limit-ntp-163 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-73 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-73 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 inet6/filter/limit-ntp-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 inet6/filter/limit-ntp-163 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-73 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-73 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3093 {"flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 inet/filter/limit-ntp-164 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-164 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-164 -j ACCEPT inet/filter/logdrop-ntp-74 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-74 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 inet6/filter/limit-ntp-164 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-164 -j ACCEPT inet6/filter/logdrop-ntp-74 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-74 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3094 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 inet/filter/limit-ntp-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 inet/filter/limit-ntp-165 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-165 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-75 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-75 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 inet6/filter/limit-ntp-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 inet6/filter/limit-ntp-165 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-75 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-75 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3095 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 inet/filter/limit-ntp-166 -j ACCEPT inet/filter/logdrop-ntp-76 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-76 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 inet6/filter/limit-ntp-166 -j ACCEPT inet6/filter/logdrop-ntp-76 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-76 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3096 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 inet/filter/logdrop-ntp-77 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-77 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 inet6/filter/logdrop-ntp-77 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-77 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3097 {"flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 inet/filter/limit-ntp-168 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-168 -j ACCEPT inet/filter/logdrop-ntp-78 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-78 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 inet6/filter/limit-ntp-168 -j ACCEPT inet6/filter/logdrop-ntp-78 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-78 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3098 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 inet/filter/limit-ntp-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 inet/filter/limit-ntp-169 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-79 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-79 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 inet6/filter/limit-ntp-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 inet6/filter/logdrop-ntp-79 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-79 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3099 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 inet/filter/limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-80 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-80 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 inet6/filter/limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-80 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-80 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3100 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 inet/filter/limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 inet/filter/limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-81 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-81 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 inet6/filter/limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 inet6/filter/limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-81 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-81 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3101 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 inet/filter/limit-ntp-172 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-82 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-82 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 inet6/filter/limit-ntp-172 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-82 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-82 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3102 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 inet/filter/limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 inet/filter/limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-83 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-83 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 inet6/filter/limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 inet6/filter/limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-83 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-83 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3103 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 inet/filter/limit-ntp-174 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-174 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-84 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-84 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 inet6/filter/limit-ntp-174 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-84 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-84 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3104 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 inet/filter/limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 inet/filter/limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-85 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-85 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 inet6/filter/limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 inet6/filter/limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-85 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-85 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3105 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 inet/filter/limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-86 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-86 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 inet6/filter/limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-86 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-86 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3106 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 inet/filter/limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 inet/filter/limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-87 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-87 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 inet6/filter/limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 inet6/filter/limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-87 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-87 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3107 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 inet/filter/limit-ntp-178 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-88 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-88 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 inet6/filter/limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-88 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-88 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3108 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 inet/filter/limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 inet/filter/limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-89 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-89 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 inet6/filter/limit-ntp-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 inet6/filter/logdrop-ntp-89 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-89 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3109 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 inet/filter/limit-ntp-180 -j ACCEPT inet/filter/logdrop-ntp-90 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-90 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 inet6/filter/limit-ntp-180 -j ACCEPT inet6/filter/logdrop-ntp-90 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-90 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3110 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 inet/filter/logdrop-ntp-91 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-91 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 inet6/filter/logdrop-ntp-91 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-91 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3111 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 inet/filter/limit-ntp-182 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-182 -j ACCEPT inet/filter/logdrop-ntp-92 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-92 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 inet6/filter/limit-ntp-182 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-182 -j ACCEPT inet6/filter/logdrop-ntp-92 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-92 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3112 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 inet/filter/limit-ntp-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 inet/filter/limit-ntp-183 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-93 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-93 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 inet6/filter/limit-ntp-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 inet6/filter/limit-ntp-183 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-93 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-93 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3113 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 inet/filter/limit-ntp-184 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-184 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-184 -j ACCEPT inet/filter/logdrop-ntp-94 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-94 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 inet6/filter/limit-ntp-184 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-184 -j ACCEPT inet6/filter/logdrop-ntp-94 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-94 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3114 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 inet/filter/limit-ntp-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 inet/filter/limit-ntp-185 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-185 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-95 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-95 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 inet6/filter/limit-ntp-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 inet6/filter/limit-ntp-185 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-95 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-95 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3115 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 inet/filter/limit-ntp-186 -j ACCEPT inet/filter/logdrop-ntp-96 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-96 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 inet6/filter/limit-ntp-186 -j ACCEPT inet6/filter/logdrop-ntp-96 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-96 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3116 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 inet/filter/logdrop-ntp-97 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-97 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 inet6/filter/logdrop-ntp-97 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-97 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3117 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 inet/filter/limit-ntp-188 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-188 -j ACCEPT inet/filter/logdrop-ntp-98 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-98 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 inet6/filter/limit-ntp-188 -j ACCEPT inet6/filter/logdrop-ntp-98 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-98 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3118 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 inet/filter/limit-ntp-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 inet/filter/limit-ntp-189 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-99 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-99 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 inet6/filter/limit-ntp-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 inet6/filter/logdrop-ntp-99 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-99 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3119 {"flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 inet/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-100 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-100 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-100 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 inet6/filter/limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-100 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-100 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3120 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 inet/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 inet/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-101 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-101 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-101 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 inet6/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 inet6/filter/limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-101 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-101 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3121 {"flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 inet/filter/limit-ntp-192 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-102 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-102 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-102 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 inet6/filter/limit-ntp-192 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-102 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-102 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3122 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 inet/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 inet/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-103 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-103 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-103 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 inet6/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 inet6/filter/limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-103 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-103 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3123 {"flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 inet/filter/limit-ntp-194 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-194 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-104 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-104 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-104 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 inet6/filter/limit-ntp-194 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-104 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-104 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3124 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 inet/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 inet/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-105 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-105 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-105 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 inet6/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 inet6/filter/limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-105 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-105 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3125 {"flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 inet/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-106 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-106 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-106 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 inet6/filter/limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-106 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-106 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3126 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 inet/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 inet/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-107 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-107 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-107 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 inet6/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 inet6/filter/limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-107 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-107 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3127 {"flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 inet/filter/limit-ntp-198 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-108 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-108 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-108 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 inet6/filter/limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-108 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-108 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3128 {"action":"pass","flow-limit":{"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 inet/filter/limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 inet/filter/limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-109 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-109 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-109 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 inet6/filter/limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 inet6/filter/logdrop-ntp-109 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-109 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3129 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 inet/filter/limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-110 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-110 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-110 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 inet6/filter/limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-110 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-110 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3130 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 inet/filter/limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 inet/filter/limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-111 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-111 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-111 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 inet6/filter/limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 inet6/filter/limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-111 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-111 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3131 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 inet/filter/limit-ntp-202 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-112 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-112 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-112 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 inet6/filter/limit-ntp-202 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-112 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-112 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3132 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 inet/filter/limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 inet/filter/limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-113 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-113 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-113 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 inet6/filter/limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 inet6/filter/limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-113 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-113 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3133 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 inet/filter/limit-ntp-204 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-204 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-114 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-114 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-114 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 inet6/filter/limit-ntp-204 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-114 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-114 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3134 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 inet/filter/limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 inet/filter/limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-115 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-115 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-115 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 inet6/filter/limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 inet6/filter/limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-115 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-115 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3135 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 inet/filter/limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-116 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-116 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-116 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 inet6/filter/limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-116 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-116 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3136 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 inet/filter/limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 inet/filter/limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-117 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-117 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-117 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 inet6/filter/limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 inet6/filter/limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-117 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-117 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3137 {"flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 inet/filter/limit-ntp-208 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-118 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-118 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-118 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 inet6/filter/limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-118 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-118 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3138 {"action":"pass","flow-limit":{"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 inet/filter/limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 inet/filter/limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-119 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-119 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-119 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 inet6/filter/limit-ntp-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 inet6/filter/logdrop-ntp-119 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-119 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3139 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 inet/filter/limit-ntp-210 -j ACCEPT inet/filter/logdrop-ntp-120 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-120 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-120 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 inet6/filter/limit-ntp-210 -j ACCEPT inet6/filter/logdrop-ntp-120 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-120 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3140 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 inet/filter/logdrop-ntp-121 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-121 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-121 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 inet6/filter/logdrop-ntp-121 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-121 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3141 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 inet/filter/limit-ntp-212 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-212 -j ACCEPT inet/filter/logdrop-ntp-122 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-122 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-122 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 inet6/filter/limit-ntp-212 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-212 -j ACCEPT inet6/filter/logdrop-ntp-122 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-122 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3142 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 inet/filter/limit-ntp-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 inet/filter/limit-ntp-213 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-123 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-123 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-123 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 inet6/filter/limit-ntp-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 inet6/filter/limit-ntp-213 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-123 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-123 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3143 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 inet/filter/limit-ntp-214 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-214 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-214 -j ACCEPT inet/filter/logdrop-ntp-124 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-124 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-124 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 inet6/filter/limit-ntp-214 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-214 -j ACCEPT inet6/filter/logdrop-ntp-124 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-124 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3144 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 inet/filter/limit-ntp-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 inet/filter/limit-ntp-215 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-215 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-125 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-125 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-125 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 inet6/filter/limit-ntp-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 inet6/filter/limit-ntp-215 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-125 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-125 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3145 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 inet/filter/limit-ntp-216 -j ACCEPT inet/filter/logdrop-ntp-126 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-126 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-126 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 inet6/filter/limit-ntp-216 -j ACCEPT inet6/filter/logdrop-ntp-126 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-126 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3146 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 inet/filter/logdrop-ntp-127 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-127 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-127 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 inet6/filter/logdrop-ntp-127 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-127 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3147 {"flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 inet/filter/limit-ntp-218 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-218 -j ACCEPT inet/filter/logdrop-ntp-128 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-128 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-128 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 inet6/filter/limit-ntp-218 -j ACCEPT inet6/filter/logdrop-ntp-128 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-128 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3148 {"action":"pass","flow-limit":{"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 inet/filter/limit-ntp-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 inet/filter/limit-ntp-219 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-129 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-129 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-129 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 inet6/filter/limit-ntp-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 inet6/filter/logdrop-ntp-129 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-129 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3149 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 inet/filter/limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-130 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-130 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-130 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 inet6/filter/limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-130 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-130 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3150 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 inet/filter/limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 inet/filter/limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-131 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-131 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-131 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 inet6/filter/limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 inet6/filter/limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-131 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-131 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3151 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 inet/filter/limit-ntp-222 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-132 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-132 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-132 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 inet6/filter/limit-ntp-222 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-132 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-132 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3152 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 inet/filter/limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 inet/filter/limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-133 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-133 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-133 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 inet6/filter/limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 inet6/filter/limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-133 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-133 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3153 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 inet/filter/limit-ntp-224 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-224 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-134 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-134 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-134 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 inet6/filter/limit-ntp-224 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-134 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-134 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3154 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 inet/filter/limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 inet/filter/limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-135 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-135 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-135 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 inet6/filter/limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 inet6/filter/limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-135 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-135 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3155 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 inet/filter/limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-136 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-136 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-136 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 inet6/filter/limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-136 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-136 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3156 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 inet/filter/limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 inet/filter/limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-137 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-137 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-137 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 inet6/filter/limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 inet6/filter/limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-137 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-137 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3157 {"flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 inet/filter/limit-ntp-228 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-138 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-138 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-138 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 inet6/filter/limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-138 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-138 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3158 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 inet/filter/limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 inet/filter/limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-139 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-139 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-139 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 inet6/filter/limit-ntp-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 inet6/filter/logdrop-ntp-139 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-139 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3159 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 inet/filter/limit-ntp-230 -j ACCEPT inet/filter/logdrop-ntp-140 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-140 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-140 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 inet6/filter/limit-ntp-230 -j ACCEPT inet6/filter/logdrop-ntp-140 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-140 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3160 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 inet/filter/logdrop-ntp-141 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-141 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-141 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 inet6/filter/logdrop-ntp-141 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-141 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3161 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 inet/filter/limit-ntp-232 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-232 -j ACCEPT inet/filter/logdrop-ntp-142 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-142 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-142 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 inet6/filter/limit-ntp-232 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-232 -j ACCEPT inet6/filter/logdrop-ntp-142 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-142 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3162 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 inet/filter/limit-ntp-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 inet/filter/limit-ntp-233 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-143 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-143 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-143 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 inet6/filter/limit-ntp-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 inet6/filter/limit-ntp-233 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-143 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-143 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3163 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 inet/filter/limit-ntp-234 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-234 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-234 -j ACCEPT inet/filter/logdrop-ntp-144 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-144 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-144 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 inet6/filter/limit-ntp-234 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-234 -j ACCEPT inet6/filter/logdrop-ntp-144 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-144 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3164 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 inet/filter/limit-ntp-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 inet/filter/limit-ntp-235 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-235 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-145 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-145 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-145 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 inet6/filter/limit-ntp-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 inet6/filter/limit-ntp-235 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-145 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-145 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3165 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 inet/filter/limit-ntp-236 -j ACCEPT inet/filter/logdrop-ntp-146 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-146 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-146 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 inet6/filter/limit-ntp-236 -j ACCEPT inet6/filter/logdrop-ntp-146 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-146 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3166 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 inet/filter/logdrop-ntp-147 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-147 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-147 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 inet6/filter/logdrop-ntp-147 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-147 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3167 {"flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 inet/filter/limit-ntp-238 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-238 -j ACCEPT inet/filter/logdrop-ntp-148 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-148 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-148 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 inet6/filter/limit-ntp-238 -j ACCEPT inet6/filter/logdrop-ntp-148 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-148 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3168 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 inet/filter/limit-ntp-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 inet/filter/limit-ntp-239 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-149 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-149 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-149 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 inet6/filter/limit-ntp-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 inet6/filter/logdrop-ntp-149 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-149 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3169 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 inet/filter/limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-150 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-150 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-150 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 inet6/filter/limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-150 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-150 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3170 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 inet/filter/limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 inet/filter/limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-151 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-151 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-151 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 inet6/filter/limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 inet6/filter/limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-151 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-151 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3171 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 inet/filter/limit-ntp-242 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-152 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-152 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-152 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 inet6/filter/limit-ntp-242 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-152 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-152 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3172 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 inet/filter/limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 inet/filter/limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-153 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-153 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-153 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 inet6/filter/limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 inet6/filter/limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-153 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-153 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3173 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 inet/filter/limit-ntp-244 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-244 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-154 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-154 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-154 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 inet6/filter/limit-ntp-244 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-154 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-154 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3174 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 inet/filter/limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 inet/filter/limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-155 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-155 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-155 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 inet6/filter/limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 inet6/filter/limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-155 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-155 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3175 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 inet/filter/limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-156 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-156 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-156 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 inet6/filter/limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-156 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-156 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3176 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 inet/filter/limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 inet/filter/limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-157 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-157 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-157 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 inet6/filter/limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 inet6/filter/limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-157 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-157 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3177 {"flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 inet/filter/limit-ntp-248 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-158 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-158 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-158 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 inet6/filter/limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-158 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-158 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3178 {"action":"pass","flow-limit":{"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 inet/filter/limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 inet/filter/limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-159 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-159 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-159 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 inet6/filter/limit-ntp-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 inet6/filter/logdrop-ntp-159 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-159 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3179 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 inet/filter/limit-ntp-250 -j ACCEPT inet/filter/logdrop-ntp-160 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-160 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-160 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 inet6/filter/limit-ntp-250 -j ACCEPT inet6/filter/logdrop-ntp-160 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-160 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3180 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 inet/filter/logdrop-ntp-161 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-161 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-161 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 inet6/filter/logdrop-ntp-161 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-161 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3181 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 inet/filter/limit-ntp-252 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-252 -j ACCEPT inet/filter/logdrop-ntp-162 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-162 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-162 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 inet6/filter/limit-ntp-252 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-252 -j ACCEPT inet6/filter/logdrop-ntp-162 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-162 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3182 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 inet/filter/limit-ntp-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 inet/filter/limit-ntp-253 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-163 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-163 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-163 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 inet6/filter/limit-ntp-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 inet6/filter/limit-ntp-253 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-163 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-163 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3183 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 inet/filter/limit-ntp-254 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-254 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-254 -j ACCEPT inet/filter/logdrop-ntp-164 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-164 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-164 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 inet6/filter/limit-ntp-254 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-254 -j ACCEPT inet6/filter/logdrop-ntp-164 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-164 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3184 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 inet/filter/limit-ntp-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 inet/filter/limit-ntp-255 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-255 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-165 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-165 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-165 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 inet6/filter/limit-ntp-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 inet6/filter/limit-ntp-255 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-165 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-165 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3185 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 inet/filter/limit-ntp-256 -j ACCEPT inet/filter/logdrop-ntp-166 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-166 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-166 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 inet6/filter/limit-ntp-256 -j ACCEPT inet6/filter/logdrop-ntp-166 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-166 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3186 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 inet/filter/logdrop-ntp-167 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-167 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-167 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 inet6/filter/logdrop-ntp-167 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-167 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3187 {"flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 inet/filter/limit-ntp-258 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-258 -j ACCEPT inet/filter/logdrop-ntp-168 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-168 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-168 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 inet6/filter/limit-ntp-258 -j ACCEPT inet6/filter/logdrop-ntp-168 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-168 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3188 {"action":"pass","flow-limit":{"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 inet/filter/limit-ntp-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 inet/filter/limit-ntp-259 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-169 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-169 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-169 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 inet6/filter/limit-ntp-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 inet6/filter/logdrop-ntp-169 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-169 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3189 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 inet/filter/limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-170 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-170 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-170 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 inet6/filter/limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-170 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-170 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3190 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 inet/filter/limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 inet/filter/limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-171 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-171 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-171 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 inet6/filter/limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 inet6/filter/limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-171 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-171 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3191 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 inet/filter/limit-ntp-262 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-172 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-172 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-172 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 inet6/filter/limit-ntp-262 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-172 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-172 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3192 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 inet/filter/limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 inet/filter/limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-173 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-173 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-173 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 inet6/filter/limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 inet6/filter/limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-173 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-173 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3193 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 inet/filter/limit-ntp-264 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-264 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-174 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-174 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-174 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 inet6/filter/limit-ntp-264 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-174 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-174 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3194 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 inet/filter/limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 inet/filter/limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-175 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-175 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-175 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 inet6/filter/limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 inet6/filter/limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-175 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-175 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3195 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 inet/filter/limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-176 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-176 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-176 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 inet6/filter/limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-176 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-176 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3196 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 inet/filter/limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 inet/filter/limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-177 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-177 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-177 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 inet6/filter/limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 inet6/filter/limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-177 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-177 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3197 {"flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 inet/filter/limit-ntp-268 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-178 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-178 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-178 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 inet6/filter/limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-178 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-178 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3198 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 inet/filter/limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 inet/filter/limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-179 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-179 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-179 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 inet6/filter/limit-ntp-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 inet6/filter/logdrop-ntp-179 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-179 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3199 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 inet/filter/limit-ntp-270 -j ACCEPT inet/filter/logdrop-ntp-180 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-180 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-180 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 inet6/filter/limit-ntp-270 -j ACCEPT inet6/filter/logdrop-ntp-180 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-180 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3200 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 inet/filter/logdrop-ntp-181 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-181 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-181 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 inet6/filter/logdrop-ntp-181 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-181 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3201 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 inet/filter/limit-ntp-272 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-272 -j ACCEPT inet/filter/logdrop-ntp-182 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-182 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-182 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 inet6/filter/limit-ntp-272 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-272 -j ACCEPT inet6/filter/logdrop-ntp-182 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-182 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3202 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 inet/filter/limit-ntp-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 inet/filter/limit-ntp-273 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-183 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-183 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-183 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 inet6/filter/limit-ntp-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 inet6/filter/limit-ntp-273 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-183 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-183 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3203 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 inet/filter/limit-ntp-274 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-274 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-274 -j ACCEPT inet/filter/logdrop-ntp-184 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-184 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-184 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 inet6/filter/limit-ntp-274 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-274 -j ACCEPT inet6/filter/logdrop-ntp-184 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-184 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3204 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 inet/filter/limit-ntp-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 inet/filter/limit-ntp-275 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-275 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-185 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-185 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-185 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 inet6/filter/limit-ntp-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 inet6/filter/limit-ntp-275 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-185 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-185 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3205 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 inet/filter/limit-ntp-276 -j ACCEPT inet/filter/logdrop-ntp-186 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-186 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-186 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 inet6/filter/limit-ntp-276 -j ACCEPT inet6/filter/logdrop-ntp-186 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-186 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3206 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 inet/filter/logdrop-ntp-187 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-187 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-187 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 inet6/filter/logdrop-ntp-187 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-187 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3207 {"flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 inet/filter/limit-ntp-278 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-278 -j ACCEPT inet/filter/logdrop-ntp-188 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-188 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-188 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 inet6/filter/limit-ntp-278 -j ACCEPT inet6/filter/logdrop-ntp-188 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-188 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3208 {"action":"pass","flow-limit":{"addr":"dest","log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 inet/filter/limit-ntp-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 inet/filter/limit-ntp-279 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-189 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-189 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-189 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 inet6/filter/limit-ntp-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 inet6/filter/logdrop-ntp-189 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-189 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3209 {"flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3210 {"action":"pass","flow-limit":{"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 inet/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 inet6/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3211 {"flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-282 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-282 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3212 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 inet/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 inet6/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3213 {"flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-284 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-284 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-284 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3214 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 inet/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 inet6/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3215 {"flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3216 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 inet/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 inet6/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3217 {"flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-288 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3218 {"action":"pass","flow-limit":{"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 inet/filter/limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 inet6/filter/limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3219 {"flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3220 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 inet/filter/limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 inet6/filter/limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3221 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-292 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-292 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3222 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 inet/filter/limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 inet6/filter/limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3223 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-294 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-294 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-294 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3224 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 inet/filter/limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 inet6/filter/limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3225 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3226 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 inet/filter/limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 inet6/filter/limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3227 {"flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-298 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3228 {"action":"pass","flow-limit":{"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 inet/filter/limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 inet6/filter/limit-ntp-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3229 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-300 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-300 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3230 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3231 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-302 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-302 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-302 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-302 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3232 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 inet/filter/limit-ntp-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-303 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 inet6/filter/limit-ntp-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-303 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3233 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-304 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-304 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-304 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-304 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-304 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3234 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 inet/filter/limit-ntp-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-305 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-305 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 inet6/filter/limit-ntp-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-305 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3235 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-306 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-306 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3236 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3237 {"flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-308 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-308 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-308 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3238 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 inet/filter/limit-ntp-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-309 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 inet6/filter/limit-ntp-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3239 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3240 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 inet/filter/limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 inet6/filter/limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3241 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-312 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-312 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3242 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 inet/filter/limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 inet6/filter/limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3243 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-314 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-314 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-314 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3244 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 inet/filter/limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 inet6/filter/limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3245 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3246 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 inet/filter/limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 inet6/filter/limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3247 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-318 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3248 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 inet/filter/limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 inet6/filter/limit-ntp-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3249 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-320 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-320 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3250 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3251 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-322 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-322 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-322 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-322 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3252 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 inet/filter/limit-ntp-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-323 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 inet6/filter/limit-ntp-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-323 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3253 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-324 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-324 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-324 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-324 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-324 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3254 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 inet/filter/limit-ntp-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-325 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-325 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 inet6/filter/limit-ntp-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-325 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3255 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-326 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-326 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3256 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3257 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-328 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-328 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-328 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3258 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 inet/filter/limit-ntp-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-329 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 inet6/filter/limit-ntp-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3259 {"flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3260 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 inet/filter/limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 inet6/filter/limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3261 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-332 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-332 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3262 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 inet/filter/limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 inet6/filter/limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3263 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-334 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-334 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-334 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3264 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 inet/filter/limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 inet6/filter/limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3265 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3266 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 inet/filter/limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 inet6/filter/limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3267 {"flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-338 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3268 {"action":"pass","flow-limit":{"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 inet/filter/limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 inet6/filter/limit-ntp-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3269 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-340 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-340 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3270 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3271 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-342 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-342 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-342 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-342 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3272 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 inet/filter/limit-ntp-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-343 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 inet6/filter/limit-ntp-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-343 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3273 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-344 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-344 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-344 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-344 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-344 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3274 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 inet/filter/limit-ntp-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-345 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-345 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 inet6/filter/limit-ntp-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-345 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3275 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-346 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-346 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3276 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3277 {"flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-348 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-348 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-348 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3278 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 inet/filter/limit-ntp-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-349 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 inet6/filter/limit-ntp-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3279 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3280 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 inet/filter/limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 inet6/filter/limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3281 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-352 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-352 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3282 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 inet/filter/limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 inet6/filter/limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3283 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-354 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-354 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-354 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3284 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 inet/filter/limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 inet6/filter/limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3285 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3286 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 inet/filter/limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 inet6/filter/limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3287 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-358 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3288 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 inet/filter/limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 inet6/filter/limit-ntp-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3289 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-360 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-360 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3290 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3291 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-362 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-362 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-362 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-362 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3292 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 inet/filter/limit-ntp-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-363 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 inet6/filter/limit-ntp-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-363 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3293 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-364 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-364 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-364 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-364 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-364 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3294 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 inet/filter/limit-ntp-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-365 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-365 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 inet6/filter/limit-ntp-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-365 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3295 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-366 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-366 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3296 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3297 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-368 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-368 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-ntp-368 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3298 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 inet/filter/limit-ntp-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-ntp-369 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 inet6/filter/limit-ntp-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3299 {"flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 inet/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-190 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-190 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 inet6/filter/limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-190 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3300 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 inet/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 inet/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-191 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-191 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 inet6/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 inet6/filter/limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-191 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3301 {"flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 inet/filter/limit-ntp-372 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-192 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-192 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 inet6/filter/limit-ntp-372 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-192 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3302 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 inet/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 inet/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-193 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-193 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 inet6/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 inet6/filter/limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-193 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3303 {"flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 inet/filter/limit-ntp-374 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-374 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-194 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-194 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 inet6/filter/limit-ntp-374 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-194 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3304 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 inet/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 inet/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-195 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-195 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 inet6/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 inet6/filter/limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-195 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3305 {"flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 inet/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-196 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-196 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 inet6/filter/limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-196 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3306 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 inet/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 inet/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-197 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-197 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 inet6/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 inet6/filter/limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-197 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3307 {"flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 inet/filter/limit-ntp-378 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-198 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-198 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 inet6/filter/limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-198 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3308 {"action":"pass","flow-limit":{"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 inet/filter/limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 inet/filter/limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-199 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-199 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 inet6/filter/limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 inet6/filter/logdrop-ntp-199 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3309 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 inet/filter/limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-200 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-200 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 inet6/filter/limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-200 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3310 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 inet/filter/limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 inet/filter/limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-201 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-201 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 inet6/filter/limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 inet6/filter/limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-201 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3311 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 inet/filter/limit-ntp-382 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-202 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-202 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 inet6/filter/limit-ntp-382 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-202 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3312 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 inet/filter/limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 inet/filter/limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-203 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-203 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 inet6/filter/limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 inet6/filter/limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-203 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3313 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 inet/filter/limit-ntp-384 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-384 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-204 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-204 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 inet6/filter/limit-ntp-384 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-204 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3314 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 inet/filter/limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 inet/filter/limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-205 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-205 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 inet6/filter/limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 inet6/filter/limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-205 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3315 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 inet/filter/limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-206 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-206 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 inet6/filter/limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-206 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3316 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 inet/filter/limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 inet/filter/limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-207 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-207 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 inet6/filter/limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 inet6/filter/limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-207 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3317 {"flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 inet/filter/limit-ntp-388 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-208 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-208 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 inet6/filter/limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-208 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3318 {"action":"pass","flow-limit":{"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 inet/filter/limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 inet/filter/limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-209 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-209 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 inet6/filter/limit-ntp-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 inet6/filter/logdrop-ntp-209 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3319 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 inet/filter/limit-ntp-390 -j ACCEPT inet/filter/logdrop-ntp-210 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-210 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 inet6/filter/limit-ntp-390 -j ACCEPT inet6/filter/logdrop-ntp-210 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3320 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 inet/filter/logdrop-ntp-211 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-211 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 inet6/filter/logdrop-ntp-211 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3321 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 inet/filter/limit-ntp-392 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-392 -j ACCEPT inet/filter/logdrop-ntp-212 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-212 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 inet6/filter/limit-ntp-392 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-392 -j ACCEPT inet6/filter/logdrop-ntp-212 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3322 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 inet/filter/limit-ntp-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 inet/filter/limit-ntp-393 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-213 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-213 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 inet6/filter/limit-ntp-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 inet6/filter/limit-ntp-393 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-213 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3323 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 inet/filter/limit-ntp-394 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-394 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-394 -j ACCEPT inet/filter/logdrop-ntp-214 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-214 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 inet6/filter/limit-ntp-394 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-394 -j ACCEPT inet6/filter/logdrop-ntp-214 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3324 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 inet/filter/limit-ntp-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 inet/filter/limit-ntp-395 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-395 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-215 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-215 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 inet6/filter/limit-ntp-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 inet6/filter/limit-ntp-395 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-215 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3325 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 inet/filter/limit-ntp-396 -j ACCEPT inet/filter/logdrop-ntp-216 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-216 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 inet6/filter/limit-ntp-396 -j ACCEPT inet6/filter/logdrop-ntp-216 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3326 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 inet/filter/logdrop-ntp-217 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-217 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 inet6/filter/logdrop-ntp-217 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3327 {"flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 inet/filter/limit-ntp-398 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-398 -j ACCEPT inet/filter/logdrop-ntp-218 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-218 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 inet6/filter/limit-ntp-398 -j ACCEPT inet6/filter/logdrop-ntp-218 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3328 {"action":"pass","flow-limit":{"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 inet/filter/limit-ntp-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 inet/filter/limit-ntp-399 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-219 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-219 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 inet6/filter/limit-ntp-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 inet6/filter/logdrop-ntp-219 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3329 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 inet/filter/limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-220 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-220 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 inet6/filter/limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-220 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3330 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 inet/filter/limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 inet/filter/limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-221 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-221 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 inet6/filter/limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 inet6/filter/limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-221 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3331 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 inet/filter/limit-ntp-402 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-222 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-222 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 inet6/filter/limit-ntp-402 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-222 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3332 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 inet/filter/limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 inet/filter/limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-223 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-223 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 inet6/filter/limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 inet6/filter/limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-223 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3333 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 inet/filter/limit-ntp-404 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-404 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-224 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-224 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 inet6/filter/limit-ntp-404 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-224 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3334 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 inet/filter/limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 inet/filter/limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-225 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-225 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 inet6/filter/limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 inet6/filter/limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-225 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3335 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 inet/filter/limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-226 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-226 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 inet6/filter/limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-226 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3336 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 inet/filter/limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 inet/filter/limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-227 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-227 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 inet6/filter/limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 inet6/filter/limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-227 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3337 {"flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 inet/filter/limit-ntp-408 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-228 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-228 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 inet6/filter/limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-228 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3338 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 inet/filter/limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 inet/filter/limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-229 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-229 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 inet6/filter/limit-ntp-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 inet6/filter/logdrop-ntp-229 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3339 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 inet/filter/limit-ntp-410 -j ACCEPT inet/filter/logdrop-ntp-230 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-230 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 inet6/filter/limit-ntp-410 -j ACCEPT inet6/filter/logdrop-ntp-230 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3340 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 inet/filter/logdrop-ntp-231 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-231 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 inet6/filter/logdrop-ntp-231 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3341 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 inet/filter/limit-ntp-412 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-412 -j ACCEPT inet/filter/logdrop-ntp-232 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-232 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 inet6/filter/limit-ntp-412 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-412 -j ACCEPT inet6/filter/logdrop-ntp-232 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3342 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 inet/filter/limit-ntp-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 inet/filter/limit-ntp-413 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-233 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-233 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 inet6/filter/limit-ntp-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 inet6/filter/limit-ntp-413 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-233 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3343 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 inet/filter/limit-ntp-414 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-414 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-414 -j ACCEPT inet/filter/logdrop-ntp-234 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-234 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 inet6/filter/limit-ntp-414 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-414 -j ACCEPT inet6/filter/logdrop-ntp-234 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3344 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 inet/filter/limit-ntp-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 inet/filter/limit-ntp-415 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-415 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-235 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-235 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 inet6/filter/limit-ntp-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 inet6/filter/limit-ntp-415 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-235 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3345 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 inet/filter/limit-ntp-416 -j ACCEPT inet/filter/logdrop-ntp-236 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-236 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 inet6/filter/limit-ntp-416 -j ACCEPT inet6/filter/logdrop-ntp-236 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3346 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 inet/filter/logdrop-ntp-237 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-237 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 inet6/filter/logdrop-ntp-237 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3347 {"flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 inet/filter/limit-ntp-418 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-418 -j ACCEPT inet/filter/logdrop-ntp-238 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-238 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 inet6/filter/limit-ntp-418 -j ACCEPT inet6/filter/logdrop-ntp-238 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3348 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 inet/filter/limit-ntp-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 inet/filter/limit-ntp-419 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-239 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-239 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 inet6/filter/limit-ntp-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 inet6/filter/logdrop-ntp-239 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3349 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 inet/filter/limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-240 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-240 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 inet6/filter/limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-240 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3350 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 inet/filter/limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 inet/filter/limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-241 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-241 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 inet6/filter/limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 inet6/filter/limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-241 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3351 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 inet/filter/limit-ntp-422 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-242 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-242 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 inet6/filter/limit-ntp-422 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-242 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3352 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 inet/filter/limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 inet/filter/limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-243 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-243 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 inet6/filter/limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 inet6/filter/limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-243 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3353 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 inet/filter/limit-ntp-424 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-424 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-244 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-244 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 inet6/filter/limit-ntp-424 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-244 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3354 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 inet/filter/limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 inet/filter/limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-245 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-245 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 inet6/filter/limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 inet6/filter/limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-245 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3355 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 inet/filter/limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-246 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-246 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 inet6/filter/limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-246 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3356 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 inet/filter/limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 inet/filter/limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-247 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-247 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 inet6/filter/limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 inet6/filter/limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-247 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3357 {"flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 inet/filter/limit-ntp-428 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-248 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-248 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 inet6/filter/limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-248 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3358 {"action":"pass","flow-limit":{"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 inet/filter/limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 inet/filter/limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-249 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-249 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 inet6/filter/limit-ntp-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 inet6/filter/logdrop-ntp-249 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3359 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 inet/filter/limit-ntp-430 -j ACCEPT inet/filter/logdrop-ntp-250 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-250 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 inet6/filter/limit-ntp-430 -j ACCEPT inet6/filter/logdrop-ntp-250 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3360 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 inet/filter/logdrop-ntp-251 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-251 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 inet6/filter/logdrop-ntp-251 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3361 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 inet/filter/limit-ntp-432 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-432 -j ACCEPT inet/filter/logdrop-ntp-252 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-252 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 inet6/filter/limit-ntp-432 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-432 -j ACCEPT inet6/filter/logdrop-ntp-252 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3362 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 inet/filter/limit-ntp-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 inet/filter/limit-ntp-433 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-253 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-253 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 inet6/filter/limit-ntp-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 inet6/filter/limit-ntp-433 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-253 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3363 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 inet/filter/limit-ntp-434 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-434 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-434 -j ACCEPT inet/filter/logdrop-ntp-254 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-254 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 inet6/filter/limit-ntp-434 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-434 -j ACCEPT inet6/filter/logdrop-ntp-254 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3364 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 inet/filter/limit-ntp-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 inet/filter/limit-ntp-435 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-435 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-255 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-255 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 inet6/filter/limit-ntp-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 inet6/filter/limit-ntp-435 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-255 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3365 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 inet/filter/limit-ntp-436 -j ACCEPT inet/filter/logdrop-ntp-256 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-256 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 inet6/filter/limit-ntp-436 -j ACCEPT inet6/filter/logdrop-ntp-256 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3366 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 inet/filter/logdrop-ntp-257 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-257 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 inet6/filter/logdrop-ntp-257 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3367 {"flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 inet/filter/limit-ntp-438 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-438 -j ACCEPT inet/filter/logdrop-ntp-258 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-258 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 inet6/filter/limit-ntp-438 -j ACCEPT inet6/filter/logdrop-ntp-258 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3368 {"action":"pass","flow-limit":{"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 inet/filter/limit-ntp-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 inet/filter/limit-ntp-439 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-259 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-259 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 inet6/filter/limit-ntp-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 inet6/filter/logdrop-ntp-259 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3369 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 inet/filter/limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-260 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-260 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 inet6/filter/limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-260 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3370 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 inet/filter/limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 inet/filter/limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-261 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-261 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 inet6/filter/limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 inet6/filter/limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-261 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3371 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 inet/filter/limit-ntp-442 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-262 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-262 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 inet6/filter/limit-ntp-442 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-262 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3372 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 inet/filter/limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 inet/filter/limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-263 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-263 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 inet6/filter/limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 inet6/filter/limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-263 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3373 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 inet/filter/limit-ntp-444 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-444 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-264 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-264 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 inet6/filter/limit-ntp-444 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-264 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3374 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 inet/filter/limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 inet/filter/limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-265 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-265 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 inet6/filter/limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 inet6/filter/limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-265 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3375 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 inet/filter/limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-266 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-266 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 inet6/filter/limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-266 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3376 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 inet/filter/limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 inet/filter/limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-267 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-267 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 inet6/filter/limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 inet6/filter/limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-267 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3377 {"flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 inet/filter/limit-ntp-448 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-268 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-268 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 inet6/filter/limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-268 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3378 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 inet/filter/limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 inet/filter/limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-269 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-269 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 inet6/filter/limit-ntp-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 inet6/filter/logdrop-ntp-269 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3379 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 inet/filter/limit-ntp-450 -j ACCEPT inet/filter/logdrop-ntp-270 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-270 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 inet6/filter/limit-ntp-450 -j ACCEPT inet6/filter/logdrop-ntp-270 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3380 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 inet/filter/logdrop-ntp-271 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-271 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 inet6/filter/logdrop-ntp-271 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3381 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 inet/filter/limit-ntp-452 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-452 -j ACCEPT inet/filter/logdrop-ntp-272 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-272 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 inet6/filter/limit-ntp-452 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-452 -j ACCEPT inet6/filter/logdrop-ntp-272 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3382 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 inet/filter/limit-ntp-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 inet/filter/limit-ntp-453 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-273 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-273 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 inet6/filter/limit-ntp-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 inet6/filter/limit-ntp-453 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-273 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3383 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 inet/filter/limit-ntp-454 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-454 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-454 -j ACCEPT inet/filter/logdrop-ntp-274 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-274 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 inet6/filter/limit-ntp-454 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-454 -j ACCEPT inet6/filter/logdrop-ntp-274 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3384 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 inet/filter/limit-ntp-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 inet/filter/limit-ntp-455 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-455 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-275 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-275 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 inet6/filter/limit-ntp-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 inet6/filter/limit-ntp-455 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-275 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3385 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 inet/filter/limit-ntp-456 -j ACCEPT inet/filter/logdrop-ntp-276 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-276 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 inet6/filter/limit-ntp-456 -j ACCEPT inet6/filter/logdrop-ntp-276 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3386 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 inet/filter/logdrop-ntp-277 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-277 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 inet6/filter/logdrop-ntp-277 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3387 {"flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 inet/filter/limit-ntp-458 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-458 -j ACCEPT inet/filter/logdrop-ntp-278 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-278 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 inet6/filter/limit-ntp-458 -j ACCEPT inet6/filter/logdrop-ntp-278 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3388 {"action":"pass","flow-limit":{"addr":"dest","log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 inet/filter/limit-ntp-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 inet/filter/limit-ntp-459 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-279 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-279 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 inet6/filter/limit-ntp-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 inet6/filter/logdrop-ntp-279 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3389 {"flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3390 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 inet/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 inet6/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3391 {"flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-462 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-462 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3392 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 inet/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 inet6/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3393 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-464 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-464 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-464 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3394 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 inet/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 inet6/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3395 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3396 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 inet/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 inet6/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3397 {"flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-468 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3398 {"action":"pass","flow-limit":{"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 inet/filter/limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 inet6/filter/limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3399 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3400 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 inet/filter/limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 inet6/filter/limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3401 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-472 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-472 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3402 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 inet/filter/limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 inet6/filter/limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3403 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-474 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-474 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-474 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3404 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 inet/filter/limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 inet6/filter/limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3405 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3406 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 inet/filter/limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 inet6/filter/limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3407 {"flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-478 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3408 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 inet/filter/limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 inet6/filter/limit-ntp-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3409 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-480 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-480 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3410 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3411 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-482 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-482 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-482 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-482 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3412 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 inet/filter/limit-ntp-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-483 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 inet6/filter/limit-ntp-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-483 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3413 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-484 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-484 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-484 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-484 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-484 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3414 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 inet/filter/limit-ntp-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-485 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-485 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 inet6/filter/limit-ntp-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-485 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3415 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-486 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-486 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3416 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3417 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-488 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-488 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-488 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3418 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 inet/filter/limit-ntp-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-489 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 inet6/filter/limit-ntp-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3419 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3420 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 inet/filter/limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 inet6/filter/limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3421 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-492 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-492 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3422 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 inet/filter/limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 inet6/filter/limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3423 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-494 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-494 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-494 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3424 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 inet/filter/limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 inet6/filter/limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3425 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3426 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 inet/filter/limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 inet6/filter/limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3427 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-498 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3428 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 inet/filter/limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 inet6/filter/limit-ntp-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3429 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-500 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-500 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3430 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3431 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-502 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-502 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-502 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-502 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3432 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 inet/filter/limit-ntp-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-503 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 inet6/filter/limit-ntp-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-503 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3433 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-504 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-504 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-504 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-504 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-504 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3434 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 inet/filter/limit-ntp-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-505 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-505 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 inet6/filter/limit-ntp-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-505 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3435 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-506 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-506 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3436 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3437 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-508 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-508 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-508 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3438 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 inet/filter/limit-ntp-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-509 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 inet6/filter/limit-ntp-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3439 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3440 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 inet/filter/limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 inet6/filter/limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3441 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-512 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-512 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3442 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 inet/filter/limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 inet6/filter/limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3443 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-514 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-514 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-514 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3444 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 inet/filter/limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 inet6/filter/limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3445 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3446 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 inet/filter/limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 inet6/filter/limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3447 {"flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-518 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3448 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 inet/filter/limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 inet6/filter/limit-ntp-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3449 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-520 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-520 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3450 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3451 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-522 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-522 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-522 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-522 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3452 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 inet/filter/limit-ntp-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-523 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 inet6/filter/limit-ntp-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-523 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3453 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-524 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-524 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-524 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-524 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-524 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3454 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 inet/filter/limit-ntp-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-525 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-525 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 inet6/filter/limit-ntp-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-525 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3455 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-526 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-526 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3456 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3457 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-528 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-528 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-528 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3458 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 inet/filter/limit-ntp-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-529 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 inet6/filter/limit-ntp-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3459 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3460 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 inet/filter/limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 inet6/filter/limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3461 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-532 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-532 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3462 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 inet/filter/limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 inet6/filter/limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3463 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-534 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-534 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-534 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3464 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 inet/filter/limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 inet6/filter/limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3465 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3466 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 inet/filter/limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 inet6/filter/limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3467 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-538 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3468 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 inet/filter/limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 inet6/filter/limit-ntp-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3469 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-540 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-540 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3470 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3471 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-542 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-542 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-542 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-542 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3472 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 inet/filter/limit-ntp-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-543 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 inet6/filter/limit-ntp-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-543 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3473 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-544 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-544 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-544 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-544 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-544 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3474 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 inet/filter/limit-ntp-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-545 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-545 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 inet6/filter/limit-ntp-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-545 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3475 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-546 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-546 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3476 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3477 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-548 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-548 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-548 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3478 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 inet/filter/limit-ntp-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-549 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 inet6/filter/limit-ntp-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3479 {"flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 inet/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-280 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-280 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 inet6/filter/limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-280 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-280 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3480 {"action":"pass","flow-limit":{"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 inet/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 inet/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-281 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-281 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 inet6/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 inet6/filter/limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-281 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-281 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3481 {"flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 inet/filter/limit-ntp-552 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-282 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-282 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 inet6/filter/limit-ntp-552 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-282 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-282 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3482 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 inet/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 inet/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-283 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-283 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 inet6/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 inet6/filter/limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-283 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-283 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3483 {"flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 inet/filter/limit-ntp-554 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-554 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-284 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-284 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 inet6/filter/limit-ntp-554 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-284 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-284 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3484 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 inet/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 inet/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-285 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-285 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 inet6/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 inet6/filter/limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-285 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-285 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3485 {"flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 inet/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-286 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-286 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 inet6/filter/limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-286 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-286 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3486 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 inet/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 inet/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-287 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-287 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 inet6/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 inet6/filter/limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-287 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-287 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3487 {"flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 inet/filter/limit-ntp-558 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-288 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-288 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 inet6/filter/limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-288 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-288 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3488 {"action":"pass","flow-limit":{"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 inet/filter/limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 inet/filter/limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-289 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-289 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 inet6/filter/limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 inet6/filter/logdrop-ntp-289 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-289 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3489 {"flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 inet/filter/limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-290 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-290 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 inet6/filter/limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-290 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-290 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3490 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 inet/filter/limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 inet/filter/limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-291 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-291 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 inet6/filter/limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 inet6/filter/limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-291 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-291 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3491 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 inet/filter/limit-ntp-562 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-292 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-292 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 inet6/filter/limit-ntp-562 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-292 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-292 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3492 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 inet/filter/limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 inet/filter/limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-293 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-293 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 inet6/filter/limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 inet6/filter/limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-293 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-293 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3493 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 inet/filter/limit-ntp-564 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-564 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-294 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-294 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 inet6/filter/limit-ntp-564 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-294 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-294 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3494 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 inet/filter/limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 inet/filter/limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-295 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-295 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 inet6/filter/limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 inet6/filter/limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-295 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-295 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3495 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 inet/filter/limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-296 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-296 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 inet6/filter/limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-296 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-296 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3496 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 inet/filter/limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 inet/filter/limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-297 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-297 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 inet6/filter/limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 inet6/filter/limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-297 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-297 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3497 {"flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 inet/filter/limit-ntp-568 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-298 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-298 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 inet6/filter/limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-298 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-298 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3498 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 inet/filter/limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 inet/filter/limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-299 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-299 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 inet6/filter/limit-ntp-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 inet6/filter/logdrop-ntp-299 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-299 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3499 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 inet/filter/limit-ntp-570 -j ACCEPT inet/filter/logdrop-ntp-300 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-300 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 inet6/filter/limit-ntp-570 -j ACCEPT inet6/filter/logdrop-ntp-300 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-300 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3500 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 inet/filter/logdrop-ntp-301 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-301 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 inet6/filter/logdrop-ntp-301 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-301 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3501 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 inet/filter/limit-ntp-572 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-572 -j ACCEPT inet/filter/logdrop-ntp-302 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-302 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 inet6/filter/limit-ntp-572 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-572 -j ACCEPT inet6/filter/logdrop-ntp-302 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-302 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3502 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 inet/filter/limit-ntp-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 inet/filter/limit-ntp-573 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-303 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-303 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 inet6/filter/limit-ntp-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 inet6/filter/limit-ntp-573 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-303 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-303 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3503 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 inet/filter/limit-ntp-574 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-574 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-574 -j ACCEPT inet/filter/logdrop-ntp-304 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-304 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 inet6/filter/limit-ntp-574 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-574 -j ACCEPT inet6/filter/logdrop-ntp-304 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-304 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3504 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 inet/filter/limit-ntp-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 inet/filter/limit-ntp-575 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-575 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-305 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-305 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 inet6/filter/limit-ntp-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 inet6/filter/limit-ntp-575 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-305 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-305 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3505 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 inet/filter/limit-ntp-576 -j ACCEPT inet/filter/logdrop-ntp-306 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-306 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 inet6/filter/limit-ntp-576 -j ACCEPT inet6/filter/logdrop-ntp-306 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-306 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3506 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 inet/filter/logdrop-ntp-307 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-307 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 inet6/filter/logdrop-ntp-307 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-307 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3507 {"flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 inet/filter/limit-ntp-578 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-578 -j ACCEPT inet/filter/logdrop-ntp-308 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-308 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 inet6/filter/limit-ntp-578 -j ACCEPT inet6/filter/logdrop-ntp-308 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-308 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3508 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 inet/filter/limit-ntp-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 inet/filter/limit-ntp-579 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-309 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-309 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 inet6/filter/limit-ntp-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 inet6/filter/logdrop-ntp-309 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-309 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3509 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 inet/filter/limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-310 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-310 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 inet6/filter/limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-310 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-310 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3510 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 inet/filter/limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 inet/filter/limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-311 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-311 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 inet6/filter/limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 inet6/filter/limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-311 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-311 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3511 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 inet/filter/limit-ntp-582 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-312 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-312 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 inet6/filter/limit-ntp-582 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-312 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-312 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3512 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 inet/filter/limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 inet/filter/limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-313 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-313 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 inet6/filter/limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 inet6/filter/limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-313 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-313 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3513 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 inet/filter/limit-ntp-584 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-584 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-314 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-314 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 inet6/filter/limit-ntp-584 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-314 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-314 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3514 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 inet/filter/limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 inet/filter/limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-315 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-315 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 inet6/filter/limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 inet6/filter/limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-315 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-315 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3515 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 inet/filter/limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-316 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-316 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 inet6/filter/limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-316 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-316 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3516 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 inet/filter/limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 inet/filter/limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-317 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-317 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 inet6/filter/limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 inet6/filter/limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-317 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-317 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3517 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 inet/filter/limit-ntp-588 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-318 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-318 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 inet6/filter/limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-318 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-318 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3518 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 inet/filter/limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 inet/filter/limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-319 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-319 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 inet6/filter/limit-ntp-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 inet6/filter/logdrop-ntp-319 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-319 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3519 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 inet/filter/limit-ntp-590 -j ACCEPT inet/filter/logdrop-ntp-320 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-320 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 inet6/filter/limit-ntp-590 -j ACCEPT inet6/filter/logdrop-ntp-320 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-320 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3520 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 inet/filter/logdrop-ntp-321 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-321 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 inet6/filter/logdrop-ntp-321 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-321 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3521 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 inet/filter/limit-ntp-592 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-592 -j ACCEPT inet/filter/logdrop-ntp-322 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-322 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 inet6/filter/limit-ntp-592 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-592 -j ACCEPT inet6/filter/logdrop-ntp-322 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-322 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3522 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 inet/filter/limit-ntp-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 inet/filter/limit-ntp-593 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-323 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-323 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 inet6/filter/limit-ntp-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 inet6/filter/limit-ntp-593 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-323 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-323 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3523 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 inet/filter/limit-ntp-594 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-594 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-594 -j ACCEPT inet/filter/logdrop-ntp-324 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-324 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 inet6/filter/limit-ntp-594 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-594 -j ACCEPT inet6/filter/logdrop-ntp-324 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-324 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3524 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 inet/filter/limit-ntp-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 inet/filter/limit-ntp-595 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-595 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-325 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-325 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 inet6/filter/limit-ntp-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 inet6/filter/limit-ntp-595 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-325 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-325 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3525 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 inet/filter/limit-ntp-596 -j ACCEPT inet/filter/logdrop-ntp-326 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-326 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 inet6/filter/limit-ntp-596 -j ACCEPT inet6/filter/logdrop-ntp-326 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-326 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3526 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 inet/filter/logdrop-ntp-327 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-327 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 inet6/filter/logdrop-ntp-327 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-327 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3527 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 inet/filter/limit-ntp-598 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-598 -j ACCEPT inet/filter/logdrop-ntp-328 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-328 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 inet6/filter/limit-ntp-598 -j ACCEPT inet6/filter/logdrop-ntp-328 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-328 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3528 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 inet/filter/limit-ntp-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 inet/filter/limit-ntp-599 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-329 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-329 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 inet6/filter/limit-ntp-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 inet6/filter/logdrop-ntp-329 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-329 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3529 {"flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 inet/filter/limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-330 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-330 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 inet6/filter/limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-330 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-330 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3530 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 inet/filter/limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 inet/filter/limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-331 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-331 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 inet6/filter/limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 inet6/filter/limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-331 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-331 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3531 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 inet/filter/limit-ntp-602 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-332 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-332 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 inet6/filter/limit-ntp-602 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-332 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-332 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3532 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 inet/filter/limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 inet/filter/limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-333 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-333 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 inet6/filter/limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 inet6/filter/limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-333 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-333 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3533 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 inet/filter/limit-ntp-604 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-604 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-334 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-334 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 inet6/filter/limit-ntp-604 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-334 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-334 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3534 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 inet/filter/limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 inet/filter/limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-335 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-335 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 inet6/filter/limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 inet6/filter/limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-335 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-335 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3535 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 inet/filter/limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-336 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-336 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 inet6/filter/limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-336 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-336 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3536 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 inet/filter/limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 inet/filter/limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-337 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-337 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 inet6/filter/limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 inet6/filter/limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-337 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-337 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3537 {"flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 inet/filter/limit-ntp-608 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-338 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-338 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 inet6/filter/limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-338 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-338 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3538 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 inet/filter/limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 inet/filter/limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-339 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-339 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 inet6/filter/limit-ntp-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 inet6/filter/logdrop-ntp-339 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-339 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3539 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 inet/filter/limit-ntp-610 -j ACCEPT inet/filter/logdrop-ntp-340 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-340 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 inet6/filter/limit-ntp-610 -j ACCEPT inet6/filter/logdrop-ntp-340 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-340 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3540 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 inet/filter/logdrop-ntp-341 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-341 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 inet6/filter/logdrop-ntp-341 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-341 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3541 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 inet/filter/limit-ntp-612 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-612 -j ACCEPT inet/filter/logdrop-ntp-342 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-342 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 inet6/filter/limit-ntp-612 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-612 -j ACCEPT inet6/filter/logdrop-ntp-342 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-342 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3542 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 inet/filter/limit-ntp-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 inet/filter/limit-ntp-613 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-343 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-343 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 inet6/filter/limit-ntp-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 inet6/filter/limit-ntp-613 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-343 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-343 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3543 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 inet/filter/limit-ntp-614 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-614 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-614 -j ACCEPT inet/filter/logdrop-ntp-344 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-344 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 inet6/filter/limit-ntp-614 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-614 -j ACCEPT inet6/filter/logdrop-ntp-344 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-344 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3544 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 inet/filter/limit-ntp-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 inet/filter/limit-ntp-615 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-615 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-345 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-345 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 inet6/filter/limit-ntp-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 inet6/filter/limit-ntp-615 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-345 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-345 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3545 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 inet/filter/limit-ntp-616 -j ACCEPT inet/filter/logdrop-ntp-346 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-346 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 inet6/filter/limit-ntp-616 -j ACCEPT inet6/filter/logdrop-ntp-346 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-346 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3546 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 inet/filter/logdrop-ntp-347 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-347 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 inet6/filter/logdrop-ntp-347 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-347 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3547 {"flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 inet/filter/limit-ntp-618 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-618 -j ACCEPT inet/filter/logdrop-ntp-348 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-348 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 inet6/filter/limit-ntp-618 -j ACCEPT inet6/filter/logdrop-ntp-348 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-348 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3548 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 inet/filter/limit-ntp-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 inet/filter/limit-ntp-619 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-349 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-349 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 inet6/filter/limit-ntp-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 inet6/filter/logdrop-ntp-349 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-349 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3549 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 inet/filter/limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-350 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-350 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 inet6/filter/limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-350 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-350 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3550 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 inet/filter/limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 inet/filter/limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-351 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-351 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 inet6/filter/limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 inet6/filter/limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-351 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-351 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3551 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 inet/filter/limit-ntp-622 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-352 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-352 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 inet6/filter/limit-ntp-622 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-352 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-352 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 inet/filter/limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 inet/filter/limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-353 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-353 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 inet6/filter/limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 inet6/filter/limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-353 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-353 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3553 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 inet/filter/limit-ntp-624 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-624 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-354 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-354 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 inet6/filter/limit-ntp-624 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-354 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-354 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 inet/filter/limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 inet/filter/limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-355 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-355 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 inet6/filter/limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 inet6/filter/limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-355 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-355 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3555 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 inet/filter/limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-356 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-356 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 inet6/filter/limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-356 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-356 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 inet/filter/limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 inet/filter/limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-357 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-357 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 inet6/filter/limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 inet6/filter/limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-357 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-357 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3557 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 inet/filter/limit-ntp-628 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-358 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-358 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 inet6/filter/limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-358 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-358 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 inet/filter/limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 inet/filter/limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-359 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-359 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 inet6/filter/limit-ntp-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 inet6/filter/logdrop-ntp-359 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-359 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3559 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 inet/filter/limit-ntp-630 -j ACCEPT inet/filter/logdrop-ntp-360 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-360 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 inet6/filter/limit-ntp-630 -j ACCEPT inet6/filter/logdrop-ntp-360 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-360 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 inet/filter/logdrop-ntp-361 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-361 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 inet6/filter/logdrop-ntp-361 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-361 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3561 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 inet/filter/limit-ntp-632 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-632 -j ACCEPT inet/filter/logdrop-ntp-362 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-362 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 inet6/filter/limit-ntp-632 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-632 -j ACCEPT inet6/filter/logdrop-ntp-362 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-362 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 inet/filter/limit-ntp-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 inet/filter/limit-ntp-633 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-363 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-363 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 inet6/filter/limit-ntp-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 inet6/filter/limit-ntp-633 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-363 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-363 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3563 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 inet/filter/limit-ntp-634 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-634 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-634 -j ACCEPT inet/filter/logdrop-ntp-364 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-364 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 inet6/filter/limit-ntp-634 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-634 -j ACCEPT inet6/filter/logdrop-ntp-364 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-364 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3564 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 inet/filter/limit-ntp-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 inet/filter/limit-ntp-635 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-635 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-365 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-365 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 inet6/filter/limit-ntp-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 inet6/filter/limit-ntp-635 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-365 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-365 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3565 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 inet/filter/limit-ntp-636 -j ACCEPT inet/filter/logdrop-ntp-366 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-366 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 inet6/filter/limit-ntp-636 -j ACCEPT inet6/filter/logdrop-ntp-366 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-366 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3566 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 inet/filter/logdrop-ntp-367 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-367 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 inet6/filter/logdrop-ntp-367 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-367 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3567 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 inet/filter/limit-ntp-638 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-638 -j ACCEPT inet/filter/logdrop-ntp-368 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-368 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 inet6/filter/limit-ntp-638 -j ACCEPT inet6/filter/logdrop-ntp-368 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-368 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3568 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 inet/filter/limit-ntp-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 inet/filter/limit-ntp-639 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-369 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-369 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 inet6/filter/limit-ntp-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 inet6/filter/logdrop-ntp-369 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-369 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3569 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 inet/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-370 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-370 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-370 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 inet6/filter/limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-370 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-370 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3570 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 inet/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 inet/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-371 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-371 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-371 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 inet6/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 inet6/filter/limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-371 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-371 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3571 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 inet/filter/limit-ntp-642 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-372 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-372 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-372 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 inet6/filter/limit-ntp-642 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-372 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-372 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3572 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 inet/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 inet/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-373 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-373 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-373 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 inet6/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 inet6/filter/limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-373 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-373 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3573 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 inet/filter/limit-ntp-644 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-644 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-374 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-374 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-374 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 inet6/filter/limit-ntp-644 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-374 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-374 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3574 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 inet/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 inet/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-375 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-375 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-375 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 inet6/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 inet6/filter/limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-375 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-375 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3575 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 inet/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-376 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-376 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-376 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 inet6/filter/limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-376 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-376 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3576 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 inet/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 inet/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-377 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-377 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-377 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 inet6/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 inet6/filter/limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-377 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-377 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3577 {"flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 inet/filter/limit-ntp-648 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-378 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-378 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-378 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 inet6/filter/limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-378 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-378 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3578 {"action":"pass","flow-limit":{"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 inet/filter/limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 inet/filter/limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-379 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-379 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-379 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 inet6/filter/limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 inet6/filter/logdrop-ntp-379 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-379 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3579 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 inet/filter/limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-380 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-380 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-380 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 inet6/filter/limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-380 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-380 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3580 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 inet/filter/limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 inet/filter/limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-381 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-381 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-381 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 inet6/filter/limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 inet6/filter/limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-381 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-381 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3581 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 inet/filter/limit-ntp-652 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-382 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-382 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-382 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 inet6/filter/limit-ntp-652 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-382 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-382 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3582 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 inet/filter/limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 inet/filter/limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-383 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-383 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-383 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 inet6/filter/limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 inet6/filter/limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-383 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-383 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3583 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 inet/filter/limit-ntp-654 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-654 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-384 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-384 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-384 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 inet6/filter/limit-ntp-654 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-384 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-384 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3584 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 inet/filter/limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 inet/filter/limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-385 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-385 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-385 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 inet6/filter/limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 inet6/filter/limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-385 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-385 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3585 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 inet/filter/limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-386 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-386 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-386 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 inet6/filter/limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-386 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-386 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3586 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 inet/filter/limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 inet/filter/limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-387 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-387 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-387 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 inet6/filter/limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 inet6/filter/limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-387 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-387 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3587 {"flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 inet/filter/limit-ntp-658 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-388 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-388 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-388 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 inet6/filter/limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-388 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-388 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3588 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 inet/filter/limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 inet/filter/limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-389 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-389 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-389 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 inet6/filter/limit-ntp-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 inet6/filter/logdrop-ntp-389 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-389 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3589 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 inet/filter/limit-ntp-660 -j ACCEPT inet/filter/logdrop-ntp-390 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-390 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-390 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 inet6/filter/limit-ntp-660 -j ACCEPT inet6/filter/logdrop-ntp-390 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-390 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3590 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 inet/filter/logdrop-ntp-391 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-391 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-391 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 inet6/filter/logdrop-ntp-391 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-391 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3591 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 inet/filter/limit-ntp-662 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-662 -j ACCEPT inet/filter/logdrop-ntp-392 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-392 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-392 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 inet6/filter/limit-ntp-662 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-662 -j ACCEPT inet6/filter/logdrop-ntp-392 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-392 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3592 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 inet/filter/limit-ntp-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 inet/filter/limit-ntp-663 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-393 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-393 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-393 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 inet6/filter/limit-ntp-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 inet6/filter/limit-ntp-663 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-393 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-393 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3593 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 inet/filter/limit-ntp-664 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-664 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-664 -j ACCEPT inet/filter/logdrop-ntp-394 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-394 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-394 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 inet6/filter/limit-ntp-664 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-664 -j ACCEPT inet6/filter/logdrop-ntp-394 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-394 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3594 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 inet/filter/limit-ntp-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 inet/filter/limit-ntp-665 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-665 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-395 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-395 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-395 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 inet6/filter/limit-ntp-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 inet6/filter/limit-ntp-665 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-395 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-395 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3595 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 inet/filter/limit-ntp-666 -j ACCEPT inet/filter/logdrop-ntp-396 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-396 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-396 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 inet6/filter/limit-ntp-666 -j ACCEPT inet6/filter/logdrop-ntp-396 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-396 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3596 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 inet/filter/logdrop-ntp-397 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-397 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-397 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 inet6/filter/logdrop-ntp-397 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-397 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3597 {"flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 inet/filter/limit-ntp-668 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-668 -j ACCEPT inet/filter/logdrop-ntp-398 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-398 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-398 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 inet6/filter/limit-ntp-668 -j ACCEPT inet6/filter/logdrop-ntp-398 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-398 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3598 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 inet/filter/limit-ntp-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 inet/filter/limit-ntp-669 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-399 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-399 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-399 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 inet6/filter/limit-ntp-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 inet6/filter/logdrop-ntp-399 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-399 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3599 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 inet/filter/limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-400 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-400 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-400 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 inet6/filter/limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-400 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-400 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3600 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 inet/filter/limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 inet/filter/limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-401 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-401 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-401 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 inet6/filter/limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 inet6/filter/limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-401 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-401 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3601 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 inet/filter/limit-ntp-672 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-402 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-402 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-402 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 inet6/filter/limit-ntp-672 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-402 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-402 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3602 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 inet/filter/limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 inet/filter/limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-403 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-403 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-403 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 inet6/filter/limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 inet6/filter/limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-403 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-403 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3603 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 inet/filter/limit-ntp-674 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-674 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-404 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-404 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-404 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 inet6/filter/limit-ntp-674 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-404 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-404 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3604 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 inet/filter/limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 inet/filter/limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-405 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-405 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-405 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 inet6/filter/limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 inet6/filter/limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-405 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-405 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3605 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 inet/filter/limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-406 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-406 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-406 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 inet6/filter/limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-406 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-406 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 inet/filter/limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 inet/filter/limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-407 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-407 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-407 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 inet6/filter/limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 inet6/filter/limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-407 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-407 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3607 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 inet/filter/limit-ntp-678 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-408 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-408 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-408 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 inet6/filter/limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-408 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-408 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 inet/filter/limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 inet/filter/limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-409 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-409 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-409 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 inet6/filter/limit-ntp-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 inet6/filter/logdrop-ntp-409 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-409 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3609 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 inet/filter/limit-ntp-680 -j ACCEPT inet/filter/logdrop-ntp-410 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-410 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-410 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 inet6/filter/limit-ntp-680 -j ACCEPT inet6/filter/logdrop-ntp-410 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-410 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 inet/filter/logdrop-ntp-411 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-411 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-411 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 inet6/filter/logdrop-ntp-411 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-411 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3611 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 inet/filter/limit-ntp-682 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-682 -j ACCEPT inet/filter/logdrop-ntp-412 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-412 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-412 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 inet6/filter/limit-ntp-682 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-682 -j ACCEPT inet6/filter/logdrop-ntp-412 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-412 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 inet/filter/limit-ntp-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 inet/filter/limit-ntp-683 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-413 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-413 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-413 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 inet6/filter/limit-ntp-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 inet6/filter/limit-ntp-683 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-413 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-413 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3613 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 inet/filter/limit-ntp-684 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-684 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-684 -j ACCEPT inet/filter/logdrop-ntp-414 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-414 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-414 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 inet6/filter/limit-ntp-684 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-684 -j ACCEPT inet6/filter/logdrop-ntp-414 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-414 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 inet/filter/limit-ntp-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 inet/filter/limit-ntp-685 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-685 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-415 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-415 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-415 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 inet6/filter/limit-ntp-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 inet6/filter/limit-ntp-685 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-415 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-415 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3615 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 inet/filter/limit-ntp-686 -j ACCEPT inet/filter/logdrop-ntp-416 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-416 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-416 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 inet6/filter/limit-ntp-686 -j ACCEPT inet6/filter/logdrop-ntp-416 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-416 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 inet/filter/logdrop-ntp-417 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-417 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-417 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 inet6/filter/logdrop-ntp-417 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-417 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3617 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 inet/filter/limit-ntp-688 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-688 -j ACCEPT inet/filter/logdrop-ntp-418 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-418 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-418 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 inet6/filter/limit-ntp-688 -j ACCEPT inet6/filter/logdrop-ntp-418 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-418 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3618 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 inet/filter/limit-ntp-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 inet/filter/limit-ntp-689 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-419 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-419 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-419 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 inet6/filter/limit-ntp-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 inet6/filter/logdrop-ntp-419 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-419 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3619 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 inet/filter/limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-420 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-420 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-420 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 inet6/filter/limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-420 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-420 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3620 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 inet/filter/limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 inet/filter/limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-421 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-421 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-421 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 inet6/filter/limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 inet6/filter/limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-421 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-421 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3621 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 inet/filter/limit-ntp-692 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-422 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-422 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-422 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 inet6/filter/limit-ntp-692 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-422 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-422 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3622 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 inet/filter/limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 inet/filter/limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-423 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-423 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-423 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 inet6/filter/limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 inet6/filter/limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-423 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-423 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3623 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 inet/filter/limit-ntp-694 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-694 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-424 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-424 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-424 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 inet6/filter/limit-ntp-694 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-424 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-424 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3624 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 inet/filter/limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 inet/filter/limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-425 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-425 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-425 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 inet6/filter/limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 inet6/filter/limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-425 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-425 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3625 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 inet/filter/limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-426 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-426 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-426 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 inet6/filter/limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-426 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-426 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3626 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 inet/filter/limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 inet/filter/limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-427 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-427 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-427 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 inet6/filter/limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 inet6/filter/limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-427 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-427 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3627 {"flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 inet/filter/limit-ntp-698 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-428 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-428 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-428 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 inet6/filter/limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-428 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-428 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3628 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 inet/filter/limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 inet/filter/limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-429 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-429 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-429 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 inet6/filter/limit-ntp-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 inet6/filter/logdrop-ntp-429 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-429 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3629 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 inet/filter/limit-ntp-700 -j ACCEPT inet/filter/logdrop-ntp-430 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-430 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-430 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 inet6/filter/limit-ntp-700 -j ACCEPT inet6/filter/logdrop-ntp-430 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-430 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3630 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 inet/filter/logdrop-ntp-431 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-431 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-431 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 inet6/filter/logdrop-ntp-431 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-431 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3631 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 inet/filter/limit-ntp-702 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-702 -j ACCEPT inet/filter/logdrop-ntp-432 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-432 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-432 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 inet6/filter/limit-ntp-702 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-702 -j ACCEPT inet6/filter/logdrop-ntp-432 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-432 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3632 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 inet/filter/limit-ntp-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 inet/filter/limit-ntp-703 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-433 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-433 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-433 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 inet6/filter/limit-ntp-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 inet6/filter/limit-ntp-703 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-433 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-433 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3633 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 inet/filter/limit-ntp-704 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-704 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-704 -j ACCEPT inet/filter/logdrop-ntp-434 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-434 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-434 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 inet6/filter/limit-ntp-704 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-704 -j ACCEPT inet6/filter/logdrop-ntp-434 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-434 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3634 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 inet/filter/limit-ntp-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 inet/filter/limit-ntp-705 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-705 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-435 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-435 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-435 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 inet6/filter/limit-ntp-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 inet6/filter/limit-ntp-705 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-435 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-435 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3635 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 inet/filter/limit-ntp-706 -j ACCEPT inet/filter/logdrop-ntp-436 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-436 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-436 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 inet6/filter/limit-ntp-706 -j ACCEPT inet6/filter/logdrop-ntp-436 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-436 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3636 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 inet/filter/logdrop-ntp-437 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-437 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-437 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 inet6/filter/logdrop-ntp-437 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-437 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3637 {"flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 inet/filter/limit-ntp-708 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-708 -j ACCEPT inet/filter/logdrop-ntp-438 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-438 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-438 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 inet6/filter/limit-ntp-708 -j ACCEPT inet6/filter/logdrop-ntp-438 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-438 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3638 {"action":"pass","flow-limit":{"interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 inet/filter/limit-ntp-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 inet/filter/limit-ntp-709 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-439 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-439 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-439 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 inet6/filter/limit-ntp-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 inet6/filter/logdrop-ntp-439 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-439 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3639 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 inet/filter/limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-440 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-440 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-440 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 inet6/filter/limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-440 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-440 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 inet/filter/limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 inet/filter/limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-441 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-441 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-441 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 inet6/filter/limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 inet6/filter/limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-441 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-441 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3641 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 inet/filter/limit-ntp-712 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-442 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-442 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-442 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 inet6/filter/limit-ntp-712 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-442 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-442 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3642 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 inet/filter/limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 inet/filter/limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-443 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-443 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-443 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 inet6/filter/limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 inet6/filter/limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-443 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-443 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3643 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 inet/filter/limit-ntp-714 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-714 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-444 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-444 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-444 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 inet6/filter/limit-ntp-714 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-444 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-444 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3644 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 inet/filter/limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 inet/filter/limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-445 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-445 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-445 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 inet6/filter/limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 inet6/filter/limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-445 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-445 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3645 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 inet/filter/limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-446 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-446 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-446 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 inet6/filter/limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-446 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-446 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3646 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 inet/filter/limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 inet/filter/limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-447 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-447 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-447 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 inet6/filter/limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 inet6/filter/limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-447 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-447 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3647 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 inet/filter/limit-ntp-718 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-448 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-448 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-448 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 inet6/filter/limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-448 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-448 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3648 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 inet/filter/limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 inet/filter/limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-449 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-449 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-449 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 inet6/filter/limit-ntp-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 inet6/filter/logdrop-ntp-449 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-449 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3649 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 inet/filter/limit-ntp-720 -j ACCEPT inet/filter/logdrop-ntp-450 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-450 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-450 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 inet6/filter/limit-ntp-720 -j ACCEPT inet6/filter/logdrop-ntp-450 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-450 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3650 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 inet/filter/logdrop-ntp-451 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-451 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-451 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 inet6/filter/logdrop-ntp-451 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-451 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3651 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 inet/filter/limit-ntp-722 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-722 -j ACCEPT inet/filter/logdrop-ntp-452 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-452 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-452 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 inet6/filter/limit-ntp-722 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-722 -j ACCEPT inet6/filter/logdrop-ntp-452 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-452 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3652 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 inet/filter/limit-ntp-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 inet/filter/limit-ntp-723 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-453 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-453 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-453 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 inet6/filter/limit-ntp-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 inet6/filter/limit-ntp-723 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-453 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-453 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3653 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 inet/filter/limit-ntp-724 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-724 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-724 -j ACCEPT inet/filter/logdrop-ntp-454 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-454 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-454 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 inet6/filter/limit-ntp-724 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-724 -j ACCEPT inet6/filter/logdrop-ntp-454 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-454 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3654 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 inet/filter/limit-ntp-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 inet/filter/limit-ntp-725 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-725 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-455 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-455 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-455 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 inet6/filter/limit-ntp-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 inet6/filter/limit-ntp-725 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-455 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-455 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3655 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 inet/filter/limit-ntp-726 -j ACCEPT inet/filter/logdrop-ntp-456 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-456 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-456 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 inet6/filter/limit-ntp-726 -j ACCEPT inet6/filter/logdrop-ntp-456 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-456 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3656 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 inet/filter/logdrop-ntp-457 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-457 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-457 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 inet6/filter/logdrop-ntp-457 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-457 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3657 {"flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 inet/filter/limit-ntp-728 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-728 -j ACCEPT inet/filter/logdrop-ntp-458 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-458 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-458 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 inet6/filter/limit-ntp-728 -j ACCEPT inet6/filter/logdrop-ntp-458 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-458 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3658 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"mirror","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 inet/filter/limit-ntp-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 inet/filter/limit-ntp-729 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-459 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-ntp-459 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-459 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 inet6/filter/limit-ntp-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 inet6/filter/logdrop-ntp-459 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-459 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3659 {"flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3660 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 inet/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 inet6/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3661 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-732 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-732 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3662 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 inet/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 inet6/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3663 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-734 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-734 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-734 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3664 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 inet/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 inet6/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3665 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3666 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 inet/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 inet6/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3667 {"flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-738 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3668 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 inet/filter/limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 inet6/filter/limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3669 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3670 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 inet/filter/limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 inet6/filter/limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3671 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-742 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-742 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 inet/filter/limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 inet6/filter/limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3673 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-744 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-744 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-744 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 inet/filter/limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 inet6/filter/limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3675 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 inet/filter/limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 inet6/filter/limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3677 {"flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-748 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 inet/filter/limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 inet6/filter/limit-ntp-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3679 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-750 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-750 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3681 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-752 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-752 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-752 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-752 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 inet/filter/limit-ntp-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-753 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 inet6/filter/limit-ntp-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-753 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3683 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-754 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-754 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-754 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-754 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-754 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3684 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 inet/filter/limit-ntp-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-755 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-755 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 inet6/filter/limit-ntp-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-755 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3685 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-756 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-756 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3686 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3687 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-758 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-758 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-758 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3688 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 inet/filter/limit-ntp-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-759 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 inet6/filter/limit-ntp-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 inet/filter/limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 inet6/filter/limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-762 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-762 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 inet/filter/limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 inet6/filter/limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-764 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-764 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-764 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 inet/filter/limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 inet6/filter/limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3695 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3696 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 inet/filter/limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 inet6/filter/limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3697 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-768 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3698 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 inet/filter/limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 inet6/filter/limit-ntp-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3699 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-770 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-770 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3700 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3701 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-772 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-772 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-772 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-772 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3702 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 inet/filter/limit-ntp-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-773 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 inet6/filter/limit-ntp-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-773 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3703 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-774 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-774 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-774 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-774 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-774 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3704 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 inet/filter/limit-ntp-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-775 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-775 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 inet6/filter/limit-ntp-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-775 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3705 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-776 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-776 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3706 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3707 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-778 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-778 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-778 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3708 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 inet/filter/limit-ntp-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-779 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 inet6/filter/limit-ntp-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3709 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3710 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 inet/filter/limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 inet6/filter/limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3711 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-782 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-782 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3712 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 inet/filter/limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 inet6/filter/limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3713 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-784 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-784 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-784 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3714 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 inet/filter/limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 inet6/filter/limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3715 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3716 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 inet/filter/limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 inet6/filter/limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3717 {"flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-788 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3718 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 inet/filter/limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 inet6/filter/limit-ntp-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3719 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-790 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-790 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3720 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3721 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-792 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-792 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-792 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-792 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3722 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 inet/filter/limit-ntp-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-793 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 inet6/filter/limit-ntp-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-793 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3723 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-794 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-794 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-794 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-794 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-794 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3724 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 inet/filter/limit-ntp-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-795 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-795 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 inet6/filter/limit-ntp-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-795 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3725 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-796 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-796 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3726 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3727 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-798 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-798 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-798 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3728 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 inet/filter/limit-ntp-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-799 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 inet6/filter/limit-ntp-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3729 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3730 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 inet/filter/limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 inet6/filter/limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3731 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-802 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-802 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3732 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 inet/filter/limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 inet6/filter/limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3733 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-804 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-804 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-804 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3734 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 inet/filter/limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 inet6/filter/limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3735 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3736 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 inet/filter/limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 inet6/filter/limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --set inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3737 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-808 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3738 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 inet/filter/limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 inet6/filter/limit-ntp-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3739 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-810 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-810 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3740 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3741 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-812 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-812 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-812 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-812 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3742 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 inet/filter/limit-ntp-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-813 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 inet6/filter/limit-ntp-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-813 -m limit --limit 1/second -j LOG inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3743 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-814 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-814 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-814 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-814 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-814 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3744 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 inet/filter/limit-ntp-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-815 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-815 -j TEE --gateway 10.0.0.2 inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 inet6/filter/limit-ntp-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-815 -j TEE --gateway fc00::2 inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3745 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-816 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-816 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3746 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3747 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-818 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-818 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-ntp-818 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3748 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 inet/filter/limit-ntp-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-ntp-819 -m limit --limit 12/minute -j ULOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 inet6/filter/limit-ntp-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3749 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 inet/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-460 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-460 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 inet6/filter/limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-460 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3750 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 inet/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 inet/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-461 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-461 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 inet6/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 inet6/filter/limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-461 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3751 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 inet/filter/limit-ntp-822 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-462 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-462 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 inet6/filter/limit-ntp-822 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-462 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3752 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 inet/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 inet/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-463 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-463 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 inet6/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 inet6/filter/limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-463 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3753 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 inet/filter/limit-ntp-824 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-824 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-464 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-464 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 inet6/filter/limit-ntp-824 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-464 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3754 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 inet/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 inet/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-465 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-465 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 inet6/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 inet6/filter/limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-465 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3755 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 inet/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-466 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-466 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 inet6/filter/limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-466 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3756 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 inet/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 inet/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-467 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-467 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 inet6/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 inet6/filter/limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-467 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3757 {"flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 inet/filter/limit-ntp-828 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-468 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-468 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 inet6/filter/limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-468 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3758 {"action":"pass","flow-limit":{"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 inet/filter/limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 inet/filter/limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-469 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-469 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 inet6/filter/limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 inet6/filter/logdrop-ntp-469 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3759 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 inet/filter/limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-470 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-470 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 inet6/filter/limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-470 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3760 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 inet/filter/limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 inet/filter/limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-471 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-471 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 inet6/filter/limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 inet6/filter/limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-471 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3761 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 inet/filter/limit-ntp-832 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-472 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-472 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 inet6/filter/limit-ntp-832 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-472 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3762 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 inet/filter/limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 inet/filter/limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-473 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-473 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 inet6/filter/limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 inet6/filter/limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-473 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3763 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 inet/filter/limit-ntp-834 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-834 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-474 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-474 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 inet6/filter/limit-ntp-834 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-474 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3764 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 inet/filter/limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 inet/filter/limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-475 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-475 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 inet6/filter/limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 inet6/filter/limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-475 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3765 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 inet/filter/limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-476 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-476 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 inet6/filter/limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-476 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3766 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 inet/filter/limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 inet/filter/limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/logdrop-ntp-477 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-477 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 inet6/filter/limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 inet6/filter/limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-477 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3767 {"flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 inet/filter/limit-ntp-838 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-478 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-478 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 inet6/filter/limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-478 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3768 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 inet/filter/limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 inet/filter/limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-479 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-479 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 inet6/filter/limit-ntp-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 inet6/filter/logdrop-ntp-479 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3769 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 inet/filter/limit-ntp-840 -j ACCEPT inet/filter/logdrop-ntp-480 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-480 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 inet6/filter/limit-ntp-840 -j ACCEPT inet6/filter/logdrop-ntp-480 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3770 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 inet/filter/logdrop-ntp-481 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-481 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 inet6/filter/logdrop-ntp-481 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3771 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 inet/filter/limit-ntp-842 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-842 -j ACCEPT inet/filter/logdrop-ntp-482 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-482 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 inet6/filter/limit-ntp-842 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-842 -j ACCEPT inet6/filter/logdrop-ntp-482 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3772 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 inet/filter/limit-ntp-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 inet/filter/limit-ntp-843 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-483 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-483 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 inet6/filter/limit-ntp-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 inet6/filter/limit-ntp-843 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-483 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3773 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 inet/filter/limit-ntp-844 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-844 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-844 -j ACCEPT inet/filter/logdrop-ntp-484 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-484 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 inet6/filter/limit-ntp-844 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-844 -j ACCEPT inet6/filter/logdrop-ntp-484 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3774 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 inet/filter/limit-ntp-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 inet/filter/limit-ntp-845 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-845 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-485 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-485 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 inet6/filter/limit-ntp-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 inet6/filter/limit-ntp-845 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-485 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3775 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 inet/filter/limit-ntp-846 -j ACCEPT inet/filter/logdrop-ntp-486 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-486 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 inet6/filter/limit-ntp-846 -j ACCEPT inet6/filter/logdrop-ntp-486 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3776 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 inet/filter/logdrop-ntp-487 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-487 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 inet6/filter/logdrop-ntp-487 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3777 {"flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 inet/filter/limit-ntp-848 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-848 -j ACCEPT inet/filter/logdrop-ntp-488 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-488 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 inet6/filter/limit-ntp-848 -j ACCEPT inet6/filter/logdrop-ntp-488 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3778 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 inet/filter/limit-ntp-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 inet/filter/limit-ntp-849 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-489 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-489 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 inet6/filter/limit-ntp-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 inet6/filter/logdrop-ntp-489 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3779 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 inet/filter/limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-490 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-490 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 inet6/filter/limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-490 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3780 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 inet/filter/limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 inet/filter/limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-491 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-491 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 inet6/filter/limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 inet6/filter/limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-491 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3781 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 inet/filter/limit-ntp-852 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-492 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-492 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 inet6/filter/limit-ntp-852 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-492 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3782 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 inet/filter/limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 inet/filter/limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-493 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-493 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 inet6/filter/limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 inet6/filter/limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-493 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3783 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 inet/filter/limit-ntp-854 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-854 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-494 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-494 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 inet6/filter/limit-ntp-854 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-494 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3784 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 inet/filter/limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 inet/filter/limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-495 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-495 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 inet6/filter/limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 inet6/filter/limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-495 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3785 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 inet/filter/limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-496 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-496 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 inet6/filter/limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-496 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3786 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 inet/filter/limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 inet/filter/limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/logdrop-ntp-497 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-497 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 inet6/filter/limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 inet6/filter/limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/logdrop-ntp-497 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3787 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 inet/filter/limit-ntp-858 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT inet/filter/logdrop-ntp-498 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-498 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 inet6/filter/limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet6/filter/logdrop-ntp-498 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3788 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 inet/filter/limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 inet/filter/limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-499 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-499 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 inet6/filter/limit-ntp-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 inet6/filter/logdrop-ntp-499 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3789 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 inet/filter/limit-ntp-860 -j ACCEPT inet/filter/logdrop-ntp-500 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-500 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 inet6/filter/limit-ntp-860 -j ACCEPT inet6/filter/logdrop-ntp-500 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3790 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 inet/filter/logdrop-ntp-501 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-501 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 inet6/filter/logdrop-ntp-501 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3791 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 inet/filter/limit-ntp-862 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-862 -j ACCEPT inet/filter/logdrop-ntp-502 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-502 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 inet6/filter/limit-ntp-862 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-862 -j ACCEPT inet6/filter/logdrop-ntp-502 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3792 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 inet/filter/limit-ntp-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 inet/filter/limit-ntp-863 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-503 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-503 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 inet6/filter/limit-ntp-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 inet6/filter/limit-ntp-863 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-503 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3793 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 inet/filter/limit-ntp-864 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-864 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-864 -j ACCEPT inet/filter/logdrop-ntp-504 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-504 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 inet6/filter/limit-ntp-864 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-864 -j ACCEPT inet6/filter/logdrop-ntp-504 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3794 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 inet/filter/limit-ntp-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 inet/filter/limit-ntp-865 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-865 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-505 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-505 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 inet6/filter/limit-ntp-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 inet6/filter/limit-ntp-865 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-505 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3795 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 inet/filter/limit-ntp-866 -j ACCEPT inet/filter/logdrop-ntp-506 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-506 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 inet6/filter/limit-ntp-866 -j ACCEPT inet6/filter/logdrop-ntp-506 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3796 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 inet/filter/logdrop-ntp-507 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-507 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 inet6/filter/logdrop-ntp-507 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3797 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 inet/filter/limit-ntp-868 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-868 -j ACCEPT inet/filter/logdrop-ntp-508 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-508 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 inet6/filter/limit-ntp-868 -j ACCEPT inet6/filter/logdrop-ntp-508 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3798 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"A","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 inet/filter/limit-ntp-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 inet/filter/limit-ntp-869 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-509 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-509 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 inet6/filter/limit-ntp-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 inet6/filter/logdrop-ntp-509 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3799 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 inet/filter/limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-510 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-510 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 inet6/filter/limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-510 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3800 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 inet/filter/limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 inet/filter/limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-511 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-511 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 inet6/filter/limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 inet6/filter/limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-511 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3801 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 inet/filter/limit-ntp-872 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-512 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-512 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 inet6/filter/limit-ntp-872 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-512 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3802 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 inet/filter/limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 inet/filter/limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-513 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-513 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 inet6/filter/limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 inet6/filter/limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-513 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3803 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 inet/filter/limit-ntp-874 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-874 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-514 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-514 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 inet6/filter/limit-ntp-874 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-514 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3804 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 inet/filter/limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 inet/filter/limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-515 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-515 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 inet6/filter/limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 inet6/filter/limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-515 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3805 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 inet/filter/limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-516 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-516 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 inet6/filter/limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-516 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3806 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 inet/filter/limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 inet/filter/limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/logdrop-ntp-517 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-517 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 inet6/filter/limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 inet6/filter/limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/logdrop-ntp-517 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3807 {"flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 inet/filter/limit-ntp-878 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-518 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-518 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 inet6/filter/limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-518 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3808 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 inet/filter/limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 inet/filter/limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-519 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-519 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 inet6/filter/limit-ntp-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 inet6/filter/logdrop-ntp-519 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3809 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 inet/filter/limit-ntp-880 -j ACCEPT inet/filter/logdrop-ntp-520 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-520 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 inet6/filter/limit-ntp-880 -j ACCEPT inet6/filter/logdrop-ntp-520 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3810 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 inet/filter/logdrop-ntp-521 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-521 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 inet6/filter/logdrop-ntp-521 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3811 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 inet/filter/limit-ntp-882 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-882 -j ACCEPT inet/filter/logdrop-ntp-522 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-522 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 inet6/filter/limit-ntp-882 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-882 -j ACCEPT inet6/filter/logdrop-ntp-522 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3812 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 inet/filter/limit-ntp-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 inet/filter/limit-ntp-883 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-523 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-523 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 inet6/filter/limit-ntp-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 inet6/filter/limit-ntp-883 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-523 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3813 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 inet/filter/limit-ntp-884 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-884 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-884 -j ACCEPT inet/filter/logdrop-ntp-524 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-524 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 inet6/filter/limit-ntp-884 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-884 -j ACCEPT inet6/filter/logdrop-ntp-524 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3814 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 inet/filter/limit-ntp-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 inet/filter/limit-ntp-885 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-885 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-525 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-525 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 inet6/filter/limit-ntp-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 inet6/filter/limit-ntp-885 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-525 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3815 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 inet/filter/limit-ntp-886 -j ACCEPT inet/filter/logdrop-ntp-526 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-526 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 inet6/filter/limit-ntp-886 -j ACCEPT inet6/filter/logdrop-ntp-526 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3816 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 inet/filter/logdrop-ntp-527 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-527 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 inet6/filter/logdrop-ntp-527 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3817 {"flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 inet/filter/limit-ntp-888 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-888 -j ACCEPT inet/filter/logdrop-ntp-528 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-528 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 inet6/filter/limit-ntp-888 -j ACCEPT inet6/filter/logdrop-ntp-528 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3818 {"action":"pass","flow-limit":{"interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 inet/filter/limit-ntp-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 inet/filter/limit-ntp-889 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-529 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-529 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 inet6/filter/limit-ntp-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 inet6/filter/logdrop-ntp-529 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3819 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 inet/filter/limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-530 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-530 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 inet6/filter/limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-530 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3820 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 inet/filter/limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 inet/filter/limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-531 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-531 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 inet6/filter/limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 inet6/filter/limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-531 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3821 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 inet/filter/limit-ntp-892 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-532 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-532 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 inet6/filter/limit-ntp-892 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-532 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3822 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 inet/filter/limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 inet/filter/limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-533 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-533 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 inet6/filter/limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 inet6/filter/limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-533 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3823 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 inet/filter/limit-ntp-894 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-894 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-534 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-534 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 inet6/filter/limit-ntp-894 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-534 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3824 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 inet/filter/limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 inet/filter/limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-535 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-535 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 inet6/filter/limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 inet6/filter/limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-535 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3825 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 inet/filter/limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-536 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-536 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 inet6/filter/limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-536 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3826 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 inet/filter/limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 inet/filter/limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet/filter/logdrop-ntp-537 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-537 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 inet6/filter/limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 inet6/filter/limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --set inet6/filter/logdrop-ntp-537 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3827 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 inet/filter/limit-ntp-898 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT inet/filter/logdrop-ntp-538 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-538 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 inet6/filter/limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT inet6/filter/logdrop-ntp-538 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3828 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 inet/filter/limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 inet/filter/limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-539 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-539 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 inet6/filter/limit-ntp-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 inet6/filter/logdrop-ntp-539 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3829 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 inet/filter/limit-ntp-900 -j ACCEPT inet/filter/logdrop-ntp-540 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-540 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 inet6/filter/limit-ntp-900 -j ACCEPT inet6/filter/logdrop-ntp-540 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3830 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 inet/filter/logdrop-ntp-541 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-541 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 inet6/filter/logdrop-ntp-541 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3831 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 inet/filter/limit-ntp-902 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-902 -j ACCEPT inet/filter/logdrop-ntp-542 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-542 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 inet6/filter/limit-ntp-902 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-902 -j ACCEPT inet6/filter/logdrop-ntp-542 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3832 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 inet/filter/limit-ntp-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 inet/filter/limit-ntp-903 -m limit --limit 1/second -j LOG inet/filter/logdrop-ntp-543 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-543 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 inet6/filter/limit-ntp-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 inet6/filter/limit-ntp-903 -m limit --limit 1/second -j LOG inet6/filter/logdrop-ntp-543 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3833 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 inet/filter/limit-ntp-904 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-904 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-904 -j ACCEPT inet/filter/logdrop-ntp-544 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-544 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 inet6/filter/limit-ntp-904 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-904 -j ACCEPT inet6/filter/logdrop-ntp-544 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3834 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 inet/filter/limit-ntp-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 inet/filter/limit-ntp-905 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-905 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-ntp-545 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-545 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 inet6/filter/limit-ntp-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 inet6/filter/limit-ntp-905 -j TEE --gateway fc00::2 inet6/filter/logdrop-ntp-545 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3835 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 inet/filter/limit-ntp-906 -j ACCEPT inet/filter/logdrop-ntp-546 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-546 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 inet6/filter/limit-ntp-906 -j ACCEPT inet6/filter/logdrop-ntp-546 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3836 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 inet/filter/logdrop-ntp-547 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-547 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 inet6/filter/logdrop-ntp-547 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3837 {"flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 inet/filter/limit-ntp-908 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-908 -j ACCEPT inet/filter/logdrop-ntp-548 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-548 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 inet6/filter/limit-ntp-908 -j ACCEPT inet6/filter/logdrop-ntp-548 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3838 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"ulog","name":"C","update":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 inet/filter/limit-ntp-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 inet/filter/limit-ntp-909 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-549 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-ntp-549 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 inet6/filter/limit-ntp-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 inet6/filter/logdrop-ntp-549 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3839 {"flow-limit":150,"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-910 -j ACCEPT inet/filter/limit-ntp-910 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-910 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-910 -j ACCEPT inet6/filter/limit-ntp-910 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-910 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3840 {"action":"pass","flow-limit":150,"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 inet/filter/limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-911 -j RETURN inet/filter/limit-ntp-911 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-911 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 inet6/filter/limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-911 -j RETURN inet6/filter/limit-ntp-911 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-911 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3841 {"flow-limit":150,"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 inet/filter/limit-ntp-912 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-912 -j DROP inet/filter/logaccept-ntp-0 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-0 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 inet6/filter/limit-ntp-912 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-912 -j DROP inet6/filter/logaccept-ntp-0 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-0 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3842 {"flow-limit":150,"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 inet/filter/limit-ntp-913 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-913 -j DROP inet/filter/logaccept-ntp-1 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-1 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-1 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 inet6/filter/limit-ntp-913 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-913 -j DROP inet6/filter/logaccept-ntp-1 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-1 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3843 {"flow-limit":150,"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-914 -j ACCEPT inet/filter/limit-ntp-914 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-914 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-914 -j ACCEPT inet6/filter/limit-ntp-914 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-914 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3844 {"flow-limit":150,"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 inet/filter/limit-ntp-915 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-915 -j DROP inet/filter/logaccept-ntp-2 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-2 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 inet6/filter/limit-ntp-915 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-915 -j DROP inet6/filter/logaccept-ntp-2 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3845 {"flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-916 -j ACCEPT inet/filter/limit-ntp-916 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-916 -j ACCEPT inet6/filter/limit-ntp-916 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3846 {"action":"pass","flow-limit":{"count":150,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 inet/filter/limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-917 -j RETURN inet/filter/limit-ntp-917 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 inet6/filter/limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-917 -j RETURN inet6/filter/limit-ntp-917 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3847 {"flow-limit":{"count":150,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 inet/filter/limit-ntp-918 -j DROP inet/filter/logaccept-ntp-3 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-3 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 inet6/filter/limit-ntp-918 -j DROP inet6/filter/logaccept-ntp-3 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-3 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3848 {"flow-limit":{"count":150,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 inet/filter/limit-ntp-919 -j DROP inet/filter/logaccept-ntp-4 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-4 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-4 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 inet6/filter/limit-ntp-919 -j DROP inet6/filter/logaccept-ntp-4 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-4 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3849 {"flow-limit":{"count":150,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-920 -j ACCEPT inet/filter/limit-ntp-920 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-920 -j ACCEPT inet6/filter/limit-ntp-920 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3850 {"flow-limit":{"count":150,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 inet/filter/limit-ntp-921 -j DROP inet/filter/logaccept-ntp-5 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-5 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 inet6/filter/limit-ntp-921 -j DROP inet6/filter/logaccept-ntp-5 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3851 {"flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-922 -j ACCEPT inet/filter/limit-ntp-922 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-922 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-922 -j ACCEPT inet6/filter/limit-ntp-922 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-922 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3852 {"action":"pass","flow-limit":{"count":150},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 inet/filter/limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-923 -j RETURN inet/filter/limit-ntp-923 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-923 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 inet6/filter/limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-923 -j RETURN inet6/filter/limit-ntp-923 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-923 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3853 {"flow-limit":{"count":150},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 inet/filter/limit-ntp-924 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-924 -j DROP inet/filter/logaccept-ntp-6 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-6 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 inet6/filter/limit-ntp-924 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-924 -j DROP inet6/filter/logaccept-ntp-6 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-6 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3854 {"flow-limit":{"count":150},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 inet/filter/limit-ntp-925 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-925 -j DROP inet/filter/logaccept-ntp-7 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-7 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-7 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 inet6/filter/limit-ntp-925 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-925 -j DROP inet6/filter/logaccept-ntp-7 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-7 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3855 {"flow-limit":{"count":150},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-926 -j ACCEPT inet/filter/limit-ntp-926 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-926 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-926 -j ACCEPT inet6/filter/limit-ntp-926 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-926 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3856 {"flow-limit":{"count":150},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 inet/filter/limit-ntp-927 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-927 -j DROP inet/filter/logaccept-ntp-8 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-8 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 inet6/filter/limit-ntp-927 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-927 -j DROP inet6/filter/logaccept-ntp-8 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3857 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-928 -j ACCEPT inet/filter/limit-ntp-928 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-928 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-928 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-928 -j ACCEPT inet6/filter/limit-ntp-928 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-928 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3858 {"action":"pass","flow-limit":{"count":150,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 inet/filter/limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-929 -j RETURN inet/filter/limit-ntp-929 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-929 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-929 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 inet6/filter/limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-929 -j RETURN inet6/filter/limit-ntp-929 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-929 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3859 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 inet/filter/limit-ntp-930 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-930 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-930 -j DROP inet/filter/logaccept-ntp-9 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-9 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 inet6/filter/limit-ntp-930 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-930 -j DROP inet6/filter/logaccept-ntp-9 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-9 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3860 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 inet/filter/limit-ntp-931 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-931 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-931 -j DROP inet/filter/logaccept-ntp-10 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-10 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-10 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 inet6/filter/limit-ntp-931 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-931 -j DROP inet6/filter/logaccept-ntp-10 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-10 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3861 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-932 -j ACCEPT inet/filter/limit-ntp-932 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-932 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-932 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-932 -j ACCEPT inet6/filter/limit-ntp-932 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-932 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3862 {"flow-limit":{"count":150,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 inet/filter/limit-ntp-933 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-933 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-933 -j DROP inet/filter/logaccept-ntp-11 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-11 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 inet6/filter/limit-ntp-933 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-933 -j DROP inet6/filter/logaccept-ntp-11 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3863 {"flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-934 -j ACCEPT inet/filter/limit-ntp-934 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-934 -j ACCEPT inet6/filter/limit-ntp-934 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3864 {"action":"pass","flow-limit":{"count":150,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 inet/filter/limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-935 -j RETURN inet/filter/limit-ntp-935 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 inet6/filter/limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-935 -j RETURN inet6/filter/limit-ntp-935 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3865 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 inet/filter/limit-ntp-936 -j DROP inet/filter/logaccept-ntp-12 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-12 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 inet6/filter/limit-ntp-936 -j DROP inet6/filter/logaccept-ntp-12 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-12 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3866 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 inet/filter/limit-ntp-937 -j DROP inet/filter/logaccept-ntp-13 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-13 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-13 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 inet6/filter/limit-ntp-937 -j DROP inet6/filter/logaccept-ntp-13 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-13 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3867 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-938 -j ACCEPT inet/filter/limit-ntp-938 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-938 -j ACCEPT inet6/filter/limit-ntp-938 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3868 {"flow-limit":{"count":150,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 inet/filter/limit-ntp-939 -j DROP inet/filter/logaccept-ntp-14 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-14 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 inet6/filter/limit-ntp-939 -j DROP inet6/filter/logaccept-ntp-14 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3869 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-940 -j ACCEPT inet/filter/limit-ntp-940 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-940 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-940 -j ACCEPT inet6/filter/limit-ntp-940 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3870 {"action":"pass","flow-limit":{"count":150,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 inet/filter/limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-941 -j RETURN inet/filter/limit-ntp-941 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-941 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 inet6/filter/limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-941 -j RETURN inet6/filter/limit-ntp-941 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3871 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 inet/filter/limit-ntp-942 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-942 -j DROP inet/filter/logaccept-ntp-15 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-15 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 inet6/filter/limit-ntp-942 -j DROP inet6/filter/logaccept-ntp-15 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-15 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3872 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 inet/filter/limit-ntp-943 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-943 -j DROP inet/filter/logaccept-ntp-16 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-16 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-16 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 inet6/filter/limit-ntp-943 -j DROP inet6/filter/logaccept-ntp-16 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-16 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3873 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-944 -j ACCEPT inet/filter/limit-ntp-944 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-944 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-944 -j ACCEPT inet6/filter/limit-ntp-944 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3874 {"flow-limit":{"count":150,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 inet/filter/limit-ntp-945 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-945 -j DROP inet/filter/logaccept-ntp-17 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-17 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 inet6/filter/limit-ntp-945 -j DROP inet6/filter/logaccept-ntp-17 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3875 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-946 -j ACCEPT inet/filter/limit-ntp-946 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-946 -j ACCEPT inet6/filter/limit-ntp-946 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3876 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 inet/filter/limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-947 -j RETURN inet/filter/limit-ntp-947 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 inet6/filter/limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-947 -j RETURN inet6/filter/limit-ntp-947 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3877 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 inet/filter/limit-ntp-948 -j DROP inet/filter/logaccept-ntp-18 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-18 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 inet6/filter/limit-ntp-948 -j DROP inet6/filter/logaccept-ntp-18 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-18 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3878 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 inet/filter/limit-ntp-949 -j DROP inet/filter/logaccept-ntp-19 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-19 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-19 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 inet6/filter/limit-ntp-949 -j DROP inet6/filter/logaccept-ntp-19 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-19 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3879 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-950 -j ACCEPT inet/filter/limit-ntp-950 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-950 -j ACCEPT inet6/filter/limit-ntp-950 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3880 {"flow-limit":{"count":150,"interval":5,"log":false},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 inet/filter/limit-ntp-951 -j DROP inet/filter/logaccept-ntp-20 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-20 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 inet6/filter/limit-ntp-951 -j DROP inet6/filter/logaccept-ntp-20 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3881 {"flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-952 -j ACCEPT inet/filter/limit-ntp-952 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-952 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-952 -j ACCEPT inet6/filter/limit-ntp-952 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-952 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3882 {"action":"pass","flow-limit":{"count":150,"interval":5},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 inet/filter/limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-953 -j RETURN inet/filter/limit-ntp-953 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-953 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 inet6/filter/limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-953 -j RETURN inet6/filter/limit-ntp-953 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-953 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3883 {"flow-limit":{"count":150,"interval":5},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 inet/filter/limit-ntp-954 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-954 -j DROP inet/filter/logaccept-ntp-21 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-21 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 inet6/filter/limit-ntp-954 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-954 -j DROP inet6/filter/logaccept-ntp-21 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-21 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3884 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 inet/filter/limit-ntp-955 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-955 -j DROP inet/filter/logaccept-ntp-22 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-22 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-22 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 inet6/filter/limit-ntp-955 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-955 -j DROP inet6/filter/logaccept-ntp-22 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-22 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3885 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-956 -j ACCEPT inet/filter/limit-ntp-956 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-956 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-956 -j ACCEPT inet6/filter/limit-ntp-956 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-956 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3886 {"flow-limit":{"count":150,"interval":5},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 inet/filter/limit-ntp-957 -m limit --limit 1/second -j LOG inet/filter/limit-ntp-957 -j DROP inet/filter/logaccept-ntp-23 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-23 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 inet6/filter/limit-ntp-957 -m limit --limit 1/second -j LOG inet6/filter/limit-ntp-957 -j DROP inet6/filter/logaccept-ntp-23 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3887 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-958 -j ACCEPT inet/filter/limit-ntp-958 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-958 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-958 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-958 -j ACCEPT inet6/filter/limit-ntp-958 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-958 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3888 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 inet/filter/limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-959 -j RETURN inet/filter/limit-ntp-959 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-959 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-959 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 inet6/filter/limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-959 -j RETURN inet6/filter/limit-ntp-959 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-959 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3889 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 inet/filter/limit-ntp-960 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-960 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-960 -j DROP inet/filter/logaccept-ntp-24 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-24 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 inet6/filter/limit-ntp-960 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-960 -j DROP inet6/filter/logaccept-ntp-24 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-24 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3890 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 inet/filter/limit-ntp-961 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-961 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-961 -j DROP inet/filter/logaccept-ntp-25 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-25 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-25 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 inet6/filter/limit-ntp-961 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-961 -j DROP inet6/filter/logaccept-ntp-25 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-25 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3891 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-962 -j ACCEPT inet/filter/limit-ntp-962 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-962 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-962 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-962 -j ACCEPT inet6/filter/limit-ntp-962 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-962 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3892 {"flow-limit":{"count":150,"interval":5,"log":"mirror"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 inet/filter/limit-ntp-963 -j TEE --gateway 10.0.0.1 inet/filter/limit-ntp-963 -j TEE --gateway 10.0.0.2 inet/filter/limit-ntp-963 -j DROP inet/filter/logaccept-ntp-26 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-26 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 inet6/filter/limit-ntp-963 -j TEE --gateway fc00::2 inet6/filter/limit-ntp-963 -j DROP inet6/filter/logaccept-ntp-26 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3893 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-964 -j ACCEPT inet/filter/limit-ntp-964 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-964 -j ACCEPT inet6/filter/limit-ntp-964 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3894 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 inet/filter/limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-965 -j RETURN inet/filter/limit-ntp-965 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 inet6/filter/limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-965 -j RETURN inet6/filter/limit-ntp-965 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3895 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 inet/filter/limit-ntp-966 -j DROP inet/filter/logaccept-ntp-27 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-27 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 inet6/filter/limit-ntp-966 -j DROP inet6/filter/logaccept-ntp-27 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-27 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3896 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 inet/filter/limit-ntp-967 -j DROP inet/filter/logaccept-ntp-28 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-28 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-28 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 inet6/filter/limit-ntp-967 -j DROP inet6/filter/logaccept-ntp-28 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-28 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3897 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-968 -j ACCEPT inet/filter/limit-ntp-968 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-968 -j ACCEPT inet6/filter/limit-ntp-968 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3898 {"flow-limit":{"count":150,"interval":5,"log":"none"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 inet/filter/limit-ntp-969 -j DROP inet/filter/logaccept-ntp-29 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-29 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 inet6/filter/limit-ntp-969 -j DROP inet6/filter/logaccept-ntp-29 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3899 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-970 -j ACCEPT inet/filter/limit-ntp-970 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-970 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-970 -j ACCEPT inet6/filter/limit-ntp-970 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3900 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 inet/filter/limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-971 -j RETURN inet/filter/limit-ntp-971 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-971 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 inet6/filter/limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-971 -j RETURN inet6/filter/limit-ntp-971 -j DROP inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3901 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":true,"no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 inet/filter/limit-ntp-972 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-972 -j DROP inet/filter/logaccept-ntp-30 -m limit --limit 1/second -j LOG inet/filter/logaccept-ntp-30 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 inet6/filter/limit-ntp-972 -j DROP inet6/filter/logaccept-ntp-30 -m limit --limit 1/second -j LOG inet6/filter/logaccept-ntp-30 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3902 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"mirror","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 inet/filter/limit-ntp-973 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-973 -j DROP inet/filter/logaccept-ntp-31 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-ntp-31 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-ntp-31 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 inet6/filter/limit-ntp-973 -j DROP inet6/filter/logaccept-ntp-31 -j TEE --gateway fc00::2 inet6/filter/logaccept-ntp-31 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3903 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"none","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-974 -j ACCEPT inet/filter/limit-ntp-974 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-974 -j DROP inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-974 -j ACCEPT inet6/filter/limit-ntp-974 -j DROP inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3904 {"flow-limit":{"count":150,"interval":5,"log":"ulog"},"in":"A","log":"ulog","no-track":true,"out":"_fw","service":"ntp"} (filter-limit) inet/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 inet/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet/filter/limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 inet/filter/limit-ntp-975 -m limit --limit 12/minute -j ULOG inet/filter/limit-ntp-975 -j DROP inet/filter/logaccept-ntp-32 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-ntp-32 -j ACCEPT inet/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack inet6/filter/INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 inet6/filter/OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT inet6/filter/limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 inet6/filter/limit-ntp-975 -j DROP inet6/filter/logaccept-ntp-32 -j ACCEPT inet6/raw/OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack Filter 3905 {"update-limit":"A"} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 3906 {"update-limit":"B"} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 3907 {"update-limit":"C"} (filter-limit) inet/filter/FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set inet/filter/OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/FORWARD -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/INPUT -m recent --name user:C --rsource --mask fe00:: --set inet6/filter/OUTPUT -m recent --name user:C --rsource --mask fe00:: --set Filter 3908 {"update-limit":"D"} (filter-limit) inet/filter/FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set inet/filter/INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set inet/filter/OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set inet6/filter/FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set inet6/filter/INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set inet6/filter/OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set Filter 3909 {"update-limit":{"addr":"src","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet/filter/OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 3910 {"update-limit":{"addr":"dest","measure":"conn","name":"A"}} (filter-limit) inet/filter/FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet/filter/OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 3911 {"update-limit":{"addr":"src","measure":"flow","name":"B"}} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set inet/filter/OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set inet6/filter/FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 3912 {"update-limit":{"addr":"dest","measure":"flow","name":"B"}} (filter-limit) inet/filter/FORWARD -m recent --name user:B --rdest --mask 255.255.255.255 --set inet/filter/INPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set inet/filter/OUTPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set inet6/filter/FORWARD -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/INPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet6/filter/OUTPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set Filter 3913 {} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT Filter 3914 {"action":"drop"} (log) inet/filter/FORWARD -j logdrop-1650 inet/filter/INPUT -j logdrop-1650 inet/filter/OUTPUT -j logdrop-1650 inet/filter/logdrop-1650 -m limit --limit 1/second -j LOG inet/filter/logdrop-1650 -j DROP inet6/filter/FORWARD -j logdrop-1650 inet6/filter/INPUT -j logdrop-1650 inet6/filter/OUTPUT -j logdrop-1650 inet6/filter/logdrop-1650 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1650 -j DROP Filter 3915 {"action":"pass"} (log) inet/filter/FORWARD inet/filter/INPUT inet/filter/OUTPUT inet6/filter/FORWARD inet6/filter/INPUT inet6/filter/OUTPUT Filter 3916 {"log":false} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT Filter 3917 {"action":"drop","log":false} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP inet/filter/OUTPUT -j DROP inet6/filter/FORWARD -j DROP inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP Filter 3918 {"action":"pass","log":false} (log) inet/filter/FORWARD inet/filter/INPUT inet/filter/OUTPUT inet6/filter/FORWARD inet6/filter/INPUT inet6/filter/OUTPUT Filter 3919 {"log":true} (log) inet/filter/FORWARD -j logaccept-66 inet/filter/INPUT -j logaccept-66 inet/filter/OUTPUT -j logaccept-66 inet/filter/logaccept-66 -m limit --limit 1/second -j LOG inet/filter/logaccept-66 -j ACCEPT inet6/filter/FORWARD -j logaccept-66 inet6/filter/INPUT -j logaccept-66 inet6/filter/OUTPUT -j logaccept-66 inet6/filter/logaccept-66 -m limit --limit 1/second -j LOG inet6/filter/logaccept-66 -j ACCEPT Filter 3920 {"action":"drop","log":true} (log) inet/filter/FORWARD -j logdrop-1651 inet/filter/INPUT -j logdrop-1651 inet/filter/OUTPUT -j logdrop-1651 inet/filter/logdrop-1651 -m limit --limit 1/second -j LOG inet/filter/logdrop-1651 -j DROP inet6/filter/FORWARD -j logdrop-1651 inet6/filter/INPUT -j logdrop-1651 inet6/filter/OUTPUT -j logdrop-1651 inet6/filter/logdrop-1651 -m limit --limit 1/second -j LOG inet6/filter/logdrop-1651 -j DROP Filter 3921 {"action":"pass","log":true} (log) inet/filter/FORWARD -j logpass-0 inet/filter/INPUT -j logpass-0 inet/filter/OUTPUT -j logpass-0 inet/filter/logpass-0 -m limit --limit 1/second -j LOG inet6/filter/FORWARD -j logpass-0 inet6/filter/INPUT -j logpass-0 inet6/filter/OUTPUT -j logpass-0 inet6/filter/logpass-0 -m limit --limit 1/second -j LOG Filter 3922 {"log":"dual"} (log) inet/filter/FORWARD -j logaccept-67 inet/filter/INPUT -j logaccept-67 inet/filter/OUTPUT -j logaccept-67 inet/filter/logaccept-67 -j LOG inet/filter/logaccept-67 -j ACCEPT inet6/filter/FORWARD -j logaccept-67 inet6/filter/INPUT -j logaccept-67 inet6/filter/OUTPUT -j logaccept-67 inet6/filter/logaccept-67 -j LOG inet6/filter/logaccept-67 -j TEE --gateway fc00::1 inet6/filter/logaccept-67 -j ACCEPT Filter 3923 {"action":"drop","log":"dual"} (log) inet/filter/FORWARD -j logdrop-1652 inet/filter/INPUT -j logdrop-1652 inet/filter/OUTPUT -j logdrop-1652 inet/filter/logdrop-1652 -j LOG inet/filter/logdrop-1652 -j DROP inet6/filter/FORWARD -j logdrop-1652 inet6/filter/INPUT -j logdrop-1652 inet6/filter/OUTPUT -j logdrop-1652 inet6/filter/logdrop-1652 -j LOG inet6/filter/logdrop-1652 -j TEE --gateway fc00::1 inet6/filter/logdrop-1652 -j DROP Filter 3924 {"action":"pass","log":"dual"} (log) inet/filter/FORWARD -j logpass-1 inet/filter/INPUT -j logpass-1 inet/filter/OUTPUT -j logpass-1 inet/filter/logpass-1 -j LOG inet6/filter/FORWARD -j logpass-1 inet6/filter/INPUT -j logpass-1 inet6/filter/OUTPUT -j logpass-1 inet6/filter/logpass-1 -j LOG inet6/filter/logpass-1 -j TEE --gateway fc00::1 Filter 3925 {"log":"mirror"} (log) inet/filter/FORWARD -j logaccept-68 inet/filter/INPUT -j logaccept-68 inet/filter/OUTPUT -j logaccept-68 inet/filter/logaccept-68 -j TEE --gateway 10.0.0.1 inet/filter/logaccept-68 -j TEE --gateway 10.0.0.2 inet/filter/logaccept-68 -j ACCEPT inet6/filter/FORWARD -j logaccept-68 inet6/filter/INPUT -j logaccept-68 inet6/filter/OUTPUT -j logaccept-68 inet6/filter/logaccept-68 -j TEE --gateway fc00::2 inet6/filter/logaccept-68 -j ACCEPT Filter 3926 {"action":"drop","log":"mirror"} (log) inet/filter/FORWARD -j logdrop-1653 inet/filter/INPUT -j logdrop-1653 inet/filter/OUTPUT -j logdrop-1653 inet/filter/logdrop-1653 -j TEE --gateway 10.0.0.1 inet/filter/logdrop-1653 -j TEE --gateway 10.0.0.2 inet/filter/logdrop-1653 -j DROP inet6/filter/FORWARD -j logdrop-1653 inet6/filter/INPUT -j logdrop-1653 inet6/filter/OUTPUT -j logdrop-1653 inet6/filter/logdrop-1653 -j TEE --gateway fc00::2 inet6/filter/logdrop-1653 -j DROP Filter 3927 {"action":"pass","log":"mirror"} (log) inet/filter/FORWARD -j logpass-2 inet/filter/INPUT -j logpass-2 inet/filter/OUTPUT -j logpass-2 inet/filter/logpass-2 -j TEE --gateway 10.0.0.1 inet/filter/logpass-2 -j TEE --gateway 10.0.0.2 inet6/filter/FORWARD -j logpass-2 inet6/filter/INPUT -j logpass-2 inet6/filter/OUTPUT -j logpass-2 inet6/filter/logpass-2 -j TEE --gateway fc00::2 Filter 3928 {"log":"none"} (log) inet/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT Filter 3929 {"action":"drop","log":"none"} (log) inet/filter/FORWARD -j DROP inet/filter/INPUT -j DROP inet/filter/OUTPUT -j DROP inet6/filter/FORWARD -j DROP inet6/filter/INPUT -j DROP inet6/filter/OUTPUT -j DROP Filter 3930 {"action":"pass","log":"none"} (log) inet/filter/FORWARD inet/filter/INPUT inet/filter/OUTPUT inet6/filter/FORWARD inet6/filter/INPUT inet6/filter/OUTPUT Filter 3931 {"log":"ulog"} (log) inet/filter/FORWARD -j logaccept-69 inet/filter/INPUT -j logaccept-69 inet/filter/OUTPUT -j logaccept-69 inet/filter/logaccept-69 -m limit --limit 12/minute -j ULOG inet/filter/logaccept-69 -j ACCEPT inet6/filter/FORWARD -j logaccept-69 inet6/filter/INPUT -j logaccept-69 inet6/filter/OUTPUT -j logaccept-69 inet6/filter/logaccept-69 -j ACCEPT Filter 3932 {"action":"drop","log":"ulog"} (log) inet/filter/FORWARD -j logdrop-1654 inet/filter/INPUT -j logdrop-1654 inet/filter/OUTPUT -j logdrop-1654 inet/filter/logdrop-1654 -m limit --limit 12/minute -j ULOG inet/filter/logdrop-1654 -j DROP inet6/filter/FORWARD -j logdrop-1654 inet6/filter/INPUT -j logdrop-1654 inet6/filter/OUTPUT -j logdrop-1654 inet6/filter/logdrop-1654 -j DROP Filter 3933 {"action":"pass","log":"ulog"} (log) inet/filter/FORWARD -j logpass-3 inet/filter/INPUT -j logpass-3 inet/filter/OUTPUT -j logpass-3 inet/filter/logpass-3 -m limit --limit 12/minute -j ULOG Filter 3934 {"action":"pass","in":"_fw","log":"ulog"} (log) inet/filter/OUTPUT -m limit --limit 12/minute -j ULOG Filter 3935 {"in":["_fw","A"]} (zone) inet/filter/FORWARD -i eth0 -j ACCEPT inet/filter/INPUT -i eth0 -j ACCEPT inet/filter/OUTPUT -j ACCEPT inet6/filter/FORWARD -i eth0 -j ACCEPT inet6/filter/INPUT -i eth0 -j ACCEPT inet6/filter/OUTPUT -j ACCEPT Filter 3936 {"in":"B","out":"C"} (zone) inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT Filter 3937 {"out":["_fw","B"]} (zone) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/INPUT -j ACCEPT inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT inet6/filter/FORWARD -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/INPUT -j ACCEPT inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j ACCEPT Filter 3938 {"in":["A","B","C","D","E"],"out":["A","B","C","D","E"]} (zone) inet/filter/FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth4 -j ACCEPT inet/filter/FORWARD -i eth0 -o eth5 -j ACCEPT inet/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT inet/filter/FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT inet/filter/FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT inet/filter/FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT inet/filter/FORWARD -i eth4 -o eth0 -j ACCEPT inet/filter/FORWARD -i eth5 -o eth0 -j ACCEPT inet/filter/FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -i eth4 -o eth4 -j ACCEPT inet/filter/FORWARD -i eth4 -o eth5 -j ACCEPT inet/filter/FORWARD -i eth5 -o eth4 -j ACCEPT inet/filter/FORWARD -i eth5 -o eth5 -j ACCEPT inet/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT inet/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT inet/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT inet6/filter/FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/FORWARD -i eth0 -o eth4 -j ACCEPT inet6/filter/FORWARD -i eth0 -o eth5 -j ACCEPT inet6/filter/FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT inet6/filter/FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT inet6/filter/FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT inet6/filter/FORWARD -i eth4 -o eth0 -j ACCEPT inet6/filter/FORWARD -i eth5 -o eth0 -j ACCEPT inet6/filter/FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/FORWARD -i eth4 -o eth4 -j ACCEPT inet6/filter/FORWARD -i eth4 -o eth5 -j ACCEPT inet6/filter/FORWARD -i eth5 -o eth4 -j ACCEPT inet6/filter/FORWARD -i eth5 -o eth5 -j ACCEPT inet6/filter/FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT inet6/filter/FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT inet6/filter/FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT inet6/filter/FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT Ipset awall-masquerade {"family":"inet","type":"hash:net"} (masquerade) Limit B true (limit) Limit C 7 (limit) Limit D {"inet":22,"inet6":58} (limit) Log _default {"limit":1} (defaults) Log dual {"mirror":"fc00::1","mode":"log"} (log) Log mirror {"mirror":["10.0.0.1","10.0.0.2","fc00::2"]} (log) Log nflog {"group":1,"mode":"nflog","range":128} (log) Log none {"mode":"none"} (log) Log ulog {"limit":{"interval":5},"mode":"ulog"} (log) Mark 1 {"in":["_fw","A"],"mark":1} (zone) inet/mangle/OUTPUT -j MARK --set-mark 1 inet/mangle/PREROUTING -i eth0 -j MARK --set-mark 1 inet6/mangle/OUTPUT -j MARK --set-mark 1 inet6/mangle/PREROUTING -i eth0 -j MARK --set-mark 1 Mark 2 {"in":"B","mark":2,"out":"C"} (zone) inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 2 inet/mangle/FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 2 Mark 3 {"mark":3,"out":["_fw","B"]} (zone) inet/mangle/INPUT -j MARK --set-mark 3 inet/mangle/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 3 inet6/mangle/INPUT -j MARK --set-mark 3 inet6/mangle/POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 3 No-track 1 {"in":["_fw","A"]} (zone) inet/raw/OUTPUT -j CT --notrack inet/raw/PREROUTING -i eth0 -j CT --notrack inet6/raw/OUTPUT -j CT --notrack inet6/raw/PREROUTING -i eth0 -j CT --notrack No-track 2 {"in":"B"} (zone) inet/raw/PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack inet6/raw/PREROUTING -i eth1 -s fc00::/7 -j CT --notrack No-track 3 {"out":"_fw"} (zone) inet/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack Packet-log 1 {"out":"_fw"} (log) inet/filter/INPUT -m limit --limit 1/second -j LOG inet6/filter/INPUT -m limit --limit 1/second -j LOG Packet-log 2 {"log":"mirror","out":"_fw"} (log) inet/filter/INPUT -j TEE --gateway 10.0.0.1 inet/filter/INPUT -j TEE --gateway 10.0.0.2 inet6/filter/INPUT -j TEE --gateway fc00::2 Packet-log 3 {"log":"nflog","out":"_fw"} (log) inet/filter/INPUT -j NFLOG --nflog-group 1 --nflog-size 128 inet6/filter/INPUT -j NFLOG --nflog-group 1 --nflog-size 128 Packet-log 4 {"log":"ulog","out":"_fw"} (log) inet/filter/INPUT -m limit --limit 12/minute -j ULOG Service babel {"port":6697,"proto":"tcp"} (services) Service bacula-dir {"port":9101,"proto":"tcp"} (services) Service bacula-fd {"port":9102,"proto":"tcp"} (services) Service bacula-sd {"port":9103,"proto":"tcp"} (services) Service bgp {"port":179,"proto":"tcp"} (services) Service dhcp {"family":"inet","port":[67,68],"proto":"udp"} (services) Service discard [{"port":9,"proto":"tcp"},{"port":9,"proto":"udp"}] (services) Service dns [{"port":53,"proto":"tcp"},{"port":53,"proto":"udp"}] (services) Service epmap [{"port":135,"proto":"tcp"},{"port":135,"proto":"udp"}] (services) Service ftp {"ct-helper":"ftp","port":21,"proto":"tcp"} (services) Service gre {"proto":"gre"} (services) Service hp-pdl {"port":9100,"proto":"tcp"} (services) Service http {"port":80,"proto":"tcp"} (services) Service http-alt {"port":8080,"proto":"tcp"} (services) Service https {"port":443,"proto":"tcp"} (services) Service icmp {"proto":"icmp"} (services) Service igmp {"proto":"igmp"} (services) Service imap {"port":143,"proto":"tcp"} (services) Service imaps {"port":993,"proto":"tcp"} (services) Service ipsec [{"proto":"esp"},{"port":[500,4500],"proto":"udp"}] (services) Service irc {"ct-helper":"irc","port":6667,"proto":"tcp"} (services) Service kerberos [{"port":88,"proto":"tcp"},{"port":88,"proto":"udp"}] (services) Service kpasswd [{"port":464,"proto":"tcp"},{"port":464,"proto":"udp"}] (services) Service l2tp {"port":1701,"proto":"udp"} (services) Service ldap [{"port":389,"proto":"tcp"},{"port":389,"proto":"udp"}] (services) Service ldaps [{"port":636,"proto":"tcp"},{"port":636,"proto":"udp"}] (services) Service microsoft-ds [{"port":445,"proto":"tcp"},{"port":445,"proto":"udp"}] (services) Service mqtt {"port":1883,"proto":"tcp"} (services) Service mqtt-sn {"port":1883,"proto":"udp"} (services) Service mqtt-ws {"port":8083,"proto":"tcp"} (services) Service ms-sql-m {"port":1434,"proto":"tcp"} (services) Service ms-sql-s {"port":1433,"proto":"tcp"} (services) Service msft-gc [{"port":3268,"proto":"tcp"},{"port":3268,"proto":"udp"}] (services) Service msft-gc-ssl [{"port":3269,"proto":"tcp"},{"port":3269,"proto":"udp"}] (services) Service netbios-ds [{"port":138,"proto":"tcp"},{"port":138,"proto":"udp"}] (services) Service netbios-ns [{"family":"inet","port":137,"proto":"tcp"},{"ct-helper":"netbios-ns","family":"inet","port":137,"proto":"udp"}] (services) Service netbios-ssn [{"port":139,"proto":"tcp"},{"port":139,"proto":"udp"}] (services) Service ntp {"port":123,"proto":"udp"} (services) Service openvpn {"port":1194,"proto":"udp"} (services) Service ospf {"proto":"ospf"} (services) Service pgsql {"port":5432,"proto":"tcp"} (services) Service ping [{"proto":"icmp","reply-type":0,"type":8},{"proto":"icmpv6","reply-type":129,"type":128}] (services) Service pop3 {"port":110,"proto":"tcp"} (services) Service pop3s {"port":995,"proto":"tcp"} (services) Service radius [{"port":1812,"proto":"tcp"},{"port":1812,"proto":"udp"}] (services) Service radius-acct [{"port":1813,"proto":"tcp"},{"port":1813,"proto":"udp"}] (services) Service rdp {"port":3389,"proto":"tcp"} (services) Service rsync {"port":873,"proto":"tcp"} (services) Service rtmp {"port":1935,"proto":"tcp"} (services) Service rtsp {"port":554,"proto":"tcp"} (services) Service secure-mqtt {"port":8883,"proto":"tcp"} (services) Service sieve {"port":4190,"proto":"tcp"} (services) Service sip [{"ct-helper":"sip","port":5060,"proto":"tcp"},{"ct-helper":"sip","port":5060,"proto":"udp"}] (services) Service sip-tls [{"port":5061,"proto":"tcp"},{"port":5061,"proto":"udp"}] (services) Service smtp {"port":25,"proto":"tcp"} (services) Service snmp {"port":161,"proto":"udp"} (services) Service snmp-trap {"port":162,"proto":"udp"} (services) Service ssh {"port":22,"proto":"tcp"} (services) Service submission {"port":587,"proto":"tcp"} (services) Service syslog {"port":514,"proto":"udp"} (services) Service telnet {"port":23,"proto":"tcp"} (services) Service teredo {"port":3544,"proto":"udp"} (services) Service tftp {"port":69,"proto":"udp"} (services) Service tinc [{"port":655,"proto":"tcp"},{"port":655,"proto":"udp"}] (services) Service vnc {"port":5900,"proto":"tcp"} (services) Service zabbix-agent {"port":10050,"proto":"tcp"} (services) Service zabbix-trapper {"port":10051,"proto":"tcp"} (services) Snat 1 {"out":["_fw","B"]} (zone) inet/nat/INPUT -j MASQUERADE inet/nat/POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE Variable awall_dedicated_chains false (defaults) Variable awall_tproxy_mark 1 (defaults) Zone A {"iface":"eth0"} (zone) Zone B {"addr":["10.0.0.0\/12","fc00::\/7"],"iface":"eth1"} (zone) Zone C {"addr":"10.1.0.0\/12","iface":["eth2","eth3"]} (zone) Zone D {"iface":["eth4","eth5"],"route-back":true} (zone) Zone E {"ipsec":true} (zone) # ipset awall-masquerade hash:net family inet # rules-save generated by awall *filter :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT DROP [0:0] :icmp-routing - [0:0] :limit-0 - [0:0] :limit-1 - [0:0] :limit-10 - [0:0] :limit-100 - [0:0] :limit-1000 - [0:0] :limit-1001 - [0:0] :limit-1002 - [0:0] :limit-1003 - [0:0] :limit-1004 - [0:0] :limit-1005 - [0:0] :limit-1006 - [0:0] :limit-1008 - [0:0] :limit-1009 - [0:0] :limit-101 - [0:0] :limit-1010 - [0:0] :limit-1011 - [0:0] :limit-1012 - [0:0] :limit-1014 - [0:0] :limit-1015 - [0:0] :limit-1016 - [0:0] :limit-1017 - [0:0] :limit-1018 - [0:0] :limit-1019 - [0:0] :limit-102 - [0:0] :limit-1020 - [0:0] :limit-1021 - [0:0] :limit-1022 - [0:0] :limit-1023 - [0:0] :limit-1024 - [0:0] :limit-1025 - [0:0] :limit-1026 - [0:0] :limit-1028 - [0:0] :limit-1029 - [0:0] :limit-103 - [0:0] :limit-1030 - [0:0] :limit-1031 - [0:0] :limit-1032 - [0:0] :limit-1034 - [0:0] :limit-1035 - [0:0] :limit-1036 - [0:0] :limit-1037 - [0:0] :limit-1038 - [0:0] :limit-1039 - [0:0] :limit-104 - [0:0] :limit-1040 - [0:0] :limit-1041 - [0:0] :limit-1042 - [0:0] :limit-1043 - [0:0] :limit-1044 - [0:0] :limit-1045 - [0:0] :limit-1046 - [0:0] :limit-1048 - [0:0] :limit-1049 - [0:0] :limit-105 - [0:0] :limit-1050 - [0:0] :limit-1051 - [0:0] :limit-1052 - [0:0] :limit-1054 - [0:0] :limit-1055 - [0:0] :limit-1056 - [0:0] :limit-1057 - [0:0] :limit-1058 - [0:0] :limit-1059 - [0:0] :limit-106 - [0:0] :limit-1060 - [0:0] :limit-1061 - [0:0] :limit-1062 - [0:0] :limit-1063 - [0:0] :limit-1064 - [0:0] :limit-1065 - [0:0] :limit-1066 - [0:0] :limit-1068 - [0:0] :limit-1069 - [0:0] :limit-107 - [0:0] :limit-1070 - [0:0] :limit-1071 - [0:0] :limit-1072 - [0:0] :limit-1074 - [0:0] :limit-1075 - [0:0] :limit-1076 - [0:0] :limit-1077 - [0:0] :limit-1078 - [0:0] :limit-1079 - [0:0] :limit-108 - [0:0] :limit-1080 - [0:0] :limit-1081 - [0:0] :limit-1082 - [0:0] :limit-1083 - [0:0] :limit-1084 - [0:0] :limit-1085 - [0:0] :limit-1086 - [0:0] :limit-1087 - [0:0] :limit-1088 - [0:0] :limit-1089 - [0:0] :limit-109 - [0:0] :limit-1090 - [0:0] :limit-1091 - [0:0] :limit-1092 - [0:0] :limit-1093 - [0:0] :limit-1094 - [0:0] :limit-1095 - [0:0] :limit-1096 - [0:0] :limit-1098 - [0:0] :limit-1099 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] :limit-1100 - [0:0] :limit-1101 - [0:0] :limit-1102 - [0:0] :limit-1104 - [0:0] :limit-1105 - [0:0] :limit-1106 - [0:0] :limit-1107 - [0:0] :limit-1108 - [0:0] :limit-1109 - [0:0] :limit-111 - [0:0] :limit-1110 - [0:0] :limit-1111 - [0:0] :limit-1112 - [0:0] :limit-1113 - [0:0] :limit-1114 - [0:0] :limit-1115 - [0:0] :limit-1116 - [0:0] :limit-1118 - [0:0] :limit-1119 - [0:0] :limit-112 - [0:0] :limit-1120 - [0:0] :limit-1121 - [0:0] :limit-1122 - [0:0] :limit-1124 - [0:0] :limit-1125 - [0:0] :limit-1126 - [0:0] :limit-1127 - [0:0] :limit-1128 - [0:0] :limit-1129 - [0:0] :limit-113 - [0:0] :limit-1130 - [0:0] :limit-1131 - [0:0] :limit-1132 - [0:0] :limit-1133 - [0:0] :limit-1134 - [0:0] :limit-1135 - [0:0] :limit-1136 - [0:0] :limit-1138 - [0:0] :limit-1139 - [0:0] :limit-114 - [0:0] :limit-1140 - [0:0] :limit-1141 - [0:0] :limit-1142 - [0:0] :limit-1144 - [0:0] :limit-1145 - [0:0] :limit-1146 - [0:0] :limit-1147 - [0:0] :limit-1148 - [0:0] :limit-1149 - [0:0] :limit-115 - [0:0] :limit-1150 - [0:0] :limit-1151 - [0:0] :limit-1152 - [0:0] :limit-1153 - [0:0] :limit-1154 - [0:0] :limit-1155 - [0:0] :limit-1156 - [0:0] :limit-1158 - [0:0] :limit-1159 - [0:0] :limit-116 - [0:0] :limit-1160 - [0:0] :limit-1161 - [0:0] :limit-1162 - [0:0] :limit-1164 - [0:0] :limit-1165 - [0:0] :limit-1166 - [0:0] :limit-1167 - [0:0] :limit-1168 - [0:0] :limit-1169 - [0:0] :limit-117 - [0:0] :limit-1170 - [0:0] :limit-1171 - [0:0] :limit-1172 - [0:0] :limit-1173 - [0:0] :limit-1174 - [0:0] :limit-1175 - [0:0] :limit-1176 - [0:0] :limit-1177 - [0:0] :limit-1178 - [0:0] :limit-1179 - [0:0] :limit-118 - [0:0] :limit-1180 - [0:0] :limit-1181 - [0:0] :limit-1182 - [0:0] :limit-1183 - [0:0] :limit-1184 - [0:0] :limit-1185 - [0:0] :limit-1186 - [0:0] :limit-1188 - [0:0] :limit-1189 - [0:0] :limit-119 - [0:0] :limit-1190 - [0:0] :limit-1191 - [0:0] :limit-1192 - [0:0] :limit-1194 - [0:0] :limit-1195 - [0:0] :limit-1196 - [0:0] :limit-1197 - [0:0] :limit-1198 - [0:0] :limit-1199 - [0:0] :limit-12 - [0:0] :limit-120 - [0:0] :limit-1200 - [0:0] :limit-1201 - [0:0] :limit-1202 - [0:0] :limit-1203 - [0:0] :limit-1204 - [0:0] :limit-1205 - [0:0] :limit-1206 - [0:0] :limit-1208 - [0:0] :limit-1209 - [0:0] :limit-121 - [0:0] :limit-1210 - [0:0] :limit-1211 - [0:0] :limit-1212 - [0:0] :limit-1214 - [0:0] :limit-1215 - [0:0] :limit-1216 - [0:0] :limit-1217 - [0:0] :limit-1218 - [0:0] :limit-1219 - [0:0] :limit-122 - [0:0] :limit-1220 - [0:0] :limit-1221 - [0:0] :limit-1222 - [0:0] :limit-1223 - [0:0] :limit-1224 - [0:0] :limit-1225 - [0:0] :limit-1226 - [0:0] :limit-1228 - [0:0] :limit-1229 - [0:0] :limit-123 - [0:0] :limit-1230 - [0:0] :limit-1231 - [0:0] :limit-1232 - [0:0] :limit-1234 - [0:0] :limit-1235 - [0:0] :limit-1236 - [0:0] :limit-1237 - [0:0] :limit-1238 - [0:0] :limit-1239 - [0:0] :limit-124 - [0:0] :limit-1240 - [0:0] :limit-1241 - [0:0] :limit-1242 - [0:0] :limit-1243 - [0:0] :limit-1244 - [0:0] :limit-1245 - [0:0] :limit-1246 - [0:0] :limit-1248 - [0:0] :limit-1249 - [0:0] :limit-125 - [0:0] :limit-1250 - [0:0] :limit-1251 - [0:0] :limit-1252 - [0:0] :limit-1254 - [0:0] :limit-1255 - [0:0] :limit-1256 - [0:0] :limit-1257 - [0:0] :limit-1258 - [0:0] :limit-1259 - [0:0] :limit-126 - [0:0] :limit-1260 - [0:0] :limit-1261 - [0:0] :limit-1262 - [0:0] :limit-1263 - [0:0] :limit-1264 - [0:0] :limit-1265 - [0:0] :limit-1266 - [0:0] :limit-1267 - [0:0] :limit-1268 - [0:0] :limit-1269 - [0:0] :limit-127 - [0:0] :limit-1270 - [0:0] :limit-1271 - [0:0] :limit-1272 - [0:0] :limit-1273 - [0:0] :limit-1274 - [0:0] :limit-1275 - [0:0] :limit-1276 - [0:0] :limit-1278 - [0:0] :limit-1279 - [0:0] :limit-128 - [0:0] :limit-1280 - [0:0] :limit-1281 - [0:0] :limit-1282 - [0:0] :limit-1284 - [0:0] :limit-1285 - [0:0] :limit-1286 - [0:0] :limit-1287 - [0:0] :limit-1288 - [0:0] :limit-1289 - [0:0] :limit-129 - [0:0] :limit-1290 - [0:0] :limit-1291 - [0:0] :limit-1292 - [0:0] :limit-1293 - [0:0] :limit-1294 - [0:0] :limit-1295 - [0:0] :limit-1296 - [0:0] :limit-1298 - [0:0] :limit-1299 - [0:0] :limit-13 - [0:0] :limit-130 - [0:0] :limit-1300 - [0:0] :limit-1301 - [0:0] :limit-1302 - [0:0] :limit-1304 - [0:0] :limit-1305 - [0:0] :limit-1306 - [0:0] :limit-1307 - [0:0] :limit-1308 - [0:0] :limit-1309 - [0:0] :limit-131 - [0:0] :limit-1310 - [0:0] :limit-1311 - [0:0] :limit-1312 - [0:0] :limit-1313 - [0:0] :limit-1314 - [0:0] :limit-1315 - [0:0] :limit-1316 - [0:0] :limit-1318 - [0:0] :limit-1319 - [0:0] :limit-132 - [0:0] :limit-1320 - [0:0] :limit-1321 - [0:0] :limit-1322 - [0:0] :limit-1324 - [0:0] :limit-1325 - [0:0] :limit-1326 - [0:0] :limit-1327 - [0:0] :limit-1328 - [0:0] :limit-1329 - [0:0] :limit-133 - [0:0] :limit-1330 - [0:0] :limit-1331 - [0:0] :limit-1332 - [0:0] :limit-1333 - [0:0] :limit-1334 - [0:0] :limit-1335 - [0:0] :limit-1336 - [0:0] :limit-1338 - [0:0] :limit-1339 - [0:0] :limit-134 - [0:0] :limit-1340 - [0:0] :limit-1341 - [0:0] :limit-1342 - [0:0] :limit-1344 - [0:0] :limit-1345 - [0:0] :limit-1346 - [0:0] :limit-1347 - [0:0] :limit-1348 - [0:0] :limit-1349 - [0:0] :limit-135 - [0:0] :limit-1350 - [0:0] :limit-1351 - [0:0] :limit-1352 - [0:0] :limit-1353 - [0:0] :limit-1354 - [0:0] :limit-1355 - [0:0] :limit-1356 - [0:0] :limit-1357 - [0:0] :limit-1358 - [0:0] :limit-1359 - [0:0] :limit-136 - [0:0] :limit-1360 - [0:0] :limit-1361 - [0:0] :limit-1362 - [0:0] :limit-1363 - [0:0] :limit-1364 - [0:0] :limit-1365 - [0:0] :limit-1366 - [0:0] :limit-1368 - [0:0] :limit-1369 - [0:0] :limit-137 - [0:0] :limit-1370 - [0:0] :limit-1371 - [0:0] :limit-1372 - [0:0] :limit-1374 - [0:0] :limit-1375 - [0:0] :limit-1376 - [0:0] :limit-1377 - [0:0] :limit-1378 - [0:0] :limit-1379 - [0:0] :limit-138 - [0:0] :limit-1380 - [0:0] :limit-1381 - [0:0] :limit-1382 - [0:0] :limit-1383 - [0:0] :limit-1384 - [0:0] :limit-1385 - [0:0] :limit-1386 - [0:0] :limit-1388 - [0:0] :limit-1389 - [0:0] :limit-139 - [0:0] :limit-1390 - [0:0] :limit-1391 - [0:0] :limit-1392 - [0:0] :limit-1394 - [0:0] :limit-1395 - [0:0] :limit-1396 - [0:0] :limit-1397 - [0:0] :limit-1398 - [0:0] :limit-1399 - [0:0] :limit-14 - [0:0] :limit-140 - [0:0] :limit-1400 - [0:0] :limit-1401 - [0:0] :limit-1402 - [0:0] :limit-1403 - [0:0] :limit-1404 - [0:0] :limit-1405 - [0:0] :limit-1406 - [0:0] :limit-1408 - [0:0] :limit-1409 - [0:0] :limit-141 - [0:0] :limit-1410 - [0:0] :limit-1411 - [0:0] :limit-1412 - [0:0] :limit-1414 - [0:0] :limit-1415 - [0:0] :limit-1416 - [0:0] :limit-1417 - [0:0] :limit-1418 - [0:0] :limit-1419 - [0:0] :limit-142 - [0:0] :limit-1420 - [0:0] :limit-1421 - [0:0] :limit-1422 - [0:0] :limit-1423 - [0:0] :limit-1424 - [0:0] :limit-1425 - [0:0] :limit-1426 - [0:0] :limit-1428 - [0:0] :limit-1429 - [0:0] :limit-143 - [0:0] :limit-1430 - [0:0] :limit-1431 - [0:0] :limit-1432 - [0:0] :limit-1434 - [0:0] :limit-1435 - [0:0] :limit-1436 - [0:0] :limit-1437 - [0:0] :limit-1438 - [0:0] :limit-1439 - [0:0] :limit-144 - [0:0] :limit-1440 - [0:0] :limit-1441 - [0:0] :limit-1442 - [0:0] :limit-1443 - [0:0] :limit-1444 - [0:0] :limit-1445 - [0:0] :limit-1446 - [0:0] :limit-1447 - [0:0] :limit-1448 - [0:0] :limit-1449 - [0:0] :limit-145 - [0:0] :limit-1450 - [0:0] :limit-1451 - [0:0] :limit-1452 - [0:0] :limit-1453 - [0:0] :limit-1454 - [0:0] :limit-1455 - [0:0] :limit-1456 - [0:0] :limit-1458 - [0:0] :limit-1459 - [0:0] :limit-146 - [0:0] :limit-1460 - [0:0] :limit-1461 - [0:0] :limit-1462 - [0:0] :limit-1464 - [0:0] :limit-1465 - [0:0] :limit-1466 - [0:0] :limit-1467 - [0:0] :limit-1468 - [0:0] :limit-1469 - [0:0] :limit-147 - [0:0] :limit-1470 - [0:0] :limit-1471 - [0:0] :limit-1472 - [0:0] :limit-1473 - [0:0] :limit-1474 - [0:0] :limit-1475 - [0:0] :limit-1476 - [0:0] :limit-1478 - [0:0] :limit-1479 - [0:0] :limit-148 - [0:0] :limit-1480 - [0:0] :limit-1481 - [0:0] :limit-1482 - [0:0] :limit-1484 - [0:0] :limit-1485 - [0:0] :limit-1486 - [0:0] :limit-1487 - [0:0] :limit-1488 - [0:0] :limit-1489 - [0:0] :limit-149 - [0:0] :limit-1490 - [0:0] :limit-1491 - [0:0] :limit-1492 - [0:0] :limit-1493 - [0:0] :limit-1494 - [0:0] :limit-1495 - [0:0] :limit-1496 - [0:0] :limit-1498 - [0:0] :limit-1499 - [0:0] :limit-15 - [0:0] :limit-150 - [0:0] :limit-1500 - [0:0] :limit-1501 - [0:0] :limit-1502 - [0:0] :limit-1504 - [0:0] :limit-1505 - [0:0] :limit-1506 - [0:0] :limit-1507 - [0:0] :limit-1508 - [0:0] :limit-1509 - [0:0] :limit-151 - [0:0] :limit-1510 - [0:0] :limit-1511 - [0:0] :limit-1512 - [0:0] :limit-1513 - [0:0] :limit-1514 - [0:0] :limit-1515 - [0:0] :limit-1516 - [0:0] :limit-1518 - [0:0] :limit-1519 - [0:0] :limit-152 - [0:0] :limit-1520 - [0:0] :limit-1521 - [0:0] :limit-1522 - [0:0] :limit-1524 - [0:0] :limit-1525 - [0:0] :limit-1526 - [0:0] :limit-1527 - [0:0] :limit-1528 - [0:0] :limit-1529 - [0:0] :limit-153 - [0:0] :limit-1530 - [0:0] :limit-1531 - [0:0] :limit-1532 - [0:0] :limit-1533 - [0:0] :limit-1534 - [0:0] :limit-1535 - [0:0] :limit-1536 - [0:0] :limit-1537 - [0:0] :limit-1538 - [0:0] :limit-1539 - [0:0] :limit-154 - [0:0] :limit-1540 - [0:0] :limit-1541 - [0:0] :limit-1542 - [0:0] :limit-1543 - [0:0] :limit-1544 - [0:0] :limit-1545 - [0:0] :limit-1546 - [0:0] :limit-1548 - [0:0] :limit-1549 - [0:0] :limit-155 - [0:0] :limit-1550 - [0:0] :limit-1551 - [0:0] :limit-1552 - [0:0] :limit-1554 - [0:0] :limit-1555 - [0:0] :limit-1556 - [0:0] :limit-1557 - [0:0] :limit-1558 - [0:0] :limit-1559 - [0:0] :limit-156 - [0:0] :limit-1560 - [0:0] :limit-1561 - [0:0] :limit-1562 - [0:0] :limit-1563 - [0:0] :limit-1564 - [0:0] :limit-1565 - [0:0] :limit-1566 - [0:0] :limit-1568 - [0:0] :limit-1569 - [0:0] :limit-157 - [0:0] :limit-1570 - [0:0] :limit-1571 - [0:0] :limit-1572 - [0:0] :limit-1574 - [0:0] :limit-1575 - [0:0] :limit-1576 - [0:0] :limit-1577 - [0:0] :limit-1578 - [0:0] :limit-1579 - [0:0] :limit-158 - [0:0] :limit-1580 - [0:0] :limit-1581 - [0:0] :limit-1582 - [0:0] :limit-1583 - [0:0] :limit-1584 - [0:0] :limit-1585 - [0:0] :limit-1586 - [0:0] :limit-1588 - [0:0] :limit-1589 - [0:0] :limit-159 - [0:0] :limit-1590 - [0:0] :limit-1591 - [0:0] :limit-1592 - [0:0] :limit-1594 - [0:0] :limit-1595 - [0:0] :limit-1596 - [0:0] :limit-1597 - [0:0] :limit-1598 - [0:0] :limit-1599 - [0:0] :limit-16 - [0:0] :limit-160 - [0:0] :limit-1600 - [0:0] :limit-1601 - [0:0] :limit-1602 - [0:0] :limit-1603 - [0:0] :limit-1604 - [0:0] :limit-1605 - [0:0] :limit-1606 - [0:0] :limit-1608 - [0:0] :limit-1609 - [0:0] :limit-161 - [0:0] :limit-1610 - [0:0] :limit-1611 - [0:0] :limit-1612 - [0:0] :limit-1614 - [0:0] :limit-1615 - [0:0] :limit-1616 - [0:0] :limit-1617 - [0:0] :limit-1618 - [0:0] :limit-1619 - [0:0] :limit-162 - [0:0] :limit-1620 - [0:0] :limit-1621 - [0:0] :limit-1622 - [0:0] :limit-1623 - [0:0] :limit-1624 - [0:0] :limit-1625 - [0:0] :limit-1626 - [0:0] :limit-1627 - [0:0] :limit-1628 - [0:0] :limit-1629 - [0:0] :limit-163 - [0:0] :limit-1630 - [0:0] :limit-1631 - [0:0] :limit-1632 - [0:0] :limit-1633 - [0:0] :limit-1634 - [0:0] :limit-1635 - [0:0] :limit-1636 - [0:0] :limit-1638 - [0:0] :limit-1639 - [0:0] :limit-164 - [0:0] :limit-1640 - [0:0] :limit-1641 - [0:0] :limit-1642 - [0:0] :limit-1644 - [0:0] :limit-1645 - [0:0] :limit-1646 - [0:0] :limit-1647 - [0:0] :limit-1648 - [0:0] :limit-1649 - [0:0] :limit-165 - [0:0] :limit-1650 - [0:0] :limit-1651 - [0:0] :limit-1652 - [0:0] :limit-1653 - [0:0] :limit-1654 - [0:0] :limit-1655 - [0:0] :limit-1656 - [0:0] :limit-1658 - [0:0] :limit-1659 - [0:0] :limit-166 - [0:0] :limit-1660 - [0:0] :limit-1661 - [0:0] :limit-1662 - [0:0] :limit-1664 - [0:0] :limit-1665 - [0:0] :limit-1666 - [0:0] :limit-1667 - [0:0] :limit-1668 - [0:0] :limit-1669 - [0:0] :limit-167 - [0:0] :limit-1670 - [0:0] :limit-1671 - [0:0] :limit-1672 - [0:0] :limit-1673 - [0:0] :limit-1674 - [0:0] :limit-1675 - [0:0] :limit-1676 - [0:0] :limit-1678 - [0:0] :limit-1679 - [0:0] :limit-168 - [0:0] :limit-1680 - [0:0] :limit-1681 - [0:0] :limit-1682 - [0:0] :limit-1684 - [0:0] :limit-1685 - [0:0] :limit-1686 - [0:0] :limit-1687 - [0:0] :limit-1688 - [0:0] :limit-1689 - [0:0] :limit-169 - [0:0] :limit-1690 - [0:0] :limit-1691 - [0:0] :limit-1692 - [0:0] :limit-1693 - [0:0] :limit-1694 - [0:0] :limit-1695 - [0:0] :limit-1696 - [0:0] :limit-1698 - [0:0] :limit-1699 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] :limit-1700 - [0:0] :limit-1701 - [0:0] :limit-1702 - [0:0] :limit-1704 - [0:0] :limit-1705 - [0:0] :limit-1706 - [0:0] :limit-1707 - [0:0] :limit-1708 - [0:0] :limit-1709 - [0:0] :limit-171 - [0:0] :limit-1710 - [0:0] :limit-1711 - [0:0] :limit-1712 - [0:0] :limit-1713 - [0:0] :limit-1714 - [0:0] :limit-1715 - [0:0] :limit-1716 - [0:0] :limit-1717 - [0:0] :limit-1718 - [0:0] :limit-1719 - [0:0] :limit-172 - [0:0] :limit-1720 - [0:0] :limit-1721 - [0:0] :limit-1722 - [0:0] :limit-1723 - [0:0] :limit-1724 - [0:0] :limit-1725 - [0:0] :limit-1726 - [0:0] :limit-1728 - [0:0] :limit-1729 - [0:0] :limit-173 - [0:0] :limit-1730 - [0:0] :limit-1731 - [0:0] :limit-1732 - [0:0] :limit-1734 - [0:0] :limit-1735 - [0:0] :limit-1736 - [0:0] :limit-1737 - [0:0] :limit-1738 - [0:0] :limit-1739 - [0:0] :limit-174 - [0:0] :limit-1740 - [0:0] :limit-1741 - [0:0] :limit-1742 - [0:0] :limit-1743 - [0:0] :limit-1744 - [0:0] :limit-1745 - [0:0] :limit-1746 - [0:0] :limit-1748 - [0:0] :limit-1749 - [0:0] :limit-175 - [0:0] :limit-1750 - [0:0] :limit-1751 - [0:0] :limit-1752 - [0:0] :limit-1754 - [0:0] :limit-1755 - [0:0] :limit-1756 - [0:0] :limit-1757 - [0:0] :limit-1758 - [0:0] :limit-1759 - [0:0] :limit-176 - [0:0] :limit-1760 - [0:0] :limit-1761 - [0:0] :limit-1762 - [0:0] :limit-1763 - [0:0] :limit-1764 - [0:0] :limit-1765 - [0:0] :limit-1766 - [0:0] :limit-1768 - [0:0] :limit-1769 - [0:0] :limit-177 - [0:0] :limit-1770 - [0:0] :limit-1771 - [0:0] :limit-1772 - [0:0] :limit-1774 - [0:0] :limit-1775 - [0:0] :limit-1776 - [0:0] :limit-1777 - [0:0] :limit-1778 - [0:0] :limit-1779 - [0:0] :limit-178 - [0:0] :limit-1780 - [0:0] :limit-1781 - [0:0] :limit-1782 - [0:0] :limit-1783 - [0:0] :limit-1784 - [0:0] :limit-1785 - [0:0] :limit-1786 - [0:0] :limit-1788 - [0:0] :limit-1789 - [0:0] :limit-179 - [0:0] :limit-1790 - [0:0] :limit-1791 - [0:0] :limit-1792 - [0:0] :limit-1794 - [0:0] :limit-1795 - [0:0] :limit-1796 - [0:0] :limit-1797 - [0:0] :limit-1798 - [0:0] :limit-1799 - [0:0] :limit-18 - [0:0] :limit-180 - [0:0] :limit-1800 - [0:0] :limit-1801 - [0:0] :limit-1802 - [0:0] :limit-1803 - [0:0] :limit-1804 - [0:0] :limit-1805 - [0:0] :limit-1806 - [0:0] :limit-1807 - [0:0] :limit-1808 - [0:0] :limit-1809 - [0:0] :limit-181 - [0:0] :limit-1810 - [0:0] :limit-1811 - [0:0] :limit-1812 - [0:0] :limit-1813 - [0:0] :limit-1814 - [0:0] :limit-1815 - [0:0] :limit-1816 - [0:0] :limit-1818 - [0:0] :limit-1819 - [0:0] :limit-182 - [0:0] :limit-1820 - [0:0] :limit-1821 - [0:0] :limit-1822 - [0:0] :limit-1824 - [0:0] :limit-1825 - [0:0] :limit-1826 - [0:0] :limit-1827 - [0:0] :limit-1828 - [0:0] :limit-1829 - [0:0] :limit-183 - [0:0] :limit-1830 - [0:0] :limit-1831 - [0:0] :limit-1832 - [0:0] :limit-1833 - [0:0] :limit-1834 - [0:0] :limit-1835 - [0:0] :limit-1836 - [0:0] :limit-1838 - [0:0] :limit-1839 - [0:0] :limit-184 - [0:0] :limit-1840 - [0:0] :limit-1841 - [0:0] :limit-1842 - [0:0] :limit-1844 - [0:0] :limit-1845 - [0:0] :limit-1846 - [0:0] :limit-1847 - [0:0] :limit-1848 - [0:0] :limit-1849 - [0:0] :limit-185 - [0:0] :limit-1850 - [0:0] :limit-1851 - [0:0] :limit-1852 - [0:0] :limit-1853 - [0:0] :limit-1854 - [0:0] :limit-1855 - [0:0] :limit-1856 - [0:0] :limit-1858 - [0:0] :limit-1859 - [0:0] :limit-186 - [0:0] :limit-1860 - [0:0] :limit-1861 - [0:0] :limit-1862 - [0:0] :limit-1864 - [0:0] :limit-1865 - [0:0] :limit-1866 - [0:0] :limit-1867 - [0:0] :limit-1868 - [0:0] :limit-1869 - [0:0] :limit-187 - [0:0] :limit-1870 - [0:0] :limit-1871 - [0:0] :limit-1872 - [0:0] :limit-1873 - [0:0] :limit-1874 - [0:0] :limit-1875 - [0:0] :limit-1876 - [0:0] :limit-1878 - [0:0] :limit-1879 - [0:0] :limit-188 - [0:0] :limit-1880 - [0:0] :limit-1881 - [0:0] :limit-1882 - [0:0] :limit-1884 - [0:0] :limit-1885 - [0:0] :limit-1886 - [0:0] :limit-1887 - [0:0] :limit-1888 - [0:0] :limit-1889 - [0:0] :limit-189 - [0:0] :limit-1890 - [0:0] :limit-1891 - [0:0] :limit-1892 - [0:0] :limit-1893 - [0:0] :limit-1894 - [0:0] :limit-1895 - [0:0] :limit-1896 - [0:0] :limit-1897 - [0:0] :limit-1898 - [0:0] :limit-1899 - [0:0] :limit-19 - [0:0] :limit-190 - [0:0] :limit-1900 - [0:0] :limit-1901 - [0:0] :limit-1902 - [0:0] :limit-1903 - [0:0] :limit-1904 - [0:0] :limit-1905 - [0:0] :limit-1906 - [0:0] :limit-1907 - [0:0] :limit-1908 - [0:0] :limit-1909 - [0:0] :limit-191 - [0:0] :limit-1910 - [0:0] :limit-1911 - [0:0] :limit-1912 - [0:0] :limit-1913 - [0:0] :limit-1914 - [0:0] :limit-1915 - [0:0] :limit-1916 - [0:0] :limit-1917 - [0:0] :limit-1918 - [0:0] :limit-1919 - [0:0] :limit-192 - [0:0] :limit-1920 - [0:0] :limit-1921 - [0:0] :limit-1922 - [0:0] :limit-1923 - [0:0] :limit-1924 - [0:0] :limit-1925 - [0:0] :limit-1926 - [0:0] :limit-1927 - [0:0] :limit-1928 - [0:0] :limit-1929 - [0:0] :limit-193 - [0:0] :limit-1930 - [0:0] :limit-1931 - [0:0] :limit-1932 - [0:0] :limit-1933 - [0:0] :limit-1934 - [0:0] :limit-1935 - [0:0] :limit-1936 - [0:0] :limit-1937 - [0:0] :limit-1938 - [0:0] :limit-1939 - [0:0] :limit-194 - [0:0] :limit-1940 - [0:0] :limit-1941 - [0:0] :limit-1942 - [0:0] :limit-1943 - [0:0] :limit-1944 - [0:0] :limit-1945 - [0:0] :limit-1946 - [0:0] :limit-1947 - [0:0] :limit-1948 - [0:0] :limit-1949 - [0:0] :limit-195 - [0:0] :limit-1950 - [0:0] :limit-1951 - [0:0] :limit-1952 - [0:0] :limit-1953 - [0:0] :limit-1954 - [0:0] :limit-1955 - [0:0] :limit-1956 - [0:0] :limit-1957 - [0:0] :limit-1958 - [0:0] :limit-1959 - [0:0] :limit-196 - [0:0] :limit-1960 - [0:0] :limit-1961 - [0:0] :limit-1962 - [0:0] :limit-1963 - [0:0] :limit-1964 - [0:0] :limit-1965 - [0:0] :limit-1966 - [0:0] :limit-1967 - [0:0] :limit-1968 - [0:0] :limit-1969 - [0:0] :limit-197 - [0:0] :limit-1970 - [0:0] :limit-1971 - [0:0] :limit-1972 - [0:0] :limit-1973 - [0:0] :limit-1974 - [0:0] :limit-1975 - [0:0] :limit-1976 - [0:0] :limit-1977 - [0:0] :limit-1978 - [0:0] :limit-1979 - [0:0] :limit-198 - [0:0] :limit-1980 - [0:0] :limit-1981 - [0:0] :limit-1982 - [0:0] :limit-1983 - [0:0] :limit-1984 - [0:0] :limit-1985 - [0:0] :limit-1986 - [0:0] :limit-1987 - [0:0] :limit-1988 - [0:0] :limit-1989 - [0:0] :limit-199 - [0:0] :limit-1990 - [0:0] :limit-1991 - [0:0] :limit-1992 - [0:0] :limit-1993 - [0:0] :limit-1994 - [0:0] :limit-1995 - [0:0] :limit-1996 - [0:0] :limit-1997 - [0:0] :limit-1998 - [0:0] :limit-1999 - [0:0] :limit-2 - [0:0] :limit-20 - [0:0] :limit-200 - [0:0] :limit-2000 - [0:0] :limit-2001 - [0:0] :limit-2002 - [0:0] :limit-2003 - [0:0] :limit-2004 - [0:0] :limit-2005 - [0:0] :limit-2006 - [0:0] :limit-2007 - [0:0] :limit-2008 - [0:0] :limit-2009 - [0:0] :limit-201 - [0:0] :limit-2010 - [0:0] :limit-2011 - [0:0] :limit-2012 - [0:0] :limit-2013 - [0:0] :limit-2014 - [0:0] :limit-2015 - [0:0] :limit-2016 - [0:0] :limit-2017 - [0:0] :limit-2018 - [0:0] :limit-2019 - [0:0] :limit-202 - [0:0] :limit-2020 - [0:0] :limit-2021 - [0:0] :limit-2022 - [0:0] :limit-2023 - [0:0] :limit-2024 - [0:0] :limit-2025 - [0:0] :limit-2026 - [0:0] :limit-2027 - [0:0] :limit-2028 - [0:0] :limit-2029 - [0:0] :limit-203 - [0:0] :limit-2030 - [0:0] :limit-2031 - [0:0] :limit-2032 - [0:0] :limit-2033 - [0:0] :limit-2034 - [0:0] :limit-2035 - [0:0] :limit-2036 - [0:0] :limit-2037 - [0:0] :limit-2038 - [0:0] :limit-2039 - [0:0] :limit-204 - [0:0] :limit-2040 - [0:0] :limit-2041 - [0:0] :limit-2042 - [0:0] :limit-2043 - [0:0] :limit-2044 - [0:0] :limit-2045 - [0:0] :limit-2046 - [0:0] :limit-2047 - [0:0] :limit-2048 - [0:0] :limit-2049 - [0:0] :limit-205 - [0:0] :limit-2050 - [0:0] :limit-2051 - [0:0] :limit-2052 - [0:0] :limit-2053 - [0:0] :limit-2054 - [0:0] :limit-2055 - [0:0] :limit-2056 - [0:0] :limit-2057 - [0:0] :limit-2058 - [0:0] :limit-2059 - [0:0] :limit-206 - [0:0] :limit-2060 - [0:0] :limit-2061 - [0:0] :limit-2062 - [0:0] :limit-2063 - [0:0] :limit-2064 - [0:0] :limit-2065 - [0:0] :limit-2066 - [0:0] :limit-2067 - [0:0] :limit-2068 - [0:0] :limit-2069 - [0:0] :limit-207 - [0:0] :limit-2070 - [0:0] :limit-2071 - [0:0] :limit-2072 - [0:0] :limit-2073 - [0:0] :limit-2074 - [0:0] :limit-2075 - [0:0] :limit-2076 - [0:0] :limit-2077 - [0:0] :limit-2078 - [0:0] :limit-2079 - [0:0] :limit-208 - [0:0] :limit-2080 - [0:0] :limit-2081 - [0:0] :limit-2082 - [0:0] :limit-2083 - [0:0] :limit-2084 - [0:0] :limit-2085 - [0:0] :limit-2086 - [0:0] :limit-2087 - [0:0] :limit-2088 - [0:0] :limit-2089 - [0:0] :limit-209 - [0:0] :limit-2090 - [0:0] :limit-2091 - [0:0] :limit-2092 - [0:0] :limit-2093 - [0:0] :limit-2094 - [0:0] :limit-2095 - [0:0] :limit-2096 - [0:0] :limit-2097 - [0:0] :limit-2098 - [0:0] :limit-2099 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] :limit-2100 - [0:0] :limit-2101 - [0:0] :limit-2102 - [0:0] :limit-2103 - [0:0] :limit-2104 - [0:0] :limit-2105 - [0:0] :limit-2106 - [0:0] :limit-2107 - [0:0] :limit-2108 - [0:0] :limit-2109 - [0:0] :limit-211 - [0:0] :limit-2110 - [0:0] :limit-2111 - [0:0] :limit-2112 - [0:0] :limit-2113 - [0:0] :limit-2114 - [0:0] :limit-2115 - [0:0] :limit-2116 - [0:0] :limit-2117 - [0:0] :limit-2118 - [0:0] :limit-2119 - [0:0] :limit-212 - [0:0] :limit-2120 - [0:0] :limit-2121 - [0:0] :limit-2122 - [0:0] :limit-2123 - [0:0] :limit-2124 - [0:0] :limit-2125 - [0:0] :limit-2126 - [0:0] :limit-2127 - [0:0] :limit-2128 - [0:0] :limit-2129 - [0:0] :limit-213 - [0:0] :limit-2130 - [0:0] :limit-2131 - [0:0] :limit-2132 - [0:0] :limit-2133 - [0:0] :limit-2134 - [0:0] :limit-2135 - [0:0] :limit-2136 - [0:0] :limit-2137 - [0:0] :limit-2138 - [0:0] :limit-2139 - [0:0] :limit-214 - [0:0] :limit-2140 - [0:0] :limit-2141 - [0:0] :limit-2142 - [0:0] :limit-2143 - [0:0] :limit-2144 - [0:0] :limit-2145 - [0:0] :limit-2146 - [0:0] :limit-2147 - [0:0] :limit-2148 - [0:0] :limit-2149 - [0:0] :limit-215 - [0:0] :limit-2150 - [0:0] :limit-2151 - [0:0] :limit-2152 - [0:0] :limit-2153 - [0:0] :limit-2154 - [0:0] :limit-2155 - [0:0] :limit-2156 - [0:0] :limit-2157 - [0:0] :limit-2158 - [0:0] :limit-2159 - [0:0] :limit-216 - [0:0] :limit-2160 - [0:0] :limit-2161 - [0:0] :limit-2162 - [0:0] :limit-2163 - [0:0] :limit-2164 - [0:0] :limit-2165 - [0:0] :limit-2166 - [0:0] :limit-2167 - [0:0] :limit-2168 - [0:0] :limit-2169 - [0:0] :limit-217 - [0:0] :limit-2170 - [0:0] :limit-2171 - [0:0] :limit-2172 - [0:0] :limit-2173 - [0:0] :limit-2174 - [0:0] :limit-2175 - [0:0] :limit-2176 - [0:0] :limit-2177 - [0:0] :limit-2178 - [0:0] :limit-2179 - [0:0] :limit-218 - [0:0] :limit-2180 - [0:0] :limit-2181 - [0:0] :limit-2182 - [0:0] :limit-2183 - [0:0] :limit-2184 - [0:0] :limit-2185 - [0:0] :limit-2186 - [0:0] :limit-2187 - [0:0] :limit-2188 - [0:0] :limit-2189 - [0:0] :limit-219 - [0:0] :limit-2190 - [0:0] :limit-2191 - [0:0] :limit-2192 - [0:0] :limit-2193 - [0:0] :limit-2194 - [0:0] :limit-2195 - [0:0] :limit-2196 - [0:0] :limit-2197 - [0:0] :limit-2198 - [0:0] :limit-2199 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] :limit-2200 - [0:0] :limit-2201 - [0:0] :limit-2202 - [0:0] :limit-2203 - [0:0] :limit-2204 - [0:0] :limit-2205 - [0:0] :limit-2206 - [0:0] :limit-2207 - [0:0] :limit-2208 - [0:0] :limit-2209 - [0:0] :limit-221 - [0:0] :limit-2210 - [0:0] :limit-2211 - [0:0] :limit-2212 - [0:0] :limit-2213 - [0:0] :limit-2214 - [0:0] :limit-2215 - [0:0] :limit-2216 - [0:0] :limit-2217 - [0:0] :limit-2218 - [0:0] :limit-2219 - [0:0] :limit-222 - [0:0] :limit-2220 - [0:0] :limit-2221 - [0:0] :limit-2222 - [0:0] :limit-2223 - [0:0] :limit-2224 - [0:0] :limit-2225 - [0:0] :limit-2226 - [0:0] :limit-2227 - [0:0] :limit-2228 - [0:0] :limit-2229 - [0:0] :limit-223 - [0:0] :limit-2230 - [0:0] :limit-2231 - [0:0] :limit-2232 - [0:0] :limit-2233 - [0:0] :limit-2234 - [0:0] :limit-2235 - [0:0] :limit-2236 - [0:0] :limit-2237 - [0:0] :limit-2238 - [0:0] :limit-2239 - [0:0] :limit-224 - [0:0] :limit-2240 - [0:0] :limit-2241 - [0:0] :limit-2242 - [0:0] :limit-2243 - [0:0] :limit-2244 - [0:0] :limit-2245 - [0:0] :limit-2246 - [0:0] :limit-2247 - [0:0] :limit-2248 - [0:0] :limit-2249 - [0:0] :limit-225 - [0:0] :limit-2250 - [0:0] :limit-2251 - [0:0] :limit-2252 - [0:0] :limit-2253 - [0:0] :limit-2254 - [0:0] :limit-2255 - [0:0] :limit-2256 - [0:0] :limit-2257 - [0:0] :limit-2258 - [0:0] :limit-2259 - [0:0] :limit-226 - [0:0] :limit-2260 - [0:0] :limit-2261 - [0:0] :limit-2262 - [0:0] :limit-2263 - [0:0] :limit-2264 - [0:0] :limit-2265 - [0:0] :limit-2266 - [0:0] :limit-2267 - [0:0] :limit-2268 - [0:0] :limit-2269 - [0:0] :limit-227 - [0:0] :limit-2270 - [0:0] :limit-2271 - [0:0] :limit-2272 - [0:0] :limit-2273 - [0:0] :limit-2274 - [0:0] :limit-2275 - [0:0] :limit-2276 - [0:0] :limit-2277 - [0:0] :limit-2278 - [0:0] :limit-2279 - [0:0] :limit-228 - [0:0] :limit-2280 - [0:0] :limit-2281 - [0:0] :limit-2282 - [0:0] :limit-2283 - [0:0] :limit-2284 - [0:0] :limit-2285 - [0:0] :limit-2286 - [0:0] :limit-2287 - [0:0] :limit-2288 - [0:0] :limit-2289 - [0:0] :limit-229 - [0:0] :limit-2290 - [0:0] :limit-2291 - [0:0] :limit-2292 - [0:0] :limit-2293 - [0:0] :limit-2294 - [0:0] :limit-2295 - [0:0] :limit-2296 - [0:0] :limit-2297 - [0:0] :limit-2298 - [0:0] :limit-2299 - [0:0] :limit-23 - [0:0] :limit-230 - [0:0] :limit-2300 - [0:0] :limit-2301 - [0:0] :limit-2302 - [0:0] :limit-2303 - [0:0] :limit-2304 - [0:0] :limit-2305 - [0:0] :limit-2306 - [0:0] :limit-2307 - [0:0] :limit-2308 - [0:0] :limit-2309 - [0:0] :limit-231 - [0:0] :limit-2310 - [0:0] :limit-2311 - [0:0] :limit-2312 - [0:0] :limit-2313 - [0:0] :limit-2314 - [0:0] :limit-2315 - [0:0] :limit-2316 - [0:0] :limit-2317 - [0:0] :limit-2318 - [0:0] :limit-2319 - [0:0] :limit-232 - [0:0] :limit-2320 - [0:0] :limit-2321 - [0:0] :limit-2322 - [0:0] :limit-2323 - [0:0] :limit-2324 - [0:0] :limit-2325 - [0:0] :limit-2326 - [0:0] :limit-2327 - [0:0] :limit-2328 - [0:0] :limit-2329 - [0:0] :limit-233 - [0:0] :limit-2330 - [0:0] :limit-2331 - [0:0] :limit-2332 - [0:0] :limit-2333 - [0:0] :limit-2334 - [0:0] :limit-2335 - [0:0] :limit-2336 - [0:0] :limit-2337 - [0:0] :limit-2338 - [0:0] :limit-2339 - [0:0] :limit-234 - [0:0] :limit-2340 - [0:0] :limit-2341 - [0:0] :limit-2342 - [0:0] :limit-2343 - [0:0] :limit-2344 - [0:0] :limit-2345 - [0:0] :limit-2346 - [0:0] :limit-2347 - [0:0] :limit-2348 - [0:0] :limit-2349 - [0:0] :limit-235 - [0:0] :limit-2350 - [0:0] :limit-2351 - [0:0] :limit-2352 - [0:0] :limit-2353 - [0:0] :limit-2354 - [0:0] :limit-2355 - [0:0] :limit-2356 - [0:0] :limit-2357 - [0:0] :limit-2358 - [0:0] :limit-2359 - [0:0] :limit-236 - [0:0] :limit-2360 - [0:0] :limit-2361 - [0:0] :limit-2362 - [0:0] :limit-2363 - [0:0] :limit-2364 - [0:0] :limit-2365 - [0:0] :limit-2366 - [0:0] :limit-2367 - [0:0] :limit-2368 - [0:0] :limit-2369 - [0:0] :limit-237 - [0:0] :limit-2370 - [0:0] :limit-2371 - [0:0] :limit-2372 - [0:0] :limit-2373 - [0:0] :limit-2374 - [0:0] :limit-2375 - [0:0] :limit-2376 - [0:0] :limit-2377 - [0:0] :limit-2378 - [0:0] :limit-2379 - [0:0] :limit-238 - [0:0] :limit-2380 - [0:0] :limit-2381 - [0:0] :limit-2382 - [0:0] :limit-2383 - [0:0] :limit-2384 - [0:0] :limit-2385 - [0:0] :limit-2386 - [0:0] :limit-2387 - [0:0] :limit-2388 - [0:0] :limit-2389 - [0:0] :limit-239 - [0:0] :limit-2390 - [0:0] :limit-2391 - [0:0] :limit-2392 - [0:0] :limit-2393 - [0:0] :limit-2394 - [0:0] :limit-2395 - [0:0] :limit-2396 - [0:0] :limit-2397 - [0:0] :limit-2398 - [0:0] :limit-2399 - [0:0] :limit-24 - [0:0] :limit-240 - [0:0] :limit-2400 - [0:0] :limit-2401 - [0:0] :limit-2402 - [0:0] :limit-2403 - [0:0] :limit-2404 - [0:0] :limit-2405 - [0:0] :limit-2406 - [0:0] :limit-2407 - [0:0] :limit-2408 - [0:0] :limit-2409 - [0:0] :limit-241 - [0:0] :limit-2410 - [0:0] :limit-2411 - [0:0] :limit-2412 - [0:0] :limit-2413 - [0:0] :limit-2414 - [0:0] :limit-2415 - [0:0] :limit-2416 - [0:0] :limit-2417 - [0:0] :limit-2418 - [0:0] :limit-2419 - [0:0] :limit-242 - [0:0] :limit-2420 - [0:0] :limit-2421 - [0:0] :limit-2422 - [0:0] :limit-2423 - [0:0] :limit-2424 - [0:0] :limit-2425 - [0:0] :limit-2426 - [0:0] :limit-2427 - [0:0] :limit-2428 - [0:0] :limit-2429 - [0:0] :limit-243 - [0:0] :limit-2430 - [0:0] :limit-2431 - [0:0] :limit-2432 - [0:0] :limit-2433 - [0:0] :limit-2434 - [0:0] :limit-2435 - [0:0] :limit-2436 - [0:0] :limit-2437 - [0:0] :limit-2438 - [0:0] :limit-2439 - [0:0] :limit-244 - [0:0] :limit-2440 - [0:0] :limit-2441 - [0:0] :limit-2442 - [0:0] :limit-2443 - [0:0] :limit-2444 - [0:0] :limit-2445 - [0:0] :limit-2446 - [0:0] :limit-2447 - [0:0] :limit-2448 - [0:0] :limit-2449 - [0:0] :limit-245 - [0:0] :limit-2450 - [0:0] :limit-2451 - [0:0] :limit-2452 - [0:0] :limit-2453 - [0:0] :limit-2454 - [0:0] :limit-2455 - [0:0] :limit-2456 - [0:0] :limit-2457 - [0:0] :limit-2458 - [0:0] :limit-2459 - [0:0] :limit-246 - [0:0] :limit-2460 - [0:0] :limit-2461 - [0:0] :limit-2462 - [0:0] :limit-2463 - [0:0] :limit-2464 - [0:0] :limit-2465 - [0:0] :limit-2466 - [0:0] :limit-2467 - [0:0] :limit-2468 - [0:0] :limit-2469 - [0:0] :limit-247 - [0:0] :limit-2470 - [0:0] :limit-2471 - [0:0] :limit-2472 - [0:0] :limit-2473 - [0:0] :limit-2474 - [0:0] :limit-2475 - [0:0] :limit-2476 - [0:0] :limit-2477 - [0:0] :limit-2478 - [0:0] :limit-2479 - [0:0] :limit-248 - [0:0] :limit-2480 - [0:0] :limit-2481 - [0:0] :limit-2482 - [0:0] :limit-2483 - [0:0] :limit-2484 - [0:0] :limit-2485 - [0:0] :limit-2486 - [0:0] :limit-2487 - [0:0] :limit-2488 - [0:0] :limit-2489 - [0:0] :limit-249 - [0:0] :limit-2490 - [0:0] :limit-2491 - [0:0] :limit-2492 - [0:0] :limit-2493 - [0:0] :limit-2494 - [0:0] :limit-2495 - [0:0] :limit-2496 - [0:0] :limit-2497 - [0:0] :limit-2498 - [0:0] :limit-2499 - [0:0] :limit-25 - [0:0] :limit-250 - [0:0] :limit-2500 - [0:0] :limit-2501 - [0:0] :limit-2502 - [0:0] :limit-2503 - [0:0] :limit-2504 - [0:0] :limit-2505 - [0:0] :limit-2506 - [0:0] :limit-2507 - [0:0] :limit-2508 - [0:0] :limit-2509 - [0:0] :limit-251 - [0:0] :limit-2510 - [0:0] :limit-2511 - [0:0] :limit-2512 - [0:0] :limit-2513 - [0:0] :limit-2514 - [0:0] :limit-2515 - [0:0] :limit-2516 - [0:0] :limit-2517 - [0:0] :limit-2518 - [0:0] :limit-2519 - [0:0] :limit-252 - [0:0] :limit-2520 - [0:0] :limit-2521 - [0:0] :limit-2522 - [0:0] :limit-2523 - [0:0] :limit-2524 - [0:0] :limit-2525 - [0:0] :limit-2526 - [0:0] :limit-2527 - [0:0] :limit-2528 - [0:0] :limit-2529 - [0:0] :limit-253 - [0:0] :limit-2530 - [0:0] :limit-2531 - [0:0] :limit-2532 - [0:0] :limit-2533 - [0:0] :limit-2534 - [0:0] :limit-2535 - [0:0] :limit-2536 - [0:0] :limit-2537 - [0:0] :limit-2538 - [0:0] :limit-2539 - [0:0] :limit-254 - [0:0] :limit-2540 - [0:0] :limit-2541 - [0:0] :limit-2542 - [0:0] :limit-2543 - [0:0] :limit-2544 - [0:0] :limit-2545 - [0:0] :limit-2546 - [0:0] :limit-2547 - [0:0] :limit-2548 - [0:0] :limit-2549 - [0:0] :limit-255 - [0:0] :limit-2550 - [0:0] :limit-2551 - [0:0] :limit-2552 - [0:0] :limit-2553 - [0:0] :limit-2554 - [0:0] :limit-2555 - [0:0] :limit-2556 - [0:0] :limit-2557 - [0:0] :limit-2558 - [0:0] :limit-2559 - [0:0] :limit-256 - [0:0] :limit-2560 - [0:0] :limit-2561 - [0:0] :limit-2562 - [0:0] :limit-2563 - [0:0] :limit-2564 - [0:0] :limit-2565 - [0:0] :limit-2566 - [0:0] :limit-2567 - [0:0] :limit-2568 - [0:0] :limit-2569 - [0:0] :limit-257 - [0:0] :limit-2570 - [0:0] :limit-2571 - [0:0] :limit-2572 - [0:0] :limit-2573 - [0:0] :limit-2574 - [0:0] :limit-2575 - [0:0] :limit-2576 - [0:0] :limit-2577 - [0:0] :limit-2578 - [0:0] :limit-2579 - [0:0] :limit-258 - [0:0] :limit-2580 - [0:0] :limit-2581 - [0:0] :limit-2582 - [0:0] :limit-2583 - [0:0] :limit-2584 - [0:0] :limit-2585 - [0:0] :limit-2586 - [0:0] :limit-2587 - [0:0] :limit-2588 - [0:0] :limit-2589 - [0:0] :limit-259 - [0:0] :limit-2590 - [0:0] :limit-2591 - [0:0] :limit-2592 - [0:0] :limit-2593 - [0:0] :limit-2594 - [0:0] :limit-2595 - [0:0] :limit-2596 - [0:0] :limit-2597 - [0:0] :limit-2598 - [0:0] :limit-2599 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] :limit-2600 - [0:0] :limit-2601 - [0:0] :limit-2602 - [0:0] :limit-2603 - [0:0] :limit-2604 - [0:0] :limit-2605 - [0:0] :limit-2606 - [0:0] :limit-2607 - [0:0] :limit-2608 - [0:0] :limit-2609 - [0:0] :limit-261 - [0:0] :limit-2610 - [0:0] :limit-2611 - [0:0] :limit-2612 - [0:0] :limit-2613 - [0:0] :limit-2614 - [0:0] :limit-2615 - [0:0] :limit-2616 - [0:0] :limit-2617 - [0:0] :limit-2618 - [0:0] :limit-2619 - [0:0] :limit-262 - [0:0] :limit-2620 - [0:0] :limit-2621 - [0:0] :limit-2622 - [0:0] :limit-2623 - [0:0] :limit-2624 - [0:0] :limit-2625 - [0:0] :limit-2626 - [0:0] :limit-2627 - [0:0] :limit-2628 - [0:0] :limit-2629 - [0:0] :limit-263 - [0:0] :limit-2630 - [0:0] :limit-2631 - [0:0] :limit-2632 - [0:0] :limit-2633 - [0:0] :limit-2634 - [0:0] :limit-2635 - [0:0] :limit-2636 - [0:0] :limit-2637 - [0:0] :limit-2638 - [0:0] :limit-2639 - [0:0] :limit-264 - [0:0] :limit-2640 - [0:0] :limit-2641 - [0:0] :limit-2642 - [0:0] :limit-2643 - [0:0] :limit-2644 - [0:0] :limit-2645 - [0:0] :limit-2646 - [0:0] :limit-2647 - [0:0] :limit-2648 - [0:0] :limit-2649 - [0:0] :limit-265 - [0:0] :limit-2650 - [0:0] :limit-2651 - [0:0] :limit-2652 - [0:0] :limit-2653 - [0:0] :limit-2654 - [0:0] :limit-2655 - [0:0] :limit-2656 - [0:0] :limit-2657 - [0:0] :limit-2658 - [0:0] :limit-2659 - [0:0] :limit-266 - [0:0] :limit-2660 - [0:0] :limit-2661 - [0:0] :limit-2662 - [0:0] :limit-2663 - [0:0] :limit-2664 - [0:0] :limit-2665 - [0:0] :limit-2666 - [0:0] :limit-2667 - [0:0] :limit-2668 - [0:0] :limit-2669 - [0:0] :limit-267 - [0:0] :limit-2670 - [0:0] :limit-2671 - [0:0] :limit-2672 - [0:0] :limit-2673 - [0:0] :limit-2674 - [0:0] :limit-2675 - [0:0] :limit-2676 - [0:0] :limit-2677 - [0:0] :limit-2678 - [0:0] :limit-2679 - [0:0] :limit-268 - [0:0] :limit-2680 - [0:0] :limit-2681 - [0:0] :limit-2682 - [0:0] :limit-2683 - [0:0] :limit-2684 - [0:0] :limit-2685 - [0:0] :limit-2686 - [0:0] :limit-2687 - [0:0] :limit-2688 - [0:0] :limit-2689 - [0:0] :limit-269 - [0:0] :limit-2690 - [0:0] :limit-2691 - [0:0] :limit-2692 - [0:0] :limit-2693 - [0:0] :limit-2694 - [0:0] :limit-2695 - [0:0] :limit-2696 - [0:0] :limit-2697 - [0:0] :limit-2698 - [0:0] :limit-2699 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] :limit-2700 - [0:0] :limit-2701 - [0:0] :limit-2702 - [0:0] :limit-2703 - [0:0] :limit-2704 - [0:0] :limit-2705 - [0:0] :limit-2706 - [0:0] :limit-2707 - [0:0] :limit-2708 - [0:0] :limit-2709 - [0:0] :limit-271 - [0:0] :limit-2710 - [0:0] :limit-2711 - [0:0] :limit-2712 - [0:0] :limit-2713 - [0:0] :limit-2714 - [0:0] :limit-2715 - [0:0] :limit-2716 - [0:0] :limit-2717 - [0:0] :limit-2718 - [0:0] :limit-2719 - [0:0] :limit-272 - [0:0] :limit-2720 - [0:0] :limit-2721 - [0:0] :limit-2722 - [0:0] :limit-2723 - [0:0] :limit-2724 - [0:0] :limit-2725 - [0:0] :limit-2726 - [0:0] :limit-2727 - [0:0] :limit-2728 - [0:0] :limit-2729 - [0:0] :limit-273 - [0:0] :limit-2730 - [0:0] :limit-2731 - [0:0] :limit-2732 - [0:0] :limit-2733 - [0:0] :limit-2734 - [0:0] :limit-2735 - [0:0] :limit-2736 - [0:0] :limit-2737 - [0:0] :limit-2738 - [0:0] :limit-2739 - [0:0] :limit-274 - [0:0] :limit-2740 - [0:0] :limit-2741 - [0:0] :limit-2742 - [0:0] :limit-2743 - [0:0] :limit-2744 - [0:0] :limit-2745 - [0:0] :limit-2746 - [0:0] :limit-2747 - [0:0] :limit-2748 - [0:0] :limit-2749 - [0:0] :limit-275 - [0:0] :limit-2750 - [0:0] :limit-2751 - [0:0] :limit-2752 - [0:0] :limit-2753 - [0:0] :limit-2754 - [0:0] :limit-2755 - [0:0] :limit-2756 - [0:0] :limit-2757 - [0:0] :limit-2758 - [0:0] :limit-2759 - [0:0] :limit-276 - [0:0] :limit-2760 - [0:0] :limit-2761 - [0:0] :limit-2762 - [0:0] :limit-2763 - [0:0] :limit-2764 - [0:0] :limit-2765 - [0:0] :limit-2766 - [0:0] :limit-2767 - [0:0] :limit-2768 - [0:0] :limit-2769 - [0:0] :limit-277 - [0:0] :limit-2770 - [0:0] :limit-2771 - [0:0] :limit-2772 - [0:0] :limit-2773 - [0:0] :limit-2774 - [0:0] :limit-2775 - [0:0] :limit-2776 - [0:0] :limit-2777 - [0:0] :limit-2778 - [0:0] :limit-2779 - [0:0] :limit-278 - [0:0] :limit-2780 - [0:0] :limit-2781 - [0:0] :limit-2782 - [0:0] :limit-2783 - [0:0] :limit-2784 - [0:0] :limit-2785 - [0:0] :limit-2786 - [0:0] :limit-2787 - [0:0] :limit-2788 - [0:0] :limit-2789 - [0:0] :limit-279 - [0:0] :limit-2790 - [0:0] :limit-2791 - [0:0] :limit-2792 - [0:0] :limit-2793 - [0:0] :limit-2794 - [0:0] :limit-2795 - [0:0] :limit-2796 - [0:0] :limit-2797 - [0:0] :limit-2798 - [0:0] :limit-2799 - [0:0] :limit-28 - [0:0] :limit-280 - [0:0] :limit-2800 - [0:0] :limit-2801 - [0:0] :limit-2802 - [0:0] :limit-2803 - [0:0] :limit-2804 - [0:0] :limit-2805 - [0:0] :limit-2806 - [0:0] :limit-2807 - [0:0] :limit-2808 - [0:0] :limit-2809 - [0:0] :limit-281 - [0:0] :limit-2810 - [0:0] :limit-2811 - [0:0] :limit-2812 - [0:0] :limit-2813 - [0:0] :limit-2814 - [0:0] :limit-2815 - [0:0] :limit-2816 - [0:0] :limit-2817 - [0:0] :limit-2818 - [0:0] :limit-2819 - [0:0] :limit-282 - [0:0] :limit-2820 - [0:0] :limit-2821 - [0:0] :limit-2822 - [0:0] :limit-2823 - [0:0] :limit-2824 - [0:0] :limit-2825 - [0:0] :limit-2826 - [0:0] :limit-2827 - [0:0] :limit-2828 - [0:0] :limit-2829 - [0:0] :limit-283 - [0:0] :limit-2830 - [0:0] :limit-2831 - [0:0] :limit-2832 - [0:0] :limit-2833 - [0:0] :limit-2834 - [0:0] :limit-2835 - [0:0] :limit-2836 - [0:0] :limit-2837 - [0:0] :limit-2838 - [0:0] :limit-2839 - [0:0] :limit-284 - [0:0] :limit-2840 - [0:0] :limit-2841 - [0:0] :limit-2842 - [0:0] :limit-2843 - [0:0] :limit-2844 - [0:0] :limit-2845 - [0:0] :limit-2846 - [0:0] :limit-2847 - [0:0] :limit-2848 - [0:0] :limit-2849 - [0:0] :limit-285 - [0:0] :limit-2850 - [0:0] :limit-2851 - [0:0] :limit-2852 - [0:0] :limit-2853 - [0:0] :limit-2854 - [0:0] :limit-2855 - [0:0] :limit-2856 - [0:0] :limit-2857 - [0:0] :limit-2858 - [0:0] :limit-2859 - [0:0] :limit-286 - [0:0] :limit-2860 - [0:0] :limit-2861 - [0:0] :limit-2862 - [0:0] :limit-2863 - [0:0] :limit-2864 - [0:0] :limit-2865 - [0:0] :limit-2866 - [0:0] :limit-2867 - [0:0] :limit-2868 - [0:0] :limit-2869 - [0:0] :limit-287 - [0:0] :limit-2870 - [0:0] :limit-2871 - [0:0] :limit-2872 - [0:0] :limit-2873 - [0:0] :limit-2874 - [0:0] :limit-2875 - [0:0] :limit-2876 - [0:0] :limit-2877 - [0:0] :limit-2878 - [0:0] :limit-2879 - [0:0] :limit-288 - [0:0] :limit-2880 - [0:0] :limit-2881 - [0:0] :limit-2882 - [0:0] :limit-2883 - [0:0] :limit-2884 - [0:0] :limit-2885 - [0:0] :limit-2886 - [0:0] :limit-2887 - [0:0] :limit-2888 - [0:0] :limit-2889 - [0:0] :limit-289 - [0:0] :limit-2890 - [0:0] :limit-2891 - [0:0] :limit-2892 - [0:0] :limit-2893 - [0:0] :limit-2894 - [0:0] :limit-2895 - [0:0] :limit-2896 - [0:0] :limit-2897 - [0:0] :limit-2898 - [0:0] :limit-2899 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] :limit-2900 - [0:0] :limit-2901 - [0:0] :limit-2902 - [0:0] :limit-2903 - [0:0] :limit-2904 - [0:0] :limit-2905 - [0:0] :limit-2906 - [0:0] :limit-2907 - [0:0] :limit-2908 - [0:0] :limit-2909 - [0:0] :limit-291 - [0:0] :limit-2910 - [0:0] :limit-2911 - [0:0] :limit-2912 - [0:0] :limit-2913 - [0:0] :limit-2914 - [0:0] :limit-2915 - [0:0] :limit-2916 - [0:0] :limit-2917 - [0:0] :limit-2918 - [0:0] :limit-2919 - [0:0] :limit-292 - [0:0] :limit-2920 - [0:0] :limit-2921 - [0:0] :limit-2922 - [0:0] :limit-2923 - [0:0] :limit-2924 - [0:0] :limit-2925 - [0:0] :limit-2926 - [0:0] :limit-2927 - [0:0] :limit-293 - [0:0] :limit-294 - [0:0] :limit-295 - [0:0] :limit-296 - [0:0] :limit-297 - [0:0] :limit-298 - [0:0] :limit-299 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] :limit-301 - [0:0] :limit-302 - [0:0] :limit-303 - [0:0] :limit-304 - [0:0] :limit-305 - [0:0] :limit-306 - [0:0] :limit-307 - [0:0] :limit-308 - [0:0] :limit-309 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] :limit-311 - [0:0] :limit-312 - [0:0] :limit-313 - [0:0] :limit-314 - [0:0] :limit-315 - [0:0] :limit-316 - [0:0] :limit-317 - [0:0] :limit-318 - [0:0] :limit-319 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] :limit-321 - [0:0] :limit-322 - [0:0] :limit-323 - [0:0] :limit-324 - [0:0] :limit-325 - [0:0] :limit-326 - [0:0] :limit-327 - [0:0] :limit-328 - [0:0] :limit-329 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] :limit-331 - [0:0] :limit-332 - [0:0] :limit-333 - [0:0] :limit-334 - [0:0] :limit-335 - [0:0] :limit-336 - [0:0] :limit-337 - [0:0] :limit-338 - [0:0] :limit-339 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] :limit-341 - [0:0] :limit-342 - [0:0] :limit-343 - [0:0] :limit-344 - [0:0] :limit-345 - [0:0] :limit-346 - [0:0] :limit-347 - [0:0] :limit-348 - [0:0] :limit-349 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] :limit-351 - [0:0] :limit-352 - [0:0] :limit-353 - [0:0] :limit-354 - [0:0] :limit-355 - [0:0] :limit-356 - [0:0] :limit-357 - [0:0] :limit-358 - [0:0] :limit-359 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] :limit-361 - [0:0] :limit-362 - [0:0] :limit-363 - [0:0] :limit-364 - [0:0] :limit-365 - [0:0] :limit-366 - [0:0] :limit-367 - [0:0] :limit-368 - [0:0] :limit-369 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] :limit-371 - [0:0] :limit-372 - [0:0] :limit-373 - [0:0] :limit-374 - [0:0] :limit-375 - [0:0] :limit-376 - [0:0] :limit-377 - [0:0] :limit-378 - [0:0] :limit-379 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] :limit-381 - [0:0] :limit-382 - [0:0] :limit-383 - [0:0] :limit-384 - [0:0] :limit-385 - [0:0] :limit-386 - [0:0] :limit-387 - [0:0] :limit-388 - [0:0] :limit-389 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] :limit-394 - [0:0] :limit-395 - [0:0] :limit-396 - [0:0] :limit-397 - [0:0] :limit-398 - [0:0] :limit-399 - [0:0] :limit-4 - [0:0] :limit-40 - [0:0] :limit-400 - [0:0] :limit-401 - [0:0] :limit-402 - [0:0] :limit-403 - [0:0] :limit-404 - [0:0] :limit-405 - [0:0] :limit-406 - [0:0] :limit-407 - [0:0] :limit-408 - [0:0] :limit-409 - [0:0] :limit-41 - [0:0] :limit-410 - [0:0] :limit-411 - [0:0] :limit-412 - [0:0] :limit-413 - [0:0] :limit-414 - [0:0] :limit-415 - [0:0] :limit-416 - [0:0] :limit-417 - [0:0] :limit-418 - [0:0] :limit-419 - [0:0] :limit-42 - [0:0] :limit-420 - [0:0] :limit-421 - [0:0] :limit-422 - [0:0] :limit-423 - [0:0] :limit-424 - [0:0] :limit-425 - [0:0] :limit-426 - [0:0] :limit-427 - [0:0] :limit-428 - [0:0] :limit-429 - [0:0] :limit-43 - [0:0] :limit-430 - [0:0] :limit-431 - [0:0] :limit-432 - [0:0] :limit-433 - [0:0] :limit-434 - [0:0] :limit-435 - [0:0] :limit-436 - [0:0] :limit-437 - [0:0] :limit-438 - [0:0] :limit-439 - [0:0] :limit-44 - [0:0] :limit-440 - [0:0] :limit-441 - [0:0] :limit-442 - [0:0] :limit-443 - [0:0] :limit-444 - [0:0] :limit-445 - [0:0] :limit-446 - [0:0] :limit-447 - [0:0] :limit-448 - [0:0] :limit-449 - [0:0] :limit-45 - [0:0] :limit-450 - [0:0] :limit-451 - [0:0] :limit-452 - [0:0] :limit-453 - [0:0] :limit-454 - [0:0] :limit-455 - [0:0] :limit-456 - [0:0] :limit-457 - [0:0] :limit-458 - [0:0] :limit-459 - [0:0] :limit-46 - [0:0] :limit-460 - [0:0] :limit-461 - [0:0] :limit-462 - [0:0] :limit-463 - [0:0] :limit-464 - [0:0] :limit-465 - [0:0] :limit-466 - [0:0] :limit-467 - [0:0] :limit-468 - [0:0] :limit-469 - [0:0] :limit-47 - [0:0] :limit-470 - [0:0] :limit-471 - [0:0] :limit-472 - [0:0] :limit-473 - [0:0] :limit-474 - [0:0] :limit-475 - [0:0] :limit-476 - [0:0] :limit-477 - [0:0] :limit-478 - [0:0] :limit-479 - [0:0] :limit-48 - [0:0] :limit-480 - [0:0] :limit-481 - [0:0] :limit-482 - [0:0] :limit-483 - [0:0] :limit-484 - [0:0] :limit-485 - [0:0] :limit-486 - [0:0] :limit-487 - [0:0] :limit-488 - [0:0] :limit-489 - [0:0] :limit-49 - [0:0] :limit-490 - [0:0] :limit-491 - [0:0] :limit-492 - [0:0] :limit-493 - [0:0] :limit-494 - [0:0] :limit-495 - [0:0] :limit-496 - [0:0] :limit-497 - [0:0] :limit-498 - [0:0] :limit-499 - [0:0] :limit-5 - [0:0] :limit-50 - [0:0] :limit-500 - [0:0] :limit-501 - [0:0] :limit-502 - [0:0] :limit-503 - [0:0] :limit-504 - [0:0] :limit-505 - [0:0] :limit-506 - [0:0] :limit-507 - [0:0] :limit-508 - [0:0] :limit-509 - [0:0] :limit-51 - [0:0] :limit-510 - [0:0] :limit-511 - [0:0] :limit-512 - [0:0] :limit-513 - [0:0] :limit-514 - [0:0] :limit-515 - [0:0] :limit-516 - [0:0] :limit-517 - [0:0] :limit-518 - [0:0] :limit-519 - [0:0] :limit-52 - [0:0] :limit-520 - [0:0] :limit-521 - [0:0] :limit-522 - [0:0] :limit-523 - [0:0] :limit-524 - [0:0] :limit-525 - [0:0] :limit-526 - [0:0] :limit-527 - [0:0] :limit-528 - [0:0] :limit-529 - [0:0] :limit-53 - [0:0] :limit-530 - [0:0] :limit-531 - [0:0] :limit-532 - [0:0] :limit-533 - [0:0] :limit-534 - [0:0] :limit-535 - [0:0] :limit-536 - [0:0] :limit-537 - [0:0] :limit-538 - [0:0] :limit-539 - [0:0] :limit-54 - [0:0] :limit-540 - [0:0] :limit-541 - [0:0] :limit-542 - [0:0] :limit-543 - [0:0] :limit-544 - [0:0] :limit-545 - [0:0] :limit-546 - [0:0] :limit-547 - [0:0] :limit-548 - [0:0] :limit-549 - [0:0] :limit-55 - [0:0] :limit-550 - [0:0] :limit-551 - [0:0] :limit-552 - [0:0] :limit-553 - [0:0] :limit-554 - [0:0] :limit-555 - [0:0] :limit-556 - [0:0] :limit-557 - [0:0] :limit-558 - [0:0] :limit-559 - [0:0] :limit-56 - [0:0] :limit-560 - [0:0] :limit-561 - [0:0] :limit-562 - [0:0] :limit-563 - [0:0] :limit-564 - [0:0] :limit-565 - [0:0] :limit-566 - [0:0] :limit-567 - [0:0] :limit-568 - [0:0] :limit-569 - [0:0] :limit-57 - [0:0] :limit-570 - [0:0] :limit-571 - [0:0] :limit-572 - [0:0] :limit-573 - [0:0] :limit-574 - [0:0] :limit-575 - [0:0] :limit-576 - [0:0] :limit-577 - [0:0] :limit-578 - [0:0] :limit-579 - [0:0] :limit-58 - [0:0] :limit-580 - [0:0] :limit-581 - [0:0] :limit-582 - [0:0] :limit-583 - [0:0] :limit-584 - [0:0] :limit-585 - [0:0] :limit-586 - [0:0] :limit-587 - [0:0] :limit-588 - [0:0] :limit-589 - [0:0] :limit-59 - [0:0] :limit-590 - [0:0] :limit-591 - [0:0] :limit-592 - [0:0] :limit-593 - [0:0] :limit-594 - [0:0] :limit-595 - [0:0] :limit-596 - [0:0] :limit-597 - [0:0] :limit-598 - [0:0] :limit-599 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] :limit-600 - [0:0] :limit-601 - [0:0] :limit-602 - [0:0] :limit-603 - [0:0] :limit-604 - [0:0] :limit-605 - [0:0] :limit-606 - [0:0] :limit-607 - [0:0] :limit-608 - [0:0] :limit-609 - [0:0] :limit-61 - [0:0] :limit-610 - [0:0] :limit-611 - [0:0] :limit-612 - [0:0] :limit-613 - [0:0] :limit-614 - [0:0] :limit-615 - [0:0] :limit-616 - [0:0] :limit-617 - [0:0] :limit-618 - [0:0] :limit-619 - [0:0] :limit-62 - [0:0] :limit-620 - [0:0] :limit-621 - [0:0] :limit-622 - [0:0] :limit-623 - [0:0] :limit-624 - [0:0] :limit-625 - [0:0] :limit-626 - [0:0] :limit-627 - [0:0] :limit-628 - [0:0] :limit-629 - [0:0] :limit-63 - [0:0] :limit-630 - [0:0] :limit-631 - [0:0] :limit-632 - [0:0] :limit-633 - [0:0] :limit-634 - [0:0] :limit-635 - [0:0] :limit-636 - [0:0] :limit-637 - [0:0] :limit-638 - [0:0] :limit-639 - [0:0] :limit-64 - [0:0] :limit-640 - [0:0] :limit-641 - [0:0] :limit-642 - [0:0] :limit-643 - [0:0] :limit-644 - [0:0] :limit-645 - [0:0] :limit-646 - [0:0] :limit-647 - [0:0] :limit-648 - [0:0] :limit-649 - [0:0] :limit-65 - [0:0] :limit-650 - [0:0] :limit-651 - [0:0] :limit-652 - [0:0] :limit-653 - [0:0] :limit-654 - [0:0] :limit-655 - [0:0] :limit-656 - [0:0] :limit-657 - [0:0] :limit-658 - [0:0] :limit-659 - [0:0] :limit-66 - [0:0] :limit-660 - [0:0] :limit-661 - [0:0] :limit-662 - [0:0] :limit-663 - [0:0] :limit-664 - [0:0] :limit-665 - [0:0] :limit-666 - [0:0] :limit-667 - [0:0] :limit-668 - [0:0] :limit-669 - [0:0] :limit-67 - [0:0] :limit-670 - [0:0] :limit-671 - [0:0] :limit-672 - [0:0] :limit-673 - [0:0] :limit-674 - [0:0] :limit-675 - [0:0] :limit-676 - [0:0] :limit-677 - [0:0] :limit-678 - [0:0] :limit-679 - [0:0] :limit-68 - [0:0] :limit-680 - [0:0] :limit-681 - [0:0] :limit-682 - [0:0] :limit-683 - [0:0] :limit-684 - [0:0] :limit-685 - [0:0] :limit-686 - [0:0] :limit-687 - [0:0] :limit-688 - [0:0] :limit-689 - [0:0] :limit-69 - [0:0] :limit-690 - [0:0] :limit-691 - [0:0] :limit-692 - [0:0] :limit-693 - [0:0] :limit-694 - [0:0] :limit-695 - [0:0] :limit-696 - [0:0] :limit-697 - [0:0] :limit-698 - [0:0] :limit-699 - [0:0] :limit-7 - [0:0] :limit-70 - [0:0] :limit-700 - [0:0] :limit-701 - [0:0] :limit-702 - [0:0] :limit-703 - [0:0] :limit-704 - [0:0] :limit-705 - [0:0] :limit-706 - [0:0] :limit-707 - [0:0] :limit-708 - [0:0] :limit-709 - [0:0] :limit-71 - [0:0] :limit-710 - [0:0] :limit-711 - [0:0] :limit-712 - [0:0] :limit-713 - [0:0] :limit-714 - [0:0] :limit-715 - [0:0] :limit-716 - [0:0] :limit-717 - [0:0] :limit-718 - [0:0] :limit-719 - [0:0] :limit-72 - [0:0] :limit-720 - [0:0] :limit-721 - [0:0] :limit-722 - [0:0] :limit-723 - [0:0] :limit-724 - [0:0] :limit-725 - [0:0] :limit-726 - [0:0] :limit-727 - [0:0] :limit-728 - [0:0] :limit-729 - [0:0] :limit-73 - [0:0] :limit-730 - [0:0] :limit-731 - [0:0] :limit-732 - [0:0] :limit-733 - [0:0] :limit-734 - [0:0] :limit-735 - [0:0] :limit-736 - [0:0] :limit-737 - [0:0] :limit-738 - [0:0] :limit-739 - [0:0] :limit-74 - [0:0] :limit-740 - [0:0] :limit-741 - [0:0] :limit-742 - [0:0] :limit-743 - [0:0] :limit-744 - [0:0] :limit-745 - [0:0] :limit-746 - [0:0] :limit-747 - [0:0] :limit-748 - [0:0] :limit-749 - [0:0] :limit-75 - [0:0] :limit-750 - [0:0] :limit-751 - [0:0] :limit-752 - [0:0] :limit-753 - [0:0] :limit-754 - [0:0] :limit-755 - [0:0] :limit-756 - [0:0] :limit-757 - [0:0] :limit-758 - [0:0] :limit-759 - [0:0] :limit-76 - [0:0] :limit-760 - [0:0] :limit-761 - [0:0] :limit-762 - [0:0] :limit-763 - [0:0] :limit-764 - [0:0] :limit-765 - [0:0] :limit-766 - [0:0] :limit-767 - [0:0] :limit-768 - [0:0] :limit-769 - [0:0] :limit-77 - [0:0] :limit-770 - [0:0] :limit-771 - [0:0] :limit-772 - [0:0] :limit-773 - [0:0] :limit-774 - [0:0] :limit-775 - [0:0] :limit-776 - [0:0] :limit-777 - [0:0] :limit-778 - [0:0] :limit-779 - [0:0] :limit-78 - [0:0] :limit-780 - [0:0] :limit-781 - [0:0] :limit-782 - [0:0] :limit-783 - [0:0] :limit-784 - [0:0] :limit-785 - [0:0] :limit-786 - [0:0] :limit-787 - [0:0] :limit-788 - [0:0] :limit-789 - [0:0] :limit-79 - [0:0] :limit-790 - [0:0] :limit-791 - [0:0] :limit-792 - [0:0] :limit-793 - [0:0] :limit-794 - [0:0] :limit-795 - [0:0] :limit-796 - [0:0] :limit-797 - [0:0] :limit-798 - [0:0] :limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-800 - [0:0] :limit-801 - [0:0] :limit-802 - [0:0] :limit-803 - [0:0] :limit-804 - [0:0] :limit-805 - [0:0] :limit-806 - [0:0] :limit-807 - [0:0] :limit-808 - [0:0] :limit-809 - [0:0] :limit-81 - [0:0] :limit-810 - [0:0] :limit-811 - [0:0] :limit-812 - [0:0] :limit-813 - [0:0] :limit-814 - [0:0] :limit-815 - [0:0] :limit-816 - [0:0] :limit-817 - [0:0] :limit-818 - [0:0] :limit-819 - [0:0] :limit-82 - [0:0] :limit-820 - [0:0] :limit-821 - [0:0] :limit-822 - [0:0] :limit-823 - [0:0] :limit-824 - [0:0] :limit-825 - [0:0] :limit-826 - [0:0] :limit-827 - [0:0] :limit-828 - [0:0] :limit-829 - [0:0] :limit-83 - [0:0] :limit-830 - [0:0] :limit-831 - [0:0] :limit-832 - [0:0] :limit-833 - [0:0] :limit-834 - [0:0] :limit-835 - [0:0] :limit-836 - [0:0] :limit-837 - [0:0] :limit-838 - [0:0] :limit-839 - [0:0] :limit-84 - [0:0] :limit-840 - [0:0] :limit-841 - [0:0] :limit-842 - [0:0] :limit-843 - [0:0] :limit-844 - [0:0] :limit-845 - [0:0] :limit-846 - [0:0] :limit-847 - [0:0] :limit-848 - [0:0] :limit-849 - [0:0] :limit-85 - [0:0] :limit-850 - [0:0] :limit-851 - [0:0] :limit-852 - [0:0] :limit-853 - [0:0] :limit-854 - [0:0] :limit-855 - [0:0] :limit-856 - [0:0] :limit-857 - [0:0] :limit-858 - [0:0] :limit-859 - [0:0] :limit-86 - [0:0] :limit-860 - [0:0] :limit-861 - [0:0] :limit-862 - [0:0] :limit-863 - [0:0] :limit-864 - [0:0] :limit-865 - [0:0] :limit-866 - [0:0] :limit-867 - [0:0] :limit-868 - [0:0] :limit-869 - [0:0] :limit-87 - [0:0] :limit-870 - [0:0] :limit-871 - [0:0] :limit-872 - [0:0] :limit-873 - [0:0] :limit-874 - [0:0] :limit-875 - [0:0] :limit-876 - [0:0] :limit-877 - [0:0] :limit-878 - [0:0] :limit-879 - [0:0] :limit-88 - [0:0] :limit-880 - [0:0] :limit-881 - [0:0] :limit-882 - [0:0] :limit-883 - [0:0] :limit-884 - [0:0] :limit-885 - [0:0] :limit-886 - [0:0] :limit-887 - [0:0] :limit-888 - [0:0] :limit-889 - [0:0] :limit-89 - [0:0] :limit-890 - [0:0] :limit-891 - [0:0] :limit-892 - [0:0] :limit-893 - [0:0] :limit-894 - [0:0] :limit-895 - [0:0] :limit-896 - [0:0] :limit-897 - [0:0] :limit-898 - [0:0] :limit-899 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] :limit-900 - [0:0] :limit-901 - [0:0] :limit-902 - [0:0] :limit-903 - [0:0] :limit-904 - [0:0] :limit-905 - [0:0] :limit-906 - [0:0] :limit-907 - [0:0] :limit-908 - [0:0] :limit-909 - [0:0] :limit-91 - [0:0] :limit-910 - [0:0] :limit-911 - [0:0] :limit-912 - [0:0] :limit-913 - [0:0] :limit-914 - [0:0] :limit-915 - [0:0] :limit-916 - [0:0] :limit-917 - [0:0] :limit-918 - [0:0] :limit-919 - [0:0] :limit-92 - [0:0] :limit-920 - [0:0] :limit-921 - [0:0] :limit-922 - [0:0] :limit-923 - [0:0] :limit-924 - [0:0] :limit-925 - [0:0] :limit-926 - [0:0] :limit-927 - [0:0] :limit-928 - [0:0] :limit-929 - [0:0] :limit-93 - [0:0] :limit-930 - [0:0] :limit-931 - [0:0] :limit-932 - [0:0] :limit-933 - [0:0] :limit-934 - [0:0] :limit-935 - [0:0] :limit-936 - [0:0] :limit-937 - [0:0] :limit-938 - [0:0] :limit-939 - [0:0] :limit-94 - [0:0] :limit-940 - [0:0] :limit-941 - [0:0] :limit-942 - [0:0] :limit-943 - [0:0] :limit-944 - [0:0] :limit-945 - [0:0] :limit-946 - [0:0] :limit-947 - [0:0] :limit-948 - [0:0] :limit-949 - [0:0] :limit-95 - [0:0] :limit-950 - [0:0] :limit-951 - [0:0] :limit-952 - [0:0] :limit-953 - [0:0] :limit-954 - [0:0] :limit-955 - [0:0] :limit-956 - [0:0] :limit-957 - [0:0] :limit-958 - [0:0] :limit-959 - [0:0] :limit-96 - [0:0] :limit-960 - [0:0] :limit-961 - [0:0] :limit-962 - [0:0] :limit-963 - [0:0] :limit-964 - [0:0] :limit-965 - [0:0] :limit-966 - [0:0] :limit-967 - [0:0] :limit-968 - [0:0] :limit-969 - [0:0] :limit-97 - [0:0] :limit-970 - [0:0] :limit-971 - [0:0] :limit-972 - [0:0] :limit-973 - [0:0] :limit-974 - [0:0] :limit-975 - [0:0] :limit-976 - [0:0] :limit-977 - [0:0] :limit-978 - [0:0] :limit-979 - [0:0] :limit-98 - [0:0] :limit-980 - [0:0] :limit-981 - [0:0] :limit-982 - [0:0] :limit-983 - [0:0] :limit-984 - [0:0] :limit-985 - [0:0] :limit-986 - [0:0] :limit-987 - [0:0] :limit-988 - [0:0] :limit-989 - [0:0] :limit-99 - [0:0] :limit-990 - [0:0] :limit-991 - [0:0] :limit-992 - [0:0] :limit-993 - [0:0] :limit-994 - [0:0] :limit-995 - [0:0] :limit-996 - [0:0] :limit-997 - [0:0] :limit-998 - [0:0] :limit-999 - [0:0] :limit-ntp-0 - [0:0] :limit-ntp-1 - [0:0] :limit-ntp-10 - [0:0] :limit-ntp-100 - [0:0] :limit-ntp-101 - [0:0] :limit-ntp-102 - [0:0] :limit-ntp-103 - [0:0] :limit-ntp-104 - [0:0] :limit-ntp-105 - [0:0] :limit-ntp-106 - [0:0] :limit-ntp-107 - [0:0] :limit-ntp-108 - [0:0] :limit-ntp-109 - [0:0] :limit-ntp-11 - [0:0] :limit-ntp-110 - [0:0] :limit-ntp-111 - [0:0] :limit-ntp-112 - [0:0] :limit-ntp-113 - [0:0] :limit-ntp-114 - [0:0] :limit-ntp-115 - [0:0] :limit-ntp-116 - [0:0] :limit-ntp-117 - [0:0] :limit-ntp-118 - [0:0] :limit-ntp-119 - [0:0] :limit-ntp-12 - [0:0] :limit-ntp-120 - [0:0] :limit-ntp-122 - [0:0] :limit-ntp-123 - [0:0] :limit-ntp-124 - [0:0] :limit-ntp-125 - [0:0] :limit-ntp-126 - [0:0] :limit-ntp-128 - [0:0] :limit-ntp-129 - [0:0] :limit-ntp-13 - [0:0] :limit-ntp-130 - [0:0] :limit-ntp-131 - [0:0] :limit-ntp-132 - [0:0] :limit-ntp-133 - [0:0] :limit-ntp-134 - [0:0] :limit-ntp-135 - [0:0] :limit-ntp-136 - [0:0] :limit-ntp-137 - [0:0] :limit-ntp-138 - [0:0] :limit-ntp-139 - [0:0] :limit-ntp-14 - [0:0] :limit-ntp-140 - [0:0] :limit-ntp-142 - [0:0] :limit-ntp-143 - [0:0] :limit-ntp-144 - [0:0] :limit-ntp-145 - [0:0] :limit-ntp-146 - [0:0] :limit-ntp-148 - [0:0] :limit-ntp-149 - [0:0] :limit-ntp-15 - [0:0] :limit-ntp-150 - [0:0] :limit-ntp-151 - [0:0] :limit-ntp-152 - [0:0] :limit-ntp-153 - [0:0] :limit-ntp-154 - [0:0] :limit-ntp-155 - [0:0] :limit-ntp-156 - [0:0] :limit-ntp-157 - [0:0] :limit-ntp-158 - [0:0] :limit-ntp-159 - [0:0] :limit-ntp-16 - [0:0] :limit-ntp-160 - [0:0] :limit-ntp-162 - [0:0] :limit-ntp-163 - [0:0] :limit-ntp-164 - [0:0] :limit-ntp-165 - [0:0] :limit-ntp-166 - [0:0] :limit-ntp-168 - [0:0] :limit-ntp-169 - [0:0] :limit-ntp-17 - [0:0] :limit-ntp-170 - [0:0] :limit-ntp-171 - [0:0] :limit-ntp-172 - [0:0] :limit-ntp-173 - [0:0] :limit-ntp-174 - [0:0] :limit-ntp-175 - [0:0] :limit-ntp-176 - [0:0] :limit-ntp-177 - [0:0] :limit-ntp-178 - [0:0] :limit-ntp-179 - [0:0] :limit-ntp-18 - [0:0] :limit-ntp-180 - [0:0] :limit-ntp-182 - [0:0] :limit-ntp-183 - [0:0] :limit-ntp-184 - [0:0] :limit-ntp-185 - [0:0] :limit-ntp-186 - [0:0] :limit-ntp-188 - [0:0] :limit-ntp-189 - [0:0] :limit-ntp-19 - [0:0] :limit-ntp-190 - [0:0] :limit-ntp-191 - [0:0] :limit-ntp-192 - [0:0] :limit-ntp-193 - [0:0] :limit-ntp-194 - [0:0] :limit-ntp-195 - [0:0] :limit-ntp-196 - [0:0] :limit-ntp-197 - [0:0] :limit-ntp-198 - [0:0] :limit-ntp-199 - [0:0] :limit-ntp-2 - [0:0] :limit-ntp-20 - [0:0] :limit-ntp-200 - [0:0] :limit-ntp-201 - [0:0] :limit-ntp-202 - [0:0] :limit-ntp-203 - [0:0] :limit-ntp-204 - [0:0] :limit-ntp-205 - [0:0] :limit-ntp-206 - [0:0] :limit-ntp-207 - [0:0] :limit-ntp-208 - [0:0] :limit-ntp-209 - [0:0] :limit-ntp-21 - [0:0] :limit-ntp-210 - [0:0] :limit-ntp-212 - [0:0] :limit-ntp-213 - [0:0] :limit-ntp-214 - [0:0] :limit-ntp-215 - [0:0] :limit-ntp-216 - [0:0] :limit-ntp-218 - [0:0] :limit-ntp-219 - [0:0] :limit-ntp-22 - [0:0] :limit-ntp-220 - [0:0] :limit-ntp-221 - [0:0] :limit-ntp-222 - [0:0] :limit-ntp-223 - [0:0] :limit-ntp-224 - [0:0] :limit-ntp-225 - [0:0] :limit-ntp-226 - [0:0] :limit-ntp-227 - [0:0] :limit-ntp-228 - [0:0] :limit-ntp-229 - [0:0] :limit-ntp-23 - [0:0] :limit-ntp-230 - [0:0] :limit-ntp-232 - [0:0] :limit-ntp-233 - [0:0] :limit-ntp-234 - [0:0] :limit-ntp-235 - [0:0] :limit-ntp-236 - [0:0] :limit-ntp-238 - [0:0] :limit-ntp-239 - [0:0] :limit-ntp-24 - [0:0] :limit-ntp-240 - [0:0] :limit-ntp-241 - [0:0] :limit-ntp-242 - [0:0] :limit-ntp-243 - [0:0] :limit-ntp-244 - [0:0] :limit-ntp-245 - [0:0] :limit-ntp-246 - [0:0] :limit-ntp-247 - [0:0] :limit-ntp-248 - [0:0] :limit-ntp-249 - [0:0] :limit-ntp-25 - [0:0] :limit-ntp-250 - [0:0] :limit-ntp-252 - [0:0] :limit-ntp-253 - [0:0] :limit-ntp-254 - [0:0] :limit-ntp-255 - [0:0] :limit-ntp-256 - [0:0] :limit-ntp-258 - [0:0] :limit-ntp-259 - [0:0] :limit-ntp-26 - [0:0] :limit-ntp-260 - [0:0] :limit-ntp-261 - [0:0] :limit-ntp-262 - [0:0] :limit-ntp-263 - [0:0] :limit-ntp-264 - [0:0] :limit-ntp-265 - [0:0] :limit-ntp-266 - [0:0] :limit-ntp-267 - [0:0] :limit-ntp-268 - [0:0] :limit-ntp-269 - [0:0] :limit-ntp-27 - [0:0] :limit-ntp-270 - [0:0] :limit-ntp-272 - [0:0] :limit-ntp-273 - [0:0] :limit-ntp-274 - [0:0] :limit-ntp-275 - [0:0] :limit-ntp-276 - [0:0] :limit-ntp-278 - [0:0] :limit-ntp-279 - [0:0] :limit-ntp-28 - [0:0] :limit-ntp-280 - [0:0] :limit-ntp-281 - [0:0] :limit-ntp-282 - [0:0] :limit-ntp-283 - [0:0] :limit-ntp-284 - [0:0] :limit-ntp-285 - [0:0] :limit-ntp-286 - [0:0] :limit-ntp-287 - [0:0] :limit-ntp-288 - [0:0] :limit-ntp-289 - [0:0] :limit-ntp-29 - [0:0] :limit-ntp-290 - [0:0] :limit-ntp-291 - [0:0] :limit-ntp-292 - [0:0] :limit-ntp-293 - [0:0] :limit-ntp-294 - [0:0] :limit-ntp-295 - [0:0] :limit-ntp-296 - [0:0] :limit-ntp-297 - [0:0] :limit-ntp-298 - [0:0] :limit-ntp-299 - [0:0] :limit-ntp-3 - [0:0] :limit-ntp-30 - [0:0] :limit-ntp-300 - [0:0] :limit-ntp-302 - [0:0] :limit-ntp-303 - [0:0] :limit-ntp-304 - [0:0] :limit-ntp-305 - [0:0] :limit-ntp-306 - [0:0] :limit-ntp-308 - [0:0] :limit-ntp-309 - [0:0] :limit-ntp-310 - [0:0] :limit-ntp-311 - [0:0] :limit-ntp-312 - [0:0] :limit-ntp-313 - [0:0] :limit-ntp-314 - [0:0] :limit-ntp-315 - [0:0] :limit-ntp-316 - [0:0] :limit-ntp-317 - [0:0] :limit-ntp-318 - [0:0] :limit-ntp-319 - [0:0] :limit-ntp-32 - [0:0] :limit-ntp-320 - [0:0] :limit-ntp-322 - [0:0] :limit-ntp-323 - [0:0] :limit-ntp-324 - [0:0] :limit-ntp-325 - [0:0] :limit-ntp-326 - [0:0] :limit-ntp-328 - [0:0] :limit-ntp-329 - [0:0] :limit-ntp-33 - [0:0] :limit-ntp-330 - [0:0] :limit-ntp-331 - [0:0] :limit-ntp-332 - [0:0] :limit-ntp-333 - [0:0] :limit-ntp-334 - [0:0] :limit-ntp-335 - [0:0] :limit-ntp-336 - [0:0] :limit-ntp-337 - [0:0] :limit-ntp-338 - [0:0] :limit-ntp-339 - [0:0] :limit-ntp-34 - [0:0] :limit-ntp-340 - [0:0] :limit-ntp-342 - [0:0] :limit-ntp-343 - [0:0] :limit-ntp-344 - [0:0] :limit-ntp-345 - [0:0] :limit-ntp-346 - [0:0] :limit-ntp-348 - [0:0] :limit-ntp-349 - [0:0] :limit-ntp-35 - [0:0] :limit-ntp-350 - [0:0] :limit-ntp-351 - [0:0] :limit-ntp-352 - [0:0] :limit-ntp-353 - [0:0] :limit-ntp-354 - [0:0] :limit-ntp-355 - [0:0] :limit-ntp-356 - [0:0] :limit-ntp-357 - [0:0] :limit-ntp-358 - [0:0] :limit-ntp-359 - [0:0] :limit-ntp-36 - [0:0] :limit-ntp-360 - [0:0] :limit-ntp-362 - [0:0] :limit-ntp-363 - [0:0] :limit-ntp-364 - [0:0] :limit-ntp-365 - [0:0] :limit-ntp-366 - [0:0] :limit-ntp-368 - [0:0] :limit-ntp-369 - [0:0] :limit-ntp-370 - [0:0] :limit-ntp-371 - [0:0] :limit-ntp-372 - [0:0] :limit-ntp-373 - [0:0] :limit-ntp-374 - [0:0] :limit-ntp-375 - [0:0] :limit-ntp-376 - [0:0] :limit-ntp-377 - [0:0] :limit-ntp-378 - [0:0] :limit-ntp-379 - [0:0] :limit-ntp-38 - [0:0] :limit-ntp-380 - [0:0] :limit-ntp-381 - [0:0] :limit-ntp-382 - [0:0] :limit-ntp-383 - [0:0] :limit-ntp-384 - [0:0] :limit-ntp-385 - [0:0] :limit-ntp-386 - [0:0] :limit-ntp-387 - [0:0] :limit-ntp-388 - [0:0] :limit-ntp-389 - [0:0] :limit-ntp-39 - [0:0] :limit-ntp-390 - [0:0] :limit-ntp-392 - [0:0] :limit-ntp-393 - [0:0] :limit-ntp-394 - [0:0] :limit-ntp-395 - [0:0] :limit-ntp-396 - [0:0] :limit-ntp-398 - [0:0] :limit-ntp-399 - [0:0] :limit-ntp-4 - [0:0] :limit-ntp-40 - [0:0] :limit-ntp-400 - [0:0] :limit-ntp-401 - [0:0] :limit-ntp-402 - [0:0] :limit-ntp-403 - [0:0] :limit-ntp-404 - [0:0] :limit-ntp-405 - [0:0] :limit-ntp-406 - [0:0] :limit-ntp-407 - [0:0] :limit-ntp-408 - [0:0] :limit-ntp-409 - [0:0] :limit-ntp-41 - [0:0] :limit-ntp-410 - [0:0] :limit-ntp-412 - [0:0] :limit-ntp-413 - [0:0] :limit-ntp-414 - [0:0] :limit-ntp-415 - [0:0] :limit-ntp-416 - [0:0] :limit-ntp-418 - [0:0] :limit-ntp-419 - [0:0] :limit-ntp-42 - [0:0] :limit-ntp-420 - [0:0] :limit-ntp-421 - [0:0] :limit-ntp-422 - [0:0] :limit-ntp-423 - [0:0] :limit-ntp-424 - [0:0] :limit-ntp-425 - [0:0] :limit-ntp-426 - [0:0] :limit-ntp-427 - [0:0] :limit-ntp-428 - [0:0] :limit-ntp-429 - [0:0] :limit-ntp-43 - [0:0] :limit-ntp-430 - [0:0] :limit-ntp-432 - [0:0] :limit-ntp-433 - [0:0] :limit-ntp-434 - [0:0] :limit-ntp-435 - [0:0] :limit-ntp-436 - [0:0] :limit-ntp-438 - [0:0] :limit-ntp-439 - [0:0] :limit-ntp-44 - [0:0] :limit-ntp-440 - [0:0] :limit-ntp-441 - [0:0] :limit-ntp-442 - [0:0] :limit-ntp-443 - [0:0] :limit-ntp-444 - [0:0] :limit-ntp-445 - [0:0] :limit-ntp-446 - [0:0] :limit-ntp-447 - [0:0] :limit-ntp-448 - [0:0] :limit-ntp-449 - [0:0] :limit-ntp-45 - [0:0] :limit-ntp-450 - [0:0] :limit-ntp-452 - [0:0] :limit-ntp-453 - [0:0] :limit-ntp-454 - [0:0] :limit-ntp-455 - [0:0] :limit-ntp-456 - [0:0] :limit-ntp-458 - [0:0] :limit-ntp-459 - [0:0] :limit-ntp-46 - [0:0] :limit-ntp-460 - [0:0] :limit-ntp-461 - [0:0] :limit-ntp-462 - [0:0] :limit-ntp-463 - [0:0] :limit-ntp-464 - [0:0] :limit-ntp-465 - [0:0] :limit-ntp-466 - [0:0] :limit-ntp-467 - [0:0] :limit-ntp-468 - [0:0] :limit-ntp-469 - [0:0] :limit-ntp-47 - [0:0] :limit-ntp-470 - [0:0] :limit-ntp-471 - [0:0] :limit-ntp-472 - [0:0] :limit-ntp-473 - [0:0] :limit-ntp-474 - [0:0] :limit-ntp-475 - [0:0] :limit-ntp-476 - [0:0] :limit-ntp-477 - [0:0] :limit-ntp-478 - [0:0] :limit-ntp-479 - [0:0] :limit-ntp-48 - [0:0] :limit-ntp-480 - [0:0] :limit-ntp-482 - [0:0] :limit-ntp-483 - [0:0] :limit-ntp-484 - [0:0] :limit-ntp-485 - [0:0] :limit-ntp-486 - [0:0] :limit-ntp-488 - [0:0] :limit-ntp-489 - [0:0] :limit-ntp-49 - [0:0] :limit-ntp-490 - [0:0] :limit-ntp-491 - [0:0] :limit-ntp-492 - [0:0] :limit-ntp-493 - [0:0] :limit-ntp-494 - [0:0] :limit-ntp-495 - [0:0] :limit-ntp-496 - [0:0] :limit-ntp-497 - [0:0] :limit-ntp-498 - [0:0] :limit-ntp-499 - [0:0] :limit-ntp-5 - [0:0] :limit-ntp-50 - [0:0] :limit-ntp-500 - [0:0] :limit-ntp-502 - [0:0] :limit-ntp-503 - [0:0] :limit-ntp-504 - [0:0] :limit-ntp-505 - [0:0] :limit-ntp-506 - [0:0] :limit-ntp-508 - [0:0] :limit-ntp-509 - [0:0] :limit-ntp-510 - [0:0] :limit-ntp-511 - [0:0] :limit-ntp-512 - [0:0] :limit-ntp-513 - [0:0] :limit-ntp-514 - [0:0] :limit-ntp-515 - [0:0] :limit-ntp-516 - [0:0] :limit-ntp-517 - [0:0] :limit-ntp-518 - [0:0] :limit-ntp-519 - [0:0] :limit-ntp-52 - [0:0] :limit-ntp-520 - [0:0] :limit-ntp-522 - [0:0] :limit-ntp-523 - [0:0] :limit-ntp-524 - [0:0] :limit-ntp-525 - [0:0] :limit-ntp-526 - [0:0] :limit-ntp-528 - [0:0] :limit-ntp-529 - [0:0] :limit-ntp-53 - [0:0] :limit-ntp-530 - [0:0] :limit-ntp-531 - [0:0] :limit-ntp-532 - [0:0] :limit-ntp-533 - [0:0] :limit-ntp-534 - [0:0] :limit-ntp-535 - [0:0] :limit-ntp-536 - [0:0] :limit-ntp-537 - [0:0] :limit-ntp-538 - [0:0] :limit-ntp-539 - [0:0] :limit-ntp-54 - [0:0] :limit-ntp-540 - [0:0] :limit-ntp-542 - [0:0] :limit-ntp-543 - [0:0] :limit-ntp-544 - [0:0] :limit-ntp-545 - [0:0] :limit-ntp-546 - [0:0] :limit-ntp-548 - [0:0] :limit-ntp-549 - [0:0] :limit-ntp-55 - [0:0] :limit-ntp-550 - [0:0] :limit-ntp-551 - [0:0] :limit-ntp-552 - [0:0] :limit-ntp-553 - [0:0] :limit-ntp-554 - [0:0] :limit-ntp-555 - [0:0] :limit-ntp-556 - [0:0] :limit-ntp-557 - [0:0] :limit-ntp-558 - [0:0] :limit-ntp-559 - [0:0] :limit-ntp-56 - [0:0] :limit-ntp-560 - [0:0] :limit-ntp-561 - [0:0] :limit-ntp-562 - [0:0] :limit-ntp-563 - [0:0] :limit-ntp-564 - [0:0] :limit-ntp-565 - [0:0] :limit-ntp-566 - [0:0] :limit-ntp-567 - [0:0] :limit-ntp-568 - [0:0] :limit-ntp-569 - [0:0] :limit-ntp-570 - [0:0] :limit-ntp-572 - [0:0] :limit-ntp-573 - [0:0] :limit-ntp-574 - [0:0] :limit-ntp-575 - [0:0] :limit-ntp-576 - [0:0] :limit-ntp-578 - [0:0] :limit-ntp-579 - [0:0] :limit-ntp-58 - [0:0] :limit-ntp-580 - [0:0] :limit-ntp-581 - [0:0] :limit-ntp-582 - [0:0] :limit-ntp-583 - [0:0] :limit-ntp-584 - [0:0] :limit-ntp-585 - [0:0] :limit-ntp-586 - [0:0] :limit-ntp-587 - [0:0] :limit-ntp-588 - [0:0] :limit-ntp-589 - [0:0] :limit-ntp-59 - [0:0] :limit-ntp-590 - [0:0] :limit-ntp-592 - [0:0] :limit-ntp-593 - [0:0] :limit-ntp-594 - [0:0] :limit-ntp-595 - [0:0] :limit-ntp-596 - [0:0] :limit-ntp-598 - [0:0] :limit-ntp-599 - [0:0] :limit-ntp-6 - [0:0] :limit-ntp-60 - [0:0] :limit-ntp-600 - [0:0] :limit-ntp-601 - [0:0] :limit-ntp-602 - [0:0] :limit-ntp-603 - [0:0] :limit-ntp-604 - [0:0] :limit-ntp-605 - [0:0] :limit-ntp-606 - [0:0] :limit-ntp-607 - [0:0] :limit-ntp-608 - [0:0] :limit-ntp-609 - [0:0] :limit-ntp-61 - [0:0] :limit-ntp-610 - [0:0] :limit-ntp-612 - [0:0] :limit-ntp-613 - [0:0] :limit-ntp-614 - [0:0] :limit-ntp-615 - [0:0] :limit-ntp-616 - [0:0] :limit-ntp-618 - [0:0] :limit-ntp-619 - [0:0] :limit-ntp-62 - [0:0] :limit-ntp-620 - [0:0] :limit-ntp-621 - [0:0] :limit-ntp-622 - [0:0] :limit-ntp-623 - [0:0] :limit-ntp-624 - [0:0] :limit-ntp-625 - [0:0] :limit-ntp-626 - [0:0] :limit-ntp-627 - [0:0] :limit-ntp-628 - [0:0] :limit-ntp-629 - [0:0] :limit-ntp-63 - [0:0] :limit-ntp-630 - [0:0] :limit-ntp-632 - [0:0] :limit-ntp-633 - [0:0] :limit-ntp-634 - [0:0] :limit-ntp-635 - [0:0] :limit-ntp-636 - [0:0] :limit-ntp-638 - [0:0] :limit-ntp-639 - [0:0] :limit-ntp-64 - [0:0] :limit-ntp-640 - [0:0] :limit-ntp-641 - [0:0] :limit-ntp-642 - [0:0] :limit-ntp-643 - [0:0] :limit-ntp-644 - [0:0] :limit-ntp-645 - [0:0] :limit-ntp-646 - [0:0] :limit-ntp-647 - [0:0] :limit-ntp-648 - [0:0] :limit-ntp-649 - [0:0] :limit-ntp-65 - [0:0] :limit-ntp-650 - [0:0] :limit-ntp-651 - [0:0] :limit-ntp-652 - [0:0] :limit-ntp-653 - [0:0] :limit-ntp-654 - [0:0] :limit-ntp-655 - [0:0] :limit-ntp-656 - [0:0] :limit-ntp-657 - [0:0] :limit-ntp-658 - [0:0] :limit-ntp-659 - [0:0] :limit-ntp-66 - [0:0] :limit-ntp-660 - [0:0] :limit-ntp-662 - [0:0] :limit-ntp-663 - [0:0] :limit-ntp-664 - [0:0] :limit-ntp-665 - [0:0] :limit-ntp-666 - [0:0] :limit-ntp-668 - [0:0] :limit-ntp-669 - [0:0] :limit-ntp-67 - [0:0] :limit-ntp-670 - [0:0] :limit-ntp-671 - [0:0] :limit-ntp-672 - [0:0] :limit-ntp-673 - [0:0] :limit-ntp-674 - [0:0] :limit-ntp-675 - [0:0] :limit-ntp-676 - [0:0] :limit-ntp-677 - [0:0] :limit-ntp-678 - [0:0] :limit-ntp-679 - [0:0] :limit-ntp-68 - [0:0] :limit-ntp-680 - [0:0] :limit-ntp-682 - [0:0] :limit-ntp-683 - [0:0] :limit-ntp-684 - [0:0] :limit-ntp-685 - [0:0] :limit-ntp-686 - [0:0] :limit-ntp-688 - [0:0] :limit-ntp-689 - [0:0] :limit-ntp-69 - [0:0] :limit-ntp-690 - [0:0] :limit-ntp-691 - [0:0] :limit-ntp-692 - [0:0] :limit-ntp-693 - [0:0] :limit-ntp-694 - [0:0] :limit-ntp-695 - [0:0] :limit-ntp-696 - [0:0] :limit-ntp-697 - [0:0] :limit-ntp-698 - [0:0] :limit-ntp-699 - [0:0] :limit-ntp-7 - [0:0] :limit-ntp-70 - [0:0] :limit-ntp-700 - [0:0] :limit-ntp-702 - [0:0] :limit-ntp-703 - [0:0] :limit-ntp-704 - [0:0] :limit-ntp-705 - [0:0] :limit-ntp-706 - [0:0] :limit-ntp-708 - [0:0] :limit-ntp-709 - [0:0] :limit-ntp-710 - [0:0] :limit-ntp-711 - [0:0] :limit-ntp-712 - [0:0] :limit-ntp-713 - [0:0] :limit-ntp-714 - [0:0] :limit-ntp-715 - [0:0] :limit-ntp-716 - [0:0] :limit-ntp-717 - [0:0] :limit-ntp-718 - [0:0] :limit-ntp-719 - [0:0] :limit-ntp-72 - [0:0] :limit-ntp-720 - [0:0] :limit-ntp-722 - [0:0] :limit-ntp-723 - [0:0] :limit-ntp-724 - [0:0] :limit-ntp-725 - [0:0] :limit-ntp-726 - [0:0] :limit-ntp-728 - [0:0] :limit-ntp-729 - [0:0] :limit-ntp-73 - [0:0] :limit-ntp-730 - [0:0] :limit-ntp-731 - [0:0] :limit-ntp-732 - [0:0] :limit-ntp-733 - [0:0] :limit-ntp-734 - [0:0] :limit-ntp-735 - [0:0] :limit-ntp-736 - [0:0] :limit-ntp-737 - [0:0] :limit-ntp-738 - [0:0] :limit-ntp-739 - [0:0] :limit-ntp-74 - [0:0] :limit-ntp-740 - [0:0] :limit-ntp-741 - [0:0] :limit-ntp-742 - [0:0] :limit-ntp-743 - [0:0] :limit-ntp-744 - [0:0] :limit-ntp-745 - [0:0] :limit-ntp-746 - [0:0] :limit-ntp-747 - [0:0] :limit-ntp-748 - [0:0] :limit-ntp-749 - [0:0] :limit-ntp-75 - [0:0] :limit-ntp-750 - [0:0] :limit-ntp-752 - [0:0] :limit-ntp-753 - [0:0] :limit-ntp-754 - [0:0] :limit-ntp-755 - [0:0] :limit-ntp-756 - [0:0] :limit-ntp-758 - [0:0] :limit-ntp-759 - [0:0] :limit-ntp-76 - [0:0] :limit-ntp-760 - [0:0] :limit-ntp-761 - [0:0] :limit-ntp-762 - [0:0] :limit-ntp-763 - [0:0] :limit-ntp-764 - [0:0] :limit-ntp-765 - [0:0] :limit-ntp-766 - [0:0] :limit-ntp-767 - [0:0] :limit-ntp-768 - [0:0] :limit-ntp-769 - [0:0] :limit-ntp-770 - [0:0] :limit-ntp-772 - [0:0] :limit-ntp-773 - [0:0] :limit-ntp-774 - [0:0] :limit-ntp-775 - [0:0] :limit-ntp-776 - [0:0] :limit-ntp-778 - [0:0] :limit-ntp-779 - [0:0] :limit-ntp-78 - [0:0] :limit-ntp-780 - [0:0] :limit-ntp-781 - [0:0] :limit-ntp-782 - [0:0] :limit-ntp-783 - [0:0] :limit-ntp-784 - [0:0] :limit-ntp-785 - [0:0] :limit-ntp-786 - [0:0] :limit-ntp-787 - [0:0] :limit-ntp-788 - [0:0] :limit-ntp-789 - [0:0] :limit-ntp-79 - [0:0] :limit-ntp-790 - [0:0] :limit-ntp-792 - [0:0] :limit-ntp-793 - [0:0] :limit-ntp-794 - [0:0] :limit-ntp-795 - [0:0] :limit-ntp-796 - [0:0] :limit-ntp-798 - [0:0] :limit-ntp-799 - [0:0] :limit-ntp-8 - [0:0] :limit-ntp-80 - [0:0] :limit-ntp-800 - [0:0] :limit-ntp-801 - [0:0] :limit-ntp-802 - [0:0] :limit-ntp-803 - [0:0] :limit-ntp-804 - [0:0] :limit-ntp-805 - [0:0] :limit-ntp-806 - [0:0] :limit-ntp-807 - [0:0] :limit-ntp-808 - [0:0] :limit-ntp-809 - [0:0] :limit-ntp-81 - [0:0] :limit-ntp-810 - [0:0] :limit-ntp-812 - [0:0] :limit-ntp-813 - [0:0] :limit-ntp-814 - [0:0] :limit-ntp-815 - [0:0] :limit-ntp-816 - [0:0] :limit-ntp-818 - [0:0] :limit-ntp-819 - [0:0] :limit-ntp-82 - [0:0] :limit-ntp-820 - [0:0] :limit-ntp-821 - [0:0] :limit-ntp-822 - [0:0] :limit-ntp-823 - [0:0] :limit-ntp-824 - [0:0] :limit-ntp-825 - [0:0] :limit-ntp-826 - [0:0] :limit-ntp-827 - [0:0] :limit-ntp-828 - [0:0] :limit-ntp-829 - [0:0] :limit-ntp-83 - [0:0] :limit-ntp-830 - [0:0] :limit-ntp-831 - [0:0] :limit-ntp-832 - [0:0] :limit-ntp-833 - [0:0] :limit-ntp-834 - [0:0] :limit-ntp-835 - [0:0] :limit-ntp-836 - [0:0] :limit-ntp-837 - [0:0] :limit-ntp-838 - [0:0] :limit-ntp-839 - [0:0] :limit-ntp-84 - [0:0] :limit-ntp-840 - [0:0] :limit-ntp-842 - [0:0] :limit-ntp-843 - [0:0] :limit-ntp-844 - [0:0] :limit-ntp-845 - [0:0] :limit-ntp-846 - [0:0] :limit-ntp-848 - [0:0] :limit-ntp-849 - [0:0] :limit-ntp-85 - [0:0] :limit-ntp-850 - [0:0] :limit-ntp-851 - [0:0] :limit-ntp-852 - [0:0] :limit-ntp-853 - [0:0] :limit-ntp-854 - [0:0] :limit-ntp-855 - [0:0] :limit-ntp-856 - [0:0] :limit-ntp-857 - [0:0] :limit-ntp-858 - [0:0] :limit-ntp-859 - [0:0] :limit-ntp-86 - [0:0] :limit-ntp-860 - [0:0] :limit-ntp-862 - [0:0] :limit-ntp-863 - [0:0] :limit-ntp-864 - [0:0] :limit-ntp-865 - [0:0] :limit-ntp-866 - [0:0] :limit-ntp-868 - [0:0] :limit-ntp-869 - [0:0] :limit-ntp-87 - [0:0] :limit-ntp-870 - [0:0] :limit-ntp-871 - [0:0] :limit-ntp-872 - [0:0] :limit-ntp-873 - [0:0] :limit-ntp-874 - [0:0] :limit-ntp-875 - [0:0] :limit-ntp-876 - [0:0] :limit-ntp-877 - [0:0] :limit-ntp-878 - [0:0] :limit-ntp-879 - [0:0] :limit-ntp-88 - [0:0] :limit-ntp-880 - [0:0] :limit-ntp-882 - [0:0] :limit-ntp-883 - [0:0] :limit-ntp-884 - [0:0] :limit-ntp-885 - [0:0] :limit-ntp-886 - [0:0] :limit-ntp-888 - [0:0] :limit-ntp-889 - [0:0] :limit-ntp-89 - [0:0] :limit-ntp-890 - [0:0] :limit-ntp-891 - [0:0] :limit-ntp-892 - [0:0] :limit-ntp-893 - [0:0] :limit-ntp-894 - [0:0] :limit-ntp-895 - [0:0] :limit-ntp-896 - [0:0] :limit-ntp-897 - [0:0] :limit-ntp-898 - [0:0] :limit-ntp-899 - [0:0] :limit-ntp-9 - [0:0] :limit-ntp-90 - [0:0] :limit-ntp-900 - [0:0] :limit-ntp-902 - [0:0] :limit-ntp-903 - [0:0] :limit-ntp-904 - [0:0] :limit-ntp-905 - [0:0] :limit-ntp-906 - [0:0] :limit-ntp-908 - [0:0] :limit-ntp-909 - [0:0] :limit-ntp-910 - [0:0] :limit-ntp-911 - [0:0] :limit-ntp-912 - [0:0] :limit-ntp-913 - [0:0] :limit-ntp-914 - [0:0] :limit-ntp-915 - [0:0] :limit-ntp-916 - [0:0] :limit-ntp-917 - [0:0] :limit-ntp-918 - [0:0] :limit-ntp-919 - [0:0] :limit-ntp-92 - [0:0] :limit-ntp-920 - [0:0] :limit-ntp-921 - [0:0] :limit-ntp-922 - [0:0] :limit-ntp-923 - [0:0] :limit-ntp-924 - [0:0] :limit-ntp-925 - [0:0] :limit-ntp-926 - [0:0] :limit-ntp-927 - [0:0] :limit-ntp-928 - [0:0] :limit-ntp-929 - [0:0] :limit-ntp-93 - [0:0] :limit-ntp-930 - [0:0] :limit-ntp-931 - [0:0] :limit-ntp-932 - [0:0] :limit-ntp-933 - [0:0] :limit-ntp-934 - [0:0] :limit-ntp-935 - [0:0] :limit-ntp-936 - [0:0] :limit-ntp-937 - [0:0] :limit-ntp-938 - [0:0] :limit-ntp-939 - [0:0] :limit-ntp-94 - [0:0] :limit-ntp-940 - [0:0] :limit-ntp-941 - [0:0] :limit-ntp-942 - [0:0] :limit-ntp-943 - [0:0] :limit-ntp-944 - [0:0] :limit-ntp-945 - [0:0] :limit-ntp-946 - [0:0] :limit-ntp-947 - [0:0] :limit-ntp-948 - [0:0] :limit-ntp-949 - [0:0] :limit-ntp-95 - [0:0] :limit-ntp-950 - [0:0] :limit-ntp-951 - [0:0] :limit-ntp-952 - [0:0] :limit-ntp-953 - [0:0] :limit-ntp-954 - [0:0] :limit-ntp-955 - [0:0] :limit-ntp-956 - [0:0] :limit-ntp-957 - [0:0] :limit-ntp-958 - [0:0] :limit-ntp-959 - [0:0] :limit-ntp-96 - [0:0] :limit-ntp-960 - [0:0] :limit-ntp-961 - [0:0] :limit-ntp-962 - [0:0] :limit-ntp-963 - [0:0] :limit-ntp-964 - [0:0] :limit-ntp-965 - [0:0] :limit-ntp-966 - [0:0] :limit-ntp-967 - [0:0] :limit-ntp-968 - [0:0] :limit-ntp-969 - [0:0] :limit-ntp-970 - [0:0] :limit-ntp-971 - [0:0] :limit-ntp-972 - [0:0] :limit-ntp-973 - [0:0] :limit-ntp-974 - [0:0] :limit-ntp-975 - [0:0] :limit-ntp-98 - [0:0] :limit-ntp-99 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] :logaccept-14 - [0:0] :logaccept-15 - [0:0] :logaccept-16 - [0:0] :logaccept-17 - [0:0] :logaccept-18 - [0:0] :logaccept-19 - [0:0] :logaccept-2 - [0:0] :logaccept-20 - [0:0] :logaccept-21 - [0:0] :logaccept-22 - [0:0] :logaccept-23 - [0:0] :logaccept-24 - [0:0] :logaccept-25 - [0:0] :logaccept-26 - [0:0] :logaccept-27 - [0:0] :logaccept-28 - [0:0] :logaccept-29 - [0:0] :logaccept-3 - [0:0] :logaccept-30 - [0:0] :logaccept-31 - [0:0] :logaccept-32 - [0:0] :logaccept-33 - [0:0] :logaccept-34 - [0:0] :logaccept-35 - [0:0] :logaccept-36 - [0:0] :logaccept-37 - [0:0] :logaccept-38 - [0:0] :logaccept-39 - [0:0] :logaccept-4 - [0:0] :logaccept-40 - [0:0] :logaccept-41 - [0:0] :logaccept-42 - [0:0] :logaccept-43 - [0:0] :logaccept-44 - [0:0] :logaccept-45 - [0:0] :logaccept-46 - [0:0] :logaccept-47 - [0:0] :logaccept-48 - [0:0] :logaccept-49 - [0:0] :logaccept-5 - [0:0] :logaccept-50 - [0:0] :logaccept-51 - [0:0] :logaccept-52 - [0:0] :logaccept-53 - [0:0] :logaccept-54 - [0:0] :logaccept-55 - [0:0] :logaccept-56 - [0:0] :logaccept-57 - [0:0] :logaccept-58 - [0:0] :logaccept-59 - [0:0] :logaccept-6 - [0:0] :logaccept-60 - [0:0] :logaccept-61 - [0:0] :logaccept-62 - [0:0] :logaccept-63 - [0:0] :logaccept-64 - [0:0] :logaccept-65 - [0:0] :logaccept-66 - [0:0] :logaccept-67 - [0:0] :logaccept-68 - [0:0] :logaccept-69 - [0:0] :logaccept-7 - [0:0] :logaccept-8 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] :logaccept-final-100 - [0:0] :logaccept-final-101 - [0:0] :logaccept-final-102 - [0:0] :logaccept-final-103 - [0:0] :logaccept-final-104 - [0:0] :logaccept-final-105 - [0:0] :logaccept-final-106 - [0:0] :logaccept-final-107 - [0:0] :logaccept-final-108 - [0:0] :logaccept-final-109 - [0:0] :logaccept-final-11 - [0:0] :logaccept-final-110 - [0:0] :logaccept-final-111 - [0:0] :logaccept-final-112 - [0:0] :logaccept-final-113 - [0:0] :logaccept-final-114 - [0:0] :logaccept-final-115 - [0:0] :logaccept-final-116 - [0:0] :logaccept-final-117 - [0:0] :logaccept-final-118 - [0:0] :logaccept-final-119 - [0:0] :logaccept-final-12 - [0:0] :logaccept-final-120 - [0:0] :logaccept-final-121 - [0:0] :logaccept-final-122 - [0:0] :logaccept-final-123 - [0:0] :logaccept-final-124 - [0:0] :logaccept-final-125 - [0:0] :logaccept-final-126 - [0:0] :logaccept-final-127 - [0:0] :logaccept-final-128 - [0:0] :logaccept-final-129 - [0:0] :logaccept-final-13 - [0:0] :logaccept-final-130 - [0:0] :logaccept-final-131 - [0:0] :logaccept-final-132 - [0:0] :logaccept-final-133 - [0:0] :logaccept-final-134 - [0:0] :logaccept-final-135 - [0:0] :logaccept-final-136 - [0:0] :logaccept-final-137 - [0:0] :logaccept-final-138 - [0:0] :logaccept-final-139 - [0:0] :logaccept-final-14 - [0:0] :logaccept-final-140 - [0:0] :logaccept-final-141 - [0:0] :logaccept-final-142 - [0:0] :logaccept-final-143 - [0:0] :logaccept-final-144 - [0:0] :logaccept-final-145 - [0:0] :logaccept-final-146 - [0:0] :logaccept-final-147 - [0:0] :logaccept-final-148 - [0:0] :logaccept-final-149 - [0:0] :logaccept-final-15 - [0:0] :logaccept-final-150 - [0:0] :logaccept-final-151 - [0:0] :logaccept-final-152 - [0:0] :logaccept-final-153 - [0:0] :logaccept-final-154 - [0:0] :logaccept-final-155 - [0:0] :logaccept-final-156 - [0:0] :logaccept-final-157 - [0:0] :logaccept-final-158 - [0:0] :logaccept-final-159 - [0:0] :logaccept-final-16 - [0:0] :logaccept-final-160 - [0:0] :logaccept-final-161 - [0:0] :logaccept-final-162 - [0:0] :logaccept-final-163 - [0:0] :logaccept-final-164 - [0:0] :logaccept-final-165 - [0:0] :logaccept-final-166 - [0:0] :logaccept-final-167 - [0:0] :logaccept-final-168 - [0:0] :logaccept-final-169 - [0:0] :logaccept-final-17 - [0:0] :logaccept-final-170 - [0:0] :logaccept-final-171 - [0:0] :logaccept-final-172 - [0:0] :logaccept-final-173 - [0:0] :logaccept-final-174 - [0:0] :logaccept-final-175 - [0:0] :logaccept-final-176 - [0:0] :logaccept-final-177 - [0:0] :logaccept-final-178 - [0:0] :logaccept-final-179 - [0:0] :logaccept-final-18 - [0:0] :logaccept-final-180 - [0:0] :logaccept-final-181 - [0:0] :logaccept-final-182 - [0:0] :logaccept-final-183 - [0:0] :logaccept-final-184 - [0:0] :logaccept-final-185 - [0:0] :logaccept-final-186 - [0:0] :logaccept-final-187 - [0:0] :logaccept-final-188 - [0:0] :logaccept-final-189 - [0:0] :logaccept-final-19 - [0:0] :logaccept-final-190 - [0:0] :logaccept-final-191 - [0:0] :logaccept-final-192 - [0:0] :logaccept-final-193 - [0:0] :logaccept-final-194 - [0:0] :logaccept-final-195 - [0:0] :logaccept-final-196 - [0:0] :logaccept-final-197 - [0:0] :logaccept-final-198 - [0:0] :logaccept-final-199 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-20 - [0:0] :logaccept-final-200 - [0:0] :logaccept-final-201 - [0:0] :logaccept-final-202 - [0:0] :logaccept-final-203 - [0:0] :logaccept-final-204 - [0:0] :logaccept-final-205 - [0:0] :logaccept-final-206 - [0:0] :logaccept-final-207 - [0:0] :logaccept-final-208 - [0:0] :logaccept-final-209 - [0:0] :logaccept-final-21 - [0:0] :logaccept-final-210 - [0:0] :logaccept-final-211 - [0:0] :logaccept-final-212 - [0:0] :logaccept-final-213 - [0:0] :logaccept-final-214 - [0:0] :logaccept-final-215 - [0:0] :logaccept-final-216 - [0:0] :logaccept-final-217 - [0:0] :logaccept-final-218 - [0:0] :logaccept-final-219 - [0:0] :logaccept-final-22 - [0:0] :logaccept-final-220 - [0:0] :logaccept-final-221 - [0:0] :logaccept-final-222 - [0:0] :logaccept-final-223 - [0:0] :logaccept-final-224 - [0:0] :logaccept-final-225 - [0:0] :logaccept-final-226 - [0:0] :logaccept-final-227 - [0:0] :logaccept-final-228 - [0:0] :logaccept-final-229 - [0:0] :logaccept-final-23 - [0:0] :logaccept-final-230 - [0:0] :logaccept-final-231 - [0:0] :logaccept-final-232 - [0:0] :logaccept-final-233 - [0:0] :logaccept-final-234 - [0:0] :logaccept-final-235 - [0:0] :logaccept-final-236 - [0:0] :logaccept-final-237 - [0:0] :logaccept-final-238 - [0:0] :logaccept-final-239 - [0:0] :logaccept-final-24 - [0:0] :logaccept-final-240 - [0:0] :logaccept-final-241 - [0:0] :logaccept-final-242 - [0:0] :logaccept-final-243 - [0:0] :logaccept-final-244 - [0:0] :logaccept-final-245 - [0:0] :logaccept-final-246 - [0:0] :logaccept-final-247 - [0:0] :logaccept-final-248 - [0:0] :logaccept-final-249 - [0:0] :logaccept-final-25 - [0:0] :logaccept-final-250 - [0:0] :logaccept-final-251 - [0:0] :logaccept-final-252 - [0:0] :logaccept-final-253 - [0:0] :logaccept-final-254 - [0:0] :logaccept-final-255 - [0:0] :logaccept-final-256 - [0:0] :logaccept-final-257 - [0:0] :logaccept-final-258 - [0:0] :logaccept-final-259 - [0:0] :logaccept-final-26 - [0:0] :logaccept-final-260 - [0:0] :logaccept-final-261 - [0:0] :logaccept-final-262 - [0:0] :logaccept-final-263 - [0:0] :logaccept-final-264 - [0:0] :logaccept-final-265 - [0:0] :logaccept-final-266 - [0:0] :logaccept-final-267 - [0:0] :logaccept-final-268 - [0:0] :logaccept-final-269 - [0:0] :logaccept-final-27 - [0:0] :logaccept-final-270 - [0:0] :logaccept-final-271 - [0:0] :logaccept-final-272 - [0:0] :logaccept-final-273 - [0:0] :logaccept-final-274 - [0:0] :logaccept-final-275 - [0:0] :logaccept-final-276 - [0:0] :logaccept-final-277 - [0:0] :logaccept-final-278 - [0:0] :logaccept-final-279 - [0:0] :logaccept-final-28 - [0:0] :logaccept-final-280 - [0:0] :logaccept-final-281 - [0:0] :logaccept-final-282 - [0:0] :logaccept-final-283 - [0:0] :logaccept-final-284 - [0:0] :logaccept-final-285 - [0:0] :logaccept-final-286 - [0:0] :logaccept-final-287 - [0:0] :logaccept-final-288 - [0:0] :logaccept-final-289 - [0:0] :logaccept-final-29 - [0:0] :logaccept-final-290 - [0:0] :logaccept-final-291 - [0:0] :logaccept-final-292 - [0:0] :logaccept-final-293 - [0:0] :logaccept-final-294 - [0:0] :logaccept-final-295 - [0:0] :logaccept-final-296 - [0:0] :logaccept-final-297 - [0:0] :logaccept-final-298 - [0:0] :logaccept-final-299 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-30 - [0:0] :logaccept-final-300 - [0:0] :logaccept-final-301 - [0:0] :logaccept-final-302 - [0:0] :logaccept-final-303 - [0:0] :logaccept-final-304 - [0:0] :logaccept-final-305 - [0:0] :logaccept-final-31 - [0:0] :logaccept-final-32 - [0:0] :logaccept-final-33 - [0:0] :logaccept-final-34 - [0:0] :logaccept-final-35 - [0:0] :logaccept-final-36 - [0:0] :logaccept-final-37 - [0:0] :logaccept-final-38 - [0:0] :logaccept-final-39 - [0:0] :logaccept-final-4 - [0:0] :logaccept-final-40 - [0:0] :logaccept-final-41 - [0:0] :logaccept-final-42 - [0:0] :logaccept-final-43 - [0:0] :logaccept-final-44 - [0:0] :logaccept-final-45 - [0:0] :logaccept-final-46 - [0:0] :logaccept-final-47 - [0:0] :logaccept-final-48 - [0:0] :logaccept-final-49 - [0:0] :logaccept-final-5 - [0:0] :logaccept-final-50 - [0:0] :logaccept-final-51 - [0:0] :logaccept-final-52 - [0:0] :logaccept-final-53 - [0:0] :logaccept-final-54 - [0:0] :logaccept-final-55 - [0:0] :logaccept-final-56 - [0:0] :logaccept-final-57 - [0:0] :logaccept-final-58 - [0:0] :logaccept-final-59 - [0:0] :logaccept-final-6 - [0:0] :logaccept-final-60 - [0:0] :logaccept-final-61 - [0:0] :logaccept-final-62 - [0:0] :logaccept-final-63 - [0:0] :logaccept-final-64 - [0:0] :logaccept-final-65 - [0:0] :logaccept-final-66 - [0:0] :logaccept-final-67 - [0:0] :logaccept-final-68 - [0:0] :logaccept-final-69 - [0:0] :logaccept-final-7 - [0:0] :logaccept-final-70 - [0:0] :logaccept-final-71 - [0:0] :logaccept-final-72 - [0:0] :logaccept-final-73 - [0:0] :logaccept-final-74 - [0:0] :logaccept-final-75 - [0:0] :logaccept-final-76 - [0:0] :logaccept-final-77 - [0:0] :logaccept-final-78 - [0:0] :logaccept-final-79 - [0:0] :logaccept-final-8 - [0:0] :logaccept-final-80 - [0:0] :logaccept-final-81 - [0:0] :logaccept-final-82 - [0:0] :logaccept-final-83 - [0:0] :logaccept-final-84 - [0:0] :logaccept-final-85 - [0:0] :logaccept-final-86 - [0:0] :logaccept-final-87 - [0:0] :logaccept-final-88 - [0:0] :logaccept-final-89 - [0:0] :logaccept-final-9 - [0:0] :logaccept-final-90 - [0:0] :logaccept-final-91 - [0:0] :logaccept-final-92 - [0:0] :logaccept-final-93 - [0:0] :logaccept-final-94 - [0:0] :logaccept-final-95 - [0:0] :logaccept-final-96 - [0:0] :logaccept-final-97 - [0:0] :logaccept-final-98 - [0:0] :logaccept-final-99 - [0:0] :logaccept-ntp-0 - [0:0] :logaccept-ntp-1 - [0:0] :logaccept-ntp-10 - [0:0] :logaccept-ntp-11 - [0:0] :logaccept-ntp-12 - [0:0] :logaccept-ntp-13 - [0:0] :logaccept-ntp-14 - [0:0] :logaccept-ntp-15 - [0:0] :logaccept-ntp-16 - [0:0] :logaccept-ntp-17 - [0:0] :logaccept-ntp-18 - [0:0] :logaccept-ntp-19 - [0:0] :logaccept-ntp-2 - [0:0] :logaccept-ntp-20 - [0:0] :logaccept-ntp-21 - [0:0] :logaccept-ntp-22 - [0:0] :logaccept-ntp-23 - [0:0] :logaccept-ntp-24 - [0:0] :logaccept-ntp-25 - [0:0] :logaccept-ntp-26 - [0:0] :logaccept-ntp-27 - [0:0] :logaccept-ntp-28 - [0:0] :logaccept-ntp-29 - [0:0] :logaccept-ntp-3 - [0:0] :logaccept-ntp-30 - [0:0] :logaccept-ntp-31 - [0:0] :logaccept-ntp-32 - [0:0] :logaccept-ntp-4 - [0:0] :logaccept-ntp-5 - [0:0] :logaccept-ntp-6 - [0:0] :logaccept-ntp-7 - [0:0] :logaccept-ntp-8 - [0:0] :logaccept-ntp-9 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] :logdrop-100 - [0:0] :logdrop-1000 - [0:0] :logdrop-1001 - [0:0] :logdrop-1002 - [0:0] :logdrop-1003 - [0:0] :logdrop-1004 - [0:0] :logdrop-1005 - [0:0] :logdrop-1006 - [0:0] :logdrop-1007 - [0:0] :logdrop-1008 - [0:0] :logdrop-1009 - [0:0] :logdrop-101 - [0:0] :logdrop-1010 - [0:0] :logdrop-1011 - [0:0] :logdrop-1012 - [0:0] :logdrop-1013 - [0:0] :logdrop-1014 - [0:0] :logdrop-1015 - [0:0] :logdrop-1016 - [0:0] :logdrop-1017 - [0:0] :logdrop-1018 - [0:0] :logdrop-1019 - [0:0] :logdrop-102 - [0:0] :logdrop-1020 - [0:0] :logdrop-1021 - [0:0] :logdrop-1022 - [0:0] :logdrop-1023 - [0:0] :logdrop-1024 - [0:0] :logdrop-1025 - [0:0] :logdrop-1026 - [0:0] :logdrop-1027 - [0:0] :logdrop-1028 - [0:0] :logdrop-1029 - [0:0] :logdrop-103 - [0:0] :logdrop-1030 - [0:0] :logdrop-1031 - [0:0] :logdrop-1032 - [0:0] :logdrop-1033 - [0:0] :logdrop-1034 - [0:0] :logdrop-1035 - [0:0] :logdrop-1036 - [0:0] :logdrop-1037 - [0:0] :logdrop-1038 - [0:0] :logdrop-1039 - [0:0] :logdrop-104 - [0:0] :logdrop-1040 - [0:0] :logdrop-1041 - [0:0] :logdrop-1042 - [0:0] :logdrop-1043 - [0:0] :logdrop-1044 - [0:0] :logdrop-1045 - [0:0] :logdrop-1046 - [0:0] :logdrop-1047 - [0:0] :logdrop-1048 - [0:0] :logdrop-1049 - [0:0] :logdrop-105 - [0:0] :logdrop-1050 - [0:0] :logdrop-1051 - [0:0] :logdrop-1052 - [0:0] :logdrop-1053 - [0:0] :logdrop-1054 - [0:0] :logdrop-1055 - [0:0] :logdrop-1056 - [0:0] :logdrop-1057 - [0:0] :logdrop-1058 - [0:0] :logdrop-1059 - [0:0] :logdrop-106 - [0:0] :logdrop-1060 - [0:0] :logdrop-1061 - [0:0] :logdrop-1062 - [0:0] :logdrop-1063 - [0:0] :logdrop-1064 - [0:0] :logdrop-1065 - [0:0] :logdrop-1066 - [0:0] :logdrop-1067 - [0:0] :logdrop-1068 - [0:0] :logdrop-1069 - [0:0] :logdrop-107 - [0:0] :logdrop-1070 - [0:0] :logdrop-1071 - [0:0] :logdrop-1072 - [0:0] :logdrop-1073 - [0:0] :logdrop-1074 - [0:0] :logdrop-1075 - [0:0] :logdrop-1076 - [0:0] :logdrop-1077 - [0:0] :logdrop-1078 - [0:0] :logdrop-1079 - [0:0] :logdrop-108 - [0:0] :logdrop-1080 - [0:0] :logdrop-1081 - [0:0] :logdrop-1082 - [0:0] :logdrop-1083 - [0:0] :logdrop-1084 - [0:0] :logdrop-1085 - [0:0] :logdrop-1086 - [0:0] :logdrop-1087 - [0:0] :logdrop-1088 - [0:0] :logdrop-1089 - [0:0] :logdrop-109 - [0:0] :logdrop-1090 - [0:0] :logdrop-1091 - [0:0] :logdrop-1092 - [0:0] :logdrop-1093 - [0:0] :logdrop-1094 - [0:0] :logdrop-1095 - [0:0] :logdrop-1096 - [0:0] :logdrop-1097 - [0:0] :logdrop-1098 - [0:0] :logdrop-1099 - [0:0] :logdrop-11 - [0:0] :logdrop-110 - [0:0] :logdrop-1100 - [0:0] :logdrop-1101 - [0:0] :logdrop-1102 - [0:0] :logdrop-1103 - [0:0] :logdrop-1104 - [0:0] :logdrop-1105 - [0:0] :logdrop-1106 - [0:0] :logdrop-1107 - [0:0] :logdrop-1108 - [0:0] :logdrop-1109 - [0:0] :logdrop-111 - [0:0] :logdrop-1110 - [0:0] :logdrop-1111 - [0:0] :logdrop-1112 - [0:0] :logdrop-1113 - [0:0] :logdrop-1114 - [0:0] :logdrop-1115 - [0:0] :logdrop-1116 - [0:0] :logdrop-1117 - [0:0] :logdrop-1118 - [0:0] :logdrop-1119 - [0:0] :logdrop-112 - [0:0] :logdrop-1120 - [0:0] :logdrop-1121 - [0:0] :logdrop-1122 - [0:0] :logdrop-1123 - [0:0] :logdrop-1124 - [0:0] :logdrop-1125 - [0:0] :logdrop-1126 - [0:0] :logdrop-1127 - [0:0] :logdrop-1128 - [0:0] :logdrop-1129 - [0:0] :logdrop-113 - [0:0] :logdrop-1130 - [0:0] :logdrop-1131 - [0:0] :logdrop-1132 - [0:0] :logdrop-1133 - [0:0] :logdrop-1134 - [0:0] :logdrop-1135 - [0:0] :logdrop-1136 - [0:0] :logdrop-1137 - [0:0] :logdrop-1138 - [0:0] :logdrop-1139 - [0:0] :logdrop-114 - [0:0] :logdrop-1140 - [0:0] :logdrop-1141 - [0:0] :logdrop-1142 - [0:0] :logdrop-1143 - [0:0] :logdrop-1144 - [0:0] :logdrop-1145 - [0:0] :logdrop-1146 - [0:0] :logdrop-1147 - [0:0] :logdrop-1148 - [0:0] :logdrop-1149 - [0:0] :logdrop-115 - [0:0] :logdrop-1150 - [0:0] :logdrop-1151 - [0:0] :logdrop-1152 - [0:0] :logdrop-1153 - [0:0] :logdrop-1154 - [0:0] :logdrop-1155 - [0:0] :logdrop-1156 - [0:0] :logdrop-1157 - [0:0] :logdrop-1158 - [0:0] :logdrop-1159 - [0:0] :logdrop-116 - [0:0] :logdrop-1160 - [0:0] :logdrop-1161 - [0:0] :logdrop-1162 - [0:0] :logdrop-1163 - [0:0] :logdrop-1164 - [0:0] :logdrop-1165 - [0:0] :logdrop-1166 - [0:0] :logdrop-1167 - [0:0] :logdrop-1168 - [0:0] :logdrop-1169 - [0:0] :logdrop-117 - [0:0] :logdrop-1170 - [0:0] :logdrop-1171 - [0:0] :logdrop-1172 - [0:0] :logdrop-1173 - [0:0] :logdrop-1174 - [0:0] :logdrop-1175 - [0:0] :logdrop-1176 - [0:0] :logdrop-1177 - [0:0] :logdrop-1178 - [0:0] :logdrop-1179 - [0:0] :logdrop-118 - [0:0] :logdrop-1180 - [0:0] :logdrop-1181 - [0:0] :logdrop-1182 - [0:0] :logdrop-1183 - [0:0] :logdrop-1184 - [0:0] :logdrop-1185 - [0:0] :logdrop-1186 - [0:0] :logdrop-1187 - [0:0] :logdrop-1188 - [0:0] :logdrop-1189 - [0:0] :logdrop-119 - [0:0] :logdrop-1190 - [0:0] :logdrop-1191 - [0:0] :logdrop-1192 - [0:0] :logdrop-1193 - [0:0] :logdrop-1194 - [0:0] :logdrop-1195 - [0:0] :logdrop-1196 - [0:0] :logdrop-1197 - [0:0] :logdrop-1198 - [0:0] :logdrop-1199 - [0:0] :logdrop-12 - [0:0] :logdrop-120 - [0:0] :logdrop-1200 - [0:0] :logdrop-1201 - [0:0] :logdrop-1202 - [0:0] :logdrop-1203 - [0:0] :logdrop-1204 - [0:0] :logdrop-1205 - [0:0] :logdrop-1206 - [0:0] :logdrop-1207 - [0:0] :logdrop-1208 - [0:0] :logdrop-1209 - [0:0] :logdrop-121 - [0:0] :logdrop-1210 - [0:0] :logdrop-1211 - [0:0] :logdrop-1212 - [0:0] :logdrop-1213 - [0:0] :logdrop-1214 - [0:0] :logdrop-1215 - [0:0] :logdrop-1216 - [0:0] :logdrop-1217 - [0:0] :logdrop-1218 - [0:0] :logdrop-1219 - [0:0] :logdrop-122 - [0:0] :logdrop-1220 - [0:0] :logdrop-1221 - [0:0] :logdrop-1222 - [0:0] :logdrop-1223 - [0:0] :logdrop-1224 - [0:0] :logdrop-1225 - [0:0] :logdrop-1226 - [0:0] :logdrop-1227 - [0:0] :logdrop-1228 - [0:0] :logdrop-1229 - [0:0] :logdrop-123 - [0:0] :logdrop-1230 - [0:0] :logdrop-1231 - [0:0] :logdrop-1232 - [0:0] :logdrop-1233 - [0:0] :logdrop-1234 - [0:0] :logdrop-1235 - [0:0] :logdrop-1236 - [0:0] :logdrop-1237 - [0:0] :logdrop-1238 - [0:0] :logdrop-1239 - [0:0] :logdrop-124 - [0:0] :logdrop-1240 - [0:0] :logdrop-1241 - [0:0] :logdrop-1242 - [0:0] :logdrop-1243 - [0:0] :logdrop-1244 - [0:0] :logdrop-1245 - [0:0] :logdrop-1246 - [0:0] :logdrop-1247 - [0:0] :logdrop-1248 - [0:0] :logdrop-1249 - [0:0] :logdrop-125 - [0:0] :logdrop-1250 - [0:0] :logdrop-1251 - [0:0] :logdrop-1252 - [0:0] :logdrop-1253 - [0:0] :logdrop-1254 - [0:0] :logdrop-1255 - [0:0] :logdrop-1256 - [0:0] :logdrop-1257 - [0:0] :logdrop-1258 - [0:0] :logdrop-1259 - [0:0] :logdrop-126 - [0:0] :logdrop-1260 - [0:0] :logdrop-1261 - [0:0] :logdrop-1262 - [0:0] :logdrop-1263 - [0:0] :logdrop-1264 - [0:0] :logdrop-1265 - [0:0] :logdrop-1266 - [0:0] :logdrop-1267 - [0:0] :logdrop-1268 - [0:0] :logdrop-1269 - [0:0] :logdrop-127 - [0:0] :logdrop-1270 - [0:0] :logdrop-1271 - [0:0] :logdrop-1272 - [0:0] :logdrop-1273 - [0:0] :logdrop-1274 - [0:0] :logdrop-1275 - [0:0] :logdrop-1276 - [0:0] :logdrop-1277 - [0:0] :logdrop-1278 - [0:0] :logdrop-1279 - [0:0] :logdrop-128 - [0:0] :logdrop-1280 - [0:0] :logdrop-1281 - [0:0] :logdrop-1282 - [0:0] :logdrop-1283 - [0:0] :logdrop-1284 - [0:0] :logdrop-1285 - [0:0] :logdrop-1286 - [0:0] :logdrop-1287 - [0:0] :logdrop-1288 - [0:0] :logdrop-1289 - [0:0] :logdrop-129 - [0:0] :logdrop-1290 - [0:0] :logdrop-1291 - [0:0] :logdrop-1292 - [0:0] :logdrop-1293 - [0:0] :logdrop-1294 - [0:0] :logdrop-1295 - [0:0] :logdrop-1296 - [0:0] :logdrop-1297 - [0:0] :logdrop-1298 - [0:0] :logdrop-1299 - [0:0] :logdrop-13 - [0:0] :logdrop-130 - [0:0] :logdrop-1300 - [0:0] :logdrop-1301 - [0:0] :logdrop-1302 - [0:0] :logdrop-1303 - [0:0] :logdrop-1304 - [0:0] :logdrop-1305 - [0:0] :logdrop-1306 - [0:0] :logdrop-1307 - [0:0] :logdrop-1308 - [0:0] :logdrop-1309 - [0:0] :logdrop-131 - [0:0] :logdrop-1310 - [0:0] :logdrop-1311 - [0:0] :logdrop-1312 - [0:0] :logdrop-1313 - [0:0] :logdrop-1314 - [0:0] :logdrop-1315 - [0:0] :logdrop-1316 - [0:0] :logdrop-1317 - [0:0] :logdrop-1318 - [0:0] :logdrop-1319 - [0:0] :logdrop-132 - [0:0] :logdrop-1320 - [0:0] :logdrop-1321 - [0:0] :logdrop-1322 - [0:0] :logdrop-1323 - [0:0] :logdrop-1324 - [0:0] :logdrop-1325 - [0:0] :logdrop-1326 - [0:0] :logdrop-1327 - [0:0] :logdrop-1328 - [0:0] :logdrop-1329 - [0:0] :logdrop-133 - [0:0] :logdrop-1330 - [0:0] :logdrop-1331 - [0:0] :logdrop-1332 - [0:0] :logdrop-1333 - [0:0] :logdrop-1334 - [0:0] :logdrop-1335 - [0:0] :logdrop-1336 - [0:0] :logdrop-1337 - [0:0] :logdrop-1338 - [0:0] :logdrop-1339 - [0:0] :logdrop-134 - [0:0] :logdrop-1340 - [0:0] :logdrop-1341 - [0:0] :logdrop-1342 - [0:0] :logdrop-1343 - [0:0] :logdrop-1344 - [0:0] :logdrop-1345 - [0:0] :logdrop-1346 - [0:0] :logdrop-1347 - [0:0] :logdrop-1348 - [0:0] :logdrop-1349 - [0:0] :logdrop-135 - [0:0] :logdrop-1350 - [0:0] :logdrop-1351 - [0:0] :logdrop-1352 - [0:0] :logdrop-1353 - [0:0] :logdrop-1354 - [0:0] :logdrop-1355 - [0:0] :logdrop-1356 - [0:0] :logdrop-1357 - [0:0] :logdrop-1358 - [0:0] :logdrop-1359 - [0:0] :logdrop-136 - [0:0] :logdrop-1360 - [0:0] :logdrop-1361 - [0:0] :logdrop-1362 - [0:0] :logdrop-1363 - [0:0] :logdrop-1364 - [0:0] :logdrop-1365 - [0:0] :logdrop-1366 - [0:0] :logdrop-1367 - [0:0] :logdrop-1368 - [0:0] :logdrop-1369 - [0:0] :logdrop-137 - [0:0] :logdrop-1370 - [0:0] :logdrop-1371 - [0:0] :logdrop-1372 - [0:0] :logdrop-1373 - [0:0] :logdrop-1374 - [0:0] :logdrop-1375 - [0:0] :logdrop-1376 - [0:0] :logdrop-1377 - [0:0] :logdrop-1378 - [0:0] :logdrop-1379 - [0:0] :logdrop-138 - [0:0] :logdrop-1380 - [0:0] :logdrop-1381 - [0:0] :logdrop-1382 - [0:0] :logdrop-1383 - [0:0] :logdrop-1384 - [0:0] :logdrop-1385 - [0:0] :logdrop-1386 - [0:0] :logdrop-1387 - [0:0] :logdrop-1388 - [0:0] :logdrop-1389 - [0:0] :logdrop-139 - [0:0] :logdrop-1390 - [0:0] :logdrop-1391 - [0:0] :logdrop-1392 - [0:0] :logdrop-1393 - [0:0] :logdrop-1394 - [0:0] :logdrop-1395 - [0:0] :logdrop-1396 - [0:0] :logdrop-1397 - [0:0] :logdrop-1398 - [0:0] :logdrop-1399 - [0:0] :logdrop-14 - [0:0] :logdrop-140 - [0:0] :logdrop-1400 - [0:0] :logdrop-1401 - [0:0] :logdrop-1402 - [0:0] :logdrop-1403 - [0:0] :logdrop-1404 - [0:0] :logdrop-1405 - [0:0] :logdrop-1406 - [0:0] :logdrop-1407 - [0:0] :logdrop-1408 - [0:0] :logdrop-1409 - [0:0] :logdrop-141 - [0:0] :logdrop-1410 - [0:0] :logdrop-1411 - [0:0] :logdrop-1412 - [0:0] :logdrop-1413 - [0:0] :logdrop-1414 - [0:0] :logdrop-1415 - [0:0] :logdrop-1416 - [0:0] :logdrop-1417 - [0:0] :logdrop-1418 - [0:0] :logdrop-1419 - [0:0] :logdrop-142 - [0:0] :logdrop-1420 - [0:0] :logdrop-1421 - [0:0] :logdrop-1422 - [0:0] :logdrop-1423 - [0:0] :logdrop-1424 - [0:0] :logdrop-1425 - [0:0] :logdrop-1426 - [0:0] :logdrop-1427 - [0:0] :logdrop-1428 - [0:0] :logdrop-1429 - [0:0] :logdrop-143 - [0:0] :logdrop-1430 - [0:0] :logdrop-1431 - [0:0] :logdrop-1432 - [0:0] :logdrop-1433 - [0:0] :logdrop-1434 - [0:0] :logdrop-1435 - [0:0] :logdrop-1436 - [0:0] :logdrop-1437 - [0:0] :logdrop-1438 - [0:0] :logdrop-1439 - [0:0] :logdrop-144 - [0:0] :logdrop-1440 - [0:0] :logdrop-1441 - [0:0] :logdrop-1442 - [0:0] :logdrop-1443 - [0:0] :logdrop-1444 - [0:0] :logdrop-1445 - [0:0] :logdrop-1446 - [0:0] :logdrop-1447 - [0:0] :logdrop-1448 - [0:0] :logdrop-1449 - [0:0] :logdrop-145 - [0:0] :logdrop-1450 - [0:0] :logdrop-1451 - [0:0] :logdrop-1452 - [0:0] :logdrop-1453 - [0:0] :logdrop-1454 - [0:0] :logdrop-1455 - [0:0] :logdrop-1456 - [0:0] :logdrop-1457 - [0:0] :logdrop-1458 - [0:0] :logdrop-1459 - [0:0] :logdrop-146 - [0:0] :logdrop-1460 - [0:0] :logdrop-1461 - [0:0] :logdrop-1462 - [0:0] :logdrop-1463 - [0:0] :logdrop-1464 - [0:0] :logdrop-1465 - [0:0] :logdrop-1466 - [0:0] :logdrop-1467 - [0:0] :logdrop-1468 - [0:0] :logdrop-1469 - [0:0] :logdrop-147 - [0:0] :logdrop-1470 - [0:0] :logdrop-1471 - [0:0] :logdrop-1472 - [0:0] :logdrop-1473 - [0:0] :logdrop-1474 - [0:0] :logdrop-1475 - [0:0] :logdrop-1476 - [0:0] :logdrop-1477 - [0:0] :logdrop-1478 - [0:0] :logdrop-1479 - [0:0] :logdrop-148 - [0:0] :logdrop-1480 - [0:0] :logdrop-1481 - [0:0] :logdrop-1482 - [0:0] :logdrop-1483 - [0:0] :logdrop-1484 - [0:0] :logdrop-1485 - [0:0] :logdrop-1486 - [0:0] :logdrop-1487 - [0:0] :logdrop-1488 - [0:0] :logdrop-1489 - [0:0] :logdrop-149 - [0:0] :logdrop-1490 - [0:0] :logdrop-1491 - [0:0] :logdrop-1492 - [0:0] :logdrop-1493 - [0:0] :logdrop-1494 - [0:0] :logdrop-1495 - [0:0] :logdrop-1496 - [0:0] :logdrop-1497 - [0:0] :logdrop-1498 - [0:0] :logdrop-1499 - [0:0] :logdrop-15 - [0:0] :logdrop-150 - [0:0] :logdrop-1500 - [0:0] :logdrop-1501 - [0:0] :logdrop-1502 - [0:0] :logdrop-1503 - [0:0] :logdrop-1504 - [0:0] :logdrop-1505 - [0:0] :logdrop-1506 - [0:0] :logdrop-1507 - [0:0] :logdrop-1508 - [0:0] :logdrop-1509 - [0:0] :logdrop-151 - [0:0] :logdrop-1510 - [0:0] :logdrop-1511 - [0:0] :logdrop-1512 - [0:0] :logdrop-1513 - [0:0] :logdrop-1514 - [0:0] :logdrop-1515 - [0:0] :logdrop-1516 - [0:0] :logdrop-1517 - [0:0] :logdrop-1518 - [0:0] :logdrop-1519 - [0:0] :logdrop-152 - [0:0] :logdrop-1520 - [0:0] :logdrop-1521 - [0:0] :logdrop-1522 - [0:0] :logdrop-1523 - [0:0] :logdrop-1524 - [0:0] :logdrop-1525 - [0:0] :logdrop-1526 - [0:0] :logdrop-1527 - [0:0] :logdrop-1528 - [0:0] :logdrop-1529 - [0:0] :logdrop-153 - [0:0] :logdrop-1530 - [0:0] :logdrop-1531 - [0:0] :logdrop-1532 - [0:0] :logdrop-1533 - [0:0] :logdrop-1534 - [0:0] :logdrop-1535 - [0:0] :logdrop-1536 - [0:0] :logdrop-1537 - [0:0] :logdrop-1538 - [0:0] :logdrop-1539 - [0:0] :logdrop-154 - [0:0] :logdrop-1540 - [0:0] :logdrop-1541 - [0:0] :logdrop-1542 - [0:0] :logdrop-1543 - [0:0] :logdrop-1544 - [0:0] :logdrop-1545 - [0:0] :logdrop-1546 - [0:0] :logdrop-1547 - [0:0] :logdrop-1548 - [0:0] :logdrop-1549 - [0:0] :logdrop-155 - [0:0] :logdrop-1550 - [0:0] :logdrop-1551 - [0:0] :logdrop-1552 - [0:0] :logdrop-1553 - [0:0] :logdrop-1554 - [0:0] :logdrop-1555 - [0:0] :logdrop-1556 - [0:0] :logdrop-1557 - [0:0] :logdrop-1558 - [0:0] :logdrop-1559 - [0:0] :logdrop-156 - [0:0] :logdrop-1560 - [0:0] :logdrop-1561 - [0:0] :logdrop-1562 - [0:0] :logdrop-1563 - [0:0] :logdrop-1564 - [0:0] :logdrop-1565 - [0:0] :logdrop-1566 - [0:0] :logdrop-1567 - [0:0] :logdrop-1568 - [0:0] :logdrop-1569 - [0:0] :logdrop-157 - [0:0] :logdrop-1570 - [0:0] :logdrop-1571 - [0:0] :logdrop-1572 - [0:0] :logdrop-1573 - [0:0] :logdrop-1574 - [0:0] :logdrop-1575 - [0:0] :logdrop-1576 - [0:0] :logdrop-1577 - [0:0] :logdrop-1578 - [0:0] :logdrop-1579 - [0:0] :logdrop-158 - [0:0] :logdrop-1580 - [0:0] :logdrop-1581 - [0:0] :logdrop-1582 - [0:0] :logdrop-1583 - [0:0] :logdrop-1584 - [0:0] :logdrop-1585 - [0:0] :logdrop-1586 - [0:0] :logdrop-1587 - [0:0] :logdrop-1588 - [0:0] :logdrop-1589 - [0:0] :logdrop-159 - [0:0] :logdrop-1590 - [0:0] :logdrop-1591 - [0:0] :logdrop-1592 - [0:0] :logdrop-1593 - [0:0] :logdrop-1594 - [0:0] :logdrop-1595 - [0:0] :logdrop-1596 - [0:0] :logdrop-1597 - [0:0] :logdrop-1598 - [0:0] :logdrop-1599 - [0:0] :logdrop-16 - [0:0] :logdrop-160 - [0:0] :logdrop-1600 - [0:0] :logdrop-1601 - [0:0] :logdrop-1602 - [0:0] :logdrop-1603 - [0:0] :logdrop-1604 - [0:0] :logdrop-1605 - [0:0] :logdrop-1606 - [0:0] :logdrop-1607 - [0:0] :logdrop-1608 - [0:0] :logdrop-1609 - [0:0] :logdrop-161 - [0:0] :logdrop-1610 - [0:0] :logdrop-1611 - [0:0] :logdrop-1612 - [0:0] :logdrop-1613 - [0:0] :logdrop-1614 - [0:0] :logdrop-1615 - [0:0] :logdrop-1616 - [0:0] :logdrop-1617 - [0:0] :logdrop-1618 - [0:0] :logdrop-1619 - [0:0] :logdrop-162 - [0:0] :logdrop-1620 - [0:0] :logdrop-1621 - [0:0] :logdrop-1622 - [0:0] :logdrop-1623 - [0:0] :logdrop-1624 - [0:0] :logdrop-1625 - [0:0] :logdrop-1626 - [0:0] :logdrop-1627 - [0:0] :logdrop-1628 - [0:0] :logdrop-1629 - [0:0] :logdrop-163 - [0:0] :logdrop-1630 - [0:0] :logdrop-1631 - [0:0] :logdrop-1632 - [0:0] :logdrop-1633 - [0:0] :logdrop-1634 - [0:0] :logdrop-1635 - [0:0] :logdrop-1636 - [0:0] :logdrop-1637 - [0:0] :logdrop-1638 - [0:0] :logdrop-1639 - [0:0] :logdrop-164 - [0:0] :logdrop-1640 - [0:0] :logdrop-1641 - [0:0] :logdrop-1642 - [0:0] :logdrop-1643 - [0:0] :logdrop-1644 - [0:0] :logdrop-1645 - [0:0] :logdrop-1646 - [0:0] :logdrop-1647 - [0:0] :logdrop-1648 - [0:0] :logdrop-1649 - [0:0] :logdrop-165 - [0:0] :logdrop-1650 - [0:0] :logdrop-1651 - [0:0] :logdrop-1652 - [0:0] :logdrop-1653 - [0:0] :logdrop-1654 - [0:0] :logdrop-166 - [0:0] :logdrop-167 - [0:0] :logdrop-168 - [0:0] :logdrop-169 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] :logdrop-171 - [0:0] :logdrop-172 - [0:0] :logdrop-173 - [0:0] :logdrop-174 - [0:0] :logdrop-175 - [0:0] :logdrop-176 - [0:0] :logdrop-177 - [0:0] :logdrop-178 - [0:0] :logdrop-179 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] :logdrop-181 - [0:0] :logdrop-182 - [0:0] :logdrop-183 - [0:0] :logdrop-184 - [0:0] :logdrop-185 - [0:0] :logdrop-186 - [0:0] :logdrop-187 - [0:0] :logdrop-188 - [0:0] :logdrop-189 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] :logdrop-191 - [0:0] :logdrop-192 - [0:0] :logdrop-193 - [0:0] :logdrop-194 - [0:0] :logdrop-195 - [0:0] :logdrop-196 - [0:0] :logdrop-197 - [0:0] :logdrop-198 - [0:0] :logdrop-199 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] :logdrop-201 - [0:0] :logdrop-202 - [0:0] :logdrop-203 - [0:0] :logdrop-204 - [0:0] :logdrop-205 - [0:0] :logdrop-206 - [0:0] :logdrop-207 - [0:0] :logdrop-208 - [0:0] :logdrop-209 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] :logdrop-211 - [0:0] :logdrop-212 - [0:0] :logdrop-213 - [0:0] :logdrop-214 - [0:0] :logdrop-215 - [0:0] :logdrop-216 - [0:0] :logdrop-217 - [0:0] :logdrop-218 - [0:0] :logdrop-219 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] :logdrop-224 - [0:0] :logdrop-225 - [0:0] :logdrop-226 - [0:0] :logdrop-227 - [0:0] :logdrop-228 - [0:0] :logdrop-229 - [0:0] :logdrop-23 - [0:0] :logdrop-230 - [0:0] :logdrop-231 - [0:0] :logdrop-232 - [0:0] :logdrop-233 - [0:0] :logdrop-234 - [0:0] :logdrop-235 - [0:0] :logdrop-236 - [0:0] :logdrop-237 - [0:0] :logdrop-238 - [0:0] :logdrop-239 - [0:0] :logdrop-24 - [0:0] :logdrop-240 - [0:0] :logdrop-241 - [0:0] :logdrop-242 - [0:0] :logdrop-243 - [0:0] :logdrop-244 - [0:0] :logdrop-245 - [0:0] :logdrop-246 - [0:0] :logdrop-247 - [0:0] :logdrop-248 - [0:0] :logdrop-249 - [0:0] :logdrop-25 - [0:0] :logdrop-250 - [0:0] :logdrop-251 - [0:0] :logdrop-252 - [0:0] :logdrop-253 - [0:0] :logdrop-254 - [0:0] :logdrop-255 - [0:0] :logdrop-256 - [0:0] :logdrop-257 - [0:0] :logdrop-258 - [0:0] :logdrop-259 - [0:0] :logdrop-26 - [0:0] :logdrop-260 - [0:0] :logdrop-261 - [0:0] :logdrop-262 - [0:0] :logdrop-263 - [0:0] :logdrop-264 - [0:0] :logdrop-265 - [0:0] :logdrop-266 - [0:0] :logdrop-267 - [0:0] :logdrop-268 - [0:0] :logdrop-269 - [0:0] :logdrop-27 - [0:0] :logdrop-270 - [0:0] :logdrop-271 - [0:0] :logdrop-272 - [0:0] :logdrop-273 - [0:0] :logdrop-274 - [0:0] :logdrop-275 - [0:0] :logdrop-276 - [0:0] :logdrop-277 - [0:0] :logdrop-278 - [0:0] :logdrop-279 - [0:0] :logdrop-28 - [0:0] :logdrop-280 - [0:0] :logdrop-281 - [0:0] :logdrop-282 - [0:0] :logdrop-283 - [0:0] :logdrop-284 - [0:0] :logdrop-285 - [0:0] :logdrop-286 - [0:0] :logdrop-287 - [0:0] :logdrop-288 - [0:0] :logdrop-289 - [0:0] :logdrop-29 - [0:0] :logdrop-290 - [0:0] :logdrop-291 - [0:0] :logdrop-292 - [0:0] :logdrop-293 - [0:0] :logdrop-294 - [0:0] :logdrop-295 - [0:0] :logdrop-296 - [0:0] :logdrop-297 - [0:0] :logdrop-298 - [0:0] :logdrop-299 - [0:0] :logdrop-3 - [0:0] :logdrop-30 - [0:0] :logdrop-300 - [0:0] :logdrop-301 - [0:0] :logdrop-302 - [0:0] :logdrop-303 - [0:0] :logdrop-304 - [0:0] :logdrop-305 - [0:0] :logdrop-306 - [0:0] :logdrop-307 - [0:0] :logdrop-308 - [0:0] :logdrop-309 - [0:0] :logdrop-31 - [0:0] :logdrop-310 - [0:0] :logdrop-311 - [0:0] :logdrop-312 - [0:0] :logdrop-313 - [0:0] :logdrop-314 - [0:0] :logdrop-315 - [0:0] :logdrop-316 - [0:0] :logdrop-317 - [0:0] :logdrop-318 - [0:0] :logdrop-319 - [0:0] :logdrop-32 - [0:0] :logdrop-320 - [0:0] :logdrop-321 - [0:0] :logdrop-322 - [0:0] :logdrop-323 - [0:0] :logdrop-324 - [0:0] :logdrop-325 - [0:0] :logdrop-326 - [0:0] :logdrop-327 - [0:0] :logdrop-328 - [0:0] :logdrop-329 - [0:0] :logdrop-33 - [0:0] :logdrop-330 - [0:0] :logdrop-331 - [0:0] :logdrop-332 - [0:0] :logdrop-333 - [0:0] :logdrop-334 - [0:0] :logdrop-335 - [0:0] :logdrop-336 - [0:0] :logdrop-337 - [0:0] :logdrop-338 - [0:0] :logdrop-339 - [0:0] :logdrop-34 - [0:0] :logdrop-340 - [0:0] :logdrop-341 - [0:0] :logdrop-342 - [0:0] :logdrop-343 - [0:0] :logdrop-344 - [0:0] :logdrop-345 - [0:0] :logdrop-346 - [0:0] :logdrop-347 - [0:0] :logdrop-348 - [0:0] :logdrop-349 - [0:0] :logdrop-35 - [0:0] :logdrop-350 - [0:0] :logdrop-351 - [0:0] :logdrop-352 - [0:0] :logdrop-353 - [0:0] :logdrop-354 - [0:0] :logdrop-355 - [0:0] :logdrop-356 - [0:0] :logdrop-357 - [0:0] :logdrop-358 - [0:0] :logdrop-359 - [0:0] :logdrop-36 - [0:0] :logdrop-360 - [0:0] :logdrop-361 - [0:0] :logdrop-362 - [0:0] :logdrop-363 - [0:0] :logdrop-364 - [0:0] :logdrop-365 - [0:0] :logdrop-366 - [0:0] :logdrop-367 - [0:0] :logdrop-368 - [0:0] :logdrop-369 - [0:0] :logdrop-37 - [0:0] :logdrop-370 - [0:0] :logdrop-371 - [0:0] :logdrop-372 - [0:0] :logdrop-373 - [0:0] :logdrop-374 - [0:0] :logdrop-375 - [0:0] :logdrop-376 - [0:0] :logdrop-377 - [0:0] :logdrop-378 - [0:0] :logdrop-379 - [0:0] :logdrop-38 - [0:0] :logdrop-380 - [0:0] :logdrop-381 - [0:0] :logdrop-382 - [0:0] :logdrop-383 - [0:0] :logdrop-384 - [0:0] :logdrop-385 - [0:0] :logdrop-386 - [0:0] :logdrop-387 - [0:0] :logdrop-388 - [0:0] :logdrop-389 - [0:0] :logdrop-39 - [0:0] :logdrop-390 - [0:0] :logdrop-391 - [0:0] :logdrop-392 - [0:0] :logdrop-393 - [0:0] :logdrop-394 - [0:0] :logdrop-395 - [0:0] :logdrop-396 - [0:0] :logdrop-397 - [0:0] :logdrop-398 - [0:0] :logdrop-399 - [0:0] :logdrop-4 - [0:0] :logdrop-40 - [0:0] :logdrop-400 - [0:0] :logdrop-401 - [0:0] :logdrop-402 - [0:0] :logdrop-403 - [0:0] :logdrop-404 - [0:0] :logdrop-405 - [0:0] :logdrop-406 - [0:0] :logdrop-407 - [0:0] :logdrop-408 - [0:0] :logdrop-409 - [0:0] :logdrop-41 - [0:0] :logdrop-410 - [0:0] :logdrop-411 - [0:0] :logdrop-412 - [0:0] :logdrop-413 - [0:0] :logdrop-414 - [0:0] :logdrop-415 - [0:0] :logdrop-416 - [0:0] :logdrop-417 - [0:0] :logdrop-418 - [0:0] :logdrop-419 - [0:0] :logdrop-42 - [0:0] :logdrop-420 - [0:0] :logdrop-421 - [0:0] :logdrop-422 - [0:0] :logdrop-423 - [0:0] :logdrop-424 - [0:0] :logdrop-425 - [0:0] :logdrop-426 - [0:0] :logdrop-427 - [0:0] :logdrop-428 - [0:0] :logdrop-429 - [0:0] :logdrop-43 - [0:0] :logdrop-430 - [0:0] :logdrop-431 - [0:0] :logdrop-432 - [0:0] :logdrop-433 - [0:0] :logdrop-434 - [0:0] :logdrop-435 - [0:0] :logdrop-436 - [0:0] :logdrop-437 - [0:0] :logdrop-438 - [0:0] :logdrop-439 - [0:0] :logdrop-44 - [0:0] :logdrop-440 - [0:0] :logdrop-441 - [0:0] :logdrop-442 - [0:0] :logdrop-443 - [0:0] :logdrop-444 - [0:0] :logdrop-445 - [0:0] :logdrop-446 - [0:0] :logdrop-447 - [0:0] :logdrop-448 - [0:0] :logdrop-449 - [0:0] :logdrop-45 - [0:0] :logdrop-450 - [0:0] :logdrop-451 - [0:0] :logdrop-452 - [0:0] :logdrop-453 - [0:0] :logdrop-454 - [0:0] :logdrop-455 - [0:0] :logdrop-456 - [0:0] :logdrop-457 - [0:0] :logdrop-458 - [0:0] :logdrop-459 - [0:0] :logdrop-46 - [0:0] :logdrop-460 - [0:0] :logdrop-461 - [0:0] :logdrop-462 - [0:0] :logdrop-463 - [0:0] :logdrop-464 - [0:0] :logdrop-465 - [0:0] :logdrop-466 - [0:0] :logdrop-467 - [0:0] :logdrop-468 - [0:0] :logdrop-469 - [0:0] :logdrop-47 - [0:0] :logdrop-470 - [0:0] :logdrop-471 - [0:0] :logdrop-472 - [0:0] :logdrop-473 - [0:0] :logdrop-474 - [0:0] :logdrop-475 - [0:0] :logdrop-476 - [0:0] :logdrop-477 - [0:0] :logdrop-478 - [0:0] :logdrop-479 - [0:0] :logdrop-48 - [0:0] :logdrop-480 - [0:0] :logdrop-481 - [0:0] :logdrop-482 - [0:0] :logdrop-483 - [0:0] :logdrop-484 - [0:0] :logdrop-485 - [0:0] :logdrop-486 - [0:0] :logdrop-487 - [0:0] :logdrop-488 - [0:0] :logdrop-489 - [0:0] :logdrop-49 - [0:0] :logdrop-490 - [0:0] :logdrop-491 - [0:0] :logdrop-492 - [0:0] :logdrop-493 - [0:0] :logdrop-494 - [0:0] :logdrop-495 - [0:0] :logdrop-496 - [0:0] :logdrop-497 - [0:0] :logdrop-498 - [0:0] :logdrop-499 - [0:0] :logdrop-5 - [0:0] :logdrop-50 - [0:0] :logdrop-500 - [0:0] :logdrop-501 - [0:0] :logdrop-502 - [0:0] :logdrop-503 - [0:0] :logdrop-504 - [0:0] :logdrop-505 - [0:0] :logdrop-506 - [0:0] :logdrop-507 - [0:0] :logdrop-508 - [0:0] :logdrop-509 - [0:0] :logdrop-51 - [0:0] :logdrop-510 - [0:0] :logdrop-511 - [0:0] :logdrop-512 - [0:0] :logdrop-513 - [0:0] :logdrop-514 - [0:0] :logdrop-515 - [0:0] :logdrop-516 - [0:0] :logdrop-517 - [0:0] :logdrop-518 - [0:0] :logdrop-519 - [0:0] :logdrop-52 - [0:0] :logdrop-520 - [0:0] :logdrop-521 - [0:0] :logdrop-522 - [0:0] :logdrop-523 - [0:0] :logdrop-524 - [0:0] :logdrop-525 - [0:0] :logdrop-526 - [0:0] :logdrop-527 - [0:0] :logdrop-528 - [0:0] :logdrop-529 - [0:0] :logdrop-53 - [0:0] :logdrop-530 - [0:0] :logdrop-531 - [0:0] :logdrop-532 - [0:0] :logdrop-533 - [0:0] :logdrop-534 - [0:0] :logdrop-535 - [0:0] :logdrop-536 - [0:0] :logdrop-537 - [0:0] :logdrop-538 - [0:0] :logdrop-539 - [0:0] :logdrop-54 - [0:0] :logdrop-540 - [0:0] :logdrop-541 - [0:0] :logdrop-542 - [0:0] :logdrop-543 - [0:0] :logdrop-544 - [0:0] :logdrop-545 - [0:0] :logdrop-546 - [0:0] :logdrop-547 - [0:0] :logdrop-548 - [0:0] :logdrop-549 - [0:0] :logdrop-55 - [0:0] :logdrop-550 - [0:0] :logdrop-551 - [0:0] :logdrop-552 - [0:0] :logdrop-553 - [0:0] :logdrop-554 - [0:0] :logdrop-555 - [0:0] :logdrop-556 - [0:0] :logdrop-557 - [0:0] :logdrop-558 - [0:0] :logdrop-559 - [0:0] :logdrop-56 - [0:0] :logdrop-560 - [0:0] :logdrop-561 - [0:0] :logdrop-562 - [0:0] :logdrop-563 - [0:0] :logdrop-564 - [0:0] :logdrop-565 - [0:0] :logdrop-566 - [0:0] :logdrop-567 - [0:0] :logdrop-568 - [0:0] :logdrop-569 - [0:0] :logdrop-57 - [0:0] :logdrop-570 - [0:0] :logdrop-571 - [0:0] :logdrop-572 - [0:0] :logdrop-573 - [0:0] :logdrop-574 - [0:0] :logdrop-575 - [0:0] :logdrop-576 - [0:0] :logdrop-577 - [0:0] :logdrop-578 - [0:0] :logdrop-579 - [0:0] :logdrop-58 - [0:0] :logdrop-580 - [0:0] :logdrop-581 - [0:0] :logdrop-582 - [0:0] :logdrop-583 - [0:0] :logdrop-584 - [0:0] :logdrop-585 - [0:0] :logdrop-586 - [0:0] :logdrop-587 - [0:0] :logdrop-588 - [0:0] :logdrop-589 - [0:0] :logdrop-59 - [0:0] :logdrop-590 - [0:0] :logdrop-591 - [0:0] :logdrop-592 - [0:0] :logdrop-593 - [0:0] :logdrop-594 - [0:0] :logdrop-595 - [0:0] :logdrop-596 - [0:0] :logdrop-597 - [0:0] :logdrop-598 - [0:0] :logdrop-599 - [0:0] :logdrop-6 - [0:0] :logdrop-60 - [0:0] :logdrop-600 - [0:0] :logdrop-601 - [0:0] :logdrop-602 - [0:0] :logdrop-603 - [0:0] :logdrop-604 - [0:0] :logdrop-605 - [0:0] :logdrop-606 - [0:0] :logdrop-607 - [0:0] :logdrop-608 - [0:0] :logdrop-609 - [0:0] :logdrop-61 - [0:0] :logdrop-610 - [0:0] :logdrop-611 - [0:0] :logdrop-612 - [0:0] :logdrop-613 - [0:0] :logdrop-614 - [0:0] :logdrop-615 - [0:0] :logdrop-616 - [0:0] :logdrop-617 - [0:0] :logdrop-618 - [0:0] :logdrop-619 - [0:0] :logdrop-62 - [0:0] :logdrop-620 - [0:0] :logdrop-621 - [0:0] :logdrop-622 - [0:0] :logdrop-623 - [0:0] :logdrop-624 - [0:0] :logdrop-625 - [0:0] :logdrop-626 - [0:0] :logdrop-627 - [0:0] :logdrop-628 - [0:0] :logdrop-629 - [0:0] :logdrop-63 - [0:0] :logdrop-630 - [0:0] :logdrop-631 - [0:0] :logdrop-632 - [0:0] :logdrop-633 - [0:0] :logdrop-634 - [0:0] :logdrop-635 - [0:0] :logdrop-636 - [0:0] :logdrop-637 - [0:0] :logdrop-638 - [0:0] :logdrop-639 - [0:0] :logdrop-64 - [0:0] :logdrop-640 - [0:0] :logdrop-641 - [0:0] :logdrop-642 - [0:0] :logdrop-643 - [0:0] :logdrop-644 - [0:0] :logdrop-645 - [0:0] :logdrop-646 - [0:0] :logdrop-647 - [0:0] :logdrop-648 - [0:0] :logdrop-649 - [0:0] :logdrop-65 - [0:0] :logdrop-650 - [0:0] :logdrop-651 - [0:0] :logdrop-652 - [0:0] :logdrop-653 - [0:0] :logdrop-654 - [0:0] :logdrop-655 - [0:0] :logdrop-656 - [0:0] :logdrop-657 - [0:0] :logdrop-658 - [0:0] :logdrop-659 - [0:0] :logdrop-66 - [0:0] :logdrop-660 - [0:0] :logdrop-661 - [0:0] :logdrop-662 - [0:0] :logdrop-663 - [0:0] :logdrop-664 - [0:0] :logdrop-665 - [0:0] :logdrop-666 - [0:0] :logdrop-667 - [0:0] :logdrop-668 - [0:0] :logdrop-669 - [0:0] :logdrop-67 - [0:0] :logdrop-670 - [0:0] :logdrop-671 - [0:0] :logdrop-672 - [0:0] :logdrop-673 - [0:0] :logdrop-674 - [0:0] :logdrop-675 - [0:0] :logdrop-676 - [0:0] :logdrop-677 - [0:0] :logdrop-678 - [0:0] :logdrop-679 - [0:0] :logdrop-68 - [0:0] :logdrop-680 - [0:0] :logdrop-681 - [0:0] :logdrop-682 - [0:0] :logdrop-683 - [0:0] :logdrop-684 - [0:0] :logdrop-685 - [0:0] :logdrop-686 - [0:0] :logdrop-687 - [0:0] :logdrop-688 - [0:0] :logdrop-689 - [0:0] :logdrop-69 - [0:0] :logdrop-690 - [0:0] :logdrop-691 - [0:0] :logdrop-692 - [0:0] :logdrop-693 - [0:0] :logdrop-694 - [0:0] :logdrop-695 - [0:0] :logdrop-696 - [0:0] :logdrop-697 - [0:0] :logdrop-698 - [0:0] :logdrop-699 - [0:0] :logdrop-7 - [0:0] :logdrop-70 - [0:0] :logdrop-700 - [0:0] :logdrop-701 - [0:0] :logdrop-702 - [0:0] :logdrop-703 - [0:0] :logdrop-704 - [0:0] :logdrop-705 - [0:0] :logdrop-706 - [0:0] :logdrop-707 - [0:0] :logdrop-708 - [0:0] :logdrop-709 - [0:0] :logdrop-71 - [0:0] :logdrop-710 - [0:0] :logdrop-711 - [0:0] :logdrop-712 - [0:0] :logdrop-713 - [0:0] :logdrop-714 - [0:0] :logdrop-715 - [0:0] :logdrop-716 - [0:0] :logdrop-717 - [0:0] :logdrop-718 - [0:0] :logdrop-719 - [0:0] :logdrop-72 - [0:0] :logdrop-720 - [0:0] :logdrop-721 - [0:0] :logdrop-722 - [0:0] :logdrop-723 - [0:0] :logdrop-724 - [0:0] :logdrop-725 - [0:0] :logdrop-726 - [0:0] :logdrop-727 - [0:0] :logdrop-728 - [0:0] :logdrop-729 - [0:0] :logdrop-73 - [0:0] :logdrop-730 - [0:0] :logdrop-731 - [0:0] :logdrop-732 - [0:0] :logdrop-733 - [0:0] :logdrop-734 - [0:0] :logdrop-735 - [0:0] :logdrop-736 - [0:0] :logdrop-737 - [0:0] :logdrop-738 - [0:0] :logdrop-739 - [0:0] :logdrop-74 - [0:0] :logdrop-740 - [0:0] :logdrop-741 - [0:0] :logdrop-742 - [0:0] :logdrop-743 - [0:0] :logdrop-744 - [0:0] :logdrop-745 - [0:0] :logdrop-746 - [0:0] :logdrop-747 - [0:0] :logdrop-748 - [0:0] :logdrop-749 - [0:0] :logdrop-75 - [0:0] :logdrop-750 - [0:0] :logdrop-751 - [0:0] :logdrop-752 - [0:0] :logdrop-753 - [0:0] :logdrop-754 - [0:0] :logdrop-755 - [0:0] :logdrop-756 - [0:0] :logdrop-757 - [0:0] :logdrop-758 - [0:0] :logdrop-759 - [0:0] :logdrop-76 - [0:0] :logdrop-760 - [0:0] :logdrop-761 - [0:0] :logdrop-762 - [0:0] :logdrop-763 - [0:0] :logdrop-764 - [0:0] :logdrop-765 - [0:0] :logdrop-766 - [0:0] :logdrop-767 - [0:0] :logdrop-768 - [0:0] :logdrop-769 - [0:0] :logdrop-77 - [0:0] :logdrop-770 - [0:0] :logdrop-771 - [0:0] :logdrop-772 - [0:0] :logdrop-773 - [0:0] :logdrop-774 - [0:0] :logdrop-775 - [0:0] :logdrop-776 - [0:0] :logdrop-777 - [0:0] :logdrop-778 - [0:0] :logdrop-779 - [0:0] :logdrop-78 - [0:0] :logdrop-780 - [0:0] :logdrop-781 - [0:0] :logdrop-782 - [0:0] :logdrop-783 - [0:0] :logdrop-784 - [0:0] :logdrop-785 - [0:0] :logdrop-786 - [0:0] :logdrop-787 - [0:0] :logdrop-788 - [0:0] :logdrop-789 - [0:0] :logdrop-79 - [0:0] :logdrop-790 - [0:0] :logdrop-791 - [0:0] :logdrop-792 - [0:0] :logdrop-793 - [0:0] :logdrop-794 - [0:0] :logdrop-795 - [0:0] :logdrop-796 - [0:0] :logdrop-797 - [0:0] :logdrop-798 - [0:0] :logdrop-799 - [0:0] :logdrop-8 - [0:0] :logdrop-80 - [0:0] :logdrop-800 - [0:0] :logdrop-801 - [0:0] :logdrop-802 - [0:0] :logdrop-803 - [0:0] :logdrop-804 - [0:0] :logdrop-805 - [0:0] :logdrop-806 - [0:0] :logdrop-807 - [0:0] :logdrop-808 - [0:0] :logdrop-809 - [0:0] :logdrop-81 - [0:0] :logdrop-810 - [0:0] :logdrop-811 - [0:0] :logdrop-812 - [0:0] :logdrop-813 - [0:0] :logdrop-814 - [0:0] :logdrop-815 - [0:0] :logdrop-816 - [0:0] :logdrop-817 - [0:0] :logdrop-818 - [0:0] :logdrop-819 - [0:0] :logdrop-82 - [0:0] :logdrop-820 - [0:0] :logdrop-821 - [0:0] :logdrop-822 - [0:0] :logdrop-823 - [0:0] :logdrop-824 - [0:0] :logdrop-825 - [0:0] :logdrop-826 - [0:0] :logdrop-827 - [0:0] :logdrop-828 - [0:0] :logdrop-829 - [0:0] :logdrop-83 - [0:0] :logdrop-830 - [0:0] :logdrop-831 - [0:0] :logdrop-832 - [0:0] :logdrop-833 - [0:0] :logdrop-834 - [0:0] :logdrop-835 - [0:0] :logdrop-836 - [0:0] :logdrop-837 - [0:0] :logdrop-838 - [0:0] :logdrop-839 - [0:0] :logdrop-84 - [0:0] :logdrop-840 - [0:0] :logdrop-841 - [0:0] :logdrop-842 - [0:0] :logdrop-843 - [0:0] :logdrop-844 - [0:0] :logdrop-845 - [0:0] :logdrop-846 - [0:0] :logdrop-847 - [0:0] :logdrop-848 - [0:0] :logdrop-849 - [0:0] :logdrop-85 - [0:0] :logdrop-850 - [0:0] :logdrop-851 - [0:0] :logdrop-852 - [0:0] :logdrop-853 - [0:0] :logdrop-854 - [0:0] :logdrop-855 - [0:0] :logdrop-856 - [0:0] :logdrop-857 - [0:0] :logdrop-858 - [0:0] :logdrop-859 - [0:0] :logdrop-86 - [0:0] :logdrop-860 - [0:0] :logdrop-861 - [0:0] :logdrop-862 - [0:0] :logdrop-863 - [0:0] :logdrop-864 - [0:0] :logdrop-865 - [0:0] :logdrop-866 - [0:0] :logdrop-867 - [0:0] :logdrop-868 - [0:0] :logdrop-869 - [0:0] :logdrop-87 - [0:0] :logdrop-870 - [0:0] :logdrop-871 - [0:0] :logdrop-872 - [0:0] :logdrop-873 - [0:0] :logdrop-874 - [0:0] :logdrop-875 - [0:0] :logdrop-876 - [0:0] :logdrop-877 - [0:0] :logdrop-878 - [0:0] :logdrop-879 - [0:0] :logdrop-88 - [0:0] :logdrop-880 - [0:0] :logdrop-881 - [0:0] :logdrop-882 - [0:0] :logdrop-883 - [0:0] :logdrop-884 - [0:0] :logdrop-885 - [0:0] :logdrop-886 - [0:0] :logdrop-887 - [0:0] :logdrop-888 - [0:0] :logdrop-889 - [0:0] :logdrop-89 - [0:0] :logdrop-890 - [0:0] :logdrop-891 - [0:0] :logdrop-892 - [0:0] :logdrop-893 - [0:0] :logdrop-894 - [0:0] :logdrop-895 - [0:0] :logdrop-896 - [0:0] :logdrop-897 - [0:0] :logdrop-898 - [0:0] :logdrop-899 - [0:0] :logdrop-9 - [0:0] :logdrop-90 - [0:0] :logdrop-900 - [0:0] :logdrop-901 - [0:0] :logdrop-902 - [0:0] :logdrop-903 - [0:0] :logdrop-904 - [0:0] :logdrop-905 - [0:0] :logdrop-906 - [0:0] :logdrop-907 - [0:0] :logdrop-908 - [0:0] :logdrop-909 - [0:0] :logdrop-91 - [0:0] :logdrop-910 - [0:0] :logdrop-911 - [0:0] :logdrop-912 - [0:0] :logdrop-913 - [0:0] :logdrop-914 - [0:0] :logdrop-915 - [0:0] :logdrop-916 - [0:0] :logdrop-917 - [0:0] :logdrop-918 - [0:0] :logdrop-919 - [0:0] :logdrop-92 - [0:0] :logdrop-920 - [0:0] :logdrop-921 - [0:0] :logdrop-922 - [0:0] :logdrop-923 - [0:0] :logdrop-924 - [0:0] :logdrop-925 - [0:0] :logdrop-926 - [0:0] :logdrop-927 - [0:0] :logdrop-928 - [0:0] :logdrop-929 - [0:0] :logdrop-93 - [0:0] :logdrop-930 - [0:0] :logdrop-931 - [0:0] :logdrop-932 - [0:0] :logdrop-933 - [0:0] :logdrop-934 - [0:0] :logdrop-935 - [0:0] :logdrop-936 - [0:0] :logdrop-937 - [0:0] :logdrop-938 - [0:0] :logdrop-939 - [0:0] :logdrop-94 - [0:0] :logdrop-940 - [0:0] :logdrop-941 - [0:0] :logdrop-942 - [0:0] :logdrop-943 - [0:0] :logdrop-944 - [0:0] :logdrop-945 - [0:0] :logdrop-946 - [0:0] :logdrop-947 - [0:0] :logdrop-948 - [0:0] :logdrop-949 - [0:0] :logdrop-95 - [0:0] :logdrop-950 - [0:0] :logdrop-951 - [0:0] :logdrop-952 - [0:0] :logdrop-953 - [0:0] :logdrop-954 - [0:0] :logdrop-955 - [0:0] :logdrop-956 - [0:0] :logdrop-957 - [0:0] :logdrop-958 - [0:0] :logdrop-959 - [0:0] :logdrop-96 - [0:0] :logdrop-960 - [0:0] :logdrop-961 - [0:0] :logdrop-962 - [0:0] :logdrop-963 - [0:0] :logdrop-964 - [0:0] :logdrop-965 - [0:0] :logdrop-966 - [0:0] :logdrop-967 - [0:0] :logdrop-968 - [0:0] :logdrop-969 - [0:0] :logdrop-97 - [0:0] :logdrop-970 - [0:0] :logdrop-971 - [0:0] :logdrop-972 - [0:0] :logdrop-973 - [0:0] :logdrop-974 - [0:0] :logdrop-975 - [0:0] :logdrop-976 - [0:0] :logdrop-977 - [0:0] :logdrop-978 - [0:0] :logdrop-979 - [0:0] :logdrop-98 - [0:0] :logdrop-980 - [0:0] :logdrop-981 - [0:0] :logdrop-982 - [0:0] :logdrop-983 - [0:0] :logdrop-984 - [0:0] :logdrop-985 - [0:0] :logdrop-986 - [0:0] :logdrop-987 - [0:0] :logdrop-988 - [0:0] :logdrop-989 - [0:0] :logdrop-99 - [0:0] :logdrop-990 - [0:0] :logdrop-991 - [0:0] :logdrop-992 - [0:0] :logdrop-993 - [0:0] :logdrop-994 - [0:0] :logdrop-995 - [0:0] :logdrop-996 - [0:0] :logdrop-997 - [0:0] :logdrop-998 - [0:0] :logdrop-999 - [0:0] :logdrop-ntp-0 - [0:0] :logdrop-ntp-1 - [0:0] :logdrop-ntp-10 - [0:0] :logdrop-ntp-100 - [0:0] :logdrop-ntp-101 - [0:0] :logdrop-ntp-102 - [0:0] :logdrop-ntp-103 - [0:0] :logdrop-ntp-104 - [0:0] :logdrop-ntp-105 - [0:0] :logdrop-ntp-106 - [0:0] :logdrop-ntp-107 - [0:0] :logdrop-ntp-108 - [0:0] :logdrop-ntp-109 - [0:0] :logdrop-ntp-11 - [0:0] :logdrop-ntp-110 - [0:0] :logdrop-ntp-111 - [0:0] :logdrop-ntp-112 - [0:0] :logdrop-ntp-113 - [0:0] :logdrop-ntp-114 - [0:0] :logdrop-ntp-115 - [0:0] :logdrop-ntp-116 - [0:0] :logdrop-ntp-117 - [0:0] :logdrop-ntp-118 - [0:0] :logdrop-ntp-119 - [0:0] :logdrop-ntp-12 - [0:0] :logdrop-ntp-120 - [0:0] :logdrop-ntp-121 - [0:0] :logdrop-ntp-122 - [0:0] :logdrop-ntp-123 - [0:0] :logdrop-ntp-124 - [0:0] :logdrop-ntp-125 - [0:0] :logdrop-ntp-126 - [0:0] :logdrop-ntp-127 - [0:0] :logdrop-ntp-128 - [0:0] :logdrop-ntp-129 - [0:0] :logdrop-ntp-13 - [0:0] :logdrop-ntp-130 - [0:0] :logdrop-ntp-131 - [0:0] :logdrop-ntp-132 - [0:0] :logdrop-ntp-133 - [0:0] :logdrop-ntp-134 - [0:0] :logdrop-ntp-135 - [0:0] :logdrop-ntp-136 - [0:0] :logdrop-ntp-137 - [0:0] :logdrop-ntp-138 - [0:0] :logdrop-ntp-139 - [0:0] :logdrop-ntp-14 - [0:0] :logdrop-ntp-140 - [0:0] :logdrop-ntp-141 - [0:0] :logdrop-ntp-142 - [0:0] :logdrop-ntp-143 - [0:0] :logdrop-ntp-144 - [0:0] :logdrop-ntp-145 - [0:0] :logdrop-ntp-146 - [0:0] :logdrop-ntp-147 - [0:0] :logdrop-ntp-148 - [0:0] :logdrop-ntp-149 - [0:0] :logdrop-ntp-15 - [0:0] :logdrop-ntp-150 - [0:0] :logdrop-ntp-151 - [0:0] :logdrop-ntp-152 - [0:0] :logdrop-ntp-153 - [0:0] :logdrop-ntp-154 - [0:0] :logdrop-ntp-155 - [0:0] :logdrop-ntp-156 - [0:0] :logdrop-ntp-157 - [0:0] :logdrop-ntp-158 - [0:0] :logdrop-ntp-159 - [0:0] :logdrop-ntp-16 - [0:0] :logdrop-ntp-160 - [0:0] :logdrop-ntp-161 - [0:0] :logdrop-ntp-162 - [0:0] :logdrop-ntp-163 - [0:0] :logdrop-ntp-164 - [0:0] :logdrop-ntp-165 - [0:0] :logdrop-ntp-166 - [0:0] :logdrop-ntp-167 - [0:0] :logdrop-ntp-168 - [0:0] :logdrop-ntp-169 - [0:0] :logdrop-ntp-17 - [0:0] :logdrop-ntp-170 - [0:0] :logdrop-ntp-171 - [0:0] :logdrop-ntp-172 - [0:0] :logdrop-ntp-173 - [0:0] :logdrop-ntp-174 - [0:0] :logdrop-ntp-175 - [0:0] :logdrop-ntp-176 - [0:0] :logdrop-ntp-177 - [0:0] :logdrop-ntp-178 - [0:0] :logdrop-ntp-179 - [0:0] :logdrop-ntp-18 - [0:0] :logdrop-ntp-180 - [0:0] :logdrop-ntp-181 - [0:0] :logdrop-ntp-182 - [0:0] :logdrop-ntp-183 - [0:0] :logdrop-ntp-184 - [0:0] :logdrop-ntp-185 - [0:0] :logdrop-ntp-186 - [0:0] :logdrop-ntp-187 - [0:0] :logdrop-ntp-188 - [0:0] :logdrop-ntp-189 - [0:0] :logdrop-ntp-19 - [0:0] :logdrop-ntp-190 - [0:0] :logdrop-ntp-191 - [0:0] :logdrop-ntp-192 - [0:0] :logdrop-ntp-193 - [0:0] :logdrop-ntp-194 - [0:0] :logdrop-ntp-195 - [0:0] :logdrop-ntp-196 - [0:0] :logdrop-ntp-197 - [0:0] :logdrop-ntp-198 - [0:0] :logdrop-ntp-199 - [0:0] :logdrop-ntp-2 - [0:0] :logdrop-ntp-20 - [0:0] :logdrop-ntp-200 - [0:0] :logdrop-ntp-201 - [0:0] :logdrop-ntp-202 - [0:0] :logdrop-ntp-203 - [0:0] :logdrop-ntp-204 - [0:0] :logdrop-ntp-205 - [0:0] :logdrop-ntp-206 - [0:0] :logdrop-ntp-207 - [0:0] :logdrop-ntp-208 - [0:0] :logdrop-ntp-209 - [0:0] :logdrop-ntp-21 - [0:0] :logdrop-ntp-210 - [0:0] :logdrop-ntp-211 - [0:0] :logdrop-ntp-212 - [0:0] :logdrop-ntp-213 - [0:0] :logdrop-ntp-214 - [0:0] :logdrop-ntp-215 - [0:0] :logdrop-ntp-216 - [0:0] :logdrop-ntp-217 - [0:0] :logdrop-ntp-218 - [0:0] :logdrop-ntp-219 - [0:0] :logdrop-ntp-22 - [0:0] :logdrop-ntp-220 - [0:0] :logdrop-ntp-221 - [0:0] :logdrop-ntp-222 - [0:0] :logdrop-ntp-223 - [0:0] :logdrop-ntp-224 - [0:0] :logdrop-ntp-225 - [0:0] :logdrop-ntp-226 - [0:0] :logdrop-ntp-227 - [0:0] :logdrop-ntp-228 - [0:0] :logdrop-ntp-229 - [0:0] :logdrop-ntp-23 - [0:0] :logdrop-ntp-230 - [0:0] :logdrop-ntp-231 - [0:0] :logdrop-ntp-232 - [0:0] :logdrop-ntp-233 - [0:0] :logdrop-ntp-234 - [0:0] :logdrop-ntp-235 - [0:0] :logdrop-ntp-236 - [0:0] :logdrop-ntp-237 - [0:0] :logdrop-ntp-238 - [0:0] :logdrop-ntp-239 - [0:0] :logdrop-ntp-24 - [0:0] :logdrop-ntp-240 - [0:0] :logdrop-ntp-241 - [0:0] :logdrop-ntp-242 - [0:0] :logdrop-ntp-243 - [0:0] :logdrop-ntp-244 - [0:0] :logdrop-ntp-245 - [0:0] :logdrop-ntp-246 - [0:0] :logdrop-ntp-247 - [0:0] :logdrop-ntp-248 - [0:0] :logdrop-ntp-249 - [0:0] :logdrop-ntp-25 - [0:0] :logdrop-ntp-250 - [0:0] :logdrop-ntp-251 - [0:0] :logdrop-ntp-252 - [0:0] :logdrop-ntp-253 - [0:0] :logdrop-ntp-254 - [0:0] :logdrop-ntp-255 - [0:0] :logdrop-ntp-256 - [0:0] :logdrop-ntp-257 - [0:0] :logdrop-ntp-258 - [0:0] :logdrop-ntp-259 - [0:0] :logdrop-ntp-26 - [0:0] :logdrop-ntp-260 - [0:0] :logdrop-ntp-261 - [0:0] :logdrop-ntp-262 - [0:0] :logdrop-ntp-263 - [0:0] :logdrop-ntp-264 - [0:0] :logdrop-ntp-265 - [0:0] :logdrop-ntp-266 - [0:0] :logdrop-ntp-267 - [0:0] :logdrop-ntp-268 - [0:0] :logdrop-ntp-269 - [0:0] :logdrop-ntp-27 - [0:0] :logdrop-ntp-270 - [0:0] :logdrop-ntp-271 - [0:0] :logdrop-ntp-272 - [0:0] :logdrop-ntp-273 - [0:0] :logdrop-ntp-274 - [0:0] :logdrop-ntp-275 - [0:0] :logdrop-ntp-276 - [0:0] :logdrop-ntp-277 - [0:0] :logdrop-ntp-278 - [0:0] :logdrop-ntp-279 - [0:0] :logdrop-ntp-28 - [0:0] :logdrop-ntp-280 - [0:0] :logdrop-ntp-281 - [0:0] :logdrop-ntp-282 - [0:0] :logdrop-ntp-283 - [0:0] :logdrop-ntp-284 - [0:0] :logdrop-ntp-285 - [0:0] :logdrop-ntp-286 - [0:0] :logdrop-ntp-287 - [0:0] :logdrop-ntp-288 - [0:0] :logdrop-ntp-289 - [0:0] :logdrop-ntp-29 - [0:0] :logdrop-ntp-290 - [0:0] :logdrop-ntp-291 - [0:0] :logdrop-ntp-292 - [0:0] :logdrop-ntp-293 - [0:0] :logdrop-ntp-294 - [0:0] :logdrop-ntp-295 - [0:0] :logdrop-ntp-296 - [0:0] :logdrop-ntp-297 - [0:0] :logdrop-ntp-298 - [0:0] :logdrop-ntp-299 - [0:0] :logdrop-ntp-3 - [0:0] :logdrop-ntp-30 - [0:0] :logdrop-ntp-300 - [0:0] :logdrop-ntp-301 - [0:0] :logdrop-ntp-302 - [0:0] :logdrop-ntp-303 - [0:0] :logdrop-ntp-304 - [0:0] :logdrop-ntp-305 - [0:0] :logdrop-ntp-306 - [0:0] :logdrop-ntp-307 - [0:0] :logdrop-ntp-308 - [0:0] :logdrop-ntp-309 - [0:0] :logdrop-ntp-31 - [0:0] :logdrop-ntp-310 - [0:0] :logdrop-ntp-311 - [0:0] :logdrop-ntp-312 - [0:0] :logdrop-ntp-313 - [0:0] :logdrop-ntp-314 - [0:0] :logdrop-ntp-315 - [0:0] :logdrop-ntp-316 - [0:0] :logdrop-ntp-317 - [0:0] :logdrop-ntp-318 - [0:0] :logdrop-ntp-319 - [0:0] :logdrop-ntp-32 - [0:0] :logdrop-ntp-320 - [0:0] :logdrop-ntp-321 - [0:0] :logdrop-ntp-322 - [0:0] :logdrop-ntp-323 - [0:0] :logdrop-ntp-324 - [0:0] :logdrop-ntp-325 - [0:0] :logdrop-ntp-326 - [0:0] :logdrop-ntp-327 - [0:0] :logdrop-ntp-328 - [0:0] :logdrop-ntp-329 - [0:0] :logdrop-ntp-33 - [0:0] :logdrop-ntp-330 - [0:0] :logdrop-ntp-331 - [0:0] :logdrop-ntp-332 - [0:0] :logdrop-ntp-333 - [0:0] :logdrop-ntp-334 - [0:0] :logdrop-ntp-335 - [0:0] :logdrop-ntp-336 - [0:0] :logdrop-ntp-337 - [0:0] :logdrop-ntp-338 - [0:0] :logdrop-ntp-339 - [0:0] :logdrop-ntp-34 - [0:0] :logdrop-ntp-340 - [0:0] :logdrop-ntp-341 - [0:0] :logdrop-ntp-342 - [0:0] :logdrop-ntp-343 - [0:0] :logdrop-ntp-344 - [0:0] :logdrop-ntp-345 - [0:0] :logdrop-ntp-346 - [0:0] :logdrop-ntp-347 - [0:0] :logdrop-ntp-348 - [0:0] :logdrop-ntp-349 - [0:0] :logdrop-ntp-35 - [0:0] :logdrop-ntp-350 - [0:0] :logdrop-ntp-351 - [0:0] :logdrop-ntp-352 - [0:0] :logdrop-ntp-353 - [0:0] :logdrop-ntp-354 - [0:0] :logdrop-ntp-355 - [0:0] :logdrop-ntp-356 - [0:0] :logdrop-ntp-357 - [0:0] :logdrop-ntp-358 - [0:0] :logdrop-ntp-359 - [0:0] :logdrop-ntp-36 - [0:0] :logdrop-ntp-360 - [0:0] :logdrop-ntp-361 - [0:0] :logdrop-ntp-362 - [0:0] :logdrop-ntp-363 - [0:0] :logdrop-ntp-364 - [0:0] :logdrop-ntp-365 - [0:0] :logdrop-ntp-366 - [0:0] :logdrop-ntp-367 - [0:0] :logdrop-ntp-368 - [0:0] :logdrop-ntp-369 - [0:0] :logdrop-ntp-37 - [0:0] :logdrop-ntp-370 - [0:0] :logdrop-ntp-371 - [0:0] :logdrop-ntp-372 - [0:0] :logdrop-ntp-373 - [0:0] :logdrop-ntp-374 - [0:0] :logdrop-ntp-375 - [0:0] :logdrop-ntp-376 - [0:0] :logdrop-ntp-377 - [0:0] :logdrop-ntp-378 - [0:0] :logdrop-ntp-379 - [0:0] :logdrop-ntp-38 - [0:0] :logdrop-ntp-380 - [0:0] :logdrop-ntp-381 - [0:0] :logdrop-ntp-382 - [0:0] :logdrop-ntp-383 - [0:0] :logdrop-ntp-384 - [0:0] :logdrop-ntp-385 - [0:0] :logdrop-ntp-386 - [0:0] :logdrop-ntp-387 - [0:0] :logdrop-ntp-388 - [0:0] :logdrop-ntp-389 - [0:0] :logdrop-ntp-39 - [0:0] :logdrop-ntp-390 - [0:0] :logdrop-ntp-391 - [0:0] :logdrop-ntp-392 - [0:0] :logdrop-ntp-393 - [0:0] :logdrop-ntp-394 - [0:0] :logdrop-ntp-395 - [0:0] :logdrop-ntp-396 - [0:0] :logdrop-ntp-397 - [0:0] :logdrop-ntp-398 - [0:0] :logdrop-ntp-399 - [0:0] :logdrop-ntp-4 - [0:0] :logdrop-ntp-40 - [0:0] :logdrop-ntp-400 - [0:0] :logdrop-ntp-401 - [0:0] :logdrop-ntp-402 - [0:0] :logdrop-ntp-403 - [0:0] :logdrop-ntp-404 - [0:0] :logdrop-ntp-405 - [0:0] :logdrop-ntp-406 - [0:0] :logdrop-ntp-407 - [0:0] :logdrop-ntp-408 - [0:0] :logdrop-ntp-409 - [0:0] :logdrop-ntp-41 - [0:0] :logdrop-ntp-410 - [0:0] :logdrop-ntp-411 - [0:0] :logdrop-ntp-412 - [0:0] :logdrop-ntp-413 - [0:0] :logdrop-ntp-414 - [0:0] :logdrop-ntp-415 - [0:0] :logdrop-ntp-416 - [0:0] :logdrop-ntp-417 - [0:0] :logdrop-ntp-418 - [0:0] :logdrop-ntp-419 - [0:0] :logdrop-ntp-42 - [0:0] :logdrop-ntp-420 - [0:0] :logdrop-ntp-421 - [0:0] :logdrop-ntp-422 - [0:0] :logdrop-ntp-423 - [0:0] :logdrop-ntp-424 - [0:0] :logdrop-ntp-425 - [0:0] :logdrop-ntp-426 - [0:0] :logdrop-ntp-427 - [0:0] :logdrop-ntp-428 - [0:0] :logdrop-ntp-429 - [0:0] :logdrop-ntp-43 - [0:0] :logdrop-ntp-430 - [0:0] :logdrop-ntp-431 - [0:0] :logdrop-ntp-432 - [0:0] :logdrop-ntp-433 - [0:0] :logdrop-ntp-434 - [0:0] :logdrop-ntp-435 - [0:0] :logdrop-ntp-436 - [0:0] :logdrop-ntp-437 - [0:0] :logdrop-ntp-438 - [0:0] :logdrop-ntp-439 - [0:0] :logdrop-ntp-44 - [0:0] :logdrop-ntp-440 - [0:0] :logdrop-ntp-441 - [0:0] :logdrop-ntp-442 - [0:0] :logdrop-ntp-443 - [0:0] :logdrop-ntp-444 - [0:0] :logdrop-ntp-445 - [0:0] :logdrop-ntp-446 - [0:0] :logdrop-ntp-447 - [0:0] :logdrop-ntp-448 - [0:0] :logdrop-ntp-449 - [0:0] :logdrop-ntp-45 - [0:0] :logdrop-ntp-450 - [0:0] :logdrop-ntp-451 - [0:0] :logdrop-ntp-452 - [0:0] :logdrop-ntp-453 - [0:0] :logdrop-ntp-454 - [0:0] :logdrop-ntp-455 - [0:0] :logdrop-ntp-456 - [0:0] :logdrop-ntp-457 - [0:0] :logdrop-ntp-458 - [0:0] :logdrop-ntp-459 - [0:0] :logdrop-ntp-46 - [0:0] :logdrop-ntp-460 - [0:0] :logdrop-ntp-461 - [0:0] :logdrop-ntp-462 - [0:0] :logdrop-ntp-463 - [0:0] :logdrop-ntp-464 - [0:0] :logdrop-ntp-465 - [0:0] :logdrop-ntp-466 - [0:0] :logdrop-ntp-467 - [0:0] :logdrop-ntp-468 - [0:0] :logdrop-ntp-469 - [0:0] :logdrop-ntp-47 - [0:0] :logdrop-ntp-470 - [0:0] :logdrop-ntp-471 - [0:0] :logdrop-ntp-472 - [0:0] :logdrop-ntp-473 - [0:0] :logdrop-ntp-474 - [0:0] :logdrop-ntp-475 - [0:0] :logdrop-ntp-476 - [0:0] :logdrop-ntp-477 - [0:0] :logdrop-ntp-478 - [0:0] :logdrop-ntp-479 - [0:0] :logdrop-ntp-48 - [0:0] :logdrop-ntp-480 - [0:0] :logdrop-ntp-481 - [0:0] :logdrop-ntp-482 - [0:0] :logdrop-ntp-483 - [0:0] :logdrop-ntp-484 - [0:0] :logdrop-ntp-485 - [0:0] :logdrop-ntp-486 - [0:0] :logdrop-ntp-487 - [0:0] :logdrop-ntp-488 - [0:0] :logdrop-ntp-489 - [0:0] :logdrop-ntp-49 - [0:0] :logdrop-ntp-490 - [0:0] :logdrop-ntp-491 - [0:0] :logdrop-ntp-492 - [0:0] :logdrop-ntp-493 - [0:0] :logdrop-ntp-494 - [0:0] :logdrop-ntp-495 - [0:0] :logdrop-ntp-496 - [0:0] :logdrop-ntp-497 - [0:0] :logdrop-ntp-498 - [0:0] :logdrop-ntp-499 - [0:0] :logdrop-ntp-5 - [0:0] :logdrop-ntp-50 - [0:0] :logdrop-ntp-500 - [0:0] :logdrop-ntp-501 - [0:0] :logdrop-ntp-502 - [0:0] :logdrop-ntp-503 - [0:0] :logdrop-ntp-504 - [0:0] :logdrop-ntp-505 - [0:0] :logdrop-ntp-506 - [0:0] :logdrop-ntp-507 - [0:0] :logdrop-ntp-508 - [0:0] :logdrop-ntp-509 - [0:0] :logdrop-ntp-51 - [0:0] :logdrop-ntp-510 - [0:0] :logdrop-ntp-511 - [0:0] :logdrop-ntp-512 - [0:0] :logdrop-ntp-513 - [0:0] :logdrop-ntp-514 - [0:0] :logdrop-ntp-515 - [0:0] :logdrop-ntp-516 - [0:0] :logdrop-ntp-517 - [0:0] :logdrop-ntp-518 - [0:0] :logdrop-ntp-519 - [0:0] :logdrop-ntp-52 - [0:0] :logdrop-ntp-520 - [0:0] :logdrop-ntp-521 - [0:0] :logdrop-ntp-522 - [0:0] :logdrop-ntp-523 - [0:0] :logdrop-ntp-524 - [0:0] :logdrop-ntp-525 - [0:0] :logdrop-ntp-526 - [0:0] :logdrop-ntp-527 - [0:0] :logdrop-ntp-528 - [0:0] :logdrop-ntp-529 - [0:0] :logdrop-ntp-53 - [0:0] :logdrop-ntp-530 - [0:0] :logdrop-ntp-531 - [0:0] :logdrop-ntp-532 - [0:0] :logdrop-ntp-533 - [0:0] :logdrop-ntp-534 - [0:0] :logdrop-ntp-535 - [0:0] :logdrop-ntp-536 - [0:0] :logdrop-ntp-537 - [0:0] :logdrop-ntp-538 - [0:0] :logdrop-ntp-539 - [0:0] :logdrop-ntp-54 - [0:0] :logdrop-ntp-540 - [0:0] :logdrop-ntp-541 - [0:0] :logdrop-ntp-542 - [0:0] :logdrop-ntp-543 - [0:0] :logdrop-ntp-544 - [0:0] :logdrop-ntp-545 - [0:0] :logdrop-ntp-546 - [0:0] :logdrop-ntp-547 - [0:0] :logdrop-ntp-548 - [0:0] :logdrop-ntp-549 - [0:0] :logdrop-ntp-55 - [0:0] :logdrop-ntp-56 - [0:0] :logdrop-ntp-57 - [0:0] :logdrop-ntp-58 - [0:0] :logdrop-ntp-59 - [0:0] :logdrop-ntp-6 - [0:0] :logdrop-ntp-60 - [0:0] :logdrop-ntp-61 - [0:0] :logdrop-ntp-62 - [0:0] :logdrop-ntp-63 - [0:0] :logdrop-ntp-64 - [0:0] :logdrop-ntp-65 - [0:0] :logdrop-ntp-66 - [0:0] :logdrop-ntp-67 - [0:0] :logdrop-ntp-68 - [0:0] :logdrop-ntp-69 - [0:0] :logdrop-ntp-7 - [0:0] :logdrop-ntp-70 - [0:0] :logdrop-ntp-71 - [0:0] :logdrop-ntp-72 - [0:0] :logdrop-ntp-73 - [0:0] :logdrop-ntp-74 - [0:0] :logdrop-ntp-75 - [0:0] :logdrop-ntp-76 - [0:0] :logdrop-ntp-77 - [0:0] :logdrop-ntp-78 - [0:0] :logdrop-ntp-79 - [0:0] :logdrop-ntp-8 - [0:0] :logdrop-ntp-80 - [0:0] :logdrop-ntp-81 - [0:0] :logdrop-ntp-82 - [0:0] :logdrop-ntp-83 - [0:0] :logdrop-ntp-84 - [0:0] :logdrop-ntp-85 - [0:0] :logdrop-ntp-86 - [0:0] :logdrop-ntp-87 - [0:0] :logdrop-ntp-88 - [0:0] :logdrop-ntp-89 - [0:0] :logdrop-ntp-9 - [0:0] :logdrop-ntp-90 - [0:0] :logdrop-ntp-91 - [0:0] :logdrop-ntp-92 - [0:0] :logdrop-ntp-93 - [0:0] :logdrop-ntp-94 - [0:0] :logdrop-ntp-95 - [0:0] :logdrop-ntp-96 - [0:0] :logdrop-ntp-97 - [0:0] :logdrop-ntp-98 - [0:0] :logdrop-ntp-99 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-2 - [0:0] :logpass-3 - [0:0] -A FORWARD -m recent --name user:B --rdest --mask 255.255.255.255 --set -A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set -A FORWARD -j limit-2927 -A FORWARD -j limit-2926 -A FORWARD -j limit-2925 -A FORWARD -j limit-2924 -A FORWARD -j limit-2923 -A FORWARD -j limit-2922 -A FORWARD -j limit-2921 -A FORWARD -j limit-2920 -A FORWARD -j limit-2919 -A FORWARD -j limit-2918 -A FORWARD -j limit-2917 -A FORWARD -j limit-2916 -A FORWARD -j limit-2915 -A FORWARD -j limit-2914 -A FORWARD -j limit-2913 -A FORWARD -j limit-2912 -A FORWARD -j limit-2911 -A FORWARD -j limit-2910 -A FORWARD -j limit-2909 -A FORWARD -j limit-2908 -A FORWARD -j limit-2907 -A FORWARD -j limit-2906 -A FORWARD -j limit-2905 -A FORWARD -j limit-2904 -A FORWARD -j limit-2903 -A FORWARD -j limit-2902 -A FORWARD -j limit-2901 -A FORWARD -j limit-2900 -A FORWARD -j limit-2899 -A FORWARD -j limit-2898 -A FORWARD -j limit-2897 -A FORWARD -j limit-2896 -A FORWARD -j limit-2895 -A FORWARD -j limit-2894 -A FORWARD -j limit-2893 -A FORWARD -j limit-2892 -A FORWARD -j limit-2891 -A FORWARD -j limit-2890 -A FORWARD -j limit-2889 -A FORWARD -j limit-2888 -A FORWARD -j limit-2887 -A FORWARD -j limit-2886 -A FORWARD -j limit-2885 -A FORWARD -j limit-2884 -A FORWARD -j limit-2883 -A FORWARD -j limit-2882 -A FORWARD -j limit-2881 -A FORWARD -j limit-2880 -A FORWARD -j limit-2879 -A FORWARD -j limit-2878 -A FORWARD -j limit-2877 -A FORWARD -j limit-2876 -A FORWARD -j limit-2875 -A FORWARD -j limit-2874 -A FORWARD -j limit-2873 -A FORWARD -j limit-2872 -A FORWARD -j limit-2871 -A FORWARD -j limit-2870 -A FORWARD -j limit-2869 -A FORWARD -j limit-2868 -A FORWARD -j limit-2867 -A FORWARD -j limit-2866 -A FORWARD -j limit-2865 -A FORWARD -j limit-2864 -A FORWARD -j limit-2863 -A FORWARD -j limit-2862 -A FORWARD -j limit-2861 -A FORWARD -j limit-2860 -A FORWARD -j limit-2859 -A FORWARD -j limit-2858 -A FORWARD -j limit-2857 -A FORWARD -j limit-2856 -A FORWARD -j limit-2855 -A FORWARD -j limit-2854 -A FORWARD -j limit-2853 -A FORWARD -j limit-2852 -A FORWARD -j limit-2851 -A FORWARD -j limit-2850 -A FORWARD -j limit-2849 -A FORWARD -j limit-2848 -A FORWARD -j limit-2847 -A FORWARD -j limit-2846 -A FORWARD -j limit-2845 -A FORWARD -j limit-2844 -A FORWARD -j limit-2843 -A FORWARD -j limit-2842 -A FORWARD -j limit-2841 -A FORWARD -j limit-2840 -A FORWARD -j limit-2839 -A FORWARD -j limit-2838 -A FORWARD -j limit-2837 -A FORWARD -j limit-2836 -A FORWARD -j limit-2835 -A FORWARD -j limit-2834 -A FORWARD -j limit-2833 -A FORWARD -j limit-2832 -A FORWARD -j limit-2831 -A FORWARD -j limit-2830 -A FORWARD -j limit-2829 -A FORWARD -j limit-2828 -A FORWARD -j limit-2827 -A FORWARD -j limit-2826 -A FORWARD -j limit-2825 -A FORWARD -j limit-2824 -A FORWARD -j limit-2823 -A FORWARD -j limit-2822 -A FORWARD -j limit-2821 -A FORWARD -j limit-2820 -A FORWARD -j limit-2819 -A FORWARD -j limit-2818 -A FORWARD -j limit-2817 -A FORWARD -j limit-2816 -A FORWARD -j limit-2815 -A FORWARD -j limit-2814 -A FORWARD -j limit-2813 -A FORWARD -j limit-2812 -A FORWARD -j limit-2811 -A FORWARD -j limit-2810 -A FORWARD -j limit-2809 -A FORWARD -j limit-2808 -A FORWARD -j limit-2807 -A FORWARD -j limit-2806 -A FORWARD -j limit-2805 -A FORWARD -j limit-2804 -A FORWARD -j limit-2803 -A FORWARD -j limit-2802 -A FORWARD -j limit-2801 -A FORWARD -j limit-2800 -A FORWARD -j limit-2799 -A FORWARD -j limit-2798 -A FORWARD -j limit-2797 -A FORWARD -j limit-2796 -A FORWARD -j limit-2795 -A FORWARD -j limit-2794 -A FORWARD -j limit-2793 -A FORWARD -j limit-2792 -A FORWARD -j limit-2791 -A FORWARD -j limit-2790 -A FORWARD -j limit-2789 -A FORWARD -j limit-2788 -A FORWARD -j limit-2787 -A FORWARD -j limit-2786 -A FORWARD -j limit-2785 -A FORWARD -j limit-2784 -A FORWARD -j limit-2783 -A FORWARD -j limit-2782 -A FORWARD -j limit-2781 -A FORWARD -j limit-2780 -A FORWARD -j limit-2779 -A FORWARD -j limit-2778 -A FORWARD -j limit-2777 -A FORWARD -j limit-2776 -A FORWARD -j limit-2775 -A FORWARD -j limit-2774 -A FORWARD -j limit-2773 -A FORWARD -j limit-2772 -A FORWARD -j limit-2771 -A FORWARD -j limit-2770 -A FORWARD -j limit-2769 -A FORWARD -j limit-2768 -A FORWARD -j limit-2767 -A FORWARD -j limit-2766 -A FORWARD -j limit-2765 -A FORWARD -j limit-2764 -A FORWARD -j limit-2763 -A FORWARD -j limit-2762 -A FORWARD -j limit-2761 -A FORWARD -j limit-2760 -A FORWARD -j limit-2759 -A FORWARD -j limit-2758 -A FORWARD -j limit-2757 -A FORWARD -j limit-2756 -A FORWARD -j limit-2755 -A FORWARD -j limit-2754 -A FORWARD -j limit-2753 -A FORWARD -j limit-2752 -A FORWARD -j limit-2751 -A FORWARD -j limit-2750 -A FORWARD -j limit-2749 -A FORWARD -j limit-2748 -A FORWARD -j limit-2747 -A FORWARD -j limit-2746 -A FORWARD -j limit-2745 -A FORWARD -j limit-2744 -A FORWARD -j limit-2743 -A FORWARD -j limit-2742 -A FORWARD -j limit-2741 -A FORWARD -j limit-2740 -A FORWARD -j limit-2739 -A FORWARD -j limit-2738 -A FORWARD -j limit-2737 -A FORWARD -j limit-2736 -A FORWARD -j limit-2735 -A FORWARD -j limit-2734 -A FORWARD -j limit-2733 -A FORWARD -j limit-2732 -A FORWARD -j limit-2731 -A FORWARD -j limit-2730 -A FORWARD -j limit-2729 -A FORWARD -j limit-2728 -A FORWARD -j limit-2727 -A FORWARD -j limit-2726 -A FORWARD -j limit-2725 -A FORWARD -j limit-2724 -A FORWARD -j limit-2723 -A FORWARD -j limit-2722 -A FORWARD -j limit-2721 -A FORWARD -j limit-2720 -A FORWARD -j limit-2719 -A FORWARD -j limit-2718 -A FORWARD -j limit-2717 -A FORWARD -j limit-2716 -A FORWARD -j limit-2715 -A FORWARD -j limit-2714 -A FORWARD -j limit-2713 -A FORWARD -j limit-2712 -A FORWARD -j limit-2711 -A FORWARD -j limit-2710 -A FORWARD -j limit-2709 -A FORWARD -j limit-2708 -A FORWARD -j limit-2707 -A FORWARD -j limit-2706 -A FORWARD -j limit-2705 -A FORWARD -j limit-2704 -A FORWARD -j limit-2703 -A FORWARD -j limit-2702 -A FORWARD -j limit-2701 -A FORWARD -j limit-2700 -A FORWARD -j limit-2699 -A FORWARD -j limit-2698 -A FORWARD -j limit-2697 -A FORWARD -j limit-2696 -A FORWARD -j limit-2695 -A FORWARD -j limit-2694 -A FORWARD -j limit-2693 -A FORWARD -j limit-2692 -A FORWARD -j limit-2691 -A FORWARD -j limit-2690 -A FORWARD -j limit-2689 -A FORWARD -j limit-2688 -A FORWARD -j limit-2687 -A FORWARD -j limit-2686 -A FORWARD -j limit-2685 -A FORWARD -j limit-2684 -A FORWARD -j limit-2683 -A FORWARD -j limit-2682 -A FORWARD -j limit-2681 -A FORWARD -j limit-2680 -A FORWARD -j limit-2679 -A FORWARD -j limit-2678 -A FORWARD -j limit-2677 -A FORWARD -j limit-2676 -A FORWARD -j limit-2675 -A FORWARD -j limit-2674 -A FORWARD -j limit-2673 -A FORWARD -j limit-2672 -A FORWARD -j limit-2671 -A FORWARD -j limit-2670 -A FORWARD -j limit-2669 -A FORWARD -j limit-2668 -A FORWARD -j limit-2667 -A FORWARD -j limit-2666 -A FORWARD -j limit-2665 -A FORWARD -j limit-2664 -A FORWARD -j limit-2663 -A FORWARD -j limit-2662 -A FORWARD -j limit-2661 -A FORWARD -j limit-2660 -A FORWARD -j limit-2659 -A FORWARD -j limit-2658 -A FORWARD -j limit-2657 -A FORWARD -j limit-2656 -A FORWARD -j limit-2655 -A FORWARD -j limit-2654 -A FORWARD -j limit-2653 -A FORWARD -j limit-2652 -A FORWARD -j limit-2651 -A FORWARD -j limit-2650 -A FORWARD -j limit-2649 -A FORWARD -j limit-2648 -A FORWARD -j limit-2647 -A FORWARD -j limit-2646 -A FORWARD -j limit-2645 -A FORWARD -j limit-2644 -A FORWARD -j limit-2643 -A FORWARD -j limit-2642 -A FORWARD -j limit-2641 -A FORWARD -j limit-2640 -A FORWARD -j limit-2639 -A FORWARD -j limit-2638 -A FORWARD -j limit-2637 -A FORWARD -j limit-2636 -A FORWARD -j limit-2635 -A FORWARD -j limit-2634 -A FORWARD -j limit-2633 -A FORWARD -j limit-2632 -A FORWARD -j limit-2631 -A FORWARD -j limit-2630 -A FORWARD -j limit-2629 -A FORWARD -j limit-2628 -A FORWARD -j limit-2627 -A FORWARD -j limit-2626 -A FORWARD -j limit-2625 -A FORWARD -j limit-2624 -A FORWARD -j limit-2623 -A FORWARD -j limit-2622 -A FORWARD -j limit-2621 -A FORWARD -j limit-2620 -A FORWARD -j limit-2619 -A FORWARD -j limit-2618 -A FORWARD -j limit-2617 -A FORWARD -j limit-2616 -A FORWARD -j limit-2615 -A FORWARD -j limit-2614 -A FORWARD -j limit-2613 -A FORWARD -j limit-2612 -A FORWARD -j limit-2611 -A FORWARD -j limit-2610 -A FORWARD -j limit-2609 -A FORWARD -j limit-2608 -A FORWARD -j limit-2607 -A FORWARD -j limit-2606 -A FORWARD -j limit-2605 -A FORWARD -j limit-2604 -A FORWARD -j limit-2603 -A FORWARD -j limit-2602 -A FORWARD -j limit-2601 -A FORWARD -j limit-2600 -A FORWARD -j limit-2599 -A FORWARD -j limit-2598 -A FORWARD -j limit-2597 -A FORWARD -j limit-2596 -A FORWARD -j limit-2595 -A FORWARD -j limit-2594 -A FORWARD -j limit-2593 -A FORWARD -j limit-2592 -A FORWARD -j limit-2591 -A FORWARD -j limit-2590 -A FORWARD -j limit-2589 -A FORWARD -j limit-2588 -A FORWARD -j limit-2587 -A FORWARD -j limit-2586 -A FORWARD -j limit-2585 -A FORWARD -j limit-2584 -A FORWARD -j limit-2583 -A FORWARD -j limit-2582 -A FORWARD -j limit-2581 -A FORWARD -j limit-2580 -A FORWARD -j limit-2579 -A FORWARD -j limit-2578 -A FORWARD -j limit-2577 -A FORWARD -j limit-2576 -A FORWARD -j limit-2575 -A FORWARD -j limit-2574 -A FORWARD -j limit-2573 -A FORWARD -j limit-2572 -A FORWARD -j limit-2571 -A FORWARD -j limit-2570 -A FORWARD -j limit-2569 -A FORWARD -j limit-2568 -A FORWARD -j limit-2567 -A FORWARD -j limit-2566 -A FORWARD -j limit-2565 -A FORWARD -j limit-2564 -A FORWARD -j limit-2563 -A FORWARD -j limit-2562 -A FORWARD -j limit-2561 -A FORWARD -j limit-2560 -A FORWARD -j limit-2559 -A FORWARD -j limit-2558 -A FORWARD -j limit-2557 -A FORWARD -j limit-2556 -A FORWARD -j limit-2555 -A FORWARD -j limit-2554 -A FORWARD -j limit-2553 -A FORWARD -j limit-2552 -A FORWARD -j limit-2551 -A FORWARD -j limit-2550 -A FORWARD -j limit-2549 -A FORWARD -j limit-2548 -A FORWARD -j limit-2547 -A FORWARD -j limit-2546 -A FORWARD -j limit-2545 -A FORWARD -j limit-2544 -A FORWARD -j limit-2543 -A FORWARD -j limit-2542 -A FORWARD -j limit-2541 -A FORWARD -j limit-2540 -A FORWARD -j limit-2539 -A FORWARD -j limit-2538 -A FORWARD -j limit-2537 -A FORWARD -j limit-2536 -A FORWARD -j limit-2535 -A FORWARD -j limit-2534 -A FORWARD -j limit-2533 -A FORWARD -j limit-2532 -A FORWARD -j limit-2531 -A FORWARD -j limit-2530 -A FORWARD -j limit-2529 -A FORWARD -j limit-2528 -A FORWARD -j limit-2527 -A FORWARD -j limit-2526 -A FORWARD -j limit-2525 -A FORWARD -j limit-2524 -A FORWARD -j limit-2523 -A FORWARD -j limit-2522 -A FORWARD -j limit-2521 -A FORWARD -j limit-2520 -A FORWARD -j limit-2519 -A FORWARD -j limit-2518 -A FORWARD -j limit-2517 -A FORWARD -j limit-2516 -A FORWARD -j limit-2515 -A FORWARD -j limit-2514 -A FORWARD -j limit-2513 -A FORWARD -j limit-2512 -A FORWARD -j limit-2511 -A FORWARD -j limit-2510 -A FORWARD -j limit-2509 -A FORWARD -j limit-2508 -A FORWARD -j limit-2507 -A FORWARD -j limit-2506 -A FORWARD -j limit-2505 -A FORWARD -j limit-2504 -A FORWARD -j limit-2503 -A FORWARD -j limit-2502 -A FORWARD -j limit-2501 -A FORWARD -j limit-2500 -A FORWARD -j limit-2499 -A FORWARD -j limit-2498 -A FORWARD -j limit-2497 -A FORWARD -j limit-2496 -A FORWARD -j limit-2495 -A FORWARD -j limit-2494 -A FORWARD -j limit-2493 -A FORWARD -j limit-2492 -A FORWARD -j limit-2491 -A FORWARD -j limit-2490 -A FORWARD -j limit-2489 -A FORWARD -j limit-2488 -A FORWARD -j limit-2487 -A FORWARD -j limit-2486 -A FORWARD -j limit-2485 -A FORWARD -j limit-2484 -A FORWARD -j limit-2483 -A FORWARD -j limit-2482 -A FORWARD -j limit-2481 -A FORWARD -j limit-2480 -A FORWARD -j limit-2479 -A FORWARD -j limit-2478 -A FORWARD -j limit-2477 -A FORWARD -j limit-2476 -A FORWARD -j limit-2475 -A FORWARD -j limit-2474 -A FORWARD -j limit-2473 -A FORWARD -j limit-2472 -A FORWARD -j limit-2471 -A FORWARD -j limit-2470 -A FORWARD -j limit-2469 -A FORWARD -j limit-2468 -A FORWARD -j limit-2467 -A FORWARD -j limit-2466 -A FORWARD -j limit-2465 -A FORWARD -j limit-2464 -A FORWARD -j limit-2463 -A FORWARD -j limit-2462 -A FORWARD -j limit-2461 -A FORWARD -j limit-2460 -A FORWARD -j limit-2459 -A FORWARD -j limit-2458 -A FORWARD -j limit-2457 -A FORWARD -j limit-2456 -A FORWARD -j limit-2455 -A FORWARD -j limit-2454 -A FORWARD -j limit-2453 -A FORWARD -j limit-2452 -A FORWARD -j limit-2451 -A FORWARD -j limit-2450 -A FORWARD -j limit-2449 -A FORWARD -j limit-2448 -A FORWARD -j limit-2447 -A FORWARD -j limit-2446 -A FORWARD -j limit-2445 -A FORWARD -j limit-2444 -A FORWARD -j limit-2443 -A FORWARD -j limit-2442 -A FORWARD -j limit-2441 -A FORWARD -j limit-2440 -A FORWARD -j limit-2439 -A FORWARD -j limit-2438 -A FORWARD -j limit-2437 -A FORWARD -j limit-2436 -A FORWARD -j limit-2435 -A FORWARD -j limit-2434 -A FORWARD -j limit-2433 -A FORWARD -j limit-2432 -A FORWARD -j limit-2431 -A FORWARD -j limit-2430 -A FORWARD -j limit-2429 -A FORWARD -j limit-2428 -A FORWARD -j limit-2427 -A FORWARD -j limit-2426 -A FORWARD -j limit-2425 -A FORWARD -j limit-2424 -A FORWARD -j limit-2423 -A FORWARD -j limit-2422 -A FORWARD -j limit-2421 -A FORWARD -j limit-2420 -A FORWARD -j limit-2419 -A FORWARD -j limit-2418 -A FORWARD -j limit-2417 -A FORWARD -j limit-2416 -A FORWARD -j limit-2415 -A FORWARD -j limit-2414 -A FORWARD -j limit-2413 -A FORWARD -j limit-2412 -A FORWARD -j limit-2411 -A FORWARD -j limit-2410 -A FORWARD -j limit-2409 -A FORWARD -j limit-2408 -A FORWARD -j limit-2407 -A FORWARD -j limit-2406 -A FORWARD -j limit-2405 -A FORWARD -j limit-2404 -A FORWARD -j limit-2403 -A FORWARD -j limit-2402 -A FORWARD -j limit-2401 -A FORWARD -j limit-2400 -A FORWARD -j limit-2399 -A FORWARD -j limit-2398 -A FORWARD -j limit-2397 -A FORWARD -j limit-2396 -A FORWARD -j limit-2395 -A FORWARD -j limit-2394 -A FORWARD -j limit-2393 -A FORWARD -j limit-2392 -A FORWARD -j limit-2391 -A FORWARD -j limit-2390 -A FORWARD -j limit-2389 -A FORWARD -j limit-2388 -A FORWARD -j limit-2387 -A FORWARD -j limit-2386 -A FORWARD -j limit-2385 -A FORWARD -j limit-2384 -A FORWARD -j limit-2383 -A FORWARD -j limit-2382 -A FORWARD -j limit-2381 -A FORWARD -j limit-2380 -A FORWARD -j limit-2379 -A FORWARD -j limit-2378 -A FORWARD -j limit-2377 -A FORWARD -j limit-2376 -A FORWARD -j limit-2375 -A FORWARD -j limit-2374 -A FORWARD -j limit-2373 -A FORWARD -j limit-2372 -A FORWARD -j limit-2371 -A FORWARD -j limit-2370 -A FORWARD -j limit-2369 -A FORWARD -j limit-2368 -A FORWARD -j limit-2367 -A FORWARD -j limit-2366 -A FORWARD -j limit-2365 -A FORWARD -j limit-2364 -A FORWARD -j limit-2363 -A FORWARD -j limit-2362 -A FORWARD -j limit-2361 -A FORWARD -j limit-2360 -A FORWARD -j limit-2359 -A FORWARD -j limit-2358 -A FORWARD -j limit-2357 -A FORWARD -j limit-2356 -A FORWARD -j limit-2355 -A FORWARD -j limit-2354 -A FORWARD -j limit-2353 -A FORWARD -j limit-2352 -A FORWARD -j limit-2351 -A FORWARD -j limit-2350 -A FORWARD -j limit-2349 -A FORWARD -j limit-2348 -A FORWARD -j limit-2347 -A FORWARD -j limit-2346 -A FORWARD -j limit-2345 -A FORWARD -j limit-2344 -A FORWARD -j limit-2343 -A FORWARD -j limit-2342 -A FORWARD -j limit-2341 -A FORWARD -j limit-2340 -A FORWARD -j limit-2339 -A FORWARD -j limit-2338 -A FORWARD -j limit-2337 -A FORWARD -j limit-2336 -A FORWARD -j limit-2335 -A FORWARD -j limit-2334 -A FORWARD -j limit-2333 -A FORWARD -j limit-2332 -A FORWARD -j limit-2331 -A FORWARD -j limit-2330 -A FORWARD -j limit-2329 -A FORWARD -j limit-2328 -A FORWARD -j limit-2327 -A FORWARD -j limit-2326 -A FORWARD -j limit-2325 -A FORWARD -j limit-2324 -A FORWARD -j limit-2323 -A FORWARD -j limit-2322 -A FORWARD -j limit-2321 -A FORWARD -j limit-2320 -A FORWARD -j limit-2319 -A FORWARD -j limit-2318 -A FORWARD -j limit-2317 -A FORWARD -j limit-2316 -A FORWARD -j limit-2315 -A FORWARD -j limit-2314 -A FORWARD -j limit-2313 -A FORWARD -j limit-2312 -A FORWARD -j limit-2311 -A FORWARD -j limit-2310 -A FORWARD -j limit-2309 -A FORWARD -j limit-2308 -A FORWARD -j limit-2307 -A FORWARD -j limit-2306 -A FORWARD -j limit-2305 -A FORWARD -j limit-2304 -A FORWARD -j limit-2303 -A FORWARD -j limit-2302 -A FORWARD -j limit-2301 -A FORWARD -j limit-2300 -A FORWARD -j limit-2299 -A FORWARD -j limit-2298 -A FORWARD -j limit-2297 -A FORWARD -j limit-2296 -A FORWARD -j limit-2295 -A FORWARD -j limit-2294 -A FORWARD -j limit-2293 -A FORWARD -j limit-2292 -A FORWARD -j limit-2291 -A FORWARD -j limit-2290 -A FORWARD -j limit-2289 -A FORWARD -j limit-2288 -A FORWARD -j limit-2287 -A FORWARD -j limit-2286 -A FORWARD -j limit-2285 -A FORWARD -j limit-2284 -A FORWARD -j limit-2283 -A FORWARD -j limit-2282 -A FORWARD -j limit-2281 -A FORWARD -j limit-2280 -A FORWARD -j limit-2279 -A FORWARD -j limit-2278 -A FORWARD -j limit-2277 -A FORWARD -j limit-2276 -A FORWARD -j limit-2275 -A FORWARD -j limit-2274 -A FORWARD -j limit-2273 -A FORWARD -j limit-2272 -A FORWARD -j limit-2271 -A FORWARD -j limit-2270 -A FORWARD -j limit-2269 -A FORWARD -j limit-2268 -A FORWARD -j limit-2267 -A FORWARD -j limit-2266 -A FORWARD -j limit-2265 -A FORWARD -j limit-2264 -A FORWARD -j limit-2263 -A FORWARD -j limit-2262 -A FORWARD -j limit-2261 -A FORWARD -j limit-2260 -A FORWARD -j limit-2259 -A FORWARD -j limit-2258 -A FORWARD -j limit-2257 -A FORWARD -j limit-2256 -A FORWARD -j limit-2255 -A FORWARD -j limit-2254 -A FORWARD -j limit-2253 -A FORWARD -j limit-2252 -A FORWARD -j limit-2251 -A FORWARD -j limit-2250 -A FORWARD -j limit-2249 -A FORWARD -j limit-2248 -A FORWARD -j limit-2247 -A FORWARD -j limit-2246 -A FORWARD -j limit-2245 -A FORWARD -j limit-2244 -A FORWARD -j limit-2243 -A FORWARD -j limit-2242 -A FORWARD -j limit-2241 -A FORWARD -j limit-2240 -A FORWARD -j limit-2239 -A FORWARD -j limit-2238 -A FORWARD -j limit-2237 -A FORWARD -j limit-2236 -A FORWARD -j limit-2235 -A FORWARD -j limit-2234 -A FORWARD -j limit-2233 -A FORWARD -j limit-2232 -A FORWARD -j limit-2231 -A FORWARD -j limit-2230 -A FORWARD -j limit-2229 -A FORWARD -j limit-2228 -A FORWARD -j limit-2227 -A FORWARD -j limit-2226 -A FORWARD -j limit-2225 -A FORWARD -j limit-2224 -A FORWARD -j limit-2223 -A FORWARD -j limit-2222 -A FORWARD -j limit-2221 -A FORWARD -j limit-2220 -A FORWARD -j limit-2219 -A FORWARD -j limit-2218 -A FORWARD -j limit-2217 -A FORWARD -j limit-2216 -A FORWARD -j limit-2215 -A FORWARD -j limit-2214 -A FORWARD -j limit-2213 -A FORWARD -j limit-2212 -A FORWARD -j limit-2211 -A FORWARD -j limit-2210 -A FORWARD -j limit-2209 -A FORWARD -j limit-2208 -A FORWARD -j limit-2207 -A FORWARD -j limit-2206 -A FORWARD -j limit-2205 -A FORWARD -j limit-2204 -A FORWARD -j limit-2203 -A FORWARD -j limit-2202 -A FORWARD -j limit-2201 -A FORWARD -j limit-2200 -A FORWARD -j limit-2199 -A FORWARD -j limit-2198 -A FORWARD -j limit-2197 -A FORWARD -j limit-2196 -A FORWARD -j limit-2195 -A FORWARD -j limit-2194 -A FORWARD -j limit-2193 -A FORWARD -j limit-2192 -A FORWARD -j limit-2191 -A FORWARD -j limit-2190 -A FORWARD -j limit-2189 -A FORWARD -j limit-2188 -A FORWARD -j limit-2187 -A FORWARD -j limit-2186 -A FORWARD -j limit-2185 -A FORWARD -j limit-2184 -A FORWARD -j limit-2183 -A FORWARD -j limit-2182 -A FORWARD -j limit-2181 -A FORWARD -j limit-2180 -A FORWARD -j limit-2179 -A FORWARD -j limit-2178 -A FORWARD -j limit-2177 -A FORWARD -j limit-2176 -A FORWARD -j limit-2175 -A FORWARD -j limit-2174 -A FORWARD -j limit-2173 -A FORWARD -j limit-2172 -A FORWARD -j limit-2171 -A FORWARD -j limit-2170 -A FORWARD -j limit-2169 -A FORWARD -j limit-2168 -A FORWARD -j limit-2167 -A FORWARD -j limit-2166 -A FORWARD -j limit-2165 -A FORWARD -j limit-2164 -A FORWARD -j limit-2163 -A FORWARD -j limit-2162 -A FORWARD -j limit-2161 -A FORWARD -j limit-2160 -A FORWARD -j limit-2159 -A FORWARD -j limit-2158 -A FORWARD -j limit-2157 -A FORWARD -j limit-2156 -A FORWARD -j limit-2155 -A FORWARD -j limit-2154 -A FORWARD -j limit-2153 -A FORWARD -j limit-2152 -A FORWARD -j limit-2151 -A FORWARD -j limit-2150 -A FORWARD -j limit-2149 -A FORWARD -j limit-2148 -A FORWARD -j limit-2147 -A FORWARD -j limit-2146 -A FORWARD -j limit-2145 -A FORWARD -j limit-2144 -A FORWARD -j limit-2143 -A FORWARD -j limit-2142 -A FORWARD -j limit-2141 -A FORWARD -j limit-2140 -A FORWARD -j limit-2139 -A FORWARD -j limit-2138 -A FORWARD -j limit-2137 -A FORWARD -j limit-2136 -A FORWARD -j limit-2135 -A FORWARD -j limit-2134 -A FORWARD -j limit-2133 -A FORWARD -j limit-2132 -A FORWARD -j limit-2131 -A FORWARD -j limit-2130 -A FORWARD -j limit-2129 -A FORWARD -j limit-2128 -A FORWARD -j limit-2127 -A FORWARD -j limit-2126 -A FORWARD -j limit-2125 -A FORWARD -j limit-2124 -A FORWARD -j limit-2123 -A FORWARD -j limit-2122 -A FORWARD -j limit-2121 -A FORWARD -j limit-2120 -A FORWARD -j limit-2119 -A FORWARD -j limit-2118 -A FORWARD -j limit-2117 -A FORWARD -j limit-2116 -A FORWARD -j limit-2115 -A FORWARD -j limit-2114 -A FORWARD -j limit-2113 -A FORWARD -j limit-2112 -A FORWARD -j limit-2111 -A FORWARD -j limit-2110 -A FORWARD -j limit-2109 -A FORWARD -j limit-2108 -A FORWARD -j limit-2107 -A FORWARD -j limit-2106 -A FORWARD -j limit-2105 -A FORWARD -j limit-2104 -A FORWARD -j limit-2103 -A FORWARD -j limit-2102 -A FORWARD -j limit-2101 -A FORWARD -j limit-2100 -A FORWARD -j limit-2099 -A FORWARD -j limit-2098 -A FORWARD -j limit-2097 -A FORWARD -j limit-2096 -A FORWARD -j limit-2095 -A FORWARD -j limit-2094 -A FORWARD -j limit-2093 -A FORWARD -j limit-2092 -A FORWARD -j limit-2091 -A FORWARD -j limit-2090 -A FORWARD -j limit-2089 -A FORWARD -j limit-2088 -A FORWARD -j limit-2087 -A FORWARD -j limit-2086 -A FORWARD -j limit-2085 -A FORWARD -j limit-2084 -A FORWARD -j limit-2083 -A FORWARD -j limit-2082 -A FORWARD -j limit-2081 -A FORWARD -j limit-2080 -A FORWARD -j limit-2079 -A FORWARD -j limit-2078 -A FORWARD -j limit-2077 -A FORWARD -j limit-2076 -A FORWARD -j limit-2075 -A FORWARD -j limit-2074 -A FORWARD -j limit-2073 -A FORWARD -j limit-2072 -A FORWARD -j limit-2071 -A FORWARD -j limit-2070 -A FORWARD -j limit-2069 -A FORWARD -j limit-2068 -A FORWARD -j limit-2067 -A FORWARD -j limit-2066 -A FORWARD -j limit-2065 -A FORWARD -j limit-2064 -A FORWARD -j limit-2063 -A FORWARD -j limit-2062 -A FORWARD -j limit-2061 -A FORWARD -j limit-2060 -A FORWARD -j limit-2059 -A FORWARD -j limit-2058 -A FORWARD -j limit-2057 -A FORWARD -j limit-2056 -A FORWARD -j limit-2055 -A FORWARD -j limit-2054 -A FORWARD -j limit-2053 -A FORWARD -j limit-2052 -A FORWARD -j limit-2051 -A FORWARD -j limit-2050 -A FORWARD -j limit-2049 -A FORWARD -j limit-2048 -A FORWARD -j limit-2047 -A FORWARD -j limit-2046 -A FORWARD -j limit-2045 -A FORWARD -j limit-2044 -A FORWARD -j limit-2043 -A FORWARD -j limit-2042 -A FORWARD -j limit-2041 -A FORWARD -j limit-2040 -A FORWARD -j limit-2039 -A FORWARD -j limit-2038 -A FORWARD -j limit-2037 -A FORWARD -j limit-2036 -A FORWARD -j limit-2035 -A FORWARD -j limit-2034 -A FORWARD -j limit-2033 -A FORWARD -j limit-2032 -A FORWARD -j limit-2031 -A FORWARD -j limit-2030 -A FORWARD -j limit-2029 -A FORWARD -j limit-2028 -A FORWARD -j limit-2027 -A FORWARD -j limit-2026 -A FORWARD -j limit-2025 -A FORWARD -j limit-2024 -A FORWARD -j limit-2023 -A FORWARD -j limit-2022 -A FORWARD -j limit-2021 -A FORWARD -j limit-2020 -A FORWARD -j limit-2019 -A FORWARD -j limit-2018 -A FORWARD -j limit-2017 -A FORWARD -j limit-2016 -A FORWARD -j limit-2015 -A FORWARD -j limit-2014 -A FORWARD -j limit-2013 -A FORWARD -j limit-2012 -A FORWARD -j limit-2011 -A FORWARD -j limit-2010 -A FORWARD -j limit-2009 -A FORWARD -j limit-2008 -A FORWARD -j limit-2007 -A FORWARD -j limit-2006 -A FORWARD -j limit-2005 -A FORWARD -j limit-2004 -A FORWARD -j limit-2003 -A FORWARD -j limit-2002 -A FORWARD -j limit-2001 -A FORWARD -j limit-2000 -A FORWARD -j limit-1999 -A FORWARD -j limit-1998 -A FORWARD -j limit-1997 -A FORWARD -j limit-1996 -A FORWARD -j limit-1995 -A FORWARD -j limit-1994 -A FORWARD -j limit-1993 -A FORWARD -j limit-1992 -A FORWARD -j limit-1991 -A FORWARD -j limit-1990 -A FORWARD -j limit-1989 -A FORWARD -j limit-1988 -A FORWARD -j limit-1987 -A FORWARD -j limit-1986 -A FORWARD -j limit-1985 -A FORWARD -j limit-1984 -A FORWARD -j limit-1983 -A FORWARD -j limit-1982 -A FORWARD -j limit-1981 -A FORWARD -j limit-1980 -A FORWARD -j limit-1979 -A FORWARD -j limit-1978 -A FORWARD -j limit-1977 -A FORWARD -j limit-1976 -A FORWARD -j limit-1975 -A FORWARD -j limit-1974 -A FORWARD -j limit-1973 -A FORWARD -j limit-1972 -A FORWARD -j limit-1971 -A FORWARD -j limit-1970 -A FORWARD -j limit-1969 -A FORWARD -j limit-1968 -A FORWARD -j limit-1967 -A FORWARD -j limit-1966 -A FORWARD -j limit-1965 -A FORWARD -j limit-1964 -A FORWARD -j limit-1963 -A FORWARD -j limit-1962 -A FORWARD -j limit-1961 -A FORWARD -j limit-1960 -A FORWARD -j limit-1959 -A FORWARD -j limit-1958 -A FORWARD -j limit-1957 -A FORWARD -j limit-1956 -A FORWARD -j limit-1955 -A FORWARD -j limit-1954 -A FORWARD -j limit-1953 -A FORWARD -j limit-1952 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-0 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-1 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-2 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-3 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-4 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-5 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-6 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-7 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-8 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-9 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-10 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-11 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-12 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-13 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-14 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-15 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-16 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-17 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-18 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-19 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-20 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-21 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-22 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-23 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-24 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-25 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-26 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-27 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-28 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-29 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-30 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-31 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-32 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-33 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-34 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-35 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-109 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-113 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-139 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-143 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-151 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-155 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-181 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-185 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-217 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-221 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-235 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-239 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-247 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-251 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-259 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-263 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-271 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-275 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-289 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-293 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-301 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-305 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-313 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-317 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-325 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-329 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-358 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-359 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-360 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-361 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-362 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-363 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-364 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-365 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-366 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-367 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-368 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-369 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-370 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-371 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-372 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-373 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-374 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-375 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-376 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-377 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-378 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-379 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-380 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-381 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-382 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-383 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-384 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-385 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-386 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-387 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-388 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-389 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-390 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-391 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-392 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-393 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-394 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-395 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-396 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-397 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-398 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-399 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-400 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-401 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-402 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-403 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-404 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-405 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-406 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-407 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-408 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-409 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-410 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-411 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-412 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-413 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-414 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-415 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-416 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-417 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-418 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-419 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-420 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-421 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-422 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-423 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-424 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-425 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-426 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-427 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-428 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-429 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-430 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-431 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-432 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-433 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-434 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-435 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-436 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-437 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-438 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-439 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-440 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-441 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-442 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-443 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-444 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-445 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-446 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-447 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-448 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-449 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-450 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-451 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-452 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-453 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-454 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-455 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-456 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-457 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-458 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-459 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-460 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-461 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-462 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-463 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-464 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-465 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-466 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-467 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-468 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-469 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-470 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-471 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-472 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-473 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-474 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-475 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-476 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-477 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-478 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-479 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-480 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-481 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-482 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-483 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-484 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-485 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-486 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-487 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-488 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-489 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-490 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-491 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-492 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-493 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-494 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-495 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-496 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-497 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-498 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-499 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-500 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-501 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-502 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-503 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-504 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-505 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-506 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-507 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-508 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-509 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-510 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-511 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-512 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-513 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-514 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-515 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-516 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-517 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-518 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-519 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-520 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-521 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-522 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-523 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-524 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-525 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-526 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-527 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-528 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-529 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-530 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-531 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-532 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-533 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-534 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-535 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-536 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-537 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-538 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-539 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-540 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-541 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-542 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-543 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-544 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-545 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-546 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-547 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-548 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-549 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-550 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-551 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-552 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-553 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-554 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-555 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-556 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-557 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-558 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-559 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-560 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-561 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-562 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-563 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-564 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-565 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-566 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-567 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-568 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-569 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-570 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-571 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-572 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-573 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-574 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-575 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-576 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-577 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-578 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-579 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-580 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-581 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-582 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-583 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-584 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-585 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-586 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-587 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-588 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-589 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-590 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-591 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-592 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-593 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-594 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-595 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-596 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-597 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-598 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-599 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-600 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-601 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-602 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-603 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-604 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-605 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-606 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-607 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-608 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-609 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-610 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-611 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-612 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-613 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-614 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-615 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-616 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-617 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-618 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-619 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-620 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-621 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-622 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-623 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-624 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-625 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-626 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-627 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-628 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-629 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-630 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-631 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-632 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-633 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-634 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-635 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-636 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-637 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-638 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-639 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-640 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-641 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-642 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-643 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-644 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-645 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-646 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-647 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-648 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-649 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-650 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-651 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-652 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-653 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-654 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-655 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-656 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-657 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-658 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-659 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-660 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-661 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-662 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-663 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-664 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-665 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-666 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-667 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-668 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-669 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-670 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-671 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-672 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-673 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-674 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-675 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-676 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-677 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-678 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-679 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-680 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-681 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-682 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-683 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-684 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-685 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-686 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-687 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-688 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-689 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-690 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-691 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-692 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-693 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-694 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-695 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-696 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-697 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-698 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-699 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-700 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-701 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-702 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-703 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-704 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-705 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-706 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-707 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-708 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-709 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-710 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-711 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-712 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-713 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-714 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-715 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-716 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-717 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-718 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-719 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-720 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-721 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-722 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-723 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-724 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-725 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-726 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-727 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-728 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-729 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-730 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-731 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-732 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-733 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-734 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-735 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-736 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-737 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-738 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-739 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-740 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-741 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-742 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-743 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-744 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-745 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-746 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-747 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-748 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-749 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-750 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-751 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-752 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-753 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-754 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-755 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-756 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-757 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-758 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-759 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-760 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-761 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-762 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-763 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-764 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-765 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-766 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-767 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-768 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-769 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-770 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-771 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-772 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-773 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-774 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-775 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-776 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-777 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-778 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-779 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-780 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-781 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-782 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-783 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-784 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-785 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-786 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-787 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-788 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-789 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-790 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-791 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-792 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-793 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-794 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-795 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-796 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-797 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-798 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-799 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-800 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-801 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-802 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-803 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-804 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-805 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-806 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-807 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-808 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-809 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-810 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-811 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-812 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-813 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-814 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-815 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-816 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-817 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-818 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-819 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-820 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-821 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-822 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-823 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-824 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-825 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-826 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-827 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-828 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-829 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-830 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-831 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-832 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-833 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-834 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-835 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-836 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-837 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-838 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-839 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-840 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-841 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-842 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-843 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-844 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-845 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-846 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-847 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-848 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-849 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-850 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-851 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-852 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-853 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-854 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-855 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-856 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-857 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-858 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-859 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-860 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-861 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-862 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-863 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-864 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-865 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-866 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-867 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-868 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-869 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-870 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-871 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-872 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-873 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-874 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-875 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-876 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-877 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-878 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-879 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-880 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-881 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-882 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-883 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-884 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-885 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-886 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-887 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-888 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-889 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-890 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-891 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-892 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-893 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-894 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-895 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-896 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-897 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-898 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-899 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-900 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-901 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-902 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-903 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-904 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-905 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-906 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-907 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-908 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-909 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-910 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-911 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-912 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-913 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-914 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-915 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-916 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-917 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-918 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-919 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-920 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-921 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-922 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-923 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-924 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-925 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-926 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-927 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-928 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-929 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-930 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-931 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-932 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-933 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-934 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-935 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-936 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-937 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-938 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-939 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-940 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-941 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-942 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-943 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-944 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-945 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-946 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-947 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-948 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-949 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-950 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-951 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-952 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-953 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-954 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-955 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-956 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-957 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-958 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-959 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-960 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-961 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-962 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-963 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-964 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-965 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-966 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-967 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-968 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-969 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-970 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-971 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-972 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-973 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-974 -A FORWARD -o eth1 -d 10.0.0.0/12 -j limit-975 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j logaccept-final-1 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-2 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-3 -A FORWARD -j logaccept-final-4 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-5 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-6 -A FORWARD -j logaccept-final-7 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-8 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-9 -A FORWARD -j logaccept-final-10 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-11 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-12 -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-14 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-15 -A FORWARD -j logaccept-final-16 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-17 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-18 -A FORWARD -j logaccept-final-19 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-20 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-21 -A FORWARD -j logaccept-final-22 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-23 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-24 -A FORWARD -j logaccept-final-25 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-26 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-27 -A FORWARD -j logaccept-final-28 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-29 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-30 -A FORWARD -j logaccept-final-31 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-32 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-33 -A FORWARD -j logaccept-final-34 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-35 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-36 -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-38 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-39 -A FORWARD -j logaccept-final-40 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-41 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-42 -A FORWARD -j logaccept-final-43 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-44 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-45 -A FORWARD -j logaccept-final-46 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-47 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-48 -A FORWARD -j logaccept-final-49 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-50 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-51 -A FORWARD -j logaccept-final-52 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-53 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-54 -A FORWARD -j logaccept-final-55 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-56 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-57 -A FORWARD -j logaccept-final-58 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-59 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-60 -A FORWARD -j logaccept-final-61 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-62 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-63 -A FORWARD -j logaccept-final-64 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-65 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-66 -A FORWARD -j logaccept-final-67 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-68 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-69 -A FORWARD -j logaccept-final-70 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-71 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-72 -A FORWARD -j logaccept-final-73 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-74 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-75 -A FORWARD -j logaccept-final-76 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-77 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-78 -A FORWARD -j logaccept-final-79 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-80 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-81 -A FORWARD -j logaccept-final-82 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-83 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-84 -A FORWARD -j logaccept-final-85 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-86 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-87 -A FORWARD -j logaccept-final-88 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-89 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-90 -A FORWARD -j logaccept-final-91 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-92 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-93 -A FORWARD -j logaccept-final-94 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-95 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-96 -A FORWARD -j logaccept-final-97 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-98 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-99 -A FORWARD -j logaccept-final-100 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-101 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-102 -A FORWARD -j logaccept-final-103 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-104 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-105 -A FORWARD -j logaccept-final-106 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-107 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-108 -A FORWARD -j logaccept-final-109 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-110 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-111 -A FORWARD -j logaccept-final-112 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-113 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-114 -A FORWARD -j logaccept-final-115 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-116 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-117 -A FORWARD -j logaccept-final-118 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-119 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-120 -A FORWARD -j logaccept-final-121 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-122 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-123 -A FORWARD -j logaccept-final-124 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-125 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-126 -A FORWARD -j logaccept-final-127 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-128 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-129 -A FORWARD -j logaccept-final-130 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-131 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-132 -A FORWARD -j logaccept-final-133 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-134 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-135 -A FORWARD -j logaccept-final-136 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-137 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-138 -A FORWARD -j logaccept-final-139 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-140 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-141 -A FORWARD -j logaccept-final-142 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-143 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-144 -A FORWARD -j logaccept-final-145 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-146 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-147 -A FORWARD -j logaccept-final-148 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-149 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-150 -A FORWARD -j logaccept-final-151 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-152 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-153 -A FORWARD -j logaccept-final-154 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-155 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-156 -A FORWARD -j logaccept-final-157 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-158 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-159 -A FORWARD -j logaccept-final-160 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-161 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-162 -A FORWARD -j logaccept-final-163 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-164 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-165 -A FORWARD -j logaccept-final-166 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-167 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-168 -A FORWARD -j logaccept-final-169 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-170 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-171 -A FORWARD -j logaccept-final-172 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-173 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-174 -A FORWARD -j logaccept-final-175 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-176 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-177 -A FORWARD -j logaccept-final-178 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-179 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-180 -A FORWARD -j logaccept-final-181 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-182 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-183 -A FORWARD -j logaccept-final-184 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-185 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-186 -A FORWARD -j logaccept-final-187 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-188 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-189 -A FORWARD -j logaccept-final-190 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-191 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-192 -A FORWARD -j logaccept-final-193 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-194 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-195 -A FORWARD -j logaccept-final-196 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-197 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-198 -A FORWARD -j logaccept-final-199 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-200 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-201 -A FORWARD -j logaccept-final-202 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-203 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-204 -A FORWARD -j logaccept-final-205 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-206 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-207 -A FORWARD -j logaccept-final-208 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-209 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-210 -A FORWARD -j logaccept-final-211 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-212 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-213 -A FORWARD -j logaccept-final-214 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-215 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-216 -A FORWARD -j logaccept-final-217 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-218 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-219 -A FORWARD -j logaccept-final-220 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-221 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-222 -A FORWARD -j logaccept-final-223 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-224 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-225 -A FORWARD -j logaccept-final-226 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-227 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-228 -A FORWARD -j logaccept-final-229 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-230 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-231 -A FORWARD -j logaccept-final-232 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-233 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-234 -A FORWARD -j logaccept-final-235 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-236 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-237 -A FORWARD -j logaccept-final-238 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-239 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-240 -A FORWARD -j logaccept-final-241 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-242 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-243 -A FORWARD -j logaccept-final-244 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-245 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-246 -A FORWARD -j logaccept-final-247 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-248 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-249 -A FORWARD -j logaccept-final-250 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-251 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-252 -A FORWARD -j logaccept-final-253 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-254 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-255 -A FORWARD -j logaccept-final-256 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-257 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-258 -A FORWARD -j logaccept-final-259 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-260 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-261 -A FORWARD -j logaccept-final-262 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-263 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-264 -A FORWARD -j logaccept-final-265 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-266 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-267 -A FORWARD -j logaccept-final-268 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-269 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-270 -A FORWARD -j logaccept-final-271 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-272 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-273 -A FORWARD -j logaccept-final-274 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-275 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-276 -A FORWARD -j logaccept-final-277 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-278 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-279 -A FORWARD -j logaccept-final-280 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-281 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-282 -A FORWARD -j logaccept-final-283 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-284 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-285 -A FORWARD -j logaccept-final-286 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-287 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-288 -A FORWARD -j logaccept-final-289 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-290 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-291 -A FORWARD -j logaccept-final-292 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-293 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-294 -A FORWARD -j logaccept-final-295 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-296 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-297 -A FORWARD -j logaccept-final-298 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-299 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-300 -A FORWARD -j logaccept-final-301 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-302 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-303 -A FORWARD -j logaccept-final-304 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-305 -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:B --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:C --rsource --mask 254.0.0.0 --set -A FORWARD -m recent --name user:D --rsource --mask 255.255.252.0 --set -A FORWARD -m recent --name user:A --rsource --mask 255.255.255.255 --set -A FORWARD -m recent --name user:A --rdest --mask 255.255.255.255 --set -A FORWARD -j ACCEPT -A FORWARD -j logdrop-1650 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-66 -A FORWARD -j logdrop-1651 -A FORWARD -j logpass-0 -A FORWARD -j logaccept-67 -A FORWARD -j logdrop-1652 -A FORWARD -j logpass-1 -A FORWARD -j logaccept-68 -A FORWARD -j logdrop-1653 -A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-69 -A FORWARD -j logdrop-1654 -A FORWARD -j logpass-3 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -i eth0 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth0 -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth0 -o eth4 -j ACCEPT -A FORWARD -i eth0 -o eth5 -j ACCEPT -A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth0 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth4 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth5 -j ACCEPT -A FORWARD -i eth1 -s 10.0.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth2 -s 10.1.0.0/12 -o eth0 -j ACCEPT -A FORWARD -i eth3 -s 10.1.0.0/12 -o eth0 -j ACCEPT -A FORWARD -i eth2 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -i eth3 -s 10.1.0.0/12 -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -i eth2 -s 10.1.0.0/12 -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth3 -s 10.1.0.0/12 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth2 -s 10.1.0.0/12 -o eth4 -j ACCEPT -A FORWARD -i eth2 -s 10.1.0.0/12 -o eth5 -j ACCEPT -A FORWARD -i eth3 -s 10.1.0.0/12 -o eth4 -j ACCEPT -A FORWARD -i eth3 -s 10.1.0.0/12 -o eth5 -j ACCEPT -A FORWARD -i eth2 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth3 -s 10.1.0.0/12 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth4 -o eth0 -j ACCEPT -A FORWARD -i eth5 -o eth0 -j ACCEPT -A FORWARD -i eth4 -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -i eth5 -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -i eth4 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth4 -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth5 -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth5 -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -i eth4 -o eth4 -j ACCEPT -A FORWARD -i eth4 -o eth5 -j ACCEPT -A FORWARD -i eth5 -o eth4 -j ACCEPT -A FORWARD -i eth5 -o eth5 -j ACCEPT -A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth1 -d 10.0.0.0/12 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth2 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth3 -d 10.1.0.0/12 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmp -j icmp-routing -A INPUT -m limit --limit 12/minute -j ULOG -A INPUT -j NFLOG --nflog-group 1 --nflog-size 128 -A INPUT -j TEE --gateway 10.0.0.2 -A INPUT -j TEE --gateway 10.0.0.1 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A INPUT -j limit-2927 -A INPUT -j limit-2926 -A INPUT -j limit-2925 -A INPUT -j limit-2924 -A INPUT -j limit-2923 -A INPUT -j limit-2922 -A INPUT -j limit-2921 -A INPUT -j limit-2920 -A INPUT -j limit-2919 -A INPUT -j limit-2918 -A INPUT -j limit-2917 -A INPUT -j limit-2916 -A INPUT -j limit-2915 -A INPUT -j limit-2914 -A INPUT -j limit-2913 -A INPUT -j limit-2912 -A INPUT -j limit-2911 -A INPUT -j limit-2910 -A INPUT -j limit-2909 -A INPUT -j limit-2908 -A INPUT -j limit-2907 -A INPUT -j limit-2906 -A INPUT -j limit-2905 -A INPUT -j limit-2904 -A INPUT -j limit-2903 -A INPUT -j limit-2902 -A INPUT -j limit-2901 -A INPUT -j limit-2900 -A INPUT -j limit-2899 -A INPUT -j limit-2898 -A INPUT -j limit-2897 -A INPUT -j limit-2896 -A INPUT -j limit-2895 -A INPUT -j limit-2894 -A INPUT -j limit-2893 -A INPUT -j limit-2892 -A INPUT -j limit-2891 -A INPUT -j limit-2890 -A INPUT -j limit-2889 -A INPUT -j limit-2888 -A INPUT -j limit-2887 -A INPUT -j limit-2886 -A INPUT -j limit-2885 -A INPUT -j limit-2884 -A INPUT -j limit-2883 -A INPUT -j limit-2882 -A INPUT -j limit-2881 -A INPUT -j limit-2880 -A INPUT -j limit-2879 -A INPUT -j limit-2878 -A INPUT -j limit-2877 -A INPUT -j limit-2876 -A INPUT -j limit-2875 -A INPUT -j limit-2874 -A INPUT -j limit-2873 -A INPUT -j limit-2872 -A INPUT -j limit-2871 -A INPUT -j limit-2870 -A INPUT -j limit-2869 -A INPUT -j limit-2868 -A INPUT -j limit-2867 -A INPUT -j limit-2866 -A INPUT -j limit-2865 -A INPUT -j limit-2864 -A INPUT -j limit-2863 -A INPUT -j limit-2862 -A INPUT -j limit-2861 -A INPUT -j limit-2860 -A INPUT -j limit-2859 -A INPUT -j limit-2858 -A INPUT -j limit-2857 -A INPUT -j limit-2856 -A INPUT -j limit-2855 -A INPUT -j limit-2854 -A INPUT -j limit-2853 -A INPUT -j limit-2852 -A INPUT -j limit-2851 -A INPUT -j limit-2850 -A INPUT -j limit-2849 -A INPUT -j limit-2848 -A INPUT -j limit-2847 -A INPUT -j limit-2846 -A INPUT -j limit-2845 -A INPUT -j limit-2844 -A INPUT -j limit-2843 -A INPUT -j limit-2842 -A INPUT -j limit-2841 -A INPUT -j limit-2840 -A INPUT -j limit-2839 -A INPUT -j limit-2838 -A INPUT -j limit-2837 -A INPUT -j limit-2836 -A INPUT -j limit-2835 -A INPUT -j limit-2834 -A INPUT -j limit-2833 -A INPUT -j limit-2832 -A INPUT -j limit-2831 -A INPUT -j limit-2830 -A INPUT -j limit-2829 -A INPUT -j limit-2828 -A INPUT -j limit-2827 -A INPUT -j limit-2826 -A INPUT -j limit-2825 -A INPUT -j limit-2824 -A INPUT -j limit-2823 -A INPUT -j limit-2822 -A INPUT -j limit-2821 -A INPUT -j limit-2820 -A INPUT -j limit-2819 -A INPUT -j limit-2818 -A INPUT -j limit-2817 -A INPUT -j limit-2816 -A INPUT -j limit-2815 -A INPUT -j limit-2814 -A INPUT -j limit-2813 -A INPUT -j limit-2812 -A INPUT -j limit-2811 -A INPUT -j limit-2810 -A INPUT -j limit-2809 -A INPUT -j limit-2808 -A INPUT -j limit-2807 -A INPUT -j limit-2806 -A INPUT -j limit-2805 -A INPUT -j limit-2804 -A INPUT -j limit-2803 -A INPUT -j limit-2802 -A INPUT -j limit-2801 -A INPUT -j limit-2800 -A INPUT -j limit-2799 -A INPUT -j limit-2798 -A INPUT -j limit-2797 -A INPUT -j limit-2796 -A INPUT -j limit-2795 -A INPUT -j limit-2794 -A INPUT -j limit-2793 -A INPUT -j limit-2792 -A INPUT -j limit-2791 -A INPUT -j limit-2790 -A INPUT -j limit-2789 -A INPUT -j limit-2788 -A INPUT -j limit-2787 -A INPUT -j limit-2786 -A INPUT -j limit-2785 -A INPUT -j limit-2784 -A INPUT -j limit-2783 -A INPUT -j limit-2782 -A INPUT -j limit-2781 -A INPUT -j limit-2780 -A INPUT -j limit-2779 -A INPUT -j limit-2778 -A INPUT -j limit-2777 -A INPUT -j limit-2776 -A INPUT -j limit-2775 -A INPUT -j limit-2774 -A INPUT -j limit-2773 -A INPUT -j limit-2772 -A INPUT -j limit-2771 -A INPUT -j limit-2770 -A INPUT -j limit-2769 -A INPUT -j limit-2768 -A INPUT -j limit-2767 -A INPUT -j limit-2766 -A INPUT -j limit-2765 -A INPUT -j limit-2764 -A INPUT -j limit-2763 -A INPUT -j limit-2762 -A INPUT -j limit-2761 -A INPUT -j limit-2760 -A INPUT -j limit-2759 -A INPUT -j limit-2758 -A INPUT -j limit-2757 -A INPUT -j limit-2756 -A INPUT -j limit-2755 -A INPUT -j limit-2754 -A INPUT -j limit-2753 -A INPUT -j limit-2752 -A INPUT -j limit-2751 -A INPUT -j limit-2750 -A INPUT -j limit-2749 -A INPUT -j limit-2748 -A INPUT -j limit-2747 -A INPUT -j limit-2746 -A INPUT -j limit-2745 -A INPUT -j limit-2744 -A INPUT -j limit-2743 -A INPUT -j limit-2742 -A INPUT -j limit-2741 -A INPUT -j limit-2740 -A INPUT -j limit-2739 -A INPUT -j limit-2738 -A INPUT -j limit-2737 -A INPUT -j limit-2736 -A INPUT -j limit-2735 -A INPUT -j limit-2734 -A INPUT -j limit-2733 -A INPUT -j limit-2732 -A INPUT -j limit-2731 -A INPUT -j limit-2730 -A INPUT -j limit-2729 -A INPUT -j limit-2728 -A INPUT -j limit-2727 -A INPUT -j limit-2726 -A INPUT -j limit-2725 -A INPUT -j limit-2724 -A INPUT -j limit-2723 -A INPUT -j limit-2722 -A INPUT -j limit-2721 -A INPUT -j limit-2720 -A INPUT -j limit-2719 -A INPUT -j limit-2718 -A INPUT -j limit-2717 -A INPUT -j limit-2716 -A INPUT -j limit-2715 -A INPUT -j limit-2714 -A INPUT -j limit-2713 -A INPUT -j limit-2712 -A INPUT -j limit-2711 -A INPUT -j limit-2710 -A INPUT -j limit-2709 -A INPUT -j limit-2708 -A INPUT -j limit-2707 -A INPUT -j limit-2706 -A INPUT -j limit-2705 -A INPUT -j limit-2704 -A INPUT -j limit-2703 -A INPUT -j limit-2702 -A INPUT -j limit-2701 -A INPUT -j limit-2700 -A INPUT -j limit-2699 -A INPUT -j limit-2698 -A INPUT -j limit-2697 -A INPUT -j limit-2696 -A INPUT -j limit-2695 -A INPUT -j limit-2694 -A INPUT -j limit-2693 -A INPUT -j limit-2692 -A INPUT -j limit-2691 -A INPUT -j limit-2690 -A INPUT -j limit-2689 -A INPUT -j limit-2688 -A INPUT -j limit-2687 -A INPUT -j limit-2686 -A INPUT -j limit-2685 -A INPUT -j limit-2684 -A INPUT -j limit-2683 -A INPUT -j limit-2682 -A INPUT -j limit-2681 -A INPUT -j limit-2680 -A INPUT -j limit-2679 -A INPUT -j limit-2678 -A INPUT -j limit-2677 -A INPUT -j limit-2676 -A INPUT -j limit-2675 -A INPUT -j limit-2674 -A INPUT -j limit-2673 -A INPUT -j limit-2672 -A INPUT -j limit-2671 -A INPUT -j limit-2670 -A INPUT -j limit-2669 -A INPUT -j limit-2668 -A INPUT -j limit-2667 -A INPUT -j limit-2666 -A INPUT -j limit-2665 -A INPUT -j limit-2664 -A INPUT -j limit-2663 -A INPUT -j limit-2662 -A INPUT -j limit-2661 -A INPUT -j limit-2660 -A INPUT -j limit-2659 -A INPUT -j limit-2658 -A INPUT -j limit-2657 -A INPUT -j limit-2656 -A INPUT -j limit-2655 -A INPUT -j limit-2654 -A INPUT -j limit-2653 -A INPUT -j limit-2652 -A INPUT -j limit-2651 -A INPUT -j limit-2650 -A INPUT -j limit-2649 -A INPUT -j limit-2648 -A INPUT -j limit-2647 -A INPUT -j limit-2646 -A INPUT -j limit-2645 -A INPUT -j limit-2644 -A INPUT -j limit-2643 -A INPUT -j limit-2642 -A INPUT -j limit-2641 -A INPUT -j limit-2640 -A INPUT -j limit-2639 -A INPUT -j limit-2638 -A INPUT -j limit-2637 -A INPUT -j limit-2636 -A INPUT -j limit-2635 -A INPUT -j limit-2634 -A INPUT -j limit-2633 -A INPUT -j limit-2632 -A INPUT -j limit-2631 -A INPUT -j limit-2630 -A INPUT -j limit-2629 -A INPUT -j limit-2628 -A INPUT -j limit-2627 -A INPUT -j limit-2626 -A INPUT -j limit-2625 -A INPUT -j limit-2624 -A INPUT -j limit-2623 -A INPUT -j limit-2622 -A INPUT -j limit-2621 -A INPUT -j limit-2620 -A INPUT -j limit-2619 -A INPUT -j limit-2618 -A INPUT -j limit-2617 -A INPUT -j limit-2616 -A INPUT -j limit-2615 -A INPUT -j limit-2614 -A INPUT -j limit-2613 -A INPUT -j limit-2612 -A INPUT -j limit-2611 -A INPUT -j limit-2610 -A INPUT -j limit-2609 -A INPUT -j limit-2608 -A INPUT -j limit-2607 -A INPUT -j limit-2606 -A INPUT -j limit-2605 -A INPUT -j limit-2604 -A INPUT -j limit-2603 -A INPUT -j limit-2602 -A INPUT -j limit-2601 -A INPUT -j limit-2600 -A INPUT -j limit-2599 -A INPUT -j limit-2598 -A INPUT -j limit-2597 -A INPUT -j limit-2596 -A INPUT -j limit-2595 -A INPUT -j limit-2594 -A INPUT -j limit-2593 -A INPUT -j limit-2592 -A INPUT -j limit-2591 -A INPUT -j limit-2590 -A INPUT -j limit-2589 -A INPUT -j limit-2588 -A INPUT -j limit-2587 -A INPUT -j limit-2586 -A INPUT -j limit-2585 -A INPUT -j limit-2584 -A INPUT -j limit-2583 -A INPUT -j limit-2582 -A INPUT -j limit-2581 -A INPUT -j limit-2580 -A INPUT -j limit-2579 -A INPUT -j limit-2578 -A INPUT -j limit-2577 -A INPUT -j limit-2576 -A INPUT -j limit-2575 -A INPUT -j limit-2574 -A INPUT -j limit-2573 -A INPUT -j limit-2572 -A INPUT -j limit-2571 -A INPUT -j limit-2570 -A INPUT -j limit-2569 -A INPUT -j limit-2568 -A INPUT -j limit-2567 -A INPUT -j limit-2566 -A INPUT -j limit-2565 -A INPUT -j limit-2564 -A INPUT -j limit-2563 -A INPUT -j limit-2562 -A INPUT -j limit-2561 -A INPUT -j limit-2560 -A INPUT -j limit-2559 -A INPUT -j limit-2558 -A INPUT -j limit-2557 -A INPUT -j limit-2556 -A INPUT -j limit-2555 -A INPUT -j limit-2554 -A INPUT -j limit-2553 -A INPUT -j limit-2552 -A INPUT -j limit-2551 -A INPUT -j limit-2550 -A INPUT -j limit-2549 -A INPUT -j limit-2548 -A INPUT -j limit-2547 -A INPUT -j limit-2546 -A INPUT -j limit-2545 -A INPUT -j limit-2544 -A INPUT -j limit-2543 -A INPUT -j limit-2542 -A INPUT -j limit-2541 -A INPUT -j limit-2540 -A INPUT -j limit-2539 -A INPUT -j limit-2538 -A INPUT -j limit-2537 -A INPUT -j limit-2536 -A INPUT -j limit-2535 -A INPUT -j limit-2534 -A INPUT -j limit-2533 -A INPUT -j limit-2532 -A INPUT -j limit-2531 -A INPUT -j limit-2530 -A INPUT -j limit-2529 -A INPUT -j limit-2528 -A INPUT -j limit-2527 -A INPUT -j limit-2526 -A INPUT -j limit-2525 -A INPUT -j limit-2524 -A INPUT -j limit-2523 -A INPUT -j limit-2522 -A INPUT -j limit-2521 -A INPUT -j limit-2520 -A INPUT -j limit-2519 -A INPUT -j limit-2518 -A INPUT -j limit-2517 -A INPUT -j limit-2516 -A INPUT -j limit-2515 -A INPUT -j limit-2514 -A INPUT -j limit-2513 -A INPUT -j limit-2512 -A INPUT -j limit-2511 -A INPUT -j limit-2510 -A INPUT -j limit-2509 -A INPUT -j limit-2508 -A INPUT -j limit-2507 -A INPUT -j limit-2506 -A INPUT -j limit-2505 -A INPUT -j limit-2504 -A INPUT -j limit-2503 -A INPUT -j limit-2502 -A INPUT -j limit-2501 -A INPUT -j limit-2500 -A INPUT -j limit-2499 -A INPUT -j limit-2498 -A INPUT -j limit-2497 -A INPUT -j limit-2496 -A INPUT -j limit-2495 -A INPUT -j limit-2494 -A INPUT -j limit-2493 -A INPUT -j limit-2492 -A INPUT -j limit-2491 -A INPUT -j limit-2490 -A INPUT -j limit-2489 -A INPUT -j limit-2488 -A INPUT -j limit-2487 -A INPUT -j limit-2486 -A INPUT -j limit-2485 -A INPUT -j limit-2484 -A INPUT -j limit-2483 -A INPUT -j limit-2482 -A INPUT -j limit-2481 -A INPUT -j limit-2480 -A INPUT -j limit-2479 -A INPUT -j limit-2478 -A INPUT -j limit-2477 -A INPUT -j limit-2476 -A INPUT -j limit-2475 -A INPUT -j limit-2474 -A INPUT -j limit-2473 -A INPUT -j limit-2472 -A INPUT -j limit-2471 -A INPUT -j limit-2470 -A INPUT -j limit-2469 -A INPUT -j limit-2468 -A INPUT -j limit-2467 -A INPUT -j limit-2466 -A INPUT -j limit-2465 -A INPUT -j limit-2464 -A INPUT -j limit-2463 -A INPUT -j limit-2462 -A INPUT -j limit-2461 -A INPUT -j limit-2460 -A INPUT -j limit-2459 -A INPUT -j limit-2458 -A INPUT -j limit-2457 -A INPUT -j limit-2456 -A INPUT -j limit-2455 -A INPUT -j limit-2454 -A INPUT -j limit-2453 -A INPUT -j limit-2452 -A INPUT -j limit-2451 -A INPUT -j limit-2450 -A INPUT -j limit-2449 -A INPUT -j limit-2448 -A INPUT -j limit-2447 -A INPUT -j limit-2446 -A INPUT -j limit-2445 -A INPUT -j limit-2444 -A INPUT -j limit-2443 -A INPUT -j limit-2442 -A INPUT -j limit-2441 -A INPUT -j limit-2440 -A INPUT -j limit-2439 -A INPUT -j limit-2438 -A INPUT -j limit-2437 -A INPUT -j limit-2436 -A INPUT -j limit-2435 -A INPUT -j limit-2434 -A INPUT -j limit-2433 -A INPUT -j limit-2432 -A INPUT -j limit-2431 -A INPUT -j limit-2430 -A INPUT -j limit-2429 -A INPUT -j limit-2428 -A INPUT -j limit-2427 -A INPUT -j limit-2426 -A INPUT -j limit-2425 -A INPUT -j limit-2424 -A INPUT -j limit-2423 -A INPUT -j limit-2422 -A INPUT -j limit-2421 -A INPUT -j limit-2420 -A INPUT -j limit-2419 -A INPUT -j limit-2418 -A INPUT -j limit-2417 -A INPUT -j limit-2416 -A INPUT -j limit-2415 -A INPUT -j limit-2414 -A INPUT -j limit-2413 -A INPUT -j limit-2412 -A INPUT -j limit-2411 -A INPUT -j limit-2410 -A INPUT -j limit-2409 -A INPUT -j limit-2408 -A INPUT -j limit-2407 -A INPUT -j limit-2406 -A INPUT -j limit-2405 -A INPUT -j limit-2404 -A INPUT -j limit-2403 -A INPUT -j limit-2402 -A INPUT -j limit-2401 -A INPUT -j limit-2400 -A INPUT -j limit-2399 -A INPUT -j limit-2398 -A INPUT -j limit-2397 -A INPUT -j limit-2396 -A INPUT -j limit-2395 -A INPUT -j limit-2394 -A INPUT -j limit-2393 -A INPUT -j limit-2392 -A INPUT -j limit-2391 -A INPUT -j limit-2390 -A INPUT -j limit-2389 -A INPUT -j limit-2388 -A INPUT -j limit-2387 -A INPUT -j limit-2386 -A INPUT -j limit-2385 -A INPUT -j limit-2384 -A INPUT -j limit-2383 -A INPUT -j limit-2382 -A INPUT -j limit-2381 -A INPUT -j limit-2380 -A INPUT -j limit-2379 -A INPUT -j limit-2378 -A INPUT -j limit-2377 -A INPUT -j limit-2376 -A INPUT -j limit-2375 -A INPUT -j limit-2374 -A INPUT -j limit-2373 -A INPUT -j limit-2372 -A INPUT -j limit-2371 -A INPUT -j limit-2370 -A INPUT -j limit-2369 -A INPUT -j limit-2368 -A INPUT -j limit-2367 -A INPUT -j limit-2366 -A INPUT -j limit-2365 -A INPUT -j limit-2364 -A INPUT -j limit-2363 -A INPUT -j limit-2362 -A INPUT -j limit-2361 -A INPUT -j limit-2360 -A INPUT -j limit-2359 -A INPUT -j limit-2358 -A INPUT -j limit-2357 -A INPUT -j limit-2356 -A INPUT -j limit-2355 -A INPUT -j limit-2354 -A INPUT -j limit-2353 -A INPUT -j limit-2352 -A INPUT -j limit-2351 -A INPUT -j limit-2350 -A INPUT -j limit-2349 -A INPUT -j limit-2348 -A INPUT -j limit-2347 -A INPUT -j limit-2346 -A INPUT -j limit-2345 -A INPUT -j limit-2344 -A INPUT -j limit-2343 -A INPUT -j limit-2342 -A INPUT -j limit-2341 -A INPUT -j limit-2340 -A INPUT -j limit-2339 -A INPUT -j limit-2338 -A INPUT -j limit-2337 -A INPUT -j limit-2336 -A INPUT -j limit-2335 -A INPUT -j limit-2334 -A INPUT -j limit-2333 -A INPUT -j limit-2332 -A INPUT -j limit-2331 -A INPUT -j limit-2330 -A INPUT -j limit-2329 -A INPUT -j limit-2328 -A INPUT -j limit-2327 -A INPUT -j limit-2326 -A INPUT -j limit-2325 -A INPUT -j limit-2324 -A INPUT -j limit-2323 -A INPUT -j limit-2322 -A INPUT -j limit-2321 -A INPUT -j limit-2320 -A INPUT -j limit-2319 -A INPUT -j limit-2318 -A INPUT -j limit-2317 -A INPUT -j limit-2316 -A INPUT -j limit-2315 -A INPUT -j limit-2314 -A INPUT -j limit-2313 -A INPUT -j limit-2312 -A INPUT -j limit-2311 -A INPUT -j limit-2310 -A INPUT -j limit-2309 -A INPUT -j limit-2308 -A INPUT -j limit-2307 -A INPUT -j limit-2306 -A INPUT -j limit-2305 -A INPUT -j limit-2304 -A INPUT -j limit-2303 -A INPUT -j limit-2302 -A INPUT -j limit-2301 -A INPUT -j limit-2300 -A INPUT -j limit-2299 -A INPUT -j limit-2298 -A INPUT -j limit-2297 -A INPUT -j limit-2296 -A INPUT -j limit-2295 -A INPUT -j limit-2294 -A INPUT -j limit-2293 -A INPUT -j limit-2292 -A INPUT -j limit-2291 -A INPUT -j limit-2290 -A INPUT -j limit-2289 -A INPUT -j limit-2288 -A INPUT -j limit-2287 -A INPUT -j limit-2286 -A INPUT -j limit-2285 -A INPUT -j limit-2284 -A INPUT -j limit-2283 -A INPUT -j limit-2282 -A INPUT -j limit-2281 -A INPUT -j limit-2280 -A INPUT -j limit-2279 -A INPUT -j limit-2278 -A INPUT -j limit-2277 -A INPUT -j limit-2276 -A INPUT -j limit-2275 -A INPUT -j limit-2274 -A INPUT -j limit-2273 -A INPUT -j limit-2272 -A INPUT -j limit-2271 -A INPUT -j limit-2270 -A INPUT -j limit-2269 -A INPUT -j limit-2268 -A INPUT -j limit-2267 -A INPUT -j limit-2266 -A INPUT -j limit-2265 -A INPUT -j limit-2264 -A INPUT -j limit-2263 -A INPUT -j limit-2262 -A INPUT -j limit-2261 -A INPUT -j limit-2260 -A INPUT -j limit-2259 -A INPUT -j limit-2258 -A INPUT -j limit-2257 -A INPUT -j limit-2256 -A INPUT -j limit-2255 -A INPUT -j limit-2254 -A INPUT -j limit-2253 -A INPUT -j limit-2252 -A INPUT -j limit-2251 -A INPUT -j limit-2250 -A INPUT -j limit-2249 -A INPUT -j limit-2248 -A INPUT -j limit-2247 -A INPUT -j limit-2246 -A INPUT -j limit-2245 -A INPUT -j limit-2244 -A INPUT -j limit-2243 -A INPUT -j limit-2242 -A INPUT -j limit-2241 -A INPUT -j limit-2240 -A INPUT -j limit-2239 -A INPUT -j limit-2238 -A INPUT -j limit-2237 -A INPUT -j limit-2236 -A INPUT -j limit-2235 -A INPUT -j limit-2234 -A INPUT -j limit-2233 -A INPUT -j limit-2232 -A INPUT -j limit-2231 -A INPUT -j limit-2230 -A INPUT -j limit-2229 -A INPUT -j limit-2228 -A INPUT -j limit-2227 -A INPUT -j limit-2226 -A INPUT -j limit-2225 -A INPUT -j limit-2224 -A INPUT -j limit-2223 -A INPUT -j limit-2222 -A INPUT -j limit-2221 -A INPUT -j limit-2220 -A INPUT -j limit-2219 -A INPUT -j limit-2218 -A INPUT -j limit-2217 -A INPUT -j limit-2216 -A INPUT -j limit-2215 -A INPUT -j limit-2214 -A INPUT -j limit-2213 -A INPUT -j limit-2212 -A INPUT -j limit-2211 -A INPUT -j limit-2210 -A INPUT -j limit-2209 -A INPUT -j limit-2208 -A INPUT -j limit-2207 -A INPUT -j limit-2206 -A INPUT -j limit-2205 -A INPUT -j limit-2204 -A INPUT -j limit-2203 -A INPUT -j limit-2202 -A INPUT -j limit-2201 -A INPUT -j limit-2200 -A INPUT -j limit-2199 -A INPUT -j limit-2198 -A INPUT -j limit-2197 -A INPUT -j limit-2196 -A INPUT -j limit-2195 -A INPUT -j limit-2194 -A INPUT -j limit-2193 -A INPUT -j limit-2192 -A INPUT -j limit-2191 -A INPUT -j limit-2190 -A INPUT -j limit-2189 -A INPUT -j limit-2188 -A INPUT -j limit-2187 -A INPUT -j limit-2186 -A INPUT -j limit-2185 -A INPUT -j limit-2184 -A INPUT -j limit-2183 -A INPUT -j limit-2182 -A INPUT -j limit-2181 -A INPUT -j limit-2180 -A INPUT -j limit-2179 -A INPUT -j limit-2178 -A INPUT -j limit-2177 -A INPUT -j limit-2176 -A INPUT -j limit-2175 -A INPUT -j limit-2174 -A INPUT -j limit-2173 -A INPUT -j limit-2172 -A INPUT -j limit-2171 -A INPUT -j limit-2170 -A INPUT -j limit-2169 -A INPUT -j limit-2168 -A INPUT -j limit-2167 -A INPUT -j limit-2166 -A INPUT -j limit-2165 -A INPUT -j limit-2164 -A INPUT -j limit-2163 -A INPUT -j limit-2162 -A INPUT -j limit-2161 -A INPUT -j limit-2160 -A INPUT -j limit-2159 -A INPUT -j limit-2158 -A INPUT -j limit-2157 -A INPUT -j limit-2156 -A INPUT -j limit-2155 -A INPUT -j limit-2154 -A INPUT -j limit-2153 -A INPUT -j limit-2152 -A INPUT -j limit-2151 -A INPUT -j limit-2150 -A INPUT -j limit-2149 -A INPUT -j limit-2148 -A INPUT -j limit-2147 -A INPUT -j limit-2146 -A INPUT -j limit-2145 -A INPUT -j limit-2144 -A INPUT -j limit-2143 -A INPUT -j limit-2142 -A INPUT -j limit-2141 -A INPUT -j limit-2140 -A INPUT -j limit-2139 -A INPUT -j limit-2138 -A INPUT -j limit-2137 -A INPUT -j limit-2136 -A INPUT -j limit-2135 -A INPUT -j limit-2134 -A INPUT -j limit-2133 -A INPUT -j limit-2132 -A INPUT -j limit-2131 -A INPUT -j limit-2130 -A INPUT -j limit-2129 -A INPUT -j limit-2128 -A INPUT -j limit-2127 -A INPUT -j limit-2126 -A INPUT -j limit-2125 -A INPUT -j limit-2124 -A INPUT -j limit-2123 -A INPUT -j limit-2122 -A INPUT -j limit-2121 -A INPUT -j limit-2120 -A INPUT -j limit-2119 -A INPUT -j limit-2118 -A INPUT -j limit-2117 -A INPUT -j limit-2116 -A INPUT -j limit-2115 -A INPUT -j limit-2114 -A INPUT -j limit-2113 -A INPUT -j limit-2112 -A INPUT -j limit-2111 -A INPUT -j limit-2110 -A INPUT -j limit-2109 -A INPUT -j limit-2108 -A INPUT -j limit-2107 -A INPUT -j limit-2106 -A INPUT -j limit-2105 -A INPUT -j limit-2104 -A INPUT -j limit-2103 -A INPUT -j limit-2102 -A INPUT -j limit-2101 -A INPUT -j limit-2100 -A INPUT -j limit-2099 -A INPUT -j limit-2098 -A INPUT -j limit-2097 -A INPUT -j limit-2096 -A INPUT -j limit-2095 -A INPUT -j limit-2094 -A INPUT -j limit-2093 -A INPUT -j limit-2092 -A INPUT -j limit-2091 -A INPUT -j limit-2090 -A INPUT -j limit-2089 -A INPUT -j limit-2088 -A INPUT -j limit-2087 -A INPUT -j limit-2086 -A INPUT -j limit-2085 -A INPUT -j limit-2084 -A INPUT -j limit-2083 -A INPUT -j limit-2082 -A INPUT -j limit-2081 -A INPUT -j limit-2080 -A INPUT -j limit-2079 -A INPUT -j limit-2078 -A INPUT -j limit-2077 -A INPUT -j limit-2076 -A INPUT -j limit-2075 -A INPUT -j limit-2074 -A INPUT -j limit-2073 -A INPUT -j limit-2072 -A INPUT -j limit-2071 -A INPUT -j limit-2070 -A INPUT -j limit-2069 -A INPUT -j limit-2068 -A INPUT -j limit-2067 -A INPUT -j limit-2066 -A INPUT -j limit-2065 -A INPUT -j limit-2064 -A INPUT -j limit-2063 -A INPUT -j limit-2062 -A INPUT -j limit-2061 -A INPUT -j limit-2060 -A INPUT -j limit-2059 -A INPUT -j limit-2058 -A INPUT -j limit-2057 -A INPUT -j limit-2056 -A INPUT -j limit-2055 -A INPUT -j limit-2054 -A INPUT -j limit-2053 -A INPUT -j limit-2052 -A INPUT -j limit-2051 -A INPUT -j limit-2050 -A INPUT -j limit-2049 -A INPUT -j limit-2048 -A INPUT -j limit-2047 -A INPUT -j limit-2046 -A INPUT -j limit-2045 -A INPUT -j limit-2044 -A INPUT -j limit-2043 -A INPUT -j limit-2042 -A INPUT -j limit-2041 -A INPUT -j limit-2040 -A INPUT -j limit-2039 -A INPUT -j limit-2038 -A INPUT -j limit-2037 -A INPUT -j limit-2036 -A INPUT -j limit-2035 -A INPUT -j limit-2034 -A INPUT -j limit-2033 -A INPUT -j limit-2032 -A INPUT -j limit-2031 -A INPUT -j limit-2030 -A INPUT -j limit-2029 -A INPUT -j limit-2028 -A INPUT -j limit-2027 -A INPUT -j limit-2026 -A INPUT -j limit-2025 -A INPUT -j limit-2024 -A INPUT -j limit-2023 -A INPUT -j limit-2022 -A INPUT -j limit-2021 -A INPUT -j limit-2020 -A INPUT -j limit-2019 -A INPUT -j limit-2018 -A INPUT -j limit-2017 -A INPUT -j limit-2016 -A INPUT -j limit-2015 -A INPUT -j limit-2014 -A INPUT -j limit-2013 -A INPUT -j limit-2012 -A INPUT -j limit-2011 -A INPUT -j limit-2010 -A INPUT -j limit-2009 -A INPUT -j limit-2008 -A INPUT -j limit-2007 -A INPUT -j limit-2006 -A INPUT -j limit-2005 -A INPUT -j limit-2004 -A INPUT -j limit-2003 -A INPUT -j limit-2002 -A INPUT -j limit-2001 -A INPUT -j limit-2000 -A INPUT -j limit-1999 -A INPUT -j limit-1998 -A INPUT -j limit-1997 -A INPUT -j limit-1996 -A INPUT -j limit-1995 -A INPUT -j limit-1994 -A INPUT -j limit-1993 -A INPUT -j limit-1992 -A INPUT -j limit-1991 -A INPUT -j limit-1990 -A INPUT -j limit-1989 -A INPUT -j limit-1988 -A INPUT -j limit-1987 -A INPUT -j limit-1986 -A INPUT -j limit-1985 -A INPUT -j limit-1984 -A INPUT -j limit-1983 -A INPUT -j limit-1982 -A INPUT -j limit-1981 -A INPUT -j limit-1980 -A INPUT -j limit-1979 -A INPUT -j limit-1978 -A INPUT -j limit-1977 -A INPUT -j limit-1976 -A INPUT -j limit-1975 -A INPUT -j limit-1974 -A INPUT -j limit-1973 -A INPUT -j limit-1972 -A INPUT -j limit-1971 -A INPUT -j limit-1970 -A INPUT -j limit-1969 -A INPUT -j limit-1968 -A INPUT -j limit-1967 -A INPUT -j limit-1966 -A INPUT -j limit-1965 -A INPUT -j limit-1964 -A INPUT -j limit-1963 -A INPUT -j limit-1962 -A INPUT -j limit-1961 -A INPUT -j limit-1960 -A INPUT -j limit-1959 -A INPUT -j limit-1958 -A INPUT -j limit-1957 -A INPUT -j limit-1956 -A INPUT -j limit-1955 -A INPUT -j limit-1954 -A INPUT -j limit-1953 -A INPUT -j limit-1952 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 -A INPUT -j logaccept-final-1 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-2 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-3 -A INPUT -j logaccept-final-4 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-5 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-6 -A INPUT -j logaccept-final-7 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-8 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-9 -A INPUT -j logaccept-final-10 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-11 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-12 -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-14 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-15 -A INPUT -j logaccept-final-16 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-17 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-18 -A INPUT -j logaccept-final-19 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-20 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-21 -A INPUT -j logaccept-final-22 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-23 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-24 -A INPUT -j logaccept-final-25 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-26 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-27 -A INPUT -j logaccept-final-28 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-29 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-30 -A INPUT -j logaccept-final-31 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-32 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-33 -A INPUT -j logaccept-final-34 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-35 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-36 -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-38 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-39 -A INPUT -j logaccept-final-40 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-41 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-42 -A INPUT -j logaccept-final-43 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-44 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-45 -A INPUT -j logaccept-final-46 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-47 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-48 -A INPUT -j logaccept-final-49 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-50 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-51 -A INPUT -j logaccept-final-52 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-53 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-54 -A INPUT -j logaccept-final-55 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-56 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-57 -A INPUT -j logaccept-final-58 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-59 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-60 -A INPUT -j logaccept-final-61 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-62 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-63 -A INPUT -j logaccept-final-64 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-65 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-66 -A INPUT -j logaccept-final-67 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-68 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-69 -A INPUT -j logaccept-final-70 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-71 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-72 -A INPUT -j logaccept-final-73 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-74 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-75 -A INPUT -j logaccept-final-76 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-77 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-78 -A INPUT -j logaccept-final-79 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-80 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-81 -A INPUT -j logaccept-final-82 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-83 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-84 -A INPUT -j logaccept-final-85 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-86 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-87 -A INPUT -j logaccept-final-88 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-89 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-90 -A INPUT -j logaccept-final-91 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-92 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-93 -A INPUT -j logaccept-final-94 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-95 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-96 -A INPUT -j logaccept-final-97 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-98 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-99 -A INPUT -j logaccept-final-100 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-101 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-102 -A INPUT -j logaccept-final-103 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-104 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-105 -A INPUT -j logaccept-final-106 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-107 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-108 -A INPUT -j logaccept-final-109 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-110 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-111 -A INPUT -j logaccept-final-112 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-113 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-114 -A INPUT -j logaccept-final-115 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-116 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-117 -A INPUT -j logaccept-final-118 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-119 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-120 -A INPUT -j logaccept-final-121 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-122 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-123 -A INPUT -j logaccept-final-124 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-125 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-126 -A INPUT -j logaccept-final-127 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-128 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-129 -A INPUT -j logaccept-final-130 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-131 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-132 -A INPUT -j logaccept-final-133 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-134 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-135 -A INPUT -j logaccept-final-136 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-137 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-138 -A INPUT -j logaccept-final-139 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-140 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-141 -A INPUT -j logaccept-final-142 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-143 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-144 -A INPUT -j logaccept-final-145 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-146 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-147 -A INPUT -j logaccept-final-148 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-149 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-150 -A INPUT -j logaccept-final-151 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-152 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-153 -A INPUT -j logaccept-final-154 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-155 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-156 -A INPUT -j logaccept-final-157 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-158 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-159 -A INPUT -j logaccept-final-160 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-161 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-162 -A INPUT -j logaccept-final-163 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-164 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-165 -A INPUT -j logaccept-final-166 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-167 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-168 -A INPUT -j logaccept-final-169 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-170 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-171 -A INPUT -j logaccept-final-172 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-173 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-174 -A INPUT -j logaccept-final-175 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-176 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-177 -A INPUT -j logaccept-final-178 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-179 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-180 -A INPUT -j logaccept-final-181 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-182 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-183 -A INPUT -j logaccept-final-184 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-185 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-186 -A INPUT -j logaccept-final-187 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-188 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-189 -A INPUT -j logaccept-final-190 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-191 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-192 -A INPUT -j logaccept-final-193 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-194 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-195 -A INPUT -j logaccept-final-196 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-197 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-198 -A INPUT -j logaccept-final-199 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-200 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-201 -A INPUT -j logaccept-final-202 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-203 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-204 -A INPUT -j logaccept-final-205 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-206 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-207 -A INPUT -j logaccept-final-208 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-209 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-210 -A INPUT -j logaccept-final-211 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-212 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-213 -A INPUT -j logaccept-final-214 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-215 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-216 -A INPUT -j logaccept-final-217 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-218 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-219 -A INPUT -j logaccept-final-220 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-221 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-222 -A INPUT -j logaccept-final-223 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-224 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-225 -A INPUT -j logaccept-final-226 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-227 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-228 -A INPUT -j logaccept-final-229 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-230 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-231 -A INPUT -j logaccept-final-232 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-233 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-234 -A INPUT -j logaccept-final-235 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-236 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-237 -A INPUT -j logaccept-final-238 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-239 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-240 -A INPUT -j logaccept-final-241 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-242 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-243 -A INPUT -j logaccept-final-244 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-245 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-246 -A INPUT -j logaccept-final-247 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-248 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-249 -A INPUT -j logaccept-final-250 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-251 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-252 -A INPUT -j logaccept-final-253 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-254 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-255 -A INPUT -j logaccept-final-256 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-257 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-258 -A INPUT -j logaccept-final-259 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-260 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-261 -A INPUT -j logaccept-final-262 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-263 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-264 -A INPUT -j logaccept-final-265 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-266 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-267 -A INPUT -j logaccept-final-268 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-269 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-270 -A INPUT -j logaccept-final-271 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-272 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-273 -A INPUT -j logaccept-final-274 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-275 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-276 -A INPUT -j logaccept-final-277 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-278 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-279 -A INPUT -j logaccept-final-280 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-281 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-282 -A INPUT -j logaccept-final-283 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-284 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-285 -A INPUT -j logaccept-final-286 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-287 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-288 -A INPUT -j logaccept-final-289 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-290 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-291 -A INPUT -j logaccept-final-292 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-293 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-294 -A INPUT -j logaccept-final-295 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-296 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-297 -A INPUT -j logaccept-final-298 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-299 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-300 -A INPUT -j logaccept-final-301 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-302 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-303 -A INPUT -j logaccept-final-304 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-305 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set -A INPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set -A INPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A INPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A INPUT -j ACCEPT -A INPUT -j logdrop-1650 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-66 -A INPUT -j logdrop-1651 -A INPUT -j logpass-0 -A INPUT -j logaccept-67 -A INPUT -j logdrop-1652 -A INPUT -j logpass-1 -A INPUT -j logaccept-68 -A INPUT -j logdrop-1653 -A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-69 -A INPUT -j logdrop-1654 -A INPUT -j logpass-3 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmp -j icmp-routing -A OUTPUT -m recent --name user:B --rdest --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A OUTPUT -j limit-2927 -A OUTPUT -j limit-2926 -A OUTPUT -j limit-2925 -A OUTPUT -j limit-2924 -A OUTPUT -j limit-2923 -A OUTPUT -j limit-2922 -A OUTPUT -j limit-2921 -A OUTPUT -j limit-2920 -A OUTPUT -j limit-2919 -A OUTPUT -j limit-2918 -A OUTPUT -j limit-2917 -A OUTPUT -j limit-2916 -A OUTPUT -j limit-2915 -A OUTPUT -j limit-2914 -A OUTPUT -j limit-2913 -A OUTPUT -j limit-2912 -A OUTPUT -j limit-2911 -A OUTPUT -j limit-2910 -A OUTPUT -j limit-2909 -A OUTPUT -j limit-2908 -A OUTPUT -j limit-2907 -A OUTPUT -j limit-2906 -A OUTPUT -j limit-2905 -A OUTPUT -j limit-2904 -A OUTPUT -j limit-2903 -A OUTPUT -j limit-2902 -A OUTPUT -j limit-2901 -A OUTPUT -j limit-2900 -A OUTPUT -j limit-2899 -A OUTPUT -j limit-2898 -A OUTPUT -j limit-2897 -A OUTPUT -j limit-2896 -A OUTPUT -j limit-2895 -A OUTPUT -j limit-2894 -A OUTPUT -j limit-2893 -A OUTPUT -j limit-2892 -A OUTPUT -j limit-2891 -A OUTPUT -j limit-2890 -A OUTPUT -j limit-2889 -A OUTPUT -j limit-2888 -A OUTPUT -j limit-2887 -A OUTPUT -j limit-2886 -A OUTPUT -j limit-2885 -A OUTPUT -j limit-2884 -A OUTPUT -j limit-2883 -A OUTPUT -j limit-2882 -A OUTPUT -j limit-2881 -A OUTPUT -j limit-2880 -A OUTPUT -j limit-2879 -A OUTPUT -j limit-2878 -A OUTPUT -j limit-2877 -A OUTPUT -j limit-2876 -A OUTPUT -j limit-2875 -A OUTPUT -j limit-2874 -A OUTPUT -j limit-2873 -A OUTPUT -j limit-2872 -A OUTPUT -j limit-2871 -A OUTPUT -j limit-2870 -A OUTPUT -j limit-2869 -A OUTPUT -j limit-2868 -A OUTPUT -j limit-2867 -A OUTPUT -j limit-2866 -A OUTPUT -j limit-2865 -A OUTPUT -j limit-2864 -A OUTPUT -j limit-2863 -A OUTPUT -j limit-2862 -A OUTPUT -j limit-2861 -A OUTPUT -j limit-2860 -A OUTPUT -j limit-2859 -A OUTPUT -j limit-2858 -A OUTPUT -j limit-2857 -A OUTPUT -j limit-2856 -A OUTPUT -j limit-2855 -A OUTPUT -j limit-2854 -A OUTPUT -j limit-2853 -A OUTPUT -j limit-2852 -A OUTPUT -j limit-2851 -A OUTPUT -j limit-2850 -A OUTPUT -j limit-2849 -A OUTPUT -j limit-2848 -A OUTPUT -j limit-2847 -A OUTPUT -j limit-2846 -A OUTPUT -j limit-2845 -A OUTPUT -j limit-2844 -A OUTPUT -j limit-2843 -A OUTPUT -j limit-2842 -A OUTPUT -j limit-2841 -A OUTPUT -j limit-2840 -A OUTPUT -j limit-2839 -A OUTPUT -j limit-2838 -A OUTPUT -j limit-2837 -A OUTPUT -j limit-2836 -A OUTPUT -j limit-2835 -A OUTPUT -j limit-2834 -A OUTPUT -j limit-2833 -A OUTPUT -j limit-2832 -A OUTPUT -j limit-2831 -A OUTPUT -j limit-2830 -A OUTPUT -j limit-2829 -A OUTPUT -j limit-2828 -A OUTPUT -j limit-2827 -A OUTPUT -j limit-2826 -A OUTPUT -j limit-2825 -A OUTPUT -j limit-2824 -A OUTPUT -j limit-2823 -A OUTPUT -j limit-2822 -A OUTPUT -j limit-2821 -A OUTPUT -j limit-2820 -A OUTPUT -j limit-2819 -A OUTPUT -j limit-2818 -A OUTPUT -j limit-2817 -A OUTPUT -j limit-2816 -A OUTPUT -j limit-2815 -A OUTPUT -j limit-2814 -A OUTPUT -j limit-2813 -A OUTPUT -j limit-2812 -A OUTPUT -j limit-2811 -A OUTPUT -j limit-2810 -A OUTPUT -j limit-2809 -A OUTPUT -j limit-2808 -A OUTPUT -j limit-2807 -A OUTPUT -j limit-2806 -A OUTPUT -j limit-2805 -A OUTPUT -j limit-2804 -A OUTPUT -j limit-2803 -A OUTPUT -j limit-2802 -A OUTPUT -j limit-2801 -A OUTPUT -j limit-2800 -A OUTPUT -j limit-2799 -A OUTPUT -j limit-2798 -A OUTPUT -j limit-2797 -A OUTPUT -j limit-2796 -A OUTPUT -j limit-2795 -A OUTPUT -j limit-2794 -A OUTPUT -j limit-2793 -A OUTPUT -j limit-2792 -A OUTPUT -j limit-2791 -A OUTPUT -j limit-2790 -A OUTPUT -j limit-2789 -A OUTPUT -j limit-2788 -A OUTPUT -j limit-2787 -A OUTPUT -j limit-2786 -A OUTPUT -j limit-2785 -A OUTPUT -j limit-2784 -A OUTPUT -j limit-2783 -A OUTPUT -j limit-2782 -A OUTPUT -j limit-2781 -A OUTPUT -j limit-2780 -A OUTPUT -j limit-2779 -A OUTPUT -j limit-2778 -A OUTPUT -j limit-2777 -A OUTPUT -j limit-2776 -A OUTPUT -j limit-2775 -A OUTPUT -j limit-2774 -A OUTPUT -j limit-2773 -A OUTPUT -j limit-2772 -A OUTPUT -j limit-2771 -A OUTPUT -j limit-2770 -A OUTPUT -j limit-2769 -A OUTPUT -j limit-2768 -A OUTPUT -j limit-2767 -A OUTPUT -j limit-2766 -A OUTPUT -j limit-2765 -A OUTPUT -j limit-2764 -A OUTPUT -j limit-2763 -A OUTPUT -j limit-2762 -A OUTPUT -j limit-2761 -A OUTPUT -j limit-2760 -A OUTPUT -j limit-2759 -A OUTPUT -j limit-2758 -A OUTPUT -j limit-2757 -A OUTPUT -j limit-2756 -A OUTPUT -j limit-2755 -A OUTPUT -j limit-2754 -A OUTPUT -j limit-2753 -A OUTPUT -j limit-2752 -A OUTPUT -j limit-2751 -A OUTPUT -j limit-2750 -A OUTPUT -j limit-2749 -A OUTPUT -j limit-2748 -A OUTPUT -j limit-2747 -A OUTPUT -j limit-2746 -A OUTPUT -j limit-2745 -A OUTPUT -j limit-2744 -A OUTPUT -j limit-2743 -A OUTPUT -j limit-2742 -A OUTPUT -j limit-2741 -A OUTPUT -j limit-2740 -A OUTPUT -j limit-2739 -A OUTPUT -j limit-2738 -A OUTPUT -j limit-2737 -A OUTPUT -j limit-2736 -A OUTPUT -j limit-2735 -A OUTPUT -j limit-2734 -A OUTPUT -j limit-2733 -A OUTPUT -j limit-2732 -A OUTPUT -j limit-2731 -A OUTPUT -j limit-2730 -A OUTPUT -j limit-2729 -A OUTPUT -j limit-2728 -A OUTPUT -j limit-2727 -A OUTPUT -j limit-2726 -A OUTPUT -j limit-2725 -A OUTPUT -j limit-2724 -A OUTPUT -j limit-2723 -A OUTPUT -j limit-2722 -A OUTPUT -j limit-2721 -A OUTPUT -j limit-2720 -A OUTPUT -j limit-2719 -A OUTPUT -j limit-2718 -A OUTPUT -j limit-2717 -A OUTPUT -j limit-2716 -A OUTPUT -j limit-2715 -A OUTPUT -j limit-2714 -A OUTPUT -j limit-2713 -A OUTPUT -j limit-2712 -A OUTPUT -j limit-2711 -A OUTPUT -j limit-2710 -A OUTPUT -j limit-2709 -A OUTPUT -j limit-2708 -A OUTPUT -j limit-2707 -A OUTPUT -j limit-2706 -A OUTPUT -j limit-2705 -A OUTPUT -j limit-2704 -A OUTPUT -j limit-2703 -A OUTPUT -j limit-2702 -A OUTPUT -j limit-2701 -A OUTPUT -j limit-2700 -A OUTPUT -j limit-2699 -A OUTPUT -j limit-2698 -A OUTPUT -j limit-2697 -A OUTPUT -j limit-2696 -A OUTPUT -j limit-2695 -A OUTPUT -j limit-2694 -A OUTPUT -j limit-2693 -A OUTPUT -j limit-2692 -A OUTPUT -j limit-2691 -A OUTPUT -j limit-2690 -A OUTPUT -j limit-2689 -A OUTPUT -j limit-2688 -A OUTPUT -j limit-2687 -A OUTPUT -j limit-2686 -A OUTPUT -j limit-2685 -A OUTPUT -j limit-2684 -A OUTPUT -j limit-2683 -A OUTPUT -j limit-2682 -A OUTPUT -j limit-2681 -A OUTPUT -j limit-2680 -A OUTPUT -j limit-2679 -A OUTPUT -j limit-2678 -A OUTPUT -j limit-2677 -A OUTPUT -j limit-2676 -A OUTPUT -j limit-2675 -A OUTPUT -j limit-2674 -A OUTPUT -j limit-2673 -A OUTPUT -j limit-2672 -A OUTPUT -j limit-2671 -A OUTPUT -j limit-2670 -A OUTPUT -j limit-2669 -A OUTPUT -j limit-2668 -A OUTPUT -j limit-2667 -A OUTPUT -j limit-2666 -A OUTPUT -j limit-2665 -A OUTPUT -j limit-2664 -A OUTPUT -j limit-2663 -A OUTPUT -j limit-2662 -A OUTPUT -j limit-2661 -A OUTPUT -j limit-2660 -A OUTPUT -j limit-2659 -A OUTPUT -j limit-2658 -A OUTPUT -j limit-2657 -A OUTPUT -j limit-2656 -A OUTPUT -j limit-2655 -A OUTPUT -j limit-2654 -A OUTPUT -j limit-2653 -A OUTPUT -j limit-2652 -A OUTPUT -j limit-2651 -A OUTPUT -j limit-2650 -A OUTPUT -j limit-2649 -A OUTPUT -j limit-2648 -A OUTPUT -j limit-2647 -A OUTPUT -j limit-2646 -A OUTPUT -j limit-2645 -A OUTPUT -j limit-2644 -A OUTPUT -j limit-2643 -A OUTPUT -j limit-2642 -A OUTPUT -j limit-2641 -A OUTPUT -j limit-2640 -A OUTPUT -j limit-2639 -A OUTPUT -j limit-2638 -A OUTPUT -j limit-2637 -A OUTPUT -j limit-2636 -A OUTPUT -j limit-2635 -A OUTPUT -j limit-2634 -A OUTPUT -j limit-2633 -A OUTPUT -j limit-2632 -A OUTPUT -j limit-2631 -A OUTPUT -j limit-2630 -A OUTPUT -j limit-2629 -A OUTPUT -j limit-2628 -A OUTPUT -j limit-2627 -A OUTPUT -j limit-2626 -A OUTPUT -j limit-2625 -A OUTPUT -j limit-2624 -A OUTPUT -j limit-2623 -A OUTPUT -j limit-2622 -A OUTPUT -j limit-2621 -A OUTPUT -j limit-2620 -A OUTPUT -j limit-2619 -A OUTPUT -j limit-2618 -A OUTPUT -j limit-2617 -A OUTPUT -j limit-2616 -A OUTPUT -j limit-2615 -A OUTPUT -j limit-2614 -A OUTPUT -j limit-2613 -A OUTPUT -j limit-2612 -A OUTPUT -j limit-2611 -A OUTPUT -j limit-2610 -A OUTPUT -j limit-2609 -A OUTPUT -j limit-2608 -A OUTPUT -j limit-2607 -A OUTPUT -j limit-2606 -A OUTPUT -j limit-2605 -A OUTPUT -j limit-2604 -A OUTPUT -j limit-2603 -A OUTPUT -j limit-2602 -A OUTPUT -j limit-2601 -A OUTPUT -j limit-2600 -A OUTPUT -j limit-2599 -A OUTPUT -j limit-2598 -A OUTPUT -j limit-2597 -A OUTPUT -j limit-2596 -A OUTPUT -j limit-2595 -A OUTPUT -j limit-2594 -A OUTPUT -j limit-2593 -A OUTPUT -j limit-2592 -A OUTPUT -j limit-2591 -A OUTPUT -j limit-2590 -A OUTPUT -j limit-2589 -A OUTPUT -j limit-2588 -A OUTPUT -j limit-2587 -A OUTPUT -j limit-2586 -A OUTPUT -j limit-2585 -A OUTPUT -j limit-2584 -A OUTPUT -j limit-2583 -A OUTPUT -j limit-2582 -A OUTPUT -j limit-2581 -A OUTPUT -j limit-2580 -A OUTPUT -j limit-2579 -A OUTPUT -j limit-2578 -A OUTPUT -j limit-2577 -A OUTPUT -j limit-2576 -A OUTPUT -j limit-2575 -A OUTPUT -j limit-2574 -A OUTPUT -j limit-2573 -A OUTPUT -j limit-2572 -A OUTPUT -j limit-2571 -A OUTPUT -j limit-2570 -A OUTPUT -j limit-2569 -A OUTPUT -j limit-2568 -A OUTPUT -j limit-2567 -A OUTPUT -j limit-2566 -A OUTPUT -j limit-2565 -A OUTPUT -j limit-2564 -A OUTPUT -j limit-2563 -A OUTPUT -j limit-2562 -A OUTPUT -j limit-2561 -A OUTPUT -j limit-2560 -A OUTPUT -j limit-2559 -A OUTPUT -j limit-2558 -A OUTPUT -j limit-2557 -A OUTPUT -j limit-2556 -A OUTPUT -j limit-2555 -A OUTPUT -j limit-2554 -A OUTPUT -j limit-2553 -A OUTPUT -j limit-2552 -A OUTPUT -j limit-2551 -A OUTPUT -j limit-2550 -A OUTPUT -j limit-2549 -A OUTPUT -j limit-2548 -A OUTPUT -j limit-2547 -A OUTPUT -j limit-2546 -A OUTPUT -j limit-2545 -A OUTPUT -j limit-2544 -A OUTPUT -j limit-2543 -A OUTPUT -j limit-2542 -A OUTPUT -j limit-2541 -A OUTPUT -j limit-2540 -A OUTPUT -j limit-2539 -A OUTPUT -j limit-2538 -A OUTPUT -j limit-2537 -A OUTPUT -j limit-2536 -A OUTPUT -j limit-2535 -A OUTPUT -j limit-2534 -A OUTPUT -j limit-2533 -A OUTPUT -j limit-2532 -A OUTPUT -j limit-2531 -A OUTPUT -j limit-2530 -A OUTPUT -j limit-2529 -A OUTPUT -j limit-2528 -A OUTPUT -j limit-2527 -A OUTPUT -j limit-2526 -A OUTPUT -j limit-2525 -A OUTPUT -j limit-2524 -A OUTPUT -j limit-2523 -A OUTPUT -j limit-2522 -A OUTPUT -j limit-2521 -A OUTPUT -j limit-2520 -A OUTPUT -j limit-2519 -A OUTPUT -j limit-2518 -A OUTPUT -j limit-2517 -A OUTPUT -j limit-2516 -A OUTPUT -j limit-2515 -A OUTPUT -j limit-2514 -A OUTPUT -j limit-2513 -A OUTPUT -j limit-2512 -A OUTPUT -j limit-2511 -A OUTPUT -j limit-2510 -A OUTPUT -j limit-2509 -A OUTPUT -j limit-2508 -A OUTPUT -j limit-2507 -A OUTPUT -j limit-2506 -A OUTPUT -j limit-2505 -A OUTPUT -j limit-2504 -A OUTPUT -j limit-2503 -A OUTPUT -j limit-2502 -A OUTPUT -j limit-2501 -A OUTPUT -j limit-2500 -A OUTPUT -j limit-2499 -A OUTPUT -j limit-2498 -A OUTPUT -j limit-2497 -A OUTPUT -j limit-2496 -A OUTPUT -j limit-2495 -A OUTPUT -j limit-2494 -A OUTPUT -j limit-2493 -A OUTPUT -j limit-2492 -A OUTPUT -j limit-2491 -A OUTPUT -j limit-2490 -A OUTPUT -j limit-2489 -A OUTPUT -j limit-2488 -A OUTPUT -j limit-2487 -A OUTPUT -j limit-2486 -A OUTPUT -j limit-2485 -A OUTPUT -j limit-2484 -A OUTPUT -j limit-2483 -A OUTPUT -j limit-2482 -A OUTPUT -j limit-2481 -A OUTPUT -j limit-2480 -A OUTPUT -j limit-2479 -A OUTPUT -j limit-2478 -A OUTPUT -j limit-2477 -A OUTPUT -j limit-2476 -A OUTPUT -j limit-2475 -A OUTPUT -j limit-2474 -A OUTPUT -j limit-2473 -A OUTPUT -j limit-2472 -A OUTPUT -j limit-2471 -A OUTPUT -j limit-2470 -A OUTPUT -j limit-2469 -A OUTPUT -j limit-2468 -A OUTPUT -j limit-2467 -A OUTPUT -j limit-2466 -A OUTPUT -j limit-2465 -A OUTPUT -j limit-2464 -A OUTPUT -j limit-2463 -A OUTPUT -j limit-2462 -A OUTPUT -j limit-2461 -A OUTPUT -j limit-2460 -A OUTPUT -j limit-2459 -A OUTPUT -j limit-2458 -A OUTPUT -j limit-2457 -A OUTPUT -j limit-2456 -A OUTPUT -j limit-2455 -A OUTPUT -j limit-2454 -A OUTPUT -j limit-2453 -A OUTPUT -j limit-2452 -A OUTPUT -j limit-2451 -A OUTPUT -j limit-2450 -A OUTPUT -j limit-2449 -A OUTPUT -j limit-2448 -A OUTPUT -j limit-2447 -A OUTPUT -j limit-2446 -A OUTPUT -j limit-2445 -A OUTPUT -j limit-2444 -A OUTPUT -j limit-2443 -A OUTPUT -j limit-2442 -A OUTPUT -j limit-2441 -A OUTPUT -j limit-2440 -A OUTPUT -j limit-2439 -A OUTPUT -j limit-2438 -A OUTPUT -j limit-2437 -A OUTPUT -j limit-2436 -A OUTPUT -j limit-2435 -A OUTPUT -j limit-2434 -A OUTPUT -j limit-2433 -A OUTPUT -j limit-2432 -A OUTPUT -j limit-2431 -A OUTPUT -j limit-2430 -A OUTPUT -j limit-2429 -A OUTPUT -j limit-2428 -A OUTPUT -j limit-2427 -A OUTPUT -j limit-2426 -A OUTPUT -j limit-2425 -A OUTPUT -j limit-2424 -A OUTPUT -j limit-2423 -A OUTPUT -j limit-2422 -A OUTPUT -j limit-2421 -A OUTPUT -j limit-2420 -A OUTPUT -j limit-2419 -A OUTPUT -j limit-2418 -A OUTPUT -j limit-2417 -A OUTPUT -j limit-2416 -A OUTPUT -j limit-2415 -A OUTPUT -j limit-2414 -A OUTPUT -j limit-2413 -A OUTPUT -j limit-2412 -A OUTPUT -j limit-2411 -A OUTPUT -j limit-2410 -A OUTPUT -j limit-2409 -A OUTPUT -j limit-2408 -A OUTPUT -j limit-2407 -A OUTPUT -j limit-2406 -A OUTPUT -j limit-2405 -A OUTPUT -j limit-2404 -A OUTPUT -j limit-2403 -A OUTPUT -j limit-2402 -A OUTPUT -j limit-2401 -A OUTPUT -j limit-2400 -A OUTPUT -j limit-2399 -A OUTPUT -j limit-2398 -A OUTPUT -j limit-2397 -A OUTPUT -j limit-2396 -A OUTPUT -j limit-2395 -A OUTPUT -j limit-2394 -A OUTPUT -j limit-2393 -A OUTPUT -j limit-2392 -A OUTPUT -j limit-2391 -A OUTPUT -j limit-2390 -A OUTPUT -j limit-2389 -A OUTPUT -j limit-2388 -A OUTPUT -j limit-2387 -A OUTPUT -j limit-2386 -A OUTPUT -j limit-2385 -A OUTPUT -j limit-2384 -A OUTPUT -j limit-2383 -A OUTPUT -j limit-2382 -A OUTPUT -j limit-2381 -A OUTPUT -j limit-2380 -A OUTPUT -j limit-2379 -A OUTPUT -j limit-2378 -A OUTPUT -j limit-2377 -A OUTPUT -j limit-2376 -A OUTPUT -j limit-2375 -A OUTPUT -j limit-2374 -A OUTPUT -j limit-2373 -A OUTPUT -j limit-2372 -A OUTPUT -j limit-2371 -A OUTPUT -j limit-2370 -A OUTPUT -j limit-2369 -A OUTPUT -j limit-2368 -A OUTPUT -j limit-2367 -A OUTPUT -j limit-2366 -A OUTPUT -j limit-2365 -A OUTPUT -j limit-2364 -A OUTPUT -j limit-2363 -A OUTPUT -j limit-2362 -A OUTPUT -j limit-2361 -A OUTPUT -j limit-2360 -A OUTPUT -j limit-2359 -A OUTPUT -j limit-2358 -A OUTPUT -j limit-2357 -A OUTPUT -j limit-2356 -A OUTPUT -j limit-2355 -A OUTPUT -j limit-2354 -A OUTPUT -j limit-2353 -A OUTPUT -j limit-2352 -A OUTPUT -j limit-2351 -A OUTPUT -j limit-2350 -A OUTPUT -j limit-2349 -A OUTPUT -j limit-2348 -A OUTPUT -j limit-2347 -A OUTPUT -j limit-2346 -A OUTPUT -j limit-2345 -A OUTPUT -j limit-2344 -A OUTPUT -j limit-2343 -A OUTPUT -j limit-2342 -A OUTPUT -j limit-2341 -A OUTPUT -j limit-2340 -A OUTPUT -j limit-2339 -A OUTPUT -j limit-2338 -A OUTPUT -j limit-2337 -A OUTPUT -j limit-2336 -A OUTPUT -j limit-2335 -A OUTPUT -j limit-2334 -A OUTPUT -j limit-2333 -A OUTPUT -j limit-2332 -A OUTPUT -j limit-2331 -A OUTPUT -j limit-2330 -A OUTPUT -j limit-2329 -A OUTPUT -j limit-2328 -A OUTPUT -j limit-2327 -A OUTPUT -j limit-2326 -A OUTPUT -j limit-2325 -A OUTPUT -j limit-2324 -A OUTPUT -j limit-2323 -A OUTPUT -j limit-2322 -A OUTPUT -j limit-2321 -A OUTPUT -j limit-2320 -A OUTPUT -j limit-2319 -A OUTPUT -j limit-2318 -A OUTPUT -j limit-2317 -A OUTPUT -j limit-2316 -A OUTPUT -j limit-2315 -A OUTPUT -j limit-2314 -A OUTPUT -j limit-2313 -A OUTPUT -j limit-2312 -A OUTPUT -j limit-2311 -A OUTPUT -j limit-2310 -A OUTPUT -j limit-2309 -A OUTPUT -j limit-2308 -A OUTPUT -j limit-2307 -A OUTPUT -j limit-2306 -A OUTPUT -j limit-2305 -A OUTPUT -j limit-2304 -A OUTPUT -j limit-2303 -A OUTPUT -j limit-2302 -A OUTPUT -j limit-2301 -A OUTPUT -j limit-2300 -A OUTPUT -j limit-2299 -A OUTPUT -j limit-2298 -A OUTPUT -j limit-2297 -A OUTPUT -j limit-2296 -A OUTPUT -j limit-2295 -A OUTPUT -j limit-2294 -A OUTPUT -j limit-2293 -A OUTPUT -j limit-2292 -A OUTPUT -j limit-2291 -A OUTPUT -j limit-2290 -A OUTPUT -j limit-2289 -A OUTPUT -j limit-2288 -A OUTPUT -j limit-2287 -A OUTPUT -j limit-2286 -A OUTPUT -j limit-2285 -A OUTPUT -j limit-2284 -A OUTPUT -j limit-2283 -A OUTPUT -j limit-2282 -A OUTPUT -j limit-2281 -A OUTPUT -j limit-2280 -A OUTPUT -j limit-2279 -A OUTPUT -j limit-2278 -A OUTPUT -j limit-2277 -A OUTPUT -j limit-2276 -A OUTPUT -j limit-2275 -A OUTPUT -j limit-2274 -A OUTPUT -j limit-2273 -A OUTPUT -j limit-2272 -A OUTPUT -j limit-2271 -A OUTPUT -j limit-2270 -A OUTPUT -j limit-2269 -A OUTPUT -j limit-2268 -A OUTPUT -j limit-2267 -A OUTPUT -j limit-2266 -A OUTPUT -j limit-2265 -A OUTPUT -j limit-2264 -A OUTPUT -j limit-2263 -A OUTPUT -j limit-2262 -A OUTPUT -j limit-2261 -A OUTPUT -j limit-2260 -A OUTPUT -j limit-2259 -A OUTPUT -j limit-2258 -A OUTPUT -j limit-2257 -A OUTPUT -j limit-2256 -A OUTPUT -j limit-2255 -A OUTPUT -j limit-2254 -A OUTPUT -j limit-2253 -A OUTPUT -j limit-2252 -A OUTPUT -j limit-2251 -A OUTPUT -j limit-2250 -A OUTPUT -j limit-2249 -A OUTPUT -j limit-2248 -A OUTPUT -j limit-2247 -A OUTPUT -j limit-2246 -A OUTPUT -j limit-2245 -A OUTPUT -j limit-2244 -A OUTPUT -j limit-2243 -A OUTPUT -j limit-2242 -A OUTPUT -j limit-2241 -A OUTPUT -j limit-2240 -A OUTPUT -j limit-2239 -A OUTPUT -j limit-2238 -A OUTPUT -j limit-2237 -A OUTPUT -j limit-2236 -A OUTPUT -j limit-2235 -A OUTPUT -j limit-2234 -A OUTPUT -j limit-2233 -A OUTPUT -j limit-2232 -A OUTPUT -j limit-2231 -A OUTPUT -j limit-2230 -A OUTPUT -j limit-2229 -A OUTPUT -j limit-2228 -A OUTPUT -j limit-2227 -A OUTPUT -j limit-2226 -A OUTPUT -j limit-2225 -A OUTPUT -j limit-2224 -A OUTPUT -j limit-2223 -A OUTPUT -j limit-2222 -A OUTPUT -j limit-2221 -A OUTPUT -j limit-2220 -A OUTPUT -j limit-2219 -A OUTPUT -j limit-2218 -A OUTPUT -j limit-2217 -A OUTPUT -j limit-2216 -A OUTPUT -j limit-2215 -A OUTPUT -j limit-2214 -A OUTPUT -j limit-2213 -A OUTPUT -j limit-2212 -A OUTPUT -j limit-2211 -A OUTPUT -j limit-2210 -A OUTPUT -j limit-2209 -A OUTPUT -j limit-2208 -A OUTPUT -j limit-2207 -A OUTPUT -j limit-2206 -A OUTPUT -j limit-2205 -A OUTPUT -j limit-2204 -A OUTPUT -j limit-2203 -A OUTPUT -j limit-2202 -A OUTPUT -j limit-2201 -A OUTPUT -j limit-2200 -A OUTPUT -j limit-2199 -A OUTPUT -j limit-2198 -A OUTPUT -j limit-2197 -A OUTPUT -j limit-2196 -A OUTPUT -j limit-2195 -A OUTPUT -j limit-2194 -A OUTPUT -j limit-2193 -A OUTPUT -j limit-2192 -A OUTPUT -j limit-2191 -A OUTPUT -j limit-2190 -A OUTPUT -j limit-2189 -A OUTPUT -j limit-2188 -A OUTPUT -j limit-2187 -A OUTPUT -j limit-2186 -A OUTPUT -j limit-2185 -A OUTPUT -j limit-2184 -A OUTPUT -j limit-2183 -A OUTPUT -j limit-2182 -A OUTPUT -j limit-2181 -A OUTPUT -j limit-2180 -A OUTPUT -j limit-2179 -A OUTPUT -j limit-2178 -A OUTPUT -j limit-2177 -A OUTPUT -j limit-2176 -A OUTPUT -j limit-2175 -A OUTPUT -j limit-2174 -A OUTPUT -j limit-2173 -A OUTPUT -j limit-2172 -A OUTPUT -j limit-2171 -A OUTPUT -j limit-2170 -A OUTPUT -j limit-2169 -A OUTPUT -j limit-2168 -A OUTPUT -j limit-2167 -A OUTPUT -j limit-2166 -A OUTPUT -j limit-2165 -A OUTPUT -j limit-2164 -A OUTPUT -j limit-2163 -A OUTPUT -j limit-2162 -A OUTPUT -j limit-2161 -A OUTPUT -j limit-2160 -A OUTPUT -j limit-2159 -A OUTPUT -j limit-2158 -A OUTPUT -j limit-2157 -A OUTPUT -j limit-2156 -A OUTPUT -j limit-2155 -A OUTPUT -j limit-2154 -A OUTPUT -j limit-2153 -A OUTPUT -j limit-2152 -A OUTPUT -j limit-2151 -A OUTPUT -j limit-2150 -A OUTPUT -j limit-2149 -A OUTPUT -j limit-2148 -A OUTPUT -j limit-2147 -A OUTPUT -j limit-2146 -A OUTPUT -j limit-2145 -A OUTPUT -j limit-2144 -A OUTPUT -j limit-2143 -A OUTPUT -j limit-2142 -A OUTPUT -j limit-2141 -A OUTPUT -j limit-2140 -A OUTPUT -j limit-2139 -A OUTPUT -j limit-2138 -A OUTPUT -j limit-2137 -A OUTPUT -j limit-2136 -A OUTPUT -j limit-2135 -A OUTPUT -j limit-2134 -A OUTPUT -j limit-2133 -A OUTPUT -j limit-2132 -A OUTPUT -j limit-2131 -A OUTPUT -j limit-2130 -A OUTPUT -j limit-2129 -A OUTPUT -j limit-2128 -A OUTPUT -j limit-2127 -A OUTPUT -j limit-2126 -A OUTPUT -j limit-2125 -A OUTPUT -j limit-2124 -A OUTPUT -j limit-2123 -A OUTPUT -j limit-2122 -A OUTPUT -j limit-2121 -A OUTPUT -j limit-2120 -A OUTPUT -j limit-2119 -A OUTPUT -j limit-2118 -A OUTPUT -j limit-2117 -A OUTPUT -j limit-2116 -A OUTPUT -j limit-2115 -A OUTPUT -j limit-2114 -A OUTPUT -j limit-2113 -A OUTPUT -j limit-2112 -A OUTPUT -j limit-2111 -A OUTPUT -j limit-2110 -A OUTPUT -j limit-2109 -A OUTPUT -j limit-2108 -A OUTPUT -j limit-2107 -A OUTPUT -j limit-2106 -A OUTPUT -j limit-2105 -A OUTPUT -j limit-2104 -A OUTPUT -j limit-2103 -A OUTPUT -j limit-2102 -A OUTPUT -j limit-2101 -A OUTPUT -j limit-2100 -A OUTPUT -j limit-2099 -A OUTPUT -j limit-2098 -A OUTPUT -j limit-2097 -A OUTPUT -j limit-2096 -A OUTPUT -j limit-2095 -A OUTPUT -j limit-2094 -A OUTPUT -j limit-2093 -A OUTPUT -j limit-2092 -A OUTPUT -j limit-2091 -A OUTPUT -j limit-2090 -A OUTPUT -j limit-2089 -A OUTPUT -j limit-2088 -A OUTPUT -j limit-2087 -A OUTPUT -j limit-2086 -A OUTPUT -j limit-2085 -A OUTPUT -j limit-2084 -A OUTPUT -j limit-2083 -A OUTPUT -j limit-2082 -A OUTPUT -j limit-2081 -A OUTPUT -j limit-2080 -A OUTPUT -j limit-2079 -A OUTPUT -j limit-2078 -A OUTPUT -j limit-2077 -A OUTPUT -j limit-2076 -A OUTPUT -j limit-2075 -A OUTPUT -j limit-2074 -A OUTPUT -j limit-2073 -A OUTPUT -j limit-2072 -A OUTPUT -j limit-2071 -A OUTPUT -j limit-2070 -A OUTPUT -j limit-2069 -A OUTPUT -j limit-2068 -A OUTPUT -j limit-2067 -A OUTPUT -j limit-2066 -A OUTPUT -j limit-2065 -A OUTPUT -j limit-2064 -A OUTPUT -j limit-2063 -A OUTPUT -j limit-2062 -A OUTPUT -j limit-2061 -A OUTPUT -j limit-2060 -A OUTPUT -j limit-2059 -A OUTPUT -j limit-2058 -A OUTPUT -j limit-2057 -A OUTPUT -j limit-2056 -A OUTPUT -j limit-2055 -A OUTPUT -j limit-2054 -A OUTPUT -j limit-2053 -A OUTPUT -j limit-2052 -A OUTPUT -j limit-2051 -A OUTPUT -j limit-2050 -A OUTPUT -j limit-2049 -A OUTPUT -j limit-2048 -A OUTPUT -j limit-2047 -A OUTPUT -j limit-2046 -A OUTPUT -j limit-2045 -A OUTPUT -j limit-2044 -A OUTPUT -j limit-2043 -A OUTPUT -j limit-2042 -A OUTPUT -j limit-2041 -A OUTPUT -j limit-2040 -A OUTPUT -j limit-2039 -A OUTPUT -j limit-2038 -A OUTPUT -j limit-2037 -A OUTPUT -j limit-2036 -A OUTPUT -j limit-2035 -A OUTPUT -j limit-2034 -A OUTPUT -j limit-2033 -A OUTPUT -j limit-2032 -A OUTPUT -j limit-2031 -A OUTPUT -j limit-2030 -A OUTPUT -j limit-2029 -A OUTPUT -j limit-2028 -A OUTPUT -j limit-2027 -A OUTPUT -j limit-2026 -A OUTPUT -j limit-2025 -A OUTPUT -j limit-2024 -A OUTPUT -j limit-2023 -A OUTPUT -j limit-2022 -A OUTPUT -j limit-2021 -A OUTPUT -j limit-2020 -A OUTPUT -j limit-2019 -A OUTPUT -j limit-2018 -A OUTPUT -j limit-2017 -A OUTPUT -j limit-2016 -A OUTPUT -j limit-2015 -A OUTPUT -j limit-2014 -A OUTPUT -j limit-2013 -A OUTPUT -j limit-2012 -A OUTPUT -j limit-2011 -A OUTPUT -j limit-2010 -A OUTPUT -j limit-2009 -A OUTPUT -j limit-2008 -A OUTPUT -j limit-2007 -A OUTPUT -j limit-2006 -A OUTPUT -j limit-2005 -A OUTPUT -j limit-2004 -A OUTPUT -j limit-2003 -A OUTPUT -j limit-2002 -A OUTPUT -j limit-2001 -A OUTPUT -j limit-2000 -A OUTPUT -j limit-1999 -A OUTPUT -j limit-1998 -A OUTPUT -j limit-1997 -A OUTPUT -j limit-1996 -A OUTPUT -j limit-1995 -A OUTPUT -j limit-1994 -A OUTPUT -j limit-1993 -A OUTPUT -j limit-1992 -A OUTPUT -j limit-1991 -A OUTPUT -j limit-1990 -A OUTPUT -j limit-1989 -A OUTPUT -j limit-1988 -A OUTPUT -j limit-1987 -A OUTPUT -j limit-1986 -A OUTPUT -j limit-1985 -A OUTPUT -j limit-1984 -A OUTPUT -j limit-1983 -A OUTPUT -j limit-1982 -A OUTPUT -j limit-1981 -A OUTPUT -j limit-1980 -A OUTPUT -j limit-1979 -A OUTPUT -j limit-1978 -A OUTPUT -j limit-1977 -A OUTPUT -j limit-1976 -A OUTPUT -j limit-1975 -A OUTPUT -j limit-1974 -A OUTPUT -j limit-1973 -A OUTPUT -j limit-1972 -A OUTPUT -j limit-1971 -A OUTPUT -j limit-1970 -A OUTPUT -j limit-1969 -A OUTPUT -j limit-1968 -A OUTPUT -j limit-1967 -A OUTPUT -j limit-1966 -A OUTPUT -j limit-1965 -A OUTPUT -j limit-1964 -A OUTPUT -j limit-1963 -A OUTPUT -j limit-1962 -A OUTPUT -j limit-1961 -A OUTPUT -j limit-1960 -A OUTPUT -j limit-1959 -A OUTPUT -j limit-1958 -A OUTPUT -j limit-1957 -A OUTPUT -j limit-1956 -A OUTPUT -j limit-1955 -A OUTPUT -j limit-1954 -A OUTPUT -j limit-1953 -A OUTPUT -j limit-1952 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-0 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-2 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-3 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-4 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-5 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-6 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-7 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-8 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-9 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-10 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-11 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-12 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-13 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-14 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-15 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-16 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-17 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-18 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-19 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-20 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-21 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-22 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-23 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-24 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-25 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-26 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-27 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-28 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-29 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-30 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-31 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-32 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-33 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-34 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-35 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-109 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-113 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-139 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-143 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-151 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-155 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-181 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-185 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-217 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-221 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-235 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-239 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-247 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-251 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-259 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-263 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-271 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-275 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-289 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-293 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-301 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-305 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-313 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-317 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-325 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-329 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-377 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-381 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-389 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-393 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-401 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-405 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-413 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-417 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-431 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-435 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-443 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-447 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-455 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-459 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-467 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-471 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-485 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-489 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-497 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-501 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-509 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-513 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-521 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-525 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-539 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-543 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-551 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-555 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-563 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-567 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-575 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-579 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-593 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-597 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-605 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-609 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-617 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-621 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-629 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-633 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-647 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-651 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-659 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-663 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-675 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-683 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-687 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-716 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-717 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-718 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-719 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-720 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-721 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-722 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-723 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-724 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-725 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-726 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-727 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-728 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-729 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-730 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-732 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-733 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-734 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-735 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-736 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-737 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-738 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-739 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-740 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-741 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-742 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-743 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-744 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-745 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-746 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-747 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-748 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-749 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-750 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-751 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-752 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-753 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-754 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-755 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-756 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-757 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-758 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-759 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-760 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-761 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-762 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-763 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-764 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-765 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-766 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-767 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-768 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-769 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-770 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-771 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-772 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-773 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-774 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-775 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-776 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-777 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-778 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-779 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-780 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-781 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-782 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-783 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-784 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-785 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-786 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-787 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-788 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-789 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-790 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-791 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-792 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-793 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-794 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-795 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-796 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-797 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-798 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-799 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-800 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-801 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-802 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-803 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-804 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-805 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-806 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-807 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-808 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-809 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-810 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-811 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-812 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-813 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-814 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-815 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-816 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-817 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-818 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-819 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-820 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-821 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-822 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-823 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-824 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-825 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-826 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-827 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-828 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-829 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-830 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-831 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-832 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-833 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-834 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-835 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-836 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-837 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-838 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-839 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-840 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-841 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-842 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-843 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-844 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-845 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-846 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-847 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-848 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-849 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-850 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-851 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-852 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-853 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-854 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-855 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-856 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-857 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-858 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-859 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-860 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-861 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-862 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-863 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-864 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-865 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-866 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-867 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-868 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-869 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-870 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-871 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-872 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-873 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-874 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-875 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-876 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-877 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-878 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-879 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-880 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-881 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-882 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-883 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-884 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-885 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-886 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-887 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-888 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-889 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-890 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-891 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-892 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-893 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-894 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-895 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-896 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-897 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-898 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-899 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-900 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-901 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-902 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-903 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-904 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-905 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-906 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-907 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-908 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-909 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-910 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-911 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-912 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-913 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-914 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-915 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-916 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-917 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-918 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-919 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-920 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-921 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-922 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-923 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-924 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-925 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-926 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-927 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-928 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-929 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-930 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-931 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-932 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-933 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-934 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-935 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-936 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-937 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-938 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-939 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-940 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-941 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-942 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-943 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-944 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-945 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-946 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-947 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-948 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-949 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-950 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-951 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-952 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-953 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-954 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-955 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-956 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-957 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-958 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-959 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-960 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-961 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-962 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-963 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-964 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-965 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-966 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-967 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-968 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-969 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-970 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-971 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-972 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-973 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-974 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-975 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-976 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-977 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-978 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-979 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-980 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-981 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-982 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-983 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-984 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-985 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-986 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-987 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-988 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-989 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-990 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-991 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-992 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-993 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-994 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-995 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-996 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-997 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-998 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-999 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1000 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1001 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1002 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1003 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1004 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1005 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1006 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1008 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1009 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1010 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1011 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1012 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1014 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1015 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1016 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1017 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1018 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1019 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1020 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1021 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1022 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1023 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1024 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1025 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1026 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1028 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1029 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1030 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1031 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1032 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1034 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1035 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1036 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1037 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1038 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1039 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1040 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1041 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1042 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1043 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1044 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1045 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1046 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1048 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1049 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1050 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1051 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1052 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1054 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1055 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1056 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1057 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1058 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1059 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1060 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1061 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1062 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1063 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1064 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1065 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1066 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1068 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1069 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1070 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1071 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1072 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1074 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1075 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1076 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1077 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1078 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1079 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1080 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1081 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1082 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1083 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1084 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1085 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1086 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1087 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1088 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1089 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1090 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1091 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1092 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1093 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1094 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1095 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1096 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1098 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1099 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1100 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1101 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1102 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-587 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1104 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1105 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1106 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1107 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1108 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1109 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1110 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1111 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1112 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1113 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1114 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1115 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1116 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-601 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1118 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1119 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1120 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1121 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1122 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-607 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1124 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1125 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1126 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1127 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1128 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1129 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1130 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1131 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1132 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1133 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1134 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1135 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1136 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-621 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1138 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1139 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1140 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1141 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1142 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-627 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1144 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1145 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1146 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1147 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1148 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1149 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1150 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1151 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1152 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1153 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1154 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1155 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1156 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-641 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1158 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1159 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1160 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1161 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1162 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-647 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1164 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1165 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1166 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1167 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1168 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1169 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1170 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1171 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1172 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1173 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1174 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1175 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1176 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1177 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1178 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1179 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1180 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1181 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1182 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1183 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1184 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1185 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1186 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1188 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1189 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1190 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1191 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1192 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-677 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1194 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1195 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1196 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1197 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1198 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1199 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1200 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1201 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1202 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1203 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1204 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1205 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1206 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1208 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1209 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1210 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1211 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1212 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-697 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1214 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1215 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1216 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1217 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1218 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1219 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1220 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1221 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1222 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1223 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1224 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1225 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1226 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-711 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1228 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1229 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1230 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1231 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1232 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-717 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1234 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1235 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1236 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1237 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1238 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1239 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1240 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1241 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1242 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1243 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1244 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1245 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1246 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1248 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1249 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1250 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1251 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1252 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-737 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1254 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1255 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1256 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1257 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1258 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1259 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1260 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1261 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1262 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1263 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1264 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1265 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1266 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1267 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1268 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1269 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1270 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1271 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1272 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1273 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1274 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1275 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1276 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1278 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1279 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1280 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1281 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1282 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1284 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1285 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1286 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1287 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1288 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1289 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1290 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1291 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1292 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1293 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1294 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1295 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1296 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1298 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1299 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1300 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1301 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1302 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1304 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1305 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1306 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1307 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1308 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1309 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1310 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1311 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1312 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1313 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1314 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1315 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1316 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1318 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1319 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1320 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1321 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1322 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1324 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1325 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1326 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1327 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1328 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1329 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1330 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1331 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1332 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1333 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1334 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1335 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1336 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1338 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1339 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1340 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1341 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1342 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1344 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1345 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1346 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1347 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1348 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1349 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1350 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1351 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1352 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1353 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1354 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1355 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1356 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1357 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1358 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1359 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1360 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1361 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1362 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1363 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1364 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1365 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1366 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-761 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1368 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1369 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1370 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1371 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1372 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-767 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1374 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1375 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1376 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1377 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1378 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1379 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1380 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1381 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1382 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1383 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1384 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1385 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1386 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-781 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1388 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1389 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1390 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1391 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1392 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-787 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1394 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1395 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1396 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1397 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1398 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1399 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1400 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1401 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1402 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1403 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1404 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1405 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1406 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-801 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1408 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1409 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1410 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1411 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1412 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-807 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1414 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1415 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1416 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1417 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1418 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1419 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1420 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1421 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1422 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1423 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1424 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1425 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1426 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-821 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1428 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1429 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1430 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1431 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1432 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-827 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1434 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1435 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1436 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1437 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1438 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1439 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1440 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1441 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1442 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1443 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1444 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1445 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1446 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1447 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1448 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1449 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1450 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1451 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1452 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1453 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1454 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1455 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1456 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1458 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1459 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1460 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1461 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1462 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1464 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1465 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1466 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1467 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1468 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1469 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1470 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1471 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1472 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1473 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1474 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1475 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1476 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1478 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1479 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1480 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1481 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1482 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1484 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1485 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1486 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1487 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1488 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1489 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1490 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1491 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1492 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1493 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1494 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1495 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1496 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1498 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1499 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1500 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1501 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1502 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1504 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1505 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1506 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1507 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1508 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1509 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1510 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1511 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1512 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1513 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1514 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1515 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1516 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1518 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1519 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1520 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1521 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1522 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1524 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1525 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1526 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1527 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1528 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1529 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1530 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1531 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1532 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1533 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1534 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1535 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1536 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1537 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1538 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1539 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1540 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1541 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1542 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1543 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1544 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1545 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1546 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-851 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1548 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1549 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1550 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1551 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1552 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-857 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1554 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1555 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1556 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1557 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1558 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1559 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1560 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1561 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1562 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1563 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1564 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1565 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1566 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-871 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1568 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1569 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1570 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1571 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1572 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-877 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1574 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1575 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1576 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1577 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1578 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1579 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1580 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1581 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1582 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1583 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1584 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1585 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1586 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-891 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1588 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1589 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1590 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1591 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1592 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-897 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1594 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1595 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1596 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1597 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1598 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1599 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1600 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1601 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1602 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1603 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1604 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1605 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1606 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-911 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1608 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1609 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1610 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1611 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1612 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-917 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1614 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1615 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1616 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1617 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1618 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1619 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1620 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1621 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1622 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1623 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1624 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1625 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1626 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1627 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1628 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1629 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1630 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1631 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1632 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1633 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1634 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1635 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1636 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-941 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1638 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1639 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1640 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1641 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1642 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-947 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1644 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1645 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1646 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1647 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1648 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1649 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1650 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1651 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1652 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1653 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1654 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1655 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1656 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-961 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1658 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1659 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1660 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1661 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1662 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-967 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1664 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1665 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1666 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1667 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1668 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1669 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1670 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1671 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1672 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1673 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1674 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1675 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1676 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-981 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1678 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1679 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1680 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1681 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1682 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-987 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1684 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1685 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1686 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1687 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1688 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1689 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1690 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1691 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1692 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1693 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1694 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1695 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1696 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1698 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1699 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1700 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1701 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1702 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1704 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1705 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1706 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1707 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1708 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1709 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1710 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1711 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1712 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1713 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1714 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1715 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1716 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1717 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1718 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1719 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1720 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1721 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1722 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1723 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1724 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1725 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1726 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1728 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1729 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1730 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1731 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1732 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1734 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1735 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1736 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1737 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1738 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1739 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1740 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1741 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1742 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1743 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1744 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1745 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1746 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1748 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1749 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1750 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1751 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1752 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1754 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1755 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1756 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1757 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1758 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1759 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1760 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1761 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1762 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1763 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1764 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1765 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1766 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1768 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1769 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1770 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1771 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1772 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1774 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1775 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1776 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1777 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1778 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1779 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1780 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1781 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1782 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1783 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1784 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1785 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1786 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1788 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1789 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1790 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1791 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1792 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1794 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1795 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1796 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1797 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1798 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1799 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1800 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1801 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1802 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1803 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1804 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1805 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1806 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1807 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1808 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1809 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1810 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1811 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1812 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1813 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1814 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1815 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1816 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1818 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1819 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1820 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1821 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1822 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1824 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1825 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1826 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1827 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1828 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1829 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1830 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1831 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1832 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1833 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1834 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1835 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1836 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1838 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1839 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1840 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1841 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1842 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1844 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1845 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1846 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1847 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1848 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1849 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1850 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1851 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1852 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1853 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1854 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1855 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1856 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1858 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1859 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1860 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1861 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1862 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1864 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1865 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1866 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1867 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1868 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1869 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1870 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1871 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1872 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1873 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1874 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1875 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1876 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1878 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1879 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1880 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1881 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1882 -A OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1884 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1885 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1886 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1887 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1888 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1889 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1890 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1891 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1892 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1893 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1894 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1895 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1896 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1897 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1898 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1899 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1900 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1901 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1902 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1903 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1904 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1905 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1906 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1907 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1908 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1909 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1910 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1911 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1912 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1913 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1914 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1915 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1916 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1917 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1918 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1919 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1920 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1921 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1922 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1923 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1924 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1925 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1926 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1927 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1928 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1929 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1930 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1931 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1932 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1933 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1934 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1935 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1936 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1937 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1938 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1939 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1940 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1941 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1942 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1943 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1944 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1945 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1946 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1947 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1948 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1949 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1950 -A OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-1951 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j logaccept-final-1 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-2 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-3 -A OUTPUT -j logaccept-final-4 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-5 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-6 -A OUTPUT -j logaccept-final-7 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-8 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-9 -A OUTPUT -j logaccept-final-10 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-11 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-12 -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-14 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-15 -A OUTPUT -j logaccept-final-16 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-17 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-18 -A OUTPUT -j logaccept-final-19 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-20 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-21 -A OUTPUT -j logaccept-final-22 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-23 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-24 -A OUTPUT -j logaccept-final-25 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-26 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-27 -A OUTPUT -j logaccept-final-28 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-29 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-30 -A OUTPUT -j logaccept-final-31 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-32 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-33 -A OUTPUT -j logaccept-final-34 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-35 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-36 -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-38 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-39 -A OUTPUT -j logaccept-final-40 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-41 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-42 -A OUTPUT -j logaccept-final-43 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-44 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-45 -A OUTPUT -j logaccept-final-46 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-47 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-48 -A OUTPUT -j logaccept-final-49 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-50 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-51 -A OUTPUT -j logaccept-final-52 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-53 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-54 -A OUTPUT -j logaccept-final-55 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-56 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-57 -A OUTPUT -j logaccept-final-58 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-59 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-60 -A OUTPUT -j logaccept-final-61 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-62 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-63 -A OUTPUT -j logaccept-final-64 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-65 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-66 -A OUTPUT -j logaccept-final-67 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-68 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-69 -A OUTPUT -j logaccept-final-70 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-71 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-72 -A OUTPUT -j logaccept-final-73 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-74 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-75 -A OUTPUT -j logaccept-final-76 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-77 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-78 -A OUTPUT -j logaccept-final-79 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-80 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-81 -A OUTPUT -j logaccept-final-82 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-83 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-84 -A OUTPUT -j logaccept-final-85 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-86 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-87 -A OUTPUT -j logaccept-final-88 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-89 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-90 -A OUTPUT -j logaccept-final-91 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-92 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-93 -A OUTPUT -j logaccept-final-94 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-95 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-96 -A OUTPUT -j logaccept-final-97 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-98 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-99 -A OUTPUT -j logaccept-final-100 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-101 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-102 -A OUTPUT -j logaccept-final-103 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-104 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-105 -A OUTPUT -j logaccept-final-106 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-107 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-108 -A OUTPUT -j logaccept-final-109 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-110 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-111 -A OUTPUT -j logaccept-final-112 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-113 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-114 -A OUTPUT -j logaccept-final-115 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-116 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-117 -A OUTPUT -j logaccept-final-118 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-119 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-120 -A OUTPUT -j logaccept-final-121 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-122 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-123 -A OUTPUT -j logaccept-final-124 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-125 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-126 -A OUTPUT -j logaccept-final-127 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-128 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-129 -A OUTPUT -j logaccept-final-130 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-131 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-132 -A OUTPUT -j logaccept-final-133 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-134 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-135 -A OUTPUT -j logaccept-final-136 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-137 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-138 -A OUTPUT -j logaccept-final-139 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-140 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-141 -A OUTPUT -j logaccept-final-142 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-143 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-144 -A OUTPUT -j logaccept-final-145 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-146 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-147 -A OUTPUT -j logaccept-final-148 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-149 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-150 -A OUTPUT -j logaccept-final-151 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-152 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-153 -A OUTPUT -j logaccept-final-154 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-155 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-156 -A OUTPUT -j logaccept-final-157 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-158 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-159 -A OUTPUT -j logaccept-final-160 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-161 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-162 -A OUTPUT -j logaccept-final-163 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-164 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-165 -A OUTPUT -j logaccept-final-166 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-167 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-168 -A OUTPUT -j logaccept-final-169 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-170 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-171 -A OUTPUT -j logaccept-final-172 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-173 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-174 -A OUTPUT -j logaccept-final-175 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-176 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-177 -A OUTPUT -j logaccept-final-178 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-179 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-180 -A OUTPUT -j logaccept-final-181 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-182 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-183 -A OUTPUT -j logaccept-final-184 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-185 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-186 -A OUTPUT -j logaccept-final-187 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-188 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-189 -A OUTPUT -j logaccept-final-190 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-191 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-192 -A OUTPUT -j logaccept-final-193 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-194 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-195 -A OUTPUT -j logaccept-final-196 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-197 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-198 -A OUTPUT -j logaccept-final-199 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-200 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-201 -A OUTPUT -j logaccept-final-202 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-203 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-204 -A OUTPUT -j logaccept-final-205 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-206 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-207 -A OUTPUT -j logaccept-final-208 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-209 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-210 -A OUTPUT -j logaccept-final-211 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-212 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-213 -A OUTPUT -j logaccept-final-214 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-215 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-216 -A OUTPUT -j logaccept-final-217 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-218 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-219 -A OUTPUT -j logaccept-final-220 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-221 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-222 -A OUTPUT -j logaccept-final-223 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-224 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-225 -A OUTPUT -j logaccept-final-226 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-227 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-228 -A OUTPUT -j logaccept-final-229 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-230 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-231 -A OUTPUT -j logaccept-final-232 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-233 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-234 -A OUTPUT -j logaccept-final-235 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-236 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-237 -A OUTPUT -j logaccept-final-238 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-239 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-240 -A OUTPUT -j logaccept-final-241 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-242 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-243 -A OUTPUT -j logaccept-final-244 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-245 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-246 -A OUTPUT -j logaccept-final-247 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-248 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-249 -A OUTPUT -j logaccept-final-250 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-251 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-252 -A OUTPUT -j logaccept-final-253 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-254 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-255 -A OUTPUT -j logaccept-final-256 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-257 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-258 -A OUTPUT -j logaccept-final-259 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-260 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-261 -A OUTPUT -j logaccept-final-262 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-263 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-264 -A OUTPUT -j logaccept-final-265 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-266 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-267 -A OUTPUT -j logaccept-final-268 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-269 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-270 -A OUTPUT -j logaccept-final-271 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-272 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-273 -A OUTPUT -j logaccept-final-274 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-275 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-276 -A OUTPUT -j logaccept-final-277 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-278 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-279 -A OUTPUT -j logaccept-final-280 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-281 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-282 -A OUTPUT -j logaccept-final-283 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-284 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-285 -A OUTPUT -j logaccept-final-286 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-287 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-288 -A OUTPUT -j logaccept-final-289 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-290 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-291 -A OUTPUT -j logaccept-final-292 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-293 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-294 -A OUTPUT -j logaccept-final-295 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-296 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-297 -A OUTPUT -j logaccept-final-298 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-299 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-300 -A OUTPUT -j logaccept-final-301 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-302 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-303 -A OUTPUT -j logaccept-final-304 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-305 -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:B --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:C --rsource --mask 254.0.0.0 --set -A OUTPUT -m recent --name user:D --rsource --mask 255.255.252.0 --set -A OUTPUT -m recent --name user:A --rsource --mask 255.255.255.255 --set -A OUTPUT -m recent --name user:A --rdest --mask 255.255.255.255 --set -A OUTPUT -j ACCEPT -A OUTPUT -j logdrop-1650 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-66 -A OUTPUT -j logdrop-1651 -A OUTPUT -j logpass-0 -A OUTPUT -j logaccept-67 -A OUTPUT -j logdrop-1652 -A OUTPUT -j logpass-1 -A OUTPUT -j logaccept-68 -A OUTPUT -j logdrop-1653 -A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-69 -A OUTPUT -j logdrop-1654 -A OUTPUT -j logpass-3 -A OUTPUT -m limit --limit 12/minute -j ULOG -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d 10.0.0.0/12 -j ACCEPT -A OUTPUT -p icmp -j icmp-routing -A icmp-routing -p icmp --icmp-type 3 -j ACCEPT -A icmp-routing -p icmp --icmp-type 11 -j ACCEPT -A icmp-routing -p icmp --icmp-type 12 -j ACCEPT -A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-0 -A limit-0 -m recent --name limit-0 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask 255.255.255.255 --set -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-10 -m recent --name limit-10 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1000 -j TEE --gateway 10.0.0.1 -A limit-1000 -j TEE --gateway 10.0.0.2 -A limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1004 -m limit --limit 12/minute -j ULOG -A limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1006 -j ACCEPT -A limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1008 -m limit --limit 1/second -j LOG -A limit-1008 -j ACCEPT -A limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1009 -m limit --limit 1/second -j LOG -A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set -A limit-1010 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1010 -j TEE --gateway 10.0.0.1 -A limit-1010 -j TEE --gateway 10.0.0.2 -A limit-1010 -j ACCEPT -A limit-1011 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1011 -j TEE --gateway 10.0.0.1 -A limit-1011 -j TEE --gateway 10.0.0.2 -A limit-1012 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1012 -j ACCEPT -A limit-1014 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1014 -m limit --limit 12/minute -j ULOG -A limit-1014 -j ACCEPT -A limit-1015 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1015 -m limit --limit 12/minute -j ULOG -A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1018 -m limit --limit 1/second -j LOG -A limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-102 -m limit --limit 1/second -j LOG -A limit-102 -m recent --name limit-102 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1020 -j TEE --gateway 10.0.0.1 -A limit-1020 -j TEE --gateway 10.0.0.2 -A limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1022 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1023 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1024 -m limit --limit 12/minute -j ULOG -A limit-1024 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1025 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1026 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1026 -j ACCEPT -A limit-1028 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1028 -m limit --limit 1/second -j LOG -A limit-1028 -j ACCEPT -A limit-1029 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1029 -m limit --limit 1/second -j LOG -A limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-103 -m recent --name limit-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1030 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1030 -j TEE --gateway 10.0.0.1 -A limit-1030 -j TEE --gateway 10.0.0.2 -A limit-1030 -j ACCEPT -A limit-1031 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1031 -j TEE --gateway 10.0.0.1 -A limit-1031 -j TEE --gateway 10.0.0.2 -A limit-1032 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1032 -j ACCEPT -A limit-1034 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1034 -m limit --limit 12/minute -j ULOG -A limit-1034 -j ACCEPT -A limit-1035 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1035 -m limit --limit 12/minute -j ULOG -A limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1036 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1037 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1038 -m limit --limit 1/second -j LOG -A limit-1038 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1039 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-104 -j TEE --gateway 10.0.0.1 -A limit-104 -j TEE --gateway 10.0.0.2 -A limit-104 -m recent --name limit-104 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1040 -j TEE --gateway 10.0.0.1 -A limit-1040 -j TEE --gateway 10.0.0.2 -A limit-1040 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1041 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1042 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1043 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1044 -m limit --limit 12/minute -j ULOG -A limit-1044 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1045 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1046 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1046 -j ACCEPT -A limit-1048 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1048 -m limit --limit 1/second -j LOG -A limit-1048 -j ACCEPT -A limit-1049 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1049 -m limit --limit 1/second -j LOG -A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-105 -m recent --name limit-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1050 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1050 -j TEE --gateway 10.0.0.1 -A limit-1050 -j TEE --gateway 10.0.0.2 -A limit-1050 -j ACCEPT -A limit-1051 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1051 -j TEE --gateway 10.0.0.1 -A limit-1051 -j TEE --gateway 10.0.0.2 -A limit-1052 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1052 -j ACCEPT -A limit-1054 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1054 -m limit --limit 12/minute -j ULOG -A limit-1054 -j ACCEPT -A limit-1055 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1055 -m limit --limit 12/minute -j ULOG -A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1056 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1057 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1058 -m limit --limit 1/second -j LOG -A limit-1058 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1059 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-106 -m recent --name limit-106 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1060 -j TEE --gateway 10.0.0.1 -A limit-1060 -j TEE --gateway 10.0.0.2 -A limit-1060 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1061 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1062 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1063 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1064 -m limit --limit 12/minute -j ULOG -A limit-1064 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1065 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1066 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1066 -j ACCEPT -A limit-1068 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1068 -m limit --limit 1/second -j LOG -A limit-1068 -j ACCEPT -A limit-1069 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1069 -m limit --limit 1/second -j LOG -A limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-107 -m recent --name limit-107 --rsource --mask 255.255.255.255 --set -A limit-1070 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1070 -j TEE --gateway 10.0.0.1 -A limit-1070 -j TEE --gateway 10.0.0.2 -A limit-1070 -j ACCEPT -A limit-1071 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1071 -j TEE --gateway 10.0.0.1 -A limit-1071 -j TEE --gateway 10.0.0.2 -A limit-1072 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1072 -j ACCEPT -A limit-1074 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1074 -m limit --limit 12/minute -j ULOG -A limit-1074 -j ACCEPT -A limit-1075 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1075 -m limit --limit 12/minute -j ULOG -A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-560 -A limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-561 -A limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-562 -A limit-1078 -m limit --limit 1/second -j LOG -A limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-563 -A limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-108 -m limit --limit 12/minute -j ULOG -A limit-108 -m recent --name limit-108 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-564 -A limit-1080 -j TEE --gateway 10.0.0.1 -A limit-1080 -j TEE --gateway 10.0.0.2 -A limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-565 -A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-566 -A limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-567 -A limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-568 -A limit-1084 -m limit --limit 12/minute -j ULOG -A limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-569 -A limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-570 -A limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-571 -A limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-572 -A limit-1088 -m limit --limit 1/second -j LOG -A limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-573 -A limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-19 -A limit-109 -m recent --name limit-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-574 -A limit-1090 -j TEE --gateway 10.0.0.1 -A limit-1090 -j TEE --gateway 10.0.0.2 -A limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-575 -A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-576 -A limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-577 -A limit-1093 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-578 -A limit-1094 -m limit --limit 12/minute -j ULOG -A limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-579 -A limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-580 -A limit-1096 -j ACCEPT -A limit-1098 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-582 -A limit-1098 -m limit --limit 1/second -j LOG -A limit-1098 -j ACCEPT -A limit-1099 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-583 -A limit-1099 -m limit --limit 1/second -j LOG -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-11 -m recent --name limit-11 --rsource --mask 255.255.255.255 --set -A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-20 -A limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1100 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-584 -A limit-1100 -j TEE --gateway 10.0.0.1 -A limit-1100 -j TEE --gateway 10.0.0.2 -A limit-1100 -j ACCEPT -A limit-1101 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-585 -A limit-1101 -j TEE --gateway 10.0.0.1 -A limit-1101 -j TEE --gateway 10.0.0.2 -A limit-1102 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-586 -A limit-1102 -j ACCEPT -A limit-1104 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-588 -A limit-1104 -m limit --limit 12/minute -j ULOG -A limit-1104 -j ACCEPT -A limit-1105 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-589 -A limit-1105 -m limit --limit 12/minute -j ULOG -A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-590 -A limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-591 -A limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-592 -A limit-1108 -m limit --limit 1/second -j LOG -A limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-593 -A limit-1109 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-21 -A limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-594 -A limit-1110 -j TEE --gateway 10.0.0.1 -A limit-1110 -j TEE --gateway 10.0.0.2 -A limit-1110 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-595 -A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1111 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-596 -A limit-1112 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-597 -A limit-1113 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-598 -A limit-1114 -m limit --limit 12/minute -j ULOG -A limit-1114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-599 -A limit-1115 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1116 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-600 -A limit-1116 -j ACCEPT -A limit-1118 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-602 -A limit-1118 -m limit --limit 1/second -j LOG -A limit-1118 -j ACCEPT -A limit-1119 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-603 -A limit-1119 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-22 -A limit-112 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-604 -A limit-1120 -j TEE --gateway 10.0.0.1 -A limit-1120 -j TEE --gateway 10.0.0.2 -A limit-1120 -j ACCEPT -A limit-1121 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-605 -A limit-1121 -j TEE --gateway 10.0.0.1 -A limit-1121 -j TEE --gateway 10.0.0.2 -A limit-1122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-606 -A limit-1122 -j ACCEPT -A limit-1124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-608 -A limit-1124 -m limit --limit 12/minute -j ULOG -A limit-1124 -j ACCEPT -A limit-1125 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-609 -A limit-1125 -m limit --limit 12/minute -j ULOG -A limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-610 -A limit-1126 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-611 -A limit-1127 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-612 -A limit-1128 -m limit --limit 1/second -j LOG -A limit-1128 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-613 -A limit-1129 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-23 -A limit-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-614 -A limit-1130 -j TEE --gateway 10.0.0.1 -A limit-1130 -j TEE --gateway 10.0.0.2 -A limit-1130 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-615 -A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1131 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-616 -A limit-1132 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-617 -A limit-1133 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-618 -A limit-1134 -m limit --limit 12/minute -j ULOG -A limit-1134 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-619 -A limit-1135 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1136 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-620 -A limit-1136 -j ACCEPT -A limit-1138 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-622 -A limit-1138 -m limit --limit 1/second -j LOG -A limit-1138 -j ACCEPT -A limit-1139 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-623 -A limit-1139 -m limit --limit 1/second -j LOG -A limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-24 -A limit-114 -j TEE --gateway 10.0.0.1 -A limit-114 -j TEE --gateway 10.0.0.2 -A limit-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1140 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-624 -A limit-1140 -j TEE --gateway 10.0.0.1 -A limit-1140 -j TEE --gateway 10.0.0.2 -A limit-1140 -j ACCEPT -A limit-1141 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-625 -A limit-1141 -j TEE --gateway 10.0.0.1 -A limit-1141 -j TEE --gateway 10.0.0.2 -A limit-1142 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-626 -A limit-1142 -j ACCEPT -A limit-1144 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-628 -A limit-1144 -m limit --limit 12/minute -j ULOG -A limit-1144 -j ACCEPT -A limit-1145 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-629 -A limit-1145 -m limit --limit 12/minute -j ULOG -A limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-630 -A limit-1146 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-631 -A limit-1147 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-632 -A limit-1148 -m limit --limit 1/second -j LOG -A limit-1148 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-633 -A limit-1149 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-634 -A limit-1150 -j TEE --gateway 10.0.0.1 -A limit-1150 -j TEE --gateway 10.0.0.2 -A limit-1150 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-635 -A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1151 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-636 -A limit-1152 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-637 -A limit-1153 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-638 -A limit-1154 -m limit --limit 12/minute -j ULOG -A limit-1154 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-639 -A limit-1155 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1156 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-640 -A limit-1156 -j ACCEPT -A limit-1158 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-642 -A limit-1158 -m limit --limit 1/second -j LOG -A limit-1158 -j ACCEPT -A limit-1159 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-643 -A limit-1159 -m limit --limit 1/second -j LOG -A limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1160 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-644 -A limit-1160 -j TEE --gateway 10.0.0.1 -A limit-1160 -j TEE --gateway 10.0.0.2 -A limit-1160 -j ACCEPT -A limit-1161 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-645 -A limit-1161 -j TEE --gateway 10.0.0.1 -A limit-1161 -j TEE --gateway 10.0.0.2 -A limit-1162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-646 -A limit-1162 -j ACCEPT -A limit-1164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-648 -A limit-1164 -m limit --limit 12/minute -j ULOG -A limit-1164 -j ACCEPT -A limit-1165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-649 -A limit-1165 -m limit --limit 12/minute -j ULOG -A limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-650 -A limit-1166 -m recent --name limit-1166 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-651 -A limit-1167 -m recent --name limit-1167 --rsource --mask 255.255.255.255 --set -A limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-652 -A limit-1168 -m limit --limit 1/second -j LOG -A limit-1168 -m recent --name limit-1168 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-653 -A limit-1169 -m recent --name limit-1169 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-654 -A limit-1170 -j TEE --gateway 10.0.0.1 -A limit-1170 -j TEE --gateway 10.0.0.2 -A limit-1170 -m recent --name limit-1170 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-655 -A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1171 -m recent --name limit-1171 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-656 -A limit-1172 -m recent --name limit-1172 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-657 -A limit-1173 -m recent --name limit-1173 --rsource --mask 255.255.255.255 --set -A limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-658 -A limit-1174 -m limit --limit 12/minute -j ULOG -A limit-1174 -m recent --name limit-1174 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-659 -A limit-1175 -m recent --name limit-1175 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-660 -A limit-1176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-661 -A limit-1177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-662 -A limit-1178 -m limit --limit 1/second -j LOG -A limit-1178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-663 -A limit-1179 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-118 -m limit --limit 12/minute -j ULOG -A limit-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-664 -A limit-1180 -j TEE --gateway 10.0.0.1 -A limit-1180 -j TEE --gateway 10.0.0.2 -A limit-1180 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-665 -A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1181 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-666 -A limit-1182 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-667 -A limit-1183 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-668 -A limit-1184 -m limit --limit 12/minute -j ULOG -A limit-1184 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-669 -A limit-1185 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1186 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-670 -A limit-1186 -j ACCEPT -A limit-1188 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-672 -A limit-1188 -m limit --limit 1/second -j LOG -A limit-1188 -j ACCEPT -A limit-1189 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-673 -A limit-1189 -m limit --limit 1/second -j LOG -A limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1190 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-674 -A limit-1190 -j TEE --gateway 10.0.0.1 -A limit-1190 -j TEE --gateway 10.0.0.2 -A limit-1190 -j ACCEPT -A limit-1191 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-675 -A limit-1191 -j TEE --gateway 10.0.0.1 -A limit-1191 -j TEE --gateway 10.0.0.2 -A limit-1192 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-676 -A limit-1192 -j ACCEPT -A limit-1194 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-678 -A limit-1194 -m limit --limit 12/minute -j ULOG -A limit-1194 -j ACCEPT -A limit-1195 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-679 -A limit-1195 -m limit --limit 12/minute -j ULOG -A limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-680 -A limit-1196 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-681 -A limit-1197 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-682 -A limit-1198 -m limit --limit 1/second -j LOG -A limit-1198 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-683 -A limit-1199 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-12 -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-30 -A limit-120 -j ACCEPT -A limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-684 -A limit-1200 -j TEE --gateway 10.0.0.1 -A limit-1200 -j TEE --gateway 10.0.0.2 -A limit-1200 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-685 -A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1201 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-686 -A limit-1202 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-687 -A limit-1203 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-688 -A limit-1204 -m limit --limit 12/minute -j ULOG -A limit-1204 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-689 -A limit-1205 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1206 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-690 -A limit-1206 -j ACCEPT -A limit-1208 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-692 -A limit-1208 -m limit --limit 1/second -j LOG -A limit-1208 -j ACCEPT -A limit-1209 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-693 -A limit-1209 -m limit --limit 1/second -j LOG -A limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-1210 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-694 -A limit-1210 -j TEE --gateway 10.0.0.1 -A limit-1210 -j TEE --gateway 10.0.0.2 -A limit-1210 -j ACCEPT -A limit-1211 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-695 -A limit-1211 -j TEE --gateway 10.0.0.1 -A limit-1211 -j TEE --gateway 10.0.0.2 -A limit-1212 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-696 -A limit-1212 -j ACCEPT -A limit-1214 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-698 -A limit-1214 -m limit --limit 12/minute -j ULOG -A limit-1214 -j ACCEPT -A limit-1215 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-699 -A limit-1215 -m limit --limit 12/minute -j ULOG -A limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-700 -A limit-1216 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-701 -A limit-1217 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-702 -A limit-1218 -m limit --limit 1/second -j LOG -A limit-1218 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-703 -A limit-1219 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-122 -m limit --limit 1/second -j LOG -A limit-122 -j ACCEPT -A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-704 -A limit-1220 -j TEE --gateway 10.0.0.1 -A limit-1220 -j TEE --gateway 10.0.0.2 -A limit-1220 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-705 -A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1221 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-706 -A limit-1222 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-707 -A limit-1223 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-708 -A limit-1224 -m limit --limit 12/minute -j ULOG -A limit-1224 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-709 -A limit-1225 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1226 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-710 -A limit-1226 -j ACCEPT -A limit-1228 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-712 -A limit-1228 -m limit --limit 1/second -j LOG -A limit-1228 -j ACCEPT -A limit-1229 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-713 -A limit-1229 -m limit --limit 1/second -j LOG -A limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-123 -m limit --limit 1/second -j LOG -A limit-1230 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-714 -A limit-1230 -j TEE --gateway 10.0.0.1 -A limit-1230 -j TEE --gateway 10.0.0.2 -A limit-1230 -j ACCEPT -A limit-1231 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-715 -A limit-1231 -j TEE --gateway 10.0.0.1 -A limit-1231 -j TEE --gateway 10.0.0.2 -A limit-1232 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-716 -A limit-1232 -j ACCEPT -A limit-1234 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-718 -A limit-1234 -m limit --limit 12/minute -j ULOG -A limit-1234 -j ACCEPT -A limit-1235 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-719 -A limit-1235 -m limit --limit 12/minute -j ULOG -A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-720 -A limit-1236 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-721 -A limit-1237 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-722 -A limit-1238 -m limit --limit 1/second -j LOG -A limit-1238 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-723 -A limit-1239 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-124 -j TEE --gateway 10.0.0.1 -A limit-124 -j TEE --gateway 10.0.0.2 -A limit-124 -j ACCEPT -A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-724 -A limit-1240 -j TEE --gateway 10.0.0.1 -A limit-1240 -j TEE --gateway 10.0.0.2 -A limit-1240 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-725 -A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1241 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-726 -A limit-1242 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-727 -A limit-1243 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-728 -A limit-1244 -m limit --limit 12/minute -j ULOG -A limit-1244 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-729 -A limit-1245 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1246 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-730 -A limit-1246 -j ACCEPT -A limit-1248 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-732 -A limit-1248 -m limit --limit 1/second -j LOG -A limit-1248 -j ACCEPT -A limit-1249 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-733 -A limit-1249 -m limit --limit 1/second -j LOG -A limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-125 -j TEE --gateway 10.0.0.1 -A limit-125 -j TEE --gateway 10.0.0.2 -A limit-1250 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-734 -A limit-1250 -j TEE --gateway 10.0.0.1 -A limit-1250 -j TEE --gateway 10.0.0.2 -A limit-1250 -j ACCEPT -A limit-1251 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-735 -A limit-1251 -j TEE --gateway 10.0.0.1 -A limit-1251 -j TEE --gateway 10.0.0.2 -A limit-1252 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-736 -A limit-1252 -j ACCEPT -A limit-1254 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-738 -A limit-1254 -m limit --limit 12/minute -j ULOG -A limit-1254 -j ACCEPT -A limit-1255 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-739 -A limit-1255 -m limit --limit 12/minute -j ULOG -A limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1256 -m recent --name limit-1256 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1257 -m recent --name limit-1257 --rsource --mask 255.255.255.255 --set -A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1258 -m limit --limit 1/second -j LOG -A limit-1258 -m recent --name limit-1258 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1259 -m recent --name limit-1259 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36 -A limit-126 -j ACCEPT -A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1260 -j TEE --gateway 10.0.0.1 -A limit-1260 -j TEE --gateway 10.0.0.2 -A limit-1260 -m recent --name limit-1260 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1261 -m recent --name limit-1261 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1262 -m recent --name limit-1262 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1263 -m recent --name limit-1263 --rsource --mask 255.255.255.255 --set -A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1264 -m limit --limit 12/minute -j ULOG -A limit-1264 -m recent --name limit-1264 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1265 -m recent --name limit-1265 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1266 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1267 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1268 -m limit --limit 1/second -j LOG -A limit-1268 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1269 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-127 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-37 -A limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1270 -j TEE --gateway 10.0.0.1 -A limit-1270 -j TEE --gateway 10.0.0.2 -A limit-1270 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1271 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1272 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1273 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1274 -m limit --limit 12/minute -j ULOG -A limit-1274 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1275 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1276 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1276 -j ACCEPT -A limit-1278 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1278 -m limit --limit 1/second -j LOG -A limit-1278 -j ACCEPT -A limit-1279 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1279 -m limit --limit 1/second -j LOG -A limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-38 -A limit-128 -m limit --limit 12/minute -j ULOG -A limit-128 -j ACCEPT -A limit-1280 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1280 -j TEE --gateway 10.0.0.1 -A limit-1280 -j TEE --gateway 10.0.0.2 -A limit-1280 -j ACCEPT -A limit-1281 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1281 -j TEE --gateway 10.0.0.1 -A limit-1281 -j TEE --gateway 10.0.0.2 -A limit-1282 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1282 -j ACCEPT -A limit-1284 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1284 -m limit --limit 12/minute -j ULOG -A limit-1284 -j ACCEPT -A limit-1285 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1285 -m limit --limit 12/minute -j ULOG -A limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1286 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1287 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1288 -m limit --limit 1/second -j LOG -A limit-1288 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1289 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-39 -A limit-129 -m limit --limit 12/minute -j ULOG -A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1290 -j TEE --gateway 10.0.0.1 -A limit-1290 -j TEE --gateway 10.0.0.2 -A limit-1290 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1291 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1292 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1293 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1294 -m limit --limit 12/minute -j ULOG -A limit-1294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1295 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1296 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1296 -j ACCEPT -A limit-1298 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1298 -m limit --limit 1/second -j LOG -A limit-1298 -j ACCEPT -A limit-1299 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1299 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-13 -m recent --name limit-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-40 -A limit-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1300 -j TEE --gateway 10.0.0.1 -A limit-1300 -j TEE --gateway 10.0.0.2 -A limit-1300 -j ACCEPT -A limit-1301 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1301 -j TEE --gateway 10.0.0.1 -A limit-1301 -j TEE --gateway 10.0.0.2 -A limit-1302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1302 -j ACCEPT -A limit-1304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1304 -m limit --limit 12/minute -j ULOG -A limit-1304 -j ACCEPT -A limit-1305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1305 -m limit --limit 12/minute -j ULOG -A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1307 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1308 -m limit --limit 1/second -j LOG -A limit-1308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-41 -A limit-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1310 -j TEE --gateway 10.0.0.1 -A limit-1310 -j TEE --gateway 10.0.0.2 -A limit-1310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1311 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1312 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1313 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1314 -m limit --limit 12/minute -j ULOG -A limit-1314 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1315 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1316 -j ACCEPT -A limit-1318 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1318 -m limit --limit 1/second -j LOG -A limit-1318 -j ACCEPT -A limit-1319 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1319 -m limit --limit 1/second -j LOG -A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-42 -A limit-132 -m limit --limit 1/second -j LOG -A limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1320 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1320 -j TEE --gateway 10.0.0.1 -A limit-1320 -j TEE --gateway 10.0.0.2 -A limit-1320 -j ACCEPT -A limit-1321 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1321 -j TEE --gateway 10.0.0.1 -A limit-1321 -j TEE --gateway 10.0.0.2 -A limit-1322 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1322 -j ACCEPT -A limit-1324 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1324 -m limit --limit 12/minute -j ULOG -A limit-1324 -j ACCEPT -A limit-1325 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1325 -m limit --limit 12/minute -j ULOG -A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1326 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1327 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1328 -m limit --limit 1/second -j LOG -A limit-1328 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1329 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-43 -A limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1330 -j TEE --gateway 10.0.0.1 -A limit-1330 -j TEE --gateway 10.0.0.2 -A limit-1330 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1331 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1332 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1333 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1334 -m limit --limit 12/minute -j ULOG -A limit-1334 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-1335 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1336 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1336 -j ACCEPT -A limit-1338 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1338 -m limit --limit 1/second -j LOG -A limit-1338 -j ACCEPT -A limit-1339 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1339 -m limit --limit 1/second -j LOG -A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-44 -A limit-134 -j TEE --gateway 10.0.0.1 -A limit-134 -j TEE --gateway 10.0.0.2 -A limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1340 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1340 -j TEE --gateway 10.0.0.1 -A limit-1340 -j TEE --gateway 10.0.0.2 -A limit-1340 -j ACCEPT -A limit-1341 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1341 -j TEE --gateway 10.0.0.1 -A limit-1341 -j TEE --gateway 10.0.0.2 -A limit-1342 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1342 -j ACCEPT -A limit-1344 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1344 -m limit --limit 12/minute -j ULOG -A limit-1344 -j ACCEPT -A limit-1345 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1345 -m limit --limit 12/minute -j ULOG -A limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-740 -A limit-1346 -m recent --name limit-1346 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-741 -A limit-1347 -m recent --name limit-1347 --rsource --mask 255.255.255.255 --set -A limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-742 -A limit-1348 -m limit --limit 1/second -j LOG -A limit-1348 -m recent --name limit-1348 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-743 -A limit-1349 -m recent --name limit-1349 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-45 -A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-744 -A limit-1350 -j TEE --gateway 10.0.0.1 -A limit-1350 -j TEE --gateway 10.0.0.2 -A limit-1350 -m recent --name limit-1350 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-745 -A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1351 -m recent --name limit-1351 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-746 -A limit-1352 -m recent --name limit-1352 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-747 -A limit-1353 -m recent --name limit-1353 --rsource --mask 255.255.255.255 --set -A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-748 -A limit-1354 -m limit --limit 12/minute -j ULOG -A limit-1354 -m recent --name limit-1354 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-749 -A limit-1355 -m recent --name limit-1355 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-750 -A limit-1356 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-751 -A limit-1357 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-752 -A limit-1358 -m limit --limit 1/second -j LOG -A limit-1358 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-753 -A limit-1359 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-46 -A limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-754 -A limit-1360 -j TEE --gateway 10.0.0.1 -A limit-1360 -j TEE --gateway 10.0.0.2 -A limit-1360 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-755 -A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1361 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-756 -A limit-1362 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-757 -A limit-1363 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-758 -A limit-1364 -m limit --limit 12/minute -j ULOG -A limit-1364 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-759 -A limit-1365 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1366 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-760 -A limit-1366 -j ACCEPT -A limit-1368 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-762 -A limit-1368 -m limit --limit 1/second -j LOG -A limit-1368 -j ACCEPT -A limit-1369 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-763 -A limit-1369 -m limit --limit 1/second -j LOG -A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-47 -A limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1370 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-764 -A limit-1370 -j TEE --gateway 10.0.0.1 -A limit-1370 -j TEE --gateway 10.0.0.2 -A limit-1370 -j ACCEPT -A limit-1371 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-765 -A limit-1371 -j TEE --gateway 10.0.0.1 -A limit-1371 -j TEE --gateway 10.0.0.2 -A limit-1372 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-766 -A limit-1372 -j ACCEPT -A limit-1374 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-768 -A limit-1374 -m limit --limit 12/minute -j ULOG -A limit-1374 -j ACCEPT -A limit-1375 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-769 -A limit-1375 -m limit --limit 12/minute -j ULOG -A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-770 -A limit-1376 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-771 -A limit-1377 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-772 -A limit-1378 -m limit --limit 1/second -j LOG -A limit-1378 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-773 -A limit-1379 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-138 -m limit --limit 12/minute -j ULOG -A limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-774 -A limit-1380 -j TEE --gateway 10.0.0.1 -A limit-1380 -j TEE --gateway 10.0.0.2 -A limit-1380 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-775 -A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1381 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-776 -A limit-1382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-777 -A limit-1383 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-778 -A limit-1384 -m limit --limit 12/minute -j ULOG -A limit-1384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-779 -A limit-1385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1386 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-780 -A limit-1386 -j ACCEPT -A limit-1388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-782 -A limit-1388 -m limit --limit 1/second -j LOG -A limit-1388 -j ACCEPT -A limit-1389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-783 -A limit-1389 -m limit --limit 1/second -j LOG -A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-784 -A limit-1390 -j TEE --gateway 10.0.0.1 -A limit-1390 -j TEE --gateway 10.0.0.2 -A limit-1390 -j ACCEPT -A limit-1391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-785 -A limit-1391 -j TEE --gateway 10.0.0.1 -A limit-1391 -j TEE --gateway 10.0.0.2 -A limit-1392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-786 -A limit-1392 -j ACCEPT -A limit-1394 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-788 -A limit-1394 -m limit --limit 12/minute -j ULOG -A limit-1394 -j ACCEPT -A limit-1395 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-789 -A limit-1395 -m limit --limit 12/minute -j ULOG -A limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-790 -A limit-1396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-791 -A limit-1397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-792 -A limit-1398 -m limit --limit 1/second -j LOG -A limit-1398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-793 -A limit-1399 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-14 -j TEE --gateway 10.0.0.1 -A limit-14 -j TEE --gateway 10.0.0.2 -A limit-14 -m recent --name limit-14 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-50 -A limit-140 -j ACCEPT -A limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-794 -A limit-1400 -j TEE --gateway 10.0.0.1 -A limit-1400 -j TEE --gateway 10.0.0.2 -A limit-1400 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-795 -A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1401 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-796 -A limit-1402 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-797 -A limit-1403 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-798 -A limit-1404 -m limit --limit 12/minute -j ULOG -A limit-1404 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-799 -A limit-1405 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1406 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-800 -A limit-1406 -j ACCEPT -A limit-1408 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-802 -A limit-1408 -m limit --limit 1/second -j LOG -A limit-1408 -j ACCEPT -A limit-1409 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-803 -A limit-1409 -m limit --limit 1/second -j LOG -A limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-51 -A limit-1410 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-804 -A limit-1410 -j TEE --gateway 10.0.0.1 -A limit-1410 -j TEE --gateway 10.0.0.2 -A limit-1410 -j ACCEPT -A limit-1411 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-805 -A limit-1411 -j TEE --gateway 10.0.0.1 -A limit-1411 -j TEE --gateway 10.0.0.2 -A limit-1412 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-806 -A limit-1412 -j ACCEPT -A limit-1414 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-808 -A limit-1414 -m limit --limit 12/minute -j ULOG -A limit-1414 -j ACCEPT -A limit-1415 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-809 -A limit-1415 -m limit --limit 12/minute -j ULOG -A limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-810 -A limit-1416 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-811 -A limit-1417 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-812 -A limit-1418 -m limit --limit 1/second -j LOG -A limit-1418 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-813 -A limit-1419 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-52 -A limit-142 -m limit --limit 1/second -j LOG -A limit-142 -j ACCEPT -A limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-814 -A limit-1420 -j TEE --gateway 10.0.0.1 -A limit-1420 -j TEE --gateway 10.0.0.2 -A limit-1420 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-815 -A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1421 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-816 -A limit-1422 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-817 -A limit-1423 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-818 -A limit-1424 -m limit --limit 12/minute -j ULOG -A limit-1424 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-819 -A limit-1425 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1426 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-820 -A limit-1426 -j ACCEPT -A limit-1428 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-822 -A limit-1428 -m limit --limit 1/second -j LOG -A limit-1428 -j ACCEPT -A limit-1429 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-823 -A limit-1429 -m limit --limit 1/second -j LOG -A limit-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-53 -A limit-143 -m limit --limit 1/second -j LOG -A limit-1430 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-824 -A limit-1430 -j TEE --gateway 10.0.0.1 -A limit-1430 -j TEE --gateway 10.0.0.2 -A limit-1430 -j ACCEPT -A limit-1431 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-825 -A limit-1431 -j TEE --gateway 10.0.0.1 -A limit-1431 -j TEE --gateway 10.0.0.2 -A limit-1432 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-826 -A limit-1432 -j ACCEPT -A limit-1434 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-828 -A limit-1434 -m limit --limit 12/minute -j ULOG -A limit-1434 -j ACCEPT -A limit-1435 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-829 -A limit-1435 -m limit --limit 12/minute -j ULOG -A limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1436 -m recent --name limit-1436 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1437 -m recent --name limit-1437 --rsource --mask 255.255.255.255 --set -A limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1438 -m limit --limit 1/second -j LOG -A limit-1438 -m recent --name limit-1438 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1439 -m recent --name limit-1439 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-54 -A limit-144 -j TEE --gateway 10.0.0.1 -A limit-144 -j TEE --gateway 10.0.0.2 -A limit-144 -j ACCEPT -A limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1440 -j TEE --gateway 10.0.0.1 -A limit-1440 -j TEE --gateway 10.0.0.2 -A limit-1440 -m recent --name limit-1440 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1441 -m recent --name limit-1441 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1442 -m recent --name limit-1442 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1443 -m recent --name limit-1443 --rsource --mask 255.255.255.255 --set -A limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1444 -m limit --limit 12/minute -j ULOG -A limit-1444 -m recent --name limit-1444 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1445 -m recent --name limit-1445 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1446 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1447 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1448 -m limit --limit 1/second -j LOG -A limit-1448 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1449 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 -A limit-145 -j TEE --gateway 10.0.0.1 -A limit-145 -j TEE --gateway 10.0.0.2 -A limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1450 -j TEE --gateway 10.0.0.1 -A limit-1450 -j TEE --gateway 10.0.0.2 -A limit-1450 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1451 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1452 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1453 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1454 -m limit --limit 12/minute -j ULOG -A limit-1454 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1455 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1456 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1456 -j ACCEPT -A limit-1458 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1458 -m limit --limit 1/second -j LOG -A limit-1458 -j ACCEPT -A limit-1459 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1459 -m limit --limit 1/second -j LOG -A limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-146 -j ACCEPT -A limit-1460 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1460 -j TEE --gateway 10.0.0.1 -A limit-1460 -j TEE --gateway 10.0.0.2 -A limit-1460 -j ACCEPT -A limit-1461 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1461 -j TEE --gateway 10.0.0.1 -A limit-1461 -j TEE --gateway 10.0.0.2 -A limit-1462 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1462 -j ACCEPT -A limit-1464 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1464 -m limit --limit 12/minute -j ULOG -A limit-1464 -j ACCEPT -A limit-1465 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1465 -m limit --limit 12/minute -j ULOG -A limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1466 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1467 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1468 -m limit --limit 1/second -j LOG -A limit-1468 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1469 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1470 -j TEE --gateway 10.0.0.1 -A limit-1470 -j TEE --gateway 10.0.0.2 -A limit-1470 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1471 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1472 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1473 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1474 -m limit --limit 12/minute -j ULOG -A limit-1474 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1475 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1476 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1476 -j ACCEPT -A limit-1478 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1478 -m limit --limit 1/second -j LOG -A limit-1478 -j ACCEPT -A limit-1479 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1479 -m limit --limit 1/second -j LOG -A limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-148 -m limit --limit 12/minute -j ULOG -A limit-148 -j ACCEPT -A limit-1480 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1480 -j TEE --gateway 10.0.0.1 -A limit-1480 -j TEE --gateway 10.0.0.2 -A limit-1480 -j ACCEPT -A limit-1481 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1481 -j TEE --gateway 10.0.0.1 -A limit-1481 -j TEE --gateway 10.0.0.2 -A limit-1482 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1482 -j ACCEPT -A limit-1484 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1484 -m limit --limit 12/minute -j ULOG -A limit-1484 -j ACCEPT -A limit-1485 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1485 -m limit --limit 12/minute -j ULOG -A limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1486 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1487 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1488 -m limit --limit 1/second -j LOG -A limit-1488 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1489 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 -A limit-149 -m limit --limit 12/minute -j ULOG -A limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1490 -j TEE --gateway 10.0.0.1 -A limit-1490 -j TEE --gateway 10.0.0.2 -A limit-1490 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1491 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1492 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1493 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1494 -m limit --limit 12/minute -j ULOG -A limit-1494 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1495 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1496 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1496 -j ACCEPT -A limit-1498 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1498 -m limit --limit 1/second -j LOG -A limit-1498 -j ACCEPT -A limit-1499 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1499 -m limit --limit 1/second -j LOG -A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-15 -m recent --name limit-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-60 -A limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1500 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1500 -j TEE --gateway 10.0.0.1 -A limit-1500 -j TEE --gateway 10.0.0.2 -A limit-1500 -j ACCEPT -A limit-1501 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1501 -j TEE --gateway 10.0.0.1 -A limit-1501 -j TEE --gateway 10.0.0.2 -A limit-1502 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1502 -j ACCEPT -A limit-1504 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1504 -m limit --limit 12/minute -j ULOG -A limit-1504 -j ACCEPT -A limit-1505 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1505 -m limit --limit 12/minute -j ULOG -A limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1506 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1507 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1508 -m limit --limit 1/second -j LOG -A limit-1508 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1509 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-61 -A limit-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1510 -j TEE --gateway 10.0.0.1 -A limit-1510 -j TEE --gateway 10.0.0.2 -A limit-1510 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1511 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1512 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1513 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1514 -m limit --limit 12/minute -j ULOG -A limit-1514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1515 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1516 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1516 -j ACCEPT -A limit-1518 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1518 -m limit --limit 1/second -j LOG -A limit-1518 -j ACCEPT -A limit-1519 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1519 -m limit --limit 1/second -j LOG -A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-62 -A limit-152 -m limit --limit 1/second -j LOG -A limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1520 -j TEE --gateway 10.0.0.1 -A limit-1520 -j TEE --gateway 10.0.0.2 -A limit-1520 -j ACCEPT -A limit-1521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1521 -j TEE --gateway 10.0.0.1 -A limit-1521 -j TEE --gateway 10.0.0.2 -A limit-1522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1522 -j ACCEPT -A limit-1524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1524 -m limit --limit 12/minute -j ULOG -A limit-1524 -j ACCEPT -A limit-1525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1525 -m limit --limit 12/minute -j ULOG -A limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-830 -A limit-1526 -m recent --name limit-1526 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-831 -A limit-1527 -m recent --name limit-1527 --rsource --mask 255.255.255.255 --set -A limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-832 -A limit-1528 -m limit --limit 1/second -j LOG -A limit-1528 -m recent --name limit-1528 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-833 -A limit-1529 -m recent --name limit-1529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-63 -A limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-834 -A limit-1530 -j TEE --gateway 10.0.0.1 -A limit-1530 -j TEE --gateway 10.0.0.2 -A limit-1530 -m recent --name limit-1530 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-835 -A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1531 -m recent --name limit-1531 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-836 -A limit-1532 -m recent --name limit-1532 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-837 -A limit-1533 -m recent --name limit-1533 --rsource --mask 255.255.255.255 --set -A limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-838 -A limit-1534 -m limit --limit 12/minute -j ULOG -A limit-1534 -m recent --name limit-1534 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-839 -A limit-1535 -m recent --name limit-1535 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-840 -A limit-1536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-841 -A limit-1537 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-842 -A limit-1538 -m limit --limit 1/second -j LOG -A limit-1538 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-843 -A limit-1539 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-64 -A limit-154 -j TEE --gateway 10.0.0.1 -A limit-154 -j TEE --gateway 10.0.0.2 -A limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-844 -A limit-1540 -j TEE --gateway 10.0.0.1 -A limit-1540 -j TEE --gateway 10.0.0.2 -A limit-1540 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-845 -A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1541 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-846 -A limit-1542 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-847 -A limit-1543 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-848 -A limit-1544 -m limit --limit 12/minute -j ULOG -A limit-1544 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-849 -A limit-1545 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1546 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-850 -A limit-1546 -j ACCEPT -A limit-1548 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-852 -A limit-1548 -m limit --limit 1/second -j LOG -A limit-1548 -j ACCEPT -A limit-1549 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-853 -A limit-1549 -m limit --limit 1/second -j LOG -A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-65 -A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1550 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-854 -A limit-1550 -j TEE --gateway 10.0.0.1 -A limit-1550 -j TEE --gateway 10.0.0.2 -A limit-1550 -j ACCEPT -A limit-1551 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-855 -A limit-1551 -j TEE --gateway 10.0.0.1 -A limit-1551 -j TEE --gateway 10.0.0.2 -A limit-1552 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-856 -A limit-1552 -j ACCEPT -A limit-1554 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-858 -A limit-1554 -m limit --limit 12/minute -j ULOG -A limit-1554 -j ACCEPT -A limit-1555 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-859 -A limit-1555 -m limit --limit 12/minute -j ULOG -A limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-860 -A limit-1556 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-861 -A limit-1557 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-862 -A limit-1558 -m limit --limit 1/second -j LOG -A limit-1558 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-863 -A limit-1559 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-66 -A limit-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-864 -A limit-1560 -j TEE --gateway 10.0.0.1 -A limit-1560 -j TEE --gateway 10.0.0.2 -A limit-1560 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-865 -A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1561 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-866 -A limit-1562 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-867 -A limit-1563 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-868 -A limit-1564 -m limit --limit 12/minute -j ULOG -A limit-1564 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-869 -A limit-1565 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1566 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-870 -A limit-1566 -j ACCEPT -A limit-1568 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-872 -A limit-1568 -m limit --limit 1/second -j LOG -A limit-1568 -j ACCEPT -A limit-1569 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-873 -A limit-1569 -m limit --limit 1/second -j LOG -A limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-67 -A limit-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1570 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-874 -A limit-1570 -j TEE --gateway 10.0.0.1 -A limit-1570 -j TEE --gateway 10.0.0.2 -A limit-1570 -j ACCEPT -A limit-1571 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-875 -A limit-1571 -j TEE --gateway 10.0.0.1 -A limit-1571 -j TEE --gateway 10.0.0.2 -A limit-1572 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-876 -A limit-1572 -j ACCEPT -A limit-1574 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-878 -A limit-1574 -m limit --limit 12/minute -j ULOG -A limit-1574 -j ACCEPT -A limit-1575 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-879 -A limit-1575 -m limit --limit 12/minute -j ULOG -A limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-880 -A limit-1576 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-881 -A limit-1577 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-882 -A limit-1578 -m limit --limit 1/second -j LOG -A limit-1578 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-883 -A limit-1579 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-68 -A limit-158 -m limit --limit 12/minute -j ULOG -A limit-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-884 -A limit-1580 -j TEE --gateway 10.0.0.1 -A limit-1580 -j TEE --gateway 10.0.0.2 -A limit-1580 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-885 -A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1581 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-886 -A limit-1582 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-887 -A limit-1583 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-888 -A limit-1584 -m limit --limit 12/minute -j ULOG -A limit-1584 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-889 -A limit-1585 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1586 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-890 -A limit-1586 -j ACCEPT -A limit-1588 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-892 -A limit-1588 -m limit --limit 1/second -j LOG -A limit-1588 -j ACCEPT -A limit-1589 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-893 -A limit-1589 -m limit --limit 1/second -j LOG -A limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-69 -A limit-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1590 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-894 -A limit-1590 -j TEE --gateway 10.0.0.1 -A limit-1590 -j TEE --gateway 10.0.0.2 -A limit-1590 -j ACCEPT -A limit-1591 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-895 -A limit-1591 -j TEE --gateway 10.0.0.1 -A limit-1591 -j TEE --gateway 10.0.0.2 -A limit-1592 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-896 -A limit-1592 -j ACCEPT -A limit-1594 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-898 -A limit-1594 -m limit --limit 12/minute -j ULOG -A limit-1594 -j ACCEPT -A limit-1595 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-899 -A limit-1595 -m limit --limit 12/minute -j ULOG -A limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-900 -A limit-1596 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-901 -A limit-1597 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-902 -A limit-1598 -m limit --limit 1/second -j LOG -A limit-1598 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-903 -A limit-1599 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-16 -m recent --name limit-16 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-70 -A limit-160 -j ACCEPT -A limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-904 -A limit-1600 -j TEE --gateway 10.0.0.1 -A limit-1600 -j TEE --gateway 10.0.0.2 -A limit-1600 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-905 -A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1601 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-906 -A limit-1602 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-907 -A limit-1603 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-908 -A limit-1604 -m limit --limit 12/minute -j ULOG -A limit-1604 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-909 -A limit-1605 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1606 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-910 -A limit-1606 -j ACCEPT -A limit-1608 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-912 -A limit-1608 -m limit --limit 1/second -j LOG -A limit-1608 -j ACCEPT -A limit-1609 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-913 -A limit-1609 -m limit --limit 1/second -j LOG -A limit-161 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-71 -A limit-1610 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-914 -A limit-1610 -j TEE --gateway 10.0.0.1 -A limit-1610 -j TEE --gateway 10.0.0.2 -A limit-1610 -j ACCEPT -A limit-1611 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-915 -A limit-1611 -j TEE --gateway 10.0.0.1 -A limit-1611 -j TEE --gateway 10.0.0.2 -A limit-1612 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-916 -A limit-1612 -j ACCEPT -A limit-1614 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-918 -A limit-1614 -m limit --limit 12/minute -j ULOG -A limit-1614 -j ACCEPT -A limit-1615 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-919 -A limit-1615 -m limit --limit 12/minute -j ULOG -A limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-920 -A limit-1616 -m recent --name limit-1616 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-921 -A limit-1617 -m recent --name limit-1617 --rsource --mask 255.255.255.255 --set -A limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-922 -A limit-1618 -m limit --limit 1/second -j LOG -A limit-1618 -m recent --name limit-1618 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-923 -A limit-1619 -m recent --name limit-1619 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-72 -A limit-162 -m limit --limit 1/second -j LOG -A limit-162 -j ACCEPT -A limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-924 -A limit-1620 -j TEE --gateway 10.0.0.1 -A limit-1620 -j TEE --gateway 10.0.0.2 -A limit-1620 -m recent --name limit-1620 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-925 -A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1621 -m recent --name limit-1621 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-926 -A limit-1622 -m recent --name limit-1622 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-927 -A limit-1623 -m recent --name limit-1623 --rsource --mask 255.255.255.255 --set -A limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-928 -A limit-1624 -m limit --limit 12/minute -j ULOG -A limit-1624 -m recent --name limit-1624 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-929 -A limit-1625 -m recent --name limit-1625 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-930 -A limit-1626 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-931 -A limit-1627 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-932 -A limit-1628 -m limit --limit 1/second -j LOG -A limit-1628 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-933 -A limit-1629 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-73 -A limit-163 -m limit --limit 1/second -j LOG -A limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-934 -A limit-1630 -j TEE --gateway 10.0.0.1 -A limit-1630 -j TEE --gateway 10.0.0.2 -A limit-1630 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-935 -A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1631 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-936 -A limit-1632 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-937 -A limit-1633 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-938 -A limit-1634 -m limit --limit 12/minute -j ULOG -A limit-1634 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-939 -A limit-1635 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1636 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-940 -A limit-1636 -j ACCEPT -A limit-1638 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-942 -A limit-1638 -m limit --limit 1/second -j LOG -A limit-1638 -j ACCEPT -A limit-1639 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-943 -A limit-1639 -m limit --limit 1/second -j LOG -A limit-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-74 -A limit-164 -j TEE --gateway 10.0.0.1 -A limit-164 -j TEE --gateway 10.0.0.2 -A limit-164 -j ACCEPT -A limit-1640 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-944 -A limit-1640 -j TEE --gateway 10.0.0.1 -A limit-1640 -j TEE --gateway 10.0.0.2 -A limit-1640 -j ACCEPT -A limit-1641 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-945 -A limit-1641 -j TEE --gateway 10.0.0.1 -A limit-1641 -j TEE --gateway 10.0.0.2 -A limit-1642 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-946 -A limit-1642 -j ACCEPT -A limit-1644 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-948 -A limit-1644 -m limit --limit 12/minute -j ULOG -A limit-1644 -j ACCEPT -A limit-1645 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-949 -A limit-1645 -m limit --limit 12/minute -j ULOG -A limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-950 -A limit-1646 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-951 -A limit-1647 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-952 -A limit-1648 -m limit --limit 1/second -j LOG -A limit-1648 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-953 -A limit-1649 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-75 -A limit-165 -j TEE --gateway 10.0.0.1 -A limit-165 -j TEE --gateway 10.0.0.2 -A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-954 -A limit-1650 -j TEE --gateway 10.0.0.1 -A limit-1650 -j TEE --gateway 10.0.0.2 -A limit-1650 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-955 -A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1651 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-956 -A limit-1652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-957 -A limit-1653 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-958 -A limit-1654 -m limit --limit 12/minute -j ULOG -A limit-1654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-959 -A limit-1655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1656 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-960 -A limit-1656 -j ACCEPT -A limit-1658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-962 -A limit-1658 -m limit --limit 1/second -j LOG -A limit-1658 -j ACCEPT -A limit-1659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-963 -A limit-1659 -m limit --limit 1/second -j LOG -A limit-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-76 -A limit-166 -j ACCEPT -A limit-1660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-964 -A limit-1660 -j TEE --gateway 10.0.0.1 -A limit-1660 -j TEE --gateway 10.0.0.2 -A limit-1660 -j ACCEPT -A limit-1661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-965 -A limit-1661 -j TEE --gateway 10.0.0.1 -A limit-1661 -j TEE --gateway 10.0.0.2 -A limit-1662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-966 -A limit-1662 -j ACCEPT -A limit-1664 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-968 -A limit-1664 -m limit --limit 12/minute -j ULOG -A limit-1664 -j ACCEPT -A limit-1665 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-969 -A limit-1665 -m limit --limit 12/minute -j ULOG -A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-970 -A limit-1666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-971 -A limit-1667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-972 -A limit-1668 -m limit --limit 1/second -j LOG -A limit-1668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-973 -A limit-1669 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-167 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-77 -A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-974 -A limit-1670 -j TEE --gateway 10.0.0.1 -A limit-1670 -j TEE --gateway 10.0.0.2 -A limit-1670 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-975 -A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1671 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-976 -A limit-1672 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-977 -A limit-1673 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-978 -A limit-1674 -m limit --limit 12/minute -j ULOG -A limit-1674 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-979 -A limit-1675 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1676 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-980 -A limit-1676 -j ACCEPT -A limit-1678 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-982 -A limit-1678 -m limit --limit 1/second -j LOG -A limit-1678 -j ACCEPT -A limit-1679 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-983 -A limit-1679 -m limit --limit 1/second -j LOG -A limit-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-78 -A limit-168 -m limit --limit 12/minute -j ULOG -A limit-168 -j ACCEPT -A limit-1680 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-984 -A limit-1680 -j TEE --gateway 10.0.0.1 -A limit-1680 -j TEE --gateway 10.0.0.2 -A limit-1680 -j ACCEPT -A limit-1681 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-985 -A limit-1681 -j TEE --gateway 10.0.0.1 -A limit-1681 -j TEE --gateway 10.0.0.2 -A limit-1682 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-986 -A limit-1682 -j ACCEPT -A limit-1684 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-988 -A limit-1684 -m limit --limit 12/minute -j ULOG -A limit-1684 -j ACCEPT -A limit-1685 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-989 -A limit-1685 -m limit --limit 12/minute -j ULOG -A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-990 -A limit-1686 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-991 -A limit-1687 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-992 -A limit-1688 -m limit --limit 1/second -j LOG -A limit-1688 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-993 -A limit-1689 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-79 -A limit-169 -m limit --limit 12/minute -j ULOG -A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-994 -A limit-1690 -j TEE --gateway 10.0.0.1 -A limit-1690 -j TEE --gateway 10.0.0.2 -A limit-1690 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-995 -A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1691 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-996 -A limit-1692 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-997 -A limit-1693 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-998 -A limit-1694 -m limit --limit 12/minute -j ULOG -A limit-1694 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-999 -A limit-1695 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1696 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 -A limit-1696 -j ACCEPT -A limit-1698 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 -A limit-1698 -m limit --limit 1/second -j LOG -A limit-1698 -j ACCEPT -A limit-1699 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 -A limit-1699 -m limit --limit 1/second -j LOG -A limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-17 -m recent --name limit-17 --rsource --mask 255.255.255.255 --set -A limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-80 -A limit-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1700 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 -A limit-1700 -j TEE --gateway 10.0.0.1 -A limit-1700 -j TEE --gateway 10.0.0.2 -A limit-1700 -j ACCEPT -A limit-1701 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 -A limit-1701 -j TEE --gateway 10.0.0.1 -A limit-1701 -j TEE --gateway 10.0.0.2 -A limit-1702 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 -A limit-1702 -j ACCEPT -A limit-1704 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 -A limit-1704 -m limit --limit 12/minute -j ULOG -A limit-1704 -j ACCEPT -A limit-1705 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 -A limit-1705 -m limit --limit 12/minute -j ULOG -A limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1706 -m recent --name limit-1706 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1707 -m recent --name limit-1707 --rsource --mask 255.255.255.255 --set -A limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1708 -m limit --limit 1/second -j LOG -A limit-1708 -m recent --name limit-1708 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1709 -m recent --name limit-1709 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-81 -A limit-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1710 -j TEE --gateway 10.0.0.1 -A limit-1710 -j TEE --gateway 10.0.0.2 -A limit-1710 -m recent --name limit-1710 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1711 -m recent --name limit-1711 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1712 -m recent --name limit-1712 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1713 -m recent --name limit-1713 --rsource --mask 255.255.255.255 --set -A limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1714 -m limit --limit 12/minute -j ULOG -A limit-1714 -m recent --name limit-1714 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1715 -m recent --name limit-1715 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1716 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1717 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1718 -m limit --limit 1/second -j LOG -A limit-1718 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1719 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-82 -A limit-172 -m limit --limit 1/second -j LOG -A limit-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1720 -j TEE --gateway 10.0.0.1 -A limit-1720 -j TEE --gateway 10.0.0.2 -A limit-1720 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1721 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1722 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1723 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1724 -m limit --limit 12/minute -j ULOG -A limit-1724 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1725 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1726 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1726 -j ACCEPT -A limit-1728 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1728 -m limit --limit 1/second -j LOG -A limit-1728 -j ACCEPT -A limit-1729 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1729 -m limit --limit 1/second -j LOG -A limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-83 -A limit-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-1730 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1730 -j TEE --gateway 10.0.0.1 -A limit-1730 -j TEE --gateway 10.0.0.2 -A limit-1730 -j ACCEPT -A limit-1731 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1731 -j TEE --gateway 10.0.0.1 -A limit-1731 -j TEE --gateway 10.0.0.2 -A limit-1732 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1732 -j ACCEPT -A limit-1734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1734 -m limit --limit 12/minute -j ULOG -A limit-1734 -j ACCEPT -A limit-1735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1735 -m limit --limit 12/minute -j ULOG -A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1736 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1737 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1738 -m limit --limit 1/second -j LOG -A limit-1738 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1739 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-84 -A limit-174 -j TEE --gateway 10.0.0.1 -A limit-174 -j TEE --gateway 10.0.0.2 -A limit-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1740 -j TEE --gateway 10.0.0.1 -A limit-1740 -j TEE --gateway 10.0.0.2 -A limit-1740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1741 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1744 -m limit --limit 12/minute -j ULOG -A limit-1744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-1745 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1746 -j ACCEPT -A limit-1748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1748 -m limit --limit 1/second -j LOG -A limit-1748 -j ACCEPT -A limit-1749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1749 -m limit --limit 1/second -j LOG -A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-85 -A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1750 -j TEE --gateway 10.0.0.1 -A limit-1750 -j TEE --gateway 10.0.0.2 -A limit-1750 -j ACCEPT -A limit-1751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1751 -j TEE --gateway 10.0.0.1 -A limit-1751 -j TEE --gateway 10.0.0.2 -A limit-1752 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1752 -j ACCEPT -A limit-1754 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1754 -m limit --limit 12/minute -j ULOG -A limit-1754 -j ACCEPT -A limit-1755 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1755 -m limit --limit 12/minute -j ULOG -A limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1757 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1758 -m limit --limit 1/second -j LOG -A limit-1758 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1759 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-86 -A limit-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1760 -j TEE --gateway 10.0.0.1 -A limit-1760 -j TEE --gateway 10.0.0.2 -A limit-1760 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1761 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1762 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1763 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1764 -m limit --limit 12/minute -j ULOG -A limit-1764 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1765 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1766 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1766 -j ACCEPT -A limit-1768 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1768 -m limit --limit 1/second -j LOG -A limit-1768 -j ACCEPT -A limit-1769 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1769 -m limit --limit 1/second -j LOG -A limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-87 -A limit-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1770 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1770 -j TEE --gateway 10.0.0.1 -A limit-1770 -j TEE --gateway 10.0.0.2 -A limit-1770 -j ACCEPT -A limit-1771 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1771 -j TEE --gateway 10.0.0.1 -A limit-1771 -j TEE --gateway 10.0.0.2 -A limit-1772 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1772 -j ACCEPT -A limit-1774 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1774 -m limit --limit 12/minute -j ULOG -A limit-1774 -j ACCEPT -A limit-1775 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1775 -m limit --limit 12/minute -j ULOG -A limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1776 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1777 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1778 -m limit --limit 1/second -j LOG -A limit-1778 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1779 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-88 -A limit-178 -m limit --limit 12/minute -j ULOG -A limit-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1780 -j TEE --gateway 10.0.0.1 -A limit-1780 -j TEE --gateway 10.0.0.2 -A limit-1780 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1781 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1782 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1783 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1784 -m limit --limit 12/minute -j ULOG -A limit-1784 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-1785 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1786 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1786 -j ACCEPT -A limit-1788 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1788 -m limit --limit 1/second -j LOG -A limit-1788 -j ACCEPT -A limit-1789 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1789 -m limit --limit 1/second -j LOG -A limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-89 -A limit-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1790 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1790 -j TEE --gateway 10.0.0.1 -A limit-1790 -j TEE --gateway 10.0.0.2 -A limit-1790 -j ACCEPT -A limit-1791 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1791 -j TEE --gateway 10.0.0.1 -A limit-1791 -j TEE --gateway 10.0.0.2 -A limit-1792 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1792 -j ACCEPT -A limit-1794 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1794 -m limit --limit 12/minute -j ULOG -A limit-1794 -j ACCEPT -A limit-1795 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1795 -m limit --limit 12/minute -j ULOG -A limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1010 -A limit-1796 -m recent --name limit-1796 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1011 -A limit-1797 -m recent --name limit-1797 --rsource --mask 255.255.255.255 --set -A limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1012 -A limit-1798 -m limit --limit 1/second -j LOG -A limit-1798 -m recent --name limit-1798 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1013 -A limit-1799 -m recent --name limit-1799 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-18 -m limit --limit 12/minute -j ULOG -A limit-18 -m recent --name limit-18 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 -A limit-180 -j ACCEPT -A limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1014 -A limit-1800 -j TEE --gateway 10.0.0.1 -A limit-1800 -j TEE --gateway 10.0.0.2 -A limit-1800 -m recent --name limit-1800 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1015 -A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1801 -m recent --name limit-1801 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1016 -A limit-1802 -m recent --name limit-1802 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1017 -A limit-1803 -m recent --name limit-1803 --rsource --mask 255.255.255.255 --set -A limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1018 -A limit-1804 -m limit --limit 12/minute -j ULOG -A limit-1804 -m recent --name limit-1804 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1019 -A limit-1805 -m recent --name limit-1805 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1020 -A limit-1806 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1021 -A limit-1807 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1022 -A limit-1808 -m limit --limit 1/second -j LOG -A limit-1808 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1023 -A limit-1809 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-181 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-91 -A limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1024 -A limit-1810 -j TEE --gateway 10.0.0.1 -A limit-1810 -j TEE --gateway 10.0.0.2 -A limit-1810 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1025 -A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1811 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1026 -A limit-1812 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1027 -A limit-1813 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1028 -A limit-1814 -m limit --limit 12/minute -j ULOG -A limit-1814 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1029 -A limit-1815 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1816 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 -A limit-1816 -j ACCEPT -A limit-1818 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 -A limit-1818 -m limit --limit 1/second -j LOG -A limit-1818 -j ACCEPT -A limit-1819 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 -A limit-1819 -m limit --limit 1/second -j LOG -A limit-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-92 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT -A limit-1820 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 -A limit-1820 -j TEE --gateway 10.0.0.1 -A limit-1820 -j TEE --gateway 10.0.0.2 -A limit-1820 -j ACCEPT -A limit-1821 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 -A limit-1821 -j TEE --gateway 10.0.0.1 -A limit-1821 -j TEE --gateway 10.0.0.2 -A limit-1822 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 -A limit-1822 -j ACCEPT -A limit-1824 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 -A limit-1824 -m limit --limit 12/minute -j ULOG -A limit-1824 -j ACCEPT -A limit-1825 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 -A limit-1825 -m limit --limit 12/minute -j ULOG -A limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1040 -A limit-1826 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1041 -A limit-1827 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1042 -A limit-1828 -m limit --limit 1/second -j LOG -A limit-1828 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1043 -A limit-1829 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-93 -A limit-183 -m limit --limit 1/second -j LOG -A limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1044 -A limit-1830 -j TEE --gateway 10.0.0.1 -A limit-1830 -j TEE --gateway 10.0.0.2 -A limit-1830 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1045 -A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1831 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1046 -A limit-1832 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1047 -A limit-1833 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1048 -A limit-1834 -m limit --limit 12/minute -j ULOG -A limit-1834 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1049 -A limit-1835 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1836 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 -A limit-1836 -j ACCEPT -A limit-1838 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 -A limit-1838 -m limit --limit 1/second -j LOG -A limit-1838 -j ACCEPT -A limit-1839 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 -A limit-1839 -m limit --limit 1/second -j LOG -A limit-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-94 -A limit-184 -j TEE --gateway 10.0.0.1 -A limit-184 -j TEE --gateway 10.0.0.2 -A limit-184 -j ACCEPT -A limit-1840 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 -A limit-1840 -j TEE --gateway 10.0.0.1 -A limit-1840 -j TEE --gateway 10.0.0.2 -A limit-1840 -j ACCEPT -A limit-1841 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 -A limit-1841 -j TEE --gateway 10.0.0.1 -A limit-1841 -j TEE --gateway 10.0.0.2 -A limit-1842 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 -A limit-1842 -j ACCEPT -A limit-1844 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 -A limit-1844 -m limit --limit 12/minute -j ULOG -A limit-1844 -j ACCEPT -A limit-1845 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 -A limit-1845 -m limit --limit 12/minute -j ULOG -A limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1060 -A limit-1846 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1061 -A limit-1847 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1062 -A limit-1848 -m limit --limit 1/second -j LOG -A limit-1848 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1063 -A limit-1849 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-95 -A limit-185 -j TEE --gateway 10.0.0.1 -A limit-185 -j TEE --gateway 10.0.0.2 -A limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1064 -A limit-1850 -j TEE --gateway 10.0.0.1 -A limit-1850 -j TEE --gateway 10.0.0.2 -A limit-1850 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1065 -A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1851 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1066 -A limit-1852 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1067 -A limit-1853 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1068 -A limit-1854 -m limit --limit 12/minute -j ULOG -A limit-1854 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1069 -A limit-1855 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1856 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 -A limit-1856 -j ACCEPT -A limit-1858 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 -A limit-1858 -m limit --limit 1/second -j LOG -A limit-1858 -j ACCEPT -A limit-1859 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 -A limit-1859 -m limit --limit 1/second -j LOG -A limit-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-96 -A limit-186 -j ACCEPT -A limit-1860 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 -A limit-1860 -j TEE --gateway 10.0.0.1 -A limit-1860 -j TEE --gateway 10.0.0.2 -A limit-1860 -j ACCEPT -A limit-1861 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 -A limit-1861 -j TEE --gateway 10.0.0.1 -A limit-1861 -j TEE --gateway 10.0.0.2 -A limit-1862 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 -A limit-1862 -j ACCEPT -A limit-1864 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 -A limit-1864 -m limit --limit 12/minute -j ULOG -A limit-1864 -j ACCEPT -A limit-1865 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 -A limit-1865 -m limit --limit 12/minute -j ULOG -A limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1080 -A limit-1866 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1081 -A limit-1867 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1082 -A limit-1868 -m limit --limit 1/second -j LOG -A limit-1868 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1083 -A limit-1869 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-187 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 -A limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1084 -A limit-1870 -j TEE --gateway 10.0.0.1 -A limit-1870 -j TEE --gateway 10.0.0.2 -A limit-1870 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1085 -A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-1871 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1086 -A limit-1872 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1087 -A limit-1873 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1088 -A limit-1874 -m limit --limit 12/minute -j ULOG -A limit-1874 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1089 -A limit-1875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-1876 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 -A limit-1876 -j ACCEPT -A limit-1878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 -A limit-1878 -m limit --limit 1/second -j LOG -A limit-1878 -j ACCEPT -A limit-1879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 -A limit-1879 -m limit --limit 1/second -j LOG -A limit-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 -A limit-188 -m limit --limit 12/minute -j ULOG -A limit-188 -j ACCEPT -A limit-1880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 -A limit-1880 -j TEE --gateway 10.0.0.1 -A limit-1880 -j TEE --gateway 10.0.0.2 -A limit-1880 -j ACCEPT -A limit-1881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 -A limit-1881 -j TEE --gateway 10.0.0.1 -A limit-1881 -j TEE --gateway 10.0.0.2 -A limit-1882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 -A limit-1882 -j ACCEPT -A limit-1884 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 -A limit-1884 -m limit --limit 12/minute -j ULOG -A limit-1884 -j ACCEPT -A limit-1885 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 -A limit-1885 -m limit --limit 12/minute -j ULOG -A limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1886 -j ACCEPT -A limit-1886 -m limit --limit 1/second -j LOG -A limit-1886 -j DROP -A limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1887 -j RETURN -A limit-1887 -m limit --limit 1/second -j LOG -A limit-1887 -j DROP -A limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1888 -j logaccept-33 -A limit-1888 -m limit --limit 1/second -j LOG -A limit-1888 -j DROP -A limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1889 -j logaccept-34 -A limit-1889 -m limit --limit 1/second -j LOG -A limit-1889 -j DROP -A limit-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 -A limit-189 -m limit --limit 12/minute -j ULOG -A limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1890 -j ACCEPT -A limit-1890 -m limit --limit 1/second -j LOG -A limit-1890 -j DROP -A limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1891 -j logaccept-35 -A limit-1891 -m limit --limit 1/second -j LOG -A limit-1891 -j DROP -A limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1892 -j ACCEPT -A limit-1892 -j DROP -A limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1893 -j RETURN -A limit-1893 -j DROP -A limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1894 -j logaccept-36 -A limit-1894 -j DROP -A limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1895 -j logaccept-37 -A limit-1895 -j DROP -A limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1896 -j ACCEPT -A limit-1896 -j DROP -A limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1897 -j logaccept-38 -A limit-1897 -j DROP -A limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1898 -j ACCEPT -A limit-1898 -m limit --limit 1/second -j LOG -A limit-1898 -j DROP -A limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1899 -j RETURN -A limit-1899 -m limit --limit 1/second -j LOG -A limit-1899 -j DROP -A limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-19 -m recent --name limit-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-100 -A limit-190 -m recent --name limit-190 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1900 -j logaccept-39 -A limit-1900 -m limit --limit 1/second -j LOG -A limit-1900 -j DROP -A limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1901 -j logaccept-40 -A limit-1901 -m limit --limit 1/second -j LOG -A limit-1901 -j DROP -A limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1902 -j ACCEPT -A limit-1902 -m limit --limit 1/second -j LOG -A limit-1902 -j DROP -A limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1903 -j logaccept-41 -A limit-1903 -m limit --limit 1/second -j LOG -A limit-1903 -j DROP -A limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1904 -j ACCEPT -A limit-1904 -j TEE --gateway 10.0.0.1 -A limit-1904 -j TEE --gateway 10.0.0.2 -A limit-1904 -j DROP -A limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1905 -j RETURN -A limit-1905 -j TEE --gateway 10.0.0.1 -A limit-1905 -j TEE --gateway 10.0.0.2 -A limit-1905 -j DROP -A limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1906 -j logaccept-42 -A limit-1906 -j TEE --gateway 10.0.0.1 -A limit-1906 -j TEE --gateway 10.0.0.2 -A limit-1906 -j DROP -A limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1907 -j logaccept-43 -A limit-1907 -j TEE --gateway 10.0.0.1 -A limit-1907 -j TEE --gateway 10.0.0.2 -A limit-1907 -j DROP -A limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1908 -j ACCEPT -A limit-1908 -j TEE --gateway 10.0.0.1 -A limit-1908 -j TEE --gateway 10.0.0.2 -A limit-1908 -j DROP -A limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1909 -j logaccept-44 -A limit-1909 -j TEE --gateway 10.0.0.1 -A limit-1909 -j TEE --gateway 10.0.0.2 -A limit-1909 -j DROP -A limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-101 -A limit-191 -m recent --name limit-191 --rsource --mask 255.255.255.255 --set -A limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1910 -j ACCEPT -A limit-1910 -j DROP -A limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1911 -j RETURN -A limit-1911 -j DROP -A limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1912 -j logaccept-45 -A limit-1912 -j DROP -A limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1913 -j logaccept-46 -A limit-1913 -j DROP -A limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1914 -j ACCEPT -A limit-1914 -j DROP -A limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1915 -j logaccept-47 -A limit-1915 -j DROP -A limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1916 -j ACCEPT -A limit-1916 -m limit --limit 12/minute -j ULOG -A limit-1916 -j DROP -A limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1917 -j RETURN -A limit-1917 -m limit --limit 12/minute -j ULOG -A limit-1917 -j DROP -A limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1918 -j logaccept-48 -A limit-1918 -m limit --limit 12/minute -j ULOG -A limit-1918 -j DROP -A limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1919 -j logaccept-49 -A limit-1919 -m limit --limit 12/minute -j ULOG -A limit-1919 -j DROP -A limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-102 -A limit-192 -m limit --limit 1/second -j LOG -A limit-192 -m recent --name limit-192 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1920 -j ACCEPT -A limit-1920 -m limit --limit 12/minute -j ULOG -A limit-1920 -j DROP -A limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1921 -j logaccept-50 -A limit-1921 -m limit --limit 12/minute -j ULOG -A limit-1921 -j DROP -A limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1922 -j ACCEPT -A limit-1922 -j DROP -A limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1923 -j RETURN -A limit-1923 -j DROP -A limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1924 -j logaccept-51 -A limit-1924 -j DROP -A limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1925 -j logaccept-52 -A limit-1925 -j DROP -A limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1926 -j ACCEPT -A limit-1926 -j DROP -A limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1927 -j logaccept-53 -A limit-1927 -j DROP -A limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1928 -j ACCEPT -A limit-1928 -m limit --limit 1/second -j LOG -A limit-1928 -j DROP -A limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1929 -j RETURN -A limit-1929 -m limit --limit 1/second -j LOG -A limit-1929 -j DROP -A limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-103 -A limit-193 -m recent --name limit-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1930 -j logaccept-54 -A limit-1930 -m limit --limit 1/second -j LOG -A limit-1930 -j DROP -A limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1931 -j logaccept-55 -A limit-1931 -m limit --limit 1/second -j LOG -A limit-1931 -j DROP -A limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1932 -j ACCEPT -A limit-1932 -m limit --limit 1/second -j LOG -A limit-1932 -j DROP -A limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1933 -j logaccept-56 -A limit-1933 -m limit --limit 1/second -j LOG -A limit-1933 -j DROP -A limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1934 -j ACCEPT -A limit-1934 -j TEE --gateway 10.0.0.1 -A limit-1934 -j TEE --gateway 10.0.0.2 -A limit-1934 -j DROP -A limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1935 -j RETURN -A limit-1935 -j TEE --gateway 10.0.0.1 -A limit-1935 -j TEE --gateway 10.0.0.2 -A limit-1935 -j DROP -A limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1936 -j logaccept-57 -A limit-1936 -j TEE --gateway 10.0.0.1 -A limit-1936 -j TEE --gateway 10.0.0.2 -A limit-1936 -j DROP -A limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1937 -j logaccept-58 -A limit-1937 -j TEE --gateway 10.0.0.1 -A limit-1937 -j TEE --gateway 10.0.0.2 -A limit-1937 -j DROP -A limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1938 -j ACCEPT -A limit-1938 -j TEE --gateway 10.0.0.1 -A limit-1938 -j TEE --gateway 10.0.0.2 -A limit-1938 -j DROP -A limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1939 -j logaccept-59 -A limit-1939 -j TEE --gateway 10.0.0.1 -A limit-1939 -j TEE --gateway 10.0.0.2 -A limit-1939 -j DROP -A limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-104 -A limit-194 -j TEE --gateway 10.0.0.1 -A limit-194 -j TEE --gateway 10.0.0.2 -A limit-194 -m recent --name limit-194 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1940 -j ACCEPT -A limit-1940 -j DROP -A limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1941 -j RETURN -A limit-1941 -j DROP -A limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1942 -j logaccept-60 -A limit-1942 -j DROP -A limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1943 -j logaccept-61 -A limit-1943 -j DROP -A limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1944 -j ACCEPT -A limit-1944 -j DROP -A limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1945 -j logaccept-62 -A limit-1945 -j DROP -A limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1946 -j ACCEPT -A limit-1946 -m limit --limit 12/minute -j ULOG -A limit-1946 -j DROP -A limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1947 -j RETURN -A limit-1947 -m limit --limit 12/minute -j ULOG -A limit-1947 -j DROP -A limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1948 -j logaccept-63 -A limit-1948 -m limit --limit 12/minute -j ULOG -A limit-1948 -j DROP -A limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1949 -j logaccept-64 -A limit-1949 -m limit --limit 12/minute -j ULOG -A limit-1949 -j DROP -A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-105 -A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-195 -m recent --name limit-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1950 -j ACCEPT -A limit-1950 -m limit --limit 12/minute -j ULOG -A limit-1950 -j DROP -A limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1951 -j logaccept-65 -A limit-1951 -m limit --limit 12/minute -j ULOG -A limit-1951 -j DROP -A limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1100 -A limit-1952 -m recent --name limit-1952 --rsource --mask 255.255.255.255 --set -A limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1101 -A limit-1953 -m recent --name limit-1953 --rsource --mask 255.255.255.255 --set -A limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1102 -A limit-1954 -m recent --name limit-1954 --rsource --mask 255.255.255.255 --set -A limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1103 -A limit-1955 -m recent --name limit-1955 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1104 -A limit-1956 -m recent --name limit-1956 --rsource --mask 255.255.255.255 --set -A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1105 -A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1957 -m recent --name limit-1957 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1106 -A limit-1958 -m recent --name limit-1958 --rsource --mask 255.255.255.255 --set -A limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1107 -A limit-1959 -m recent --name limit-1959 --rsource --mask 255.255.255.255 --set -A limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-106 -A limit-196 -m recent --name limit-196 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1108 -A limit-1960 -m recent --name limit-1960 --rsource --mask 255.255.255.255 --set -A limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1109 -A limit-1961 -m recent --name limit-1961 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1962 -m recent --name limit-1962 --rsource --mask 255.255.255.255 --set -A limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1963 -m recent --name limit-1963 --rsource --mask 255.255.255.255 --set -A limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1964 -m recent --name limit-1964 --rsource --mask 255.255.255.255 --set -A limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1965 -m recent --name limit-1965 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1966 -m recent --name limit-1966 --rsource --mask 255.255.255.255 --set -A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1967 -m recent --name limit-1967 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1968 -m recent --name limit-1968 --rsource --mask 255.255.255.255 --set -A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1969 -m recent --name limit-1969 --rsource --mask 255.255.255.255 --set -A limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-107 -A limit-197 -m recent --name limit-197 --rsource --mask 255.255.255.255 --set -A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1970 -m recent --name limit-1970 --rsource --mask 255.255.255.255 --set -A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1971 -m recent --name limit-1971 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1972 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1973 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1974 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1975 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1976 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1977 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1978 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1979 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-108 -A limit-198 -m limit --limit 12/minute -j ULOG -A limit-198 -m recent --name limit-198 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1980 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1981 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1982 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1983 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1984 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1985 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1985 -m limit --limit 1/second -j LOG -A limit-1986 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1987 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1987 -j TEE --gateway 10.0.0.1 -A limit-1987 -j TEE --gateway 10.0.0.2 -A limit-1988 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1989 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-109 -A limit-199 -m recent --name limit-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-1990 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1991 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1991 -m limit --limit 12/minute -j ULOG -A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1992 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1993 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1994 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1995 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1996 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-1997 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1998 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-1999 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-110 -A limit-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2000 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2001 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2002 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2003 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2004 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2005 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2005 -m limit --limit 1/second -j LOG -A limit-2006 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2007 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2007 -j TEE --gateway 10.0.0.1 -A limit-2007 -j TEE --gateway 10.0.0.2 -A limit-2008 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2009 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-111 -A limit-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2010 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2011 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2011 -m limit --limit 12/minute -j ULOG -A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2012 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2013 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2014 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2015 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2016 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2017 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2018 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2019 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-112 -A limit-202 -m limit --limit 1/second -j LOG -A limit-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2020 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2021 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2022 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2023 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2024 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2025 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2025 -m limit --limit 1/second -j LOG -A limit-2026 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2027 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2027 -j TEE --gateway 10.0.0.1 -A limit-2027 -j TEE --gateway 10.0.0.2 -A limit-2028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-113 -A limit-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2031 -m limit --limit 12/minute -j ULOG -A limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2032 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2033 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2034 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2035 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2036 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2038 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2039 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-114 -A limit-204 -j TEE --gateway 10.0.0.1 -A limit-204 -j TEE --gateway 10.0.0.2 -A limit-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2040 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2041 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2045 -m limit --limit 1/second -j LOG -A limit-2046 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2047 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2047 -j TEE --gateway 10.0.0.1 -A limit-2047 -j TEE --gateway 10.0.0.2 -A limit-2048 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2049 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 -A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2050 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2051 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2051 -m limit --limit 12/minute -j ULOG -A limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1110 -A limit-2052 -m recent --name limit-2052 --rsource --mask 255.255.255.255 --set -A limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1111 -A limit-2053 -m recent --name limit-2053 --rsource --mask 255.255.255.255 --set -A limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1112 -A limit-2054 -m recent --name limit-2054 --rsource --mask 255.255.255.255 --set -A limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1113 -A limit-2055 -m recent --name limit-2055 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1114 -A limit-2056 -m recent --name limit-2056 --rsource --mask 255.255.255.255 --set -A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1115 -A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2057 -m recent --name limit-2057 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1116 -A limit-2058 -m recent --name limit-2058 --rsource --mask 255.255.255.255 --set -A limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1117 -A limit-2059 -m recent --name limit-2059 --rsource --mask 255.255.255.255 --set -A limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 -A limit-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1118 -A limit-2060 -m recent --name limit-2060 --rsource --mask 255.255.255.255 --set -A limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1119 -A limit-2061 -m recent --name limit-2061 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1120 -A limit-2062 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1121 -A limit-2063 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1122 -A limit-2064 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1123 -A limit-2065 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1124 -A limit-2066 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1125 -A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2067 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1126 -A limit-2068 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1127 -A limit-2069 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 -A limit-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1128 -A limit-2070 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1129 -A limit-2071 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2072 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 -A limit-2073 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 -A limit-2074 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 -A limit-2075 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 -A limit-2075 -m limit --limit 1/second -j LOG -A limit-2076 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 -A limit-2077 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 -A limit-2077 -j TEE --gateway 10.0.0.1 -A limit-2077 -j TEE --gateway 10.0.0.2 -A limit-2078 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 -A limit-2079 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 -A limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 -A limit-208 -m limit --limit 12/minute -j ULOG -A limit-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2080 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 -A limit-2081 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 -A limit-2081 -m limit --limit 12/minute -j ULOG -A limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1140 -A limit-2082 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1141 -A limit-2083 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1142 -A limit-2084 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1143 -A limit-2085 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1144 -A limit-2086 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1145 -A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2087 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1146 -A limit-2088 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1147 -A limit-2089 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 -A limit-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1148 -A limit-2090 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1149 -A limit-2091 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2092 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 -A limit-2093 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 -A limit-2094 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 -A limit-2095 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 -A limit-2095 -m limit --limit 1/second -j LOG -A limit-2096 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 -A limit-2097 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 -A limit-2097 -j TEE --gateway 10.0.0.1 -A limit-2097 -j TEE --gateway 10.0.0.2 -A limit-2098 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 -A limit-2099 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 -A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-120 -A limit-210 -j ACCEPT -A limit-2100 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 -A limit-2101 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 -A limit-2101 -m limit --limit 12/minute -j ULOG -A limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1160 -A limit-2102 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1161 -A limit-2103 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1162 -A limit-2104 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1163 -A limit-2105 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1164 -A limit-2106 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1165 -A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2107 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1166 -A limit-2108 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1167 -A limit-2109 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-211 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-121 -A limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1168 -A limit-2110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1169 -A limit-2111 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2112 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 -A limit-2113 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 -A limit-2114 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 -A limit-2115 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 -A limit-2115 -m limit --limit 1/second -j LOG -A limit-2116 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 -A limit-2117 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 -A limit-2117 -j TEE --gateway 10.0.0.1 -A limit-2117 -j TEE --gateway 10.0.0.2 -A limit-2118 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 -A limit-2119 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 -A limit-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-122 -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -j ACCEPT -A limit-2120 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 -A limit-2121 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 -A limit-2121 -m limit --limit 12/minute -j ULOG -A limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1180 -A limit-2122 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1181 -A limit-2123 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1182 -A limit-2124 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1183 -A limit-2125 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1184 -A limit-2126 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1185 -A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2127 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1186 -A limit-2128 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1187 -A limit-2129 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-123 -A limit-213 -m limit --limit 1/second -j LOG -A limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1188 -A limit-2130 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1189 -A limit-2131 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2132 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 -A limit-2133 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 -A limit-2134 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 -A limit-2135 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 -A limit-2135 -m limit --limit 1/second -j LOG -A limit-2136 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 -A limit-2137 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 -A limit-2137 -j TEE --gateway 10.0.0.1 -A limit-2137 -j TEE --gateway 10.0.0.2 -A limit-2138 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 -A limit-2139 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 -A limit-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-124 -A limit-214 -j TEE --gateway 10.0.0.1 -A limit-214 -j TEE --gateway 10.0.0.2 -A limit-214 -j ACCEPT -A limit-2140 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 -A limit-2141 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 -A limit-2141 -m limit --limit 12/minute -j ULOG -A limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1200 -A limit-2142 -m recent --name limit-2142 --rsource --mask 255.255.255.255 --set -A limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1201 -A limit-2143 -m recent --name limit-2143 --rsource --mask 255.255.255.255 --set -A limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1202 -A limit-2144 -m recent --name limit-2144 --rsource --mask 255.255.255.255 --set -A limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1203 -A limit-2145 -m recent --name limit-2145 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1204 -A limit-2146 -m recent --name limit-2146 --rsource --mask 255.255.255.255 --set -A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1205 -A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2147 -m recent --name limit-2147 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1206 -A limit-2148 -m recent --name limit-2148 --rsource --mask 255.255.255.255 --set -A limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1207 -A limit-2149 -m recent --name limit-2149 --rsource --mask 255.255.255.255 --set -A limit-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-125 -A limit-215 -j TEE --gateway 10.0.0.1 -A limit-215 -j TEE --gateway 10.0.0.2 -A limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1208 -A limit-2150 -m recent --name limit-2150 --rsource --mask 255.255.255.255 --set -A limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1209 -A limit-2151 -m recent --name limit-2151 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1210 -A limit-2152 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1211 -A limit-2153 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1212 -A limit-2154 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1213 -A limit-2155 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1214 -A limit-2156 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1215 -A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2157 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1216 -A limit-2158 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1217 -A limit-2159 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-126 -A limit-216 -j ACCEPT -A limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1218 -A limit-2160 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1219 -A limit-2161 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2162 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 -A limit-2163 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 -A limit-2164 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 -A limit-2165 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 -A limit-2165 -m limit --limit 1/second -j LOG -A limit-2166 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 -A limit-2167 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 -A limit-2167 -j TEE --gateway 10.0.0.1 -A limit-2167 -j TEE --gateway 10.0.0.2 -A limit-2168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 -A limit-2169 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 -A limit-217 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-127 -A limit-2170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 -A limit-2171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 -A limit-2171 -m limit --limit 12/minute -j ULOG -A limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1230 -A limit-2172 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1231 -A limit-2173 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1232 -A limit-2174 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1233 -A limit-2175 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1234 -A limit-2176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1235 -A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1236 -A limit-2178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1237 -A limit-2179 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-128 -A limit-218 -m limit --limit 12/minute -j ULOG -A limit-218 -j ACCEPT -A limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1238 -A limit-2180 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1239 -A limit-2181 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 -A limit-2183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 -A limit-2184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 -A limit-2185 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 -A limit-2185 -m limit --limit 1/second -j LOG -A limit-2186 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 -A limit-2187 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 -A limit-2187 -j TEE --gateway 10.0.0.1 -A limit-2187 -j TEE --gateway 10.0.0.2 -A limit-2188 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 -A limit-2189 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 -A limit-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-129 -A limit-219 -m limit --limit 12/minute -j ULOG -A limit-2190 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 -A limit-2191 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 -A limit-2191 -m limit --limit 12/minute -j ULOG -A limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1250 -A limit-2192 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1251 -A limit-2193 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1252 -A limit-2194 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1253 -A limit-2195 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1254 -A limit-2196 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1255 -A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2197 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1256 -A limit-2198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1257 -A limit-2199 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-22 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 -A limit-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1258 -A limit-2200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1259 -A limit-2201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2202 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 -A limit-2203 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 -A limit-2204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 -A limit-2205 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 -A limit-2205 -m limit --limit 1/second -j LOG -A limit-2206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 -A limit-2207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 -A limit-2207 -j TEE --gateway 10.0.0.1 -A limit-2207 -j TEE --gateway 10.0.0.2 -A limit-2208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 -A limit-2209 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 -A limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 -A limit-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2210 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 -A limit-2211 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 -A limit-2211 -m limit --limit 12/minute -j ULOG -A limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1270 -A limit-2212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1271 -A limit-2213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1272 -A limit-2214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1273 -A limit-2215 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1274 -A limit-2216 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1275 -A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2217 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1276 -A limit-2218 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1277 -A limit-2219 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 -A limit-222 -m limit --limit 1/second -j LOG -A limit-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1278 -A limit-2220 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1279 -A limit-2221 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2222 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 -A limit-2223 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 -A limit-2224 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 -A limit-2225 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 -A limit-2225 -m limit --limit 1/second -j LOG -A limit-2226 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 -A limit-2227 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 -A limit-2227 -j TEE --gateway 10.0.0.1 -A limit-2227 -j TEE --gateway 10.0.0.2 -A limit-2228 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 -A limit-2229 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 -A limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-133 -A limit-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2230 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 -A limit-2231 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 -A limit-2231 -m limit --limit 12/minute -j ULOG -A limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2232 -m recent --name limit-2232 --rsource --mask 255.255.255.255 --set -A limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2233 -m recent --name limit-2233 --rsource --mask 255.255.255.255 --set -A limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2234 -m recent --name limit-2234 --rsource --mask 255.255.255.255 --set -A limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2235 -m recent --name limit-2235 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2236 -m recent --name limit-2236 --rsource --mask 255.255.255.255 --set -A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2237 -m recent --name limit-2237 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2238 -m recent --name limit-2238 --rsource --mask 255.255.255.255 --set -A limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2239 -m recent --name limit-2239 --rsource --mask 255.255.255.255 --set -A limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-134 -A limit-224 -j TEE --gateway 10.0.0.1 -A limit-224 -j TEE --gateway 10.0.0.2 -A limit-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2240 -m recent --name limit-2240 --rsource --mask 255.255.255.255 --set -A limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2241 -m recent --name limit-2241 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2242 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2243 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2244 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2245 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2246 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2247 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2248 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2249 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-135 -A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2250 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2251 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2252 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2253 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2254 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2255 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2255 -m limit --limit 1/second -j LOG -A limit-2256 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2257 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2257 -j TEE --gateway 10.0.0.1 -A limit-2257 -j TEE --gateway 10.0.0.2 -A limit-2258 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2259 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-136 -A limit-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-2260 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2261 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2261 -m limit --limit 12/minute -j ULOG -A limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2262 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2263 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2264 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2265 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2266 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2267 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2268 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2269 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-137 -A limit-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2270 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-2271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2272 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2273 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2275 -m limit --limit 1/second -j LOG -A limit-2276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2277 -j TEE --gateway 10.0.0.1 -A limit-2277 -j TEE --gateway 10.0.0.2 -A limit-2278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-138 -A limit-228 -m limit --limit 12/minute -j ULOG -A limit-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-2280 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2281 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2281 -m limit --limit 12/minute -j ULOG -A limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2282 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2283 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2284 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2285 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2286 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2287 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2288 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2289 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 -A limit-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2290 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2291 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2292 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2293 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2294 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2295 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2295 -m limit --limit 1/second -j LOG -A limit-2296 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2297 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2297 -j TEE --gateway 10.0.0.1 -A limit-2297 -j TEE --gateway 10.0.0.2 -A limit-2298 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2299 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-140 -A limit-230 -j ACCEPT -A limit-2300 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2301 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2301 -m limit --limit 12/minute -j ULOG -A limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2302 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2303 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2304 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2305 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2306 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2307 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2308 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2309 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-231 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-141 -A limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2310 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-2311 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2312 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2313 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2314 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2315 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2315 -m limit --limit 1/second -j LOG -A limit-2316 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2317 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2317 -j TEE --gateway 10.0.0.1 -A limit-2317 -j TEE --gateway 10.0.0.2 -A limit-2318 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2319 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-142 -A limit-232 -m limit --limit 1/second -j LOG -A limit-232 -j ACCEPT -A limit-2320 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2321 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2321 -m limit --limit 12/minute -j ULOG -A limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1290 -A limit-2322 -m recent --name limit-2322 --rsource --mask 255.255.255.255 --set -A limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1291 -A limit-2323 -m recent --name limit-2323 --rsource --mask 255.255.255.255 --set -A limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1292 -A limit-2324 -m recent --name limit-2324 --rsource --mask 255.255.255.255 --set -A limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1293 -A limit-2325 -m recent --name limit-2325 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1294 -A limit-2326 -m recent --name limit-2326 --rsource --mask 255.255.255.255 --set -A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1295 -A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2327 -m recent --name limit-2327 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1296 -A limit-2328 -m recent --name limit-2328 --rsource --mask 255.255.255.255 --set -A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1297 -A limit-2329 -m recent --name limit-2329 --rsource --mask 255.255.255.255 --set -A limit-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-143 -A limit-233 -m limit --limit 1/second -j LOG -A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1298 -A limit-2330 -m recent --name limit-2330 --rsource --mask 255.255.255.255 --set -A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1299 -A limit-2331 -m recent --name limit-2331 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1300 -A limit-2332 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1301 -A limit-2333 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1302 -A limit-2334 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1303 -A limit-2335 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1304 -A limit-2336 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1305 -A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2337 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1306 -A limit-2338 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1307 -A limit-2339 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-144 -A limit-234 -j TEE --gateway 10.0.0.1 -A limit-234 -j TEE --gateway 10.0.0.2 -A limit-234 -j ACCEPT -A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1308 -A limit-2340 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1309 -A limit-2341 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2342 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 -A limit-2343 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 -A limit-2344 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 -A limit-2345 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 -A limit-2345 -m limit --limit 1/second -j LOG -A limit-2346 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 -A limit-2347 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 -A limit-2347 -j TEE --gateway 10.0.0.1 -A limit-2347 -j TEE --gateway 10.0.0.2 -A limit-2348 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 -A limit-2349 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 -A limit-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 -A limit-235 -j TEE --gateway 10.0.0.1 -A limit-235 -j TEE --gateway 10.0.0.2 -A limit-2350 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 -A limit-2351 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 -A limit-2351 -m limit --limit 12/minute -j ULOG -A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1320 -A limit-2352 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1321 -A limit-2353 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1322 -A limit-2354 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1323 -A limit-2355 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1324 -A limit-2356 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1325 -A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2357 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1326 -A limit-2358 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1327 -A limit-2359 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 -A limit-236 -j ACCEPT -A limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1328 -A limit-2360 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-1329 -A limit-2361 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2362 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 -A limit-2363 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 -A limit-2364 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 -A limit-2365 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 -A limit-2365 -m limit --limit 1/second -j LOG -A limit-2366 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 -A limit-2367 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 -A limit-2367 -j TEE --gateway 10.0.0.1 -A limit-2367 -j TEE --gateway 10.0.0.2 -A limit-2368 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 -A limit-2369 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 -A limit-237 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 -A limit-2370 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 -A limit-2371 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 -A limit-2371 -m limit --limit 12/minute -j ULOG -A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1340 -A limit-2372 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1341 -A limit-2373 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1342 -A limit-2374 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1343 -A limit-2375 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1344 -A limit-2376 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1345 -A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2377 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1346 -A limit-2378 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1347 -A limit-2379 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-238 -m limit --limit 12/minute -j ULOG -A limit-238 -j ACCEPT -A limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1348 -A limit-2380 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1349 -A limit-2381 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2382 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 -A limit-2383 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 -A limit-2384 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 -A limit-2385 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 -A limit-2385 -m limit --limit 1/second -j LOG -A limit-2386 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 -A limit-2387 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 -A limit-2387 -j TEE --gateway 10.0.0.1 -A limit-2387 -j TEE --gateway 10.0.0.2 -A limit-2388 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 -A limit-2389 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 -A limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 -A limit-239 -m limit --limit 12/minute -j ULOG -A limit-2390 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 -A limit-2391 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 -A limit-2391 -m limit --limit 12/minute -j ULOG -A limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1360 -A limit-2392 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1361 -A limit-2393 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1362 -A limit-2394 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1363 -A limit-2395 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1364 -A limit-2396 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1365 -A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2397 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1366 -A limit-2398 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1367 -A limit-2399 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-24 -j TEE --gateway 10.0.0.1 -A limit-24 -j TEE --gateway 10.0.0.2 -A limit-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-150 -A limit-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1368 -A limit-2400 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-1369 -A limit-2401 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2402 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 -A limit-2403 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 -A limit-2404 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 -A limit-2405 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 -A limit-2405 -m limit --limit 1/second -j LOG -A limit-2406 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 -A limit-2407 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 -A limit-2407 -j TEE --gateway 10.0.0.1 -A limit-2407 -j TEE --gateway 10.0.0.2 -A limit-2408 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 -A limit-2409 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 -A limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 -A limit-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2410 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 -A limit-2411 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 -A limit-2411 -m limit --limit 12/minute -j ULOG -A limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2412 -m recent --name limit-2412 --rsource --mask 255.255.255.255 --set -A limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2413 -m recent --name limit-2413 --rsource --mask 255.255.255.255 --set -A limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2414 -m recent --name limit-2414 --rsource --mask 255.255.255.255 --set -A limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2415 -m recent --name limit-2415 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2416 -m recent --name limit-2416 --rsource --mask 255.255.255.255 --set -A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2417 -m recent --name limit-2417 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2418 -m recent --name limit-2418 --rsource --mask 255.255.255.255 --set -A limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2419 -m recent --name limit-2419 --rsource --mask 255.255.255.255 --set -A limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-242 -m limit --limit 1/second -j LOG -A limit-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2420 -m recent --name limit-2420 --rsource --mask 255.255.255.255 --set -A limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2421 -m recent --name limit-2421 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2422 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2423 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2425 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2429 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 -A limit-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2430 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2431 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2435 -m limit --limit 1/second -j LOG -A limit-2436 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2437 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2437 -j TEE --gateway 10.0.0.1 -A limit-2437 -j TEE --gateway 10.0.0.2 -A limit-2438 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2439 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 -A limit-244 -j TEE --gateway 10.0.0.1 -A limit-244 -j TEE --gateway 10.0.0.2 -A limit-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-2440 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2441 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2441 -m limit --limit 12/minute -j ULOG -A limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2442 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2443 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2444 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2445 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2446 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2447 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2448 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2449 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 -A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2450 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2451 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2452 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2453 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2454 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2455 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2455 -m limit --limit 1/second -j LOG -A limit-2456 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2457 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2457 -j TEE --gateway 10.0.0.1 -A limit-2457 -j TEE --gateway 10.0.0.2 -A limit-2458 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2459 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 -A limit-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-2460 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2461 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2461 -m limit --limit 12/minute -j ULOG -A limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2462 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2463 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2464 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2465 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2466 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2467 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2468 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2469 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-157 -A limit-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2470 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2471 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2472 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2473 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2474 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m limit --limit 1/second -j LOG -A limit-2476 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2477 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2477 -j TEE --gateway 10.0.0.1 -A limit-2477 -j TEE --gateway 10.0.0.2 -A limit-2478 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2479 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-158 -A limit-248 -m limit --limit 12/minute -j ULOG -A limit-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-2480 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2481 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2481 -m limit --limit 12/minute -j ULOG -A limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2482 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2483 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2484 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2485 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2486 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2487 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2488 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2489 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-159 -A limit-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2490 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2491 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2492 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2493 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2494 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2495 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2495 -m limit --limit 1/second -j LOG -A limit-2496 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2497 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2497 -j TEE --gateway 10.0.0.1 -A limit-2497 -j TEE --gateway 10.0.0.2 -A limit-2498 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2499 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-250 -j ACCEPT -A limit-2500 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2501 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2501 -m limit --limit 12/minute -j ULOG -A limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1380 -A limit-2502 -m recent --name limit-2502 --rsource --mask 255.255.255.255 --set -A limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1381 -A limit-2503 -m recent --name limit-2503 --rsource --mask 255.255.255.255 --set -A limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1382 -A limit-2504 -m recent --name limit-2504 --rsource --mask 255.255.255.255 --set -A limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1383 -A limit-2505 -m recent --name limit-2505 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1384 -A limit-2506 -m recent --name limit-2506 --rsource --mask 255.255.255.255 --set -A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1385 -A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2507 -m recent --name limit-2507 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1386 -A limit-2508 -m recent --name limit-2508 --rsource --mask 255.255.255.255 --set -A limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1387 -A limit-2509 -m recent --name limit-2509 --rsource --mask 255.255.255.255 --set -A limit-251 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 -A limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1388 -A limit-2510 -m recent --name limit-2510 --rsource --mask 255.255.255.255 --set -A limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1389 -A limit-2511 -m recent --name limit-2511 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1390 -A limit-2512 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1391 -A limit-2513 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1392 -A limit-2514 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1393 -A limit-2515 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1394 -A limit-2516 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1395 -A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2517 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1396 -A limit-2518 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1397 -A limit-2519 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 -A limit-252 -m limit --limit 1/second -j LOG -A limit-252 -j ACCEPT -A limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1398 -A limit-2520 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1399 -A limit-2521 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2522 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 -A limit-2523 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 -A limit-2524 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 -A limit-2525 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 -A limit-2525 -m limit --limit 1/second -j LOG -A limit-2526 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 -A limit-2527 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 -A limit-2527 -j TEE --gateway 10.0.0.1 -A limit-2527 -j TEE --gateway 10.0.0.2 -A limit-2528 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 -A limit-2529 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 -A limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-163 -A limit-253 -m limit --limit 1/second -j LOG -A limit-2530 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 -A limit-2531 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 -A limit-2531 -m limit --limit 12/minute -j ULOG -A limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1410 -A limit-2532 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1411 -A limit-2533 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1412 -A limit-2534 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1413 -A limit-2535 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1414 -A limit-2536 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1415 -A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2537 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1416 -A limit-2538 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1417 -A limit-2539 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-164 -A limit-254 -j TEE --gateway 10.0.0.1 -A limit-254 -j TEE --gateway 10.0.0.2 -A limit-254 -j ACCEPT -A limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1418 -A limit-2540 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1419 -A limit-2541 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2542 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 -A limit-2543 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 -A limit-2544 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 -A limit-2545 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 -A limit-2545 -m limit --limit 1/second -j LOG -A limit-2546 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 -A limit-2547 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 -A limit-2547 -j TEE --gateway 10.0.0.1 -A limit-2547 -j TEE --gateway 10.0.0.2 -A limit-2548 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 -A limit-2549 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 -A limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-165 -A limit-255 -j TEE --gateway 10.0.0.1 -A limit-255 -j TEE --gateway 10.0.0.2 -A limit-2550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 -A limit-2551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 -A limit-2551 -m limit --limit 12/minute -j ULOG -A limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1430 -A limit-2552 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1431 -A limit-2553 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1432 -A limit-2554 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1433 -A limit-2555 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1434 -A limit-2556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1435 -A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2557 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1436 -A limit-2558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1437 -A limit-2559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-166 -A limit-256 -j ACCEPT -A limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1438 -A limit-2560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1439 -A limit-2561 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 -A limit-2563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 -A limit-2564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 -A limit-2565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 -A limit-2565 -m limit --limit 1/second -j LOG -A limit-2566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 -A limit-2567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 -A limit-2567 -j TEE --gateway 10.0.0.1 -A limit-2567 -j TEE --gateway 10.0.0.2 -A limit-2568 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 -A limit-2569 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 -A limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-167 -A limit-2570 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 -A limit-2571 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 -A limit-2571 -m limit --limit 12/minute -j ULOG -A limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1450 -A limit-2572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1451 -A limit-2573 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1452 -A limit-2574 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1453 -A limit-2575 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1454 -A limit-2576 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1455 -A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2577 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1456 -A limit-2578 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1457 -A limit-2579 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-258 -m limit --limit 12/minute -j ULOG -A limit-258 -j ACCEPT -A limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1458 -A limit-2580 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1459 -A limit-2581 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2582 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 -A limit-2583 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 -A limit-2584 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 -A limit-2585 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 -A limit-2585 -m limit --limit 1/second -j LOG -A limit-2586 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 -A limit-2587 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 -A limit-2587 -j TEE --gateway 10.0.0.1 -A limit-2587 -j TEE --gateway 10.0.0.2 -A limit-2588 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 -A limit-2589 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 -A limit-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 -A limit-259 -m limit --limit 12/minute -j ULOG -A limit-2590 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 -A limit-2591 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 -A limit-2591 -m limit --limit 12/minute -j ULOG -A limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1470 -A limit-2592 -m recent --name limit-2592 --rsource --mask 255.255.255.255 --set -A limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1471 -A limit-2593 -m recent --name limit-2593 --rsource --mask 255.255.255.255 --set -A limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1472 -A limit-2594 -m recent --name limit-2594 --rsource --mask 255.255.255.255 --set -A limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1473 -A limit-2595 -m recent --name limit-2595 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1474 -A limit-2596 -m recent --name limit-2596 --rsource --mask 255.255.255.255 --set -A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1475 -A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2597 -m recent --name limit-2597 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1476 -A limit-2598 -m recent --name limit-2598 --rsource --mask 255.255.255.255 --set -A limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1477 -A limit-2599 -m recent --name limit-2599 --rsource --mask 255.255.255.255 --set -A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-170 -A limit-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1478 -A limit-2600 -m recent --name limit-2600 --rsource --mask 255.255.255.255 --set -A limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1479 -A limit-2601 -m recent --name limit-2601 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1480 -A limit-2602 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1481 -A limit-2603 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1482 -A limit-2604 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1483 -A limit-2605 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1484 -A limit-2606 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1485 -A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2607 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1486 -A limit-2608 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1487 -A limit-2609 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-171 -A limit-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1488 -A limit-2610 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1489 -A limit-2611 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2612 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 -A limit-2613 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 -A limit-2614 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 -A limit-2615 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 -A limit-2615 -m limit --limit 1/second -j LOG -A limit-2616 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 -A limit-2617 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 -A limit-2617 -j TEE --gateway 10.0.0.1 -A limit-2617 -j TEE --gateway 10.0.0.2 -A limit-2618 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 -A limit-2619 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 -A limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-172 -A limit-262 -m limit --limit 1/second -j LOG -A limit-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-2620 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 -A limit-2621 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 -A limit-2621 -m limit --limit 12/minute -j ULOG -A limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1500 -A limit-2622 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1501 -A limit-2623 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1502 -A limit-2624 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1503 -A limit-2625 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1504 -A limit-2626 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1505 -A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2627 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1506 -A limit-2628 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1507 -A limit-2629 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-173 -A limit-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1508 -A limit-2630 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1509 -A limit-2631 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2632 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 -A limit-2633 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 -A limit-2634 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 -A limit-2635 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 -A limit-2635 -m limit --limit 1/second -j LOG -A limit-2636 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 -A limit-2637 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 -A limit-2637 -j TEE --gateway 10.0.0.1 -A limit-2637 -j TEE --gateway 10.0.0.2 -A limit-2638 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 -A limit-2639 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 -A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-174 -A limit-264 -j TEE --gateway 10.0.0.1 -A limit-264 -j TEE --gateway 10.0.0.2 -A limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-2640 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 -A limit-2641 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 -A limit-2641 -m limit --limit 12/minute -j ULOG -A limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1520 -A limit-2642 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1521 -A limit-2643 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1522 -A limit-2644 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1523 -A limit-2645 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1524 -A limit-2646 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1525 -A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2647 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1526 -A limit-2648 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1527 -A limit-2649 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-175 -A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1528 -A limit-2650 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1529 -A limit-2651 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2652 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 -A limit-2653 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 -A limit-2654 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 -A limit-2655 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 -A limit-2655 -m limit --limit 1/second -j LOG -A limit-2656 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 -A limit-2657 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 -A limit-2657 -j TEE --gateway 10.0.0.1 -A limit-2657 -j TEE --gateway 10.0.0.2 -A limit-2658 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 -A limit-2659 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 -A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-176 -A limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-2660 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 -A limit-2661 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 -A limit-2661 -m limit --limit 12/minute -j ULOG -A limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1540 -A limit-2662 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1541 -A limit-2663 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1542 -A limit-2664 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1543 -A limit-2665 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1544 -A limit-2666 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1545 -A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2667 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1546 -A limit-2668 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1547 -A limit-2669 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-177 -A limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1548 -A limit-2670 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1549 -A limit-2671 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2672 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 -A limit-2673 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 -A limit-2674 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 -A limit-2675 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 -A limit-2675 -m limit --limit 1/second -j LOG -A limit-2676 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 -A limit-2677 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 -A limit-2677 -j TEE --gateway 10.0.0.1 -A limit-2677 -j TEE --gateway 10.0.0.2 -A limit-2678 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 -A limit-2679 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 -A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-178 -A limit-268 -m limit --limit 12/minute -j ULOG -A limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-2680 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 -A limit-2681 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 -A limit-2681 -m limit --limit 12/minute -j ULOG -A limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2682 -m recent --name limit-2682 --rsource --mask 255.255.255.255 --set -A limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2683 -m recent --name limit-2683 --rsource --mask 255.255.255.255 --set -A limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2684 -m recent --name limit-2684 --rsource --mask 255.255.255.255 --set -A limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2685 -m recent --name limit-2685 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2686 -m recent --name limit-2686 --rsource --mask 255.255.255.255 --set -A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2687 -m recent --name limit-2687 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2688 -m recent --name limit-2688 --rsource --mask 255.255.255.255 --set -A limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2689 -m recent --name limit-2689 --rsource --mask 255.255.255.255 --set -A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-179 -A limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2690 -m recent --name limit-2690 --rsource --mask 255.255.255.255 --set -A limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2691 -m recent --name limit-2691 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2692 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2693 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2694 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2695 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2696 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2697 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2698 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2699 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-180 -A limit-270 -j ACCEPT -A limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2700 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2701 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2702 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2703 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2704 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2705 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2705 -m limit --limit 1/second -j LOG -A limit-2706 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2707 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2707 -j TEE --gateway 10.0.0.1 -A limit-2707 -j TEE --gateway 10.0.0.2 -A limit-2708 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2709 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-271 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-181 -A limit-2710 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2711 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2711 -m limit --limit 12/minute -j ULOG -A limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2712 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2713 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2714 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2715 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2716 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2717 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2718 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2719 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-182 -A limit-272 -m limit --limit 1/second -j LOG -A limit-272 -j ACCEPT -A limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2720 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-2721 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2722 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2723 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2724 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2725 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2725 -m limit --limit 1/second -j LOG -A limit-2726 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2727 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2727 -j TEE --gateway 10.0.0.1 -A limit-2727 -j TEE --gateway 10.0.0.2 -A limit-2728 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2729 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-183 -A limit-273 -m limit --limit 1/second -j LOG -A limit-2730 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2731 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2731 -m limit --limit 12/minute -j ULOG -A limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2732 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2733 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2734 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2735 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2736 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2737 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2738 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2739 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-184 -A limit-274 -j TEE --gateway 10.0.0.1 -A limit-274 -j TEE --gateway 10.0.0.2 -A limit-274 -j ACCEPT -A limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2740 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2741 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2742 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2743 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2744 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2745 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2745 -m limit --limit 1/second -j LOG -A limit-2746 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2747 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2747 -j TEE --gateway 10.0.0.1 -A limit-2747 -j TEE --gateway 10.0.0.2 -A limit-2748 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2749 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-185 -A limit-275 -j TEE --gateway 10.0.0.1 -A limit-275 -j TEE --gateway 10.0.0.2 -A limit-2750 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2751 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2751 -m limit --limit 12/minute -j ULOG -A limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2752 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2753 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2754 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2755 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2756 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2757 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2758 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2759 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-186 -A limit-276 -j ACCEPT -A limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2760 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-2761 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2762 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2763 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2764 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2765 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2765 -m limit --limit 1/second -j LOG -A limit-2766 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2767 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2767 -j TEE --gateway 10.0.0.1 -A limit-2767 -j TEE --gateway 10.0.0.2 -A limit-2768 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2769 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-277 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-187 -A limit-2770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2771 -m limit --limit 12/minute -j ULOG -A limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1560 -A limit-2772 -m recent --name limit-2772 --rsource --mask 255.255.255.255 --set -A limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1561 -A limit-2773 -m recent --name limit-2773 --rsource --mask 255.255.255.255 --set -A limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1562 -A limit-2774 -m recent --name limit-2774 --rsource --mask 255.255.255.255 --set -A limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1563 -A limit-2775 -m recent --name limit-2775 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1564 -A limit-2776 -m recent --name limit-2776 --rsource --mask 255.255.255.255 --set -A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1565 -A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2777 -m recent --name limit-2777 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1566 -A limit-2778 -m recent --name limit-2778 --rsource --mask 255.255.255.255 --set -A limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1567 -A limit-2779 -m recent --name limit-2779 --rsource --mask 255.255.255.255 --set -A limit-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-188 -A limit-278 -m limit --limit 12/minute -j ULOG -A limit-278 -j ACCEPT -A limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1568 -A limit-2780 -m recent --name limit-2780 --rsource --mask 255.255.255.255 --set -A limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1569 -A limit-2781 -m recent --name limit-2781 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1570 -A limit-2782 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1571 -A limit-2783 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1572 -A limit-2784 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1573 -A limit-2785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1574 -A limit-2786 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1575 -A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2787 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1576 -A limit-2788 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1577 -A limit-2789 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-189 -A limit-279 -m limit --limit 12/minute -j ULOG -A limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1578 -A limit-2790 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1579 -A limit-2791 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 -A limit-2793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 -A limit-2794 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 -A limit-2795 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 -A limit-2795 -m limit --limit 1/second -j LOG -A limit-2796 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 -A limit-2797 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 -A limit-2797 -j TEE --gateway 10.0.0.1 -A limit-2797 -j TEE --gateway 10.0.0.2 -A limit-2798 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 -A limit-2799 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 -A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-28 -m limit --limit 12/minute -j ULOG -A limit-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2800 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 -A limit-2801 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 -A limit-2801 -m limit --limit 12/minute -j ULOG -A limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1590 -A limit-2802 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1591 -A limit-2803 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1592 -A limit-2804 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1593 -A limit-2805 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1594 -A limit-2806 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1595 -A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-2807 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1596 -A limit-2808 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1597 -A limit-2809 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set -A limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1598 -A limit-2810 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-1599 -A limit-2811 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2812 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 -A limit-2813 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 -A limit-2814 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 -A limit-2815 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 -A limit-2815 -m limit --limit 1/second -j LOG -A limit-2816 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 -A limit-2817 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 -A limit-2817 -j TEE --gateway 10.0.0.1 -A limit-2817 -j TEE --gateway 10.0.0.2 -A limit-2818 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 -A limit-2819 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 -A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-282 -m limit --limit 1/second -j LOG -A limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2820 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 -A limit-2821 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 -A limit-2821 -m limit --limit 12/minute -j ULOG -A limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1610 -A limit-2822 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1611 -A limit-2823 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1612 -A limit-2824 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1613 -A limit-2825 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1614 -A limit-2826 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1615 -A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2827 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1616 -A limit-2828 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1617 -A limit-2829 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1618 -A limit-2830 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1619 -A limit-2831 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2832 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 -A limit-2833 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 -A limit-2834 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 -A limit-2835 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 -A limit-2835 -m limit --limit 1/second -j LOG -A limit-2836 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 -A limit-2837 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 -A limit-2837 -j TEE --gateway 10.0.0.1 -A limit-2837 -j TEE --gateway 10.0.0.2 -A limit-2838 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 -A limit-2839 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 -A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-284 -j TEE --gateway 10.0.0.1 -A limit-284 -j TEE --gateway 10.0.0.2 -A limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2840 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 -A limit-2841 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 -A limit-2841 -m limit --limit 12/minute -j ULOG -A limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1630 -A limit-2842 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1631 -A limit-2843 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1632 -A limit-2844 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1633 -A limit-2845 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1634 -A limit-2846 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1635 -A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-2847 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1636 -A limit-2848 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1637 -A limit-2849 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1638 -A limit-2850 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-1639 -A limit-2851 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-2852 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 -A limit-2853 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 -A limit-2854 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 -A limit-2855 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 -A limit-2855 -m limit --limit 1/second -j LOG -A limit-2856 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 -A limit-2857 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 -A limit-2857 -j TEE --gateway 10.0.0.1 -A limit-2857 -j TEE --gateway 10.0.0.2 -A limit-2858 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 -A limit-2859 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 -A limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-286 -m recent --name limit-286 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2860 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 -A limit-2861 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 -A limit-2861 -m limit --limit 12/minute -j ULOG -A limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2862 -j RETURN -A limit-2862 -m limit --limit 1/second -j LOG -A limit-2862 -j DROP -A limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2863 -j RETURN -A limit-2863 -m limit --limit 1/second -j LOG -A limit-2863 -j DROP -A limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2864 -j RETURN -A limit-2864 -m limit --limit 1/second -j LOG -A limit-2864 -j DROP -A limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2865 -j RETURN -A limit-2865 -m limit --limit 1/second -j LOG -A limit-2865 -j DROP -A limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2866 -j RETURN -A limit-2866 -m limit --limit 1/second -j LOG -A limit-2866 -j DROP -A limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2867 -j RETURN -A limit-2867 -m limit --limit 1/second -j LOG -A limit-2867 -j DROP -A limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2868 -j RETURN -A limit-2868 -j DROP -A limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2869 -j RETURN -A limit-2869 -j DROP -A limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-287 -m recent --name limit-287 --rsource --mask 255.255.255.255 --set -A limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2870 -j RETURN -A limit-2870 -j DROP -A limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2871 -j RETURN -A limit-2871 -j DROP -A limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2872 -j RETURN -A limit-2872 -j DROP -A limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2873 -j RETURN -A limit-2873 -j DROP -A limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2874 -j RETURN -A limit-2874 -m limit --limit 1/second -j LOG -A limit-2874 -j DROP -A limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2875 -j RETURN -A limit-2875 -m limit --limit 1/second -j LOG -A limit-2875 -j DROP -A limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2876 -j RETURN -A limit-2876 -m limit --limit 1/second -j LOG -A limit-2876 -j DROP -A limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2877 -j RETURN -A limit-2877 -m limit --limit 1/second -j LOG -A limit-2877 -j DROP -A limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2878 -j RETURN -A limit-2878 -m limit --limit 1/second -j LOG -A limit-2878 -j DROP -A limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2879 -j RETURN -A limit-2879 -m limit --limit 1/second -j LOG -A limit-2879 -j DROP -A limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-288 -m limit --limit 12/minute -j ULOG -A limit-288 -m recent --name limit-288 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2880 -j RETURN -A limit-2880 -j TEE --gateway 10.0.0.1 -A limit-2880 -j TEE --gateway 10.0.0.2 -A limit-2880 -j DROP -A limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2881 -j RETURN -A limit-2881 -j TEE --gateway 10.0.0.1 -A limit-2881 -j TEE --gateway 10.0.0.2 -A limit-2881 -j DROP -A limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2882 -j RETURN -A limit-2882 -j TEE --gateway 10.0.0.1 -A limit-2882 -j TEE --gateway 10.0.0.2 -A limit-2882 -j DROP -A limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2883 -j RETURN -A limit-2883 -j TEE --gateway 10.0.0.1 -A limit-2883 -j TEE --gateway 10.0.0.2 -A limit-2883 -j DROP -A limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2884 -j RETURN -A limit-2884 -j TEE --gateway 10.0.0.1 -A limit-2884 -j TEE --gateway 10.0.0.2 -A limit-2884 -j DROP -A limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2885 -j RETURN -A limit-2885 -j TEE --gateway 10.0.0.1 -A limit-2885 -j TEE --gateway 10.0.0.2 -A limit-2885 -j DROP -A limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2886 -j RETURN -A limit-2886 -j DROP -A limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2887 -j RETURN -A limit-2887 -j DROP -A limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2888 -j RETURN -A limit-2888 -j DROP -A limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2889 -j RETURN -A limit-2889 -j DROP -A limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-289 -m recent --name limit-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2890 -j RETURN -A limit-2890 -j DROP -A limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2891 -j RETURN -A limit-2891 -j DROP -A limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2892 -j RETURN -A limit-2892 -m limit --limit 12/minute -j ULOG -A limit-2892 -j DROP -A limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2893 -j RETURN -A limit-2893 -m limit --limit 12/minute -j ULOG -A limit-2893 -j DROP -A limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2894 -j RETURN -A limit-2894 -m limit --limit 12/minute -j ULOG -A limit-2894 -j DROP -A limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2895 -j RETURN -A limit-2895 -m limit --limit 12/minute -j ULOG -A limit-2895 -j DROP -A limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2896 -j RETURN -A limit-2896 -m limit --limit 12/minute -j ULOG -A limit-2896 -j DROP -A limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2897 -j RETURN -A limit-2897 -m limit --limit 12/minute -j ULOG -A limit-2897 -j DROP -A limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2898 -j RETURN -A limit-2898 -j DROP -A limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2899 -j RETURN -A limit-2899 -j DROP -A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2900 -j RETURN -A limit-2900 -j DROP -A limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2901 -j RETURN -A limit-2901 -j DROP -A limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2902 -j RETURN -A limit-2902 -j DROP -A limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2903 -j RETURN -A limit-2903 -j DROP -A limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2904 -j RETURN -A limit-2904 -m limit --limit 1/second -j LOG -A limit-2904 -j DROP -A limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2905 -j RETURN -A limit-2905 -m limit --limit 1/second -j LOG -A limit-2905 -j DROP -A limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2906 -j RETURN -A limit-2906 -m limit --limit 1/second -j LOG -A limit-2906 -j DROP -A limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2907 -j RETURN -A limit-2907 -m limit --limit 1/second -j LOG -A limit-2907 -j DROP -A limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2908 -j RETURN -A limit-2908 -m limit --limit 1/second -j LOG -A limit-2908 -j DROP -A limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2909 -j RETURN -A limit-2909 -m limit --limit 1/second -j LOG -A limit-2909 -j DROP -A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2910 -j RETURN -A limit-2910 -j TEE --gateway 10.0.0.1 -A limit-2910 -j TEE --gateway 10.0.0.2 -A limit-2910 -j DROP -A limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2911 -j RETURN -A limit-2911 -j TEE --gateway 10.0.0.1 -A limit-2911 -j TEE --gateway 10.0.0.2 -A limit-2911 -j DROP -A limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2912 -j RETURN -A limit-2912 -j TEE --gateway 10.0.0.1 -A limit-2912 -j TEE --gateway 10.0.0.2 -A limit-2912 -j DROP -A limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2913 -j RETURN -A limit-2913 -j TEE --gateway 10.0.0.1 -A limit-2913 -j TEE --gateway 10.0.0.2 -A limit-2913 -j DROP -A limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2914 -j RETURN -A limit-2914 -j TEE --gateway 10.0.0.1 -A limit-2914 -j TEE --gateway 10.0.0.2 -A limit-2914 -j DROP -A limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2915 -j RETURN -A limit-2915 -j TEE --gateway 10.0.0.1 -A limit-2915 -j TEE --gateway 10.0.0.2 -A limit-2915 -j DROP -A limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2916 -j RETURN -A limit-2916 -j DROP -A limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2917 -j RETURN -A limit-2917 -j DROP -A limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2918 -j RETURN -A limit-2918 -j DROP -A limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2919 -j RETURN -A limit-2919 -j DROP -A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-292 -m limit --limit 1/second -j LOG -A limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2920 -j RETURN -A limit-2920 -j DROP -A limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2921 -j RETURN -A limit-2921 -j DROP -A limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2922 -j RETURN -A limit-2922 -m limit --limit 12/minute -j ULOG -A limit-2922 -j DROP -A limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2923 -j RETURN -A limit-2923 -m limit --limit 12/minute -j ULOG -A limit-2923 -j DROP -A limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2924 -j RETURN -A limit-2924 -m limit --limit 12/minute -j ULOG -A limit-2924 -j DROP -A limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2925 -j RETURN -A limit-2925 -m limit --limit 12/minute -j ULOG -A limit-2925 -j DROP -A limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2926 -j RETURN -A limit-2926 -m limit --limit 12/minute -j ULOG -A limit-2926 -j DROP -A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-2927 -j RETURN -A limit-2927 -m limit --limit 12/minute -j ULOG -A limit-2927 -j DROP -A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-294 -j TEE --gateway 10.0.0.1 -A limit-294 -j TEE --gateway 10.0.0.2 -A limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-298 -m limit --limit 12/minute -j ULOG -A limit-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-300 -j ACCEPT -A limit-301 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m limit --limit 1/second -j LOG -A limit-302 -j ACCEPT -A limit-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-303 -m limit --limit 1/second -j LOG -A limit-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-304 -j TEE --gateway 10.0.0.1 -A limit-304 -j TEE --gateway 10.0.0.2 -A limit-304 -j ACCEPT -A limit-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-305 -j TEE --gateway 10.0.0.1 -A limit-305 -j TEE --gateway 10.0.0.2 -A limit-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-306 -j ACCEPT -A limit-307 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -m limit --limit 12/minute -j ULOG -A limit-308 -j ACCEPT -A limit-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-309 -m limit --limit 12/minute -j ULOG -A limit-31 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-312 -m limit --limit 1/second -j LOG -A limit-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-314 -j TEE --gateway 10.0.0.1 -A limit-314 -j TEE --gateway 10.0.0.2 -A limit-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m limit --limit 12/minute -j ULOG -A limit-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-320 -j ACCEPT -A limit-321 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG -A limit-322 -j ACCEPT -A limit-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-323 -m limit --limit 1/second -j LOG -A limit-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-324 -j TEE --gateway 10.0.0.1 -A limit-324 -j TEE --gateway 10.0.0.2 -A limit-324 -j ACCEPT -A limit-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-325 -j TEE --gateway 10.0.0.1 -A limit-325 -j TEE --gateway 10.0.0.2 -A limit-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-326 -j ACCEPT -A limit-327 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -m limit --limit 12/minute -j ULOG -A limit-328 -j ACCEPT -A limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-329 -m limit --limit 12/minute -j ULOG -A limit-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-334 -j TEE --gateway 10.0.0.1 -A limit-334 -j TEE --gateway 10.0.0.2 -A limit-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m limit --limit 12/minute -j ULOG -A limit-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-34 -j TEE --gateway 10.0.0.1 -A limit-34 -j TEE --gateway 10.0.0.2 -A limit-34 -j ACCEPT -A limit-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-340 -j ACCEPT -A limit-341 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m limit --limit 1/second -j LOG -A limit-342 -j ACCEPT -A limit-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-343 -m limit --limit 1/second -j LOG -A limit-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-344 -j TEE --gateway 10.0.0.1 -A limit-344 -j TEE --gateway 10.0.0.2 -A limit-344 -j ACCEPT -A limit-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-345 -j TEE --gateway 10.0.0.1 -A limit-345 -j TEE --gateway 10.0.0.2 -A limit-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT -A limit-347 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -m limit --limit 12/minute -j ULOG -A limit-348 -j ACCEPT -A limit-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-349 -m limit --limit 12/minute -j ULOG -A limit-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -j TEE --gateway 10.0.0.1 -A limit-35 -j TEE --gateway 10.0.0.2 -A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-354 -j TEE --gateway 10.0.0.1 -A limit-354 -j TEE --gateway 10.0.0.2 -A limit-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m limit --limit 12/minute -j ULOG -A limit-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-36 -j ACCEPT -A limit-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT -A limit-361 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT -A limit-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG -A limit-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-364 -j TEE --gateway 10.0.0.1 -A limit-364 -j TEE --gateway 10.0.0.2 -A limit-364 -j ACCEPT -A limit-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-365 -j TEE --gateway 10.0.0.1 -A limit-365 -j TEE --gateway 10.0.0.2 -A limit-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT -A limit-367 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -m limit --limit 12/minute -j ULOG -A limit-368 -j ACCEPT -A limit-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-369 -m limit --limit 12/minute -j ULOG -A limit-37 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-191 -A limit-371 -m recent --name limit-371 --rsource --mask 255.255.255.255 --set -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-192 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-193 -A limit-373 -m recent --name limit-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-194 -A limit-374 -j TEE --gateway 10.0.0.1 -A limit-374 -j TEE --gateway 10.0.0.2 -A limit-374 -m recent --name limit-374 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-195 -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-375 -m recent --name limit-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-196 -A limit-376 -m recent --name limit-376 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-197 -A limit-377 -m recent --name limit-377 --rsource --mask 255.255.255.255 --set -A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-198 -A limit-378 -m limit --limit 12/minute -j ULOG -A limit-378 -m recent --name limit-378 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-199 -A limit-379 -m recent --name limit-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -m limit --limit 12/minute -j ULOG -A limit-38 -j ACCEPT -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-202 -A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-203 -A limit-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-204 -A limit-384 -j TEE --gateway 10.0.0.1 -A limit-384 -j TEE --gateway 10.0.0.2 -A limit-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-205 -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-206 -A limit-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-207 -A limit-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-208 -A limit-388 -m limit --limit 12/minute -j ULOG -A limit-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-209 -A limit-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-39 -m limit --limit 12/minute -j ULOG -A limit-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT -A limit-391 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-211 -A limit-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-212 -A limit-392 -m limit --limit 1/second -j LOG -A limit-392 -j ACCEPT -A limit-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-213 -A limit-393 -m limit --limit 1/second -j LOG -A limit-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-214 -A limit-394 -j TEE --gateway 10.0.0.1 -A limit-394 -j TEE --gateway 10.0.0.2 -A limit-394 -j ACCEPT -A limit-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-215 -A limit-395 -j TEE --gateway 10.0.0.1 -A limit-395 -j TEE --gateway 10.0.0.2 -A limit-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-216 -A limit-396 -j ACCEPT -A limit-397 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-217 -A limit-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-218 -A limit-398 -m limit --limit 12/minute -j ULOG -A limit-398 -j ACCEPT -A limit-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-219 -A limit-399 -m limit --limit 12/minute -j ULOG -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-4 -j TEE --gateway 10.0.0.1 -A limit-4 -j TEE --gateway 10.0.0.2 -A limit-4 -m recent --name limit-4 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-220 -A limit-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-221 -A limit-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-222 -A limit-402 -m limit --limit 1/second -j LOG -A limit-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-223 -A limit-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-224 -A limit-404 -j TEE --gateway 10.0.0.1 -A limit-404 -j TEE --gateway 10.0.0.2 -A limit-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-225 -A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-226 -A limit-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-227 -A limit-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-228 -A limit-408 -m limit --limit 12/minute -j ULOG -A limit-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 -A limit-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-230 -A limit-410 -j ACCEPT -A limit-411 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-231 -A limit-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-232 -A limit-412 -m limit --limit 1/second -j LOG -A limit-412 -j ACCEPT -A limit-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-233 -A limit-413 -m limit --limit 1/second -j LOG -A limit-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-234 -A limit-414 -j TEE --gateway 10.0.0.1 -A limit-414 -j TEE --gateway 10.0.0.2 -A limit-414 -j ACCEPT -A limit-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-235 -A limit-415 -j TEE --gateway 10.0.0.1 -A limit-415 -j TEE --gateway 10.0.0.2 -A limit-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-236 -A limit-416 -j ACCEPT -A limit-417 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-237 -A limit-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-238 -A limit-418 -m limit --limit 12/minute -j ULOG -A limit-418 -j ACCEPT -A limit-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-239 -A limit-419 -m limit --limit 12/minute -j ULOG -A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-42 -m limit --limit 1/second -j LOG -A limit-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-240 -A limit-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-241 -A limit-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-242 -A limit-422 -m limit --limit 1/second -j LOG -A limit-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-243 -A limit-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-244 -A limit-424 -j TEE --gateway 10.0.0.1 -A limit-424 -j TEE --gateway 10.0.0.2 -A limit-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-245 -A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-246 -A limit-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-247 -A limit-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-248 -A limit-428 -m limit --limit 12/minute -j ULOG -A limit-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-249 -A limit-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 -A limit-430 -j ACCEPT -A limit-431 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 -A limit-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 -A limit-432 -m limit --limit 1/second -j LOG -A limit-432 -j ACCEPT -A limit-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-253 -A limit-433 -m limit --limit 1/second -j LOG -A limit-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-254 -A limit-434 -j TEE --gateway 10.0.0.1 -A limit-434 -j TEE --gateway 10.0.0.2 -A limit-434 -j ACCEPT -A limit-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-255 -A limit-435 -j TEE --gateway 10.0.0.1 -A limit-435 -j TEE --gateway 10.0.0.2 -A limit-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-256 -A limit-436 -j ACCEPT -A limit-437 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-257 -A limit-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-258 -A limit-438 -m limit --limit 12/minute -j ULOG -A limit-438 -j ACCEPT -A limit-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 -A limit-439 -m limit --limit 12/minute -j ULOG -A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-44 -j TEE --gateway 10.0.0.1 -A limit-44 -j TEE --gateway 10.0.0.2 -A limit-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-260 -A limit-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-261 -A limit-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-262 -A limit-442 -m limit --limit 1/second -j LOG -A limit-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-263 -A limit-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-264 -A limit-444 -j TEE --gateway 10.0.0.1 -A limit-444 -j TEE --gateway 10.0.0.2 -A limit-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 -A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 -A limit-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 -A limit-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 -A limit-448 -m limit --limit 12/minute -j ULOG -A limit-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 -A limit-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-270 -A limit-450 -j ACCEPT -A limit-451 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 -A limit-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 -A limit-452 -m limit --limit 1/second -j LOG -A limit-452 -j ACCEPT -A limit-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 -A limit-453 -m limit --limit 1/second -j LOG -A limit-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 -A limit-454 -j TEE --gateway 10.0.0.1 -A limit-454 -j TEE --gateway 10.0.0.2 -A limit-454 -j ACCEPT -A limit-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 -A limit-455 -j TEE --gateway 10.0.0.1 -A limit-455 -j TEE --gateway 10.0.0.2 -A limit-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 -A limit-456 -j ACCEPT -A limit-457 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-277 -A limit-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-278 -A limit-458 -m limit --limit 12/minute -j ULOG -A limit-458 -j ACCEPT -A limit-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-279 -A limit-459 -m limit --limit 12/minute -j ULOG -A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-460 -m recent --name limit-460 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-461 -m recent --name limit-461 --rsource --mask 255.255.255.255 --set -A limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-462 -m limit --limit 1/second -j LOG -A limit-462 -m recent --name limit-462 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-463 -m recent --name limit-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-464 -j TEE --gateway 10.0.0.1 -A limit-464 -j TEE --gateway 10.0.0.2 -A limit-464 -m recent --name limit-464 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-465 -m recent --name limit-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-466 -m recent --name limit-466 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-467 -m recent --name limit-467 --rsource --mask 255.255.255.255 --set -A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-468 -m limit --limit 12/minute -j ULOG -A limit-468 -m recent --name limit-468 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-469 -m recent --name limit-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-472 -m limit --limit 1/second -j LOG -A limit-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-474 -j TEE --gateway 10.0.0.1 -A limit-474 -j TEE --gateway 10.0.0.2 -A limit-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-478 -m limit --limit 12/minute -j ULOG -A limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-48 -m limit --limit 12/minute -j ULOG -A limit-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-480 -j ACCEPT -A limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m limit --limit 1/second -j LOG -A limit-482 -j ACCEPT -A limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-483 -m limit --limit 1/second -j LOG -A limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-484 -j TEE --gateway 10.0.0.1 -A limit-484 -j TEE --gateway 10.0.0.2 -A limit-484 -j ACCEPT -A limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-485 -j TEE --gateway 10.0.0.1 -A limit-485 -j TEE --gateway 10.0.0.2 -A limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-486 -j ACCEPT -A limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-488 -m limit --limit 12/minute -j ULOG -A limit-488 -j ACCEPT -A limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-489 -m limit --limit 12/minute -j ULOG -A limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-492 -m limit --limit 1/second -j LOG -A limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-494 -j TEE --gateway 10.0.0.1 -A limit-494 -j TEE --gateway 10.0.0.2 -A limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-498 -m limit --limit 12/minute -j ULOG -A limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-5 -m recent --name limit-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-50 -j ACCEPT -A limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-500 -j ACCEPT -A limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-502 -m limit --limit 1/second -j LOG -A limit-502 -j ACCEPT -A limit-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-503 -m limit --limit 1/second -j LOG -A limit-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-504 -j TEE --gateway 10.0.0.1 -A limit-504 -j TEE --gateway 10.0.0.2 -A limit-504 -j ACCEPT -A limit-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-505 -j TEE --gateway 10.0.0.1 -A limit-505 -j TEE --gateway 10.0.0.2 -A limit-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-506 -j ACCEPT -A limit-507 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-508 -m limit --limit 12/minute -j ULOG -A limit-508 -j ACCEPT -A limit-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-509 -m limit --limit 12/minute -j ULOG -A limit-51 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-512 -m limit --limit 1/second -j LOG -A limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-514 -j TEE --gateway 10.0.0.1 -A limit-514 -j TEE --gateway 10.0.0.2 -A limit-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-518 -m limit --limit 12/minute -j ULOG -A limit-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-52 -m limit --limit 1/second -j LOG -A limit-52 -j ACCEPT -A limit-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-520 -j ACCEPT -A limit-521 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m limit --limit 1/second -j LOG -A limit-522 -j ACCEPT -A limit-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-523 -m limit --limit 1/second -j LOG -A limit-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-524 -j TEE --gateway 10.0.0.1 -A limit-524 -j TEE --gateway 10.0.0.2 -A limit-524 -j ACCEPT -A limit-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-525 -j TEE --gateway 10.0.0.1 -A limit-525 -j TEE --gateway 10.0.0.2 -A limit-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-526 -j ACCEPT -A limit-527 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-528 -m limit --limit 12/minute -j ULOG -A limit-528 -j ACCEPT -A limit-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-529 -m limit --limit 12/minute -j ULOG -A limit-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-53 -m limit --limit 1/second -j LOG -A limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-532 -m limit --limit 1/second -j LOG -A limit-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-534 -j TEE --gateway 10.0.0.1 -A limit-534 -j TEE --gateway 10.0.0.2 -A limit-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-538 -m limit --limit 12/minute -j ULOG -A limit-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-54 -j TEE --gateway 10.0.0.1 -A limit-54 -j TEE --gateway 10.0.0.2 -A limit-54 -j ACCEPT -A limit-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-540 -j ACCEPT -A limit-541 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-542 -m limit --limit 1/second -j LOG -A limit-542 -j ACCEPT -A limit-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-543 -m limit --limit 1/second -j LOG -A limit-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-544 -j TEE --gateway 10.0.0.1 -A limit-544 -j TEE --gateway 10.0.0.2 -A limit-544 -j ACCEPT -A limit-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-545 -j TEE --gateway 10.0.0.1 -A limit-545 -j TEE --gateway 10.0.0.2 -A limit-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-546 -j ACCEPT -A limit-547 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-548 -m limit --limit 12/minute -j ULOG -A limit-548 -j ACCEPT -A limit-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-549 -m limit --limit 12/minute -j ULOG -A limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-55 -j TEE --gateway 10.0.0.1 -A limit-55 -j TEE --gateway 10.0.0.2 -A limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-280 -A limit-550 -m recent --name limit-550 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-281 -A limit-551 -m recent --name limit-551 --rsource --mask 255.255.255.255 --set -A limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-282 -A limit-552 -m limit --limit 1/second -j LOG -A limit-552 -m recent --name limit-552 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-283 -A limit-553 -m recent --name limit-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-284 -A limit-554 -j TEE --gateway 10.0.0.1 -A limit-554 -j TEE --gateway 10.0.0.2 -A limit-554 -m recent --name limit-554 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-285 -A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-555 -m recent --name limit-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-286 -A limit-556 -m recent --name limit-556 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-287 -A limit-557 -m recent --name limit-557 --rsource --mask 255.255.255.255 --set -A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-558 -m limit --limit 12/minute -j ULOG -A limit-558 -m recent --name limit-558 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 -A limit-559 -m recent --name limit-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-56 -j ACCEPT -A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 -A limit-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 -A limit-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-562 -m limit --limit 1/second -j LOG -A limit-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 -A limit-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 -A limit-564 -j TEE --gateway 10.0.0.1 -A limit-564 -j TEE --gateway 10.0.0.2 -A limit-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 -A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 -A limit-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 -A limit-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 -A limit-568 -m limit --limit 12/minute -j ULOG -A limit-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 -A limit-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-300 -A limit-570 -j ACCEPT -A limit-571 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 -A limit-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 -A limit-572 -m limit --limit 1/second -j LOG -A limit-572 -j ACCEPT -A limit-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 -A limit-573 -m limit --limit 1/second -j LOG -A limit-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 -A limit-574 -j TEE --gateway 10.0.0.1 -A limit-574 -j TEE --gateway 10.0.0.2 -A limit-574 -j ACCEPT -A limit-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 -A limit-575 -j TEE --gateway 10.0.0.1 -A limit-575 -j TEE --gateway 10.0.0.2 -A limit-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 -A limit-576 -j ACCEPT -A limit-577 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-307 -A limit-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-308 -A limit-578 -m limit --limit 12/minute -j ULOG -A limit-578 -j ACCEPT -A limit-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-309 -A limit-579 -m limit --limit 12/minute -j ULOG -A limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-58 -m limit --limit 12/minute -j ULOG -A limit-58 -j ACCEPT -A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 -A limit-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 -A limit-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 -A limit-582 -m limit --limit 1/second -j LOG -A limit-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-313 -A limit-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-314 -A limit-584 -j TEE --gateway 10.0.0.1 -A limit-584 -j TEE --gateway 10.0.0.2 -A limit-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-315 -A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-316 -A limit-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-317 -A limit-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-318 -A limit-588 -m limit --limit 12/minute -j ULOG -A limit-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-319 -A limit-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-59 -m limit --limit 12/minute -j ULOG -A limit-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-320 -A limit-590 -j ACCEPT -A limit-591 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-321 -A limit-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-322 -A limit-592 -m limit --limit 1/second -j LOG -A limit-592 -j ACCEPT -A limit-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-323 -A limit-593 -m limit --limit 1/second -j LOG -A limit-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-324 -A limit-594 -j TEE --gateway 10.0.0.1 -A limit-594 -j TEE --gateway 10.0.0.2 -A limit-594 -j ACCEPT -A limit-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 -A limit-595 -j TEE --gateway 10.0.0.1 -A limit-595 -j TEE --gateway 10.0.0.2 -A limit-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 -A limit-596 -j ACCEPT -A limit-597 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 -A limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 -A limit-598 -m limit --limit 12/minute -j ULOG -A limit-598 -j ACCEPT -A limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 -A limit-599 -m limit --limit 12/minute -j ULOG -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-330 -A limit-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 -A limit-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 -A limit-602 -m limit --limit 1/second -j LOG -A limit-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 -A limit-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 -A limit-604 -j TEE --gateway 10.0.0.1 -A limit-604 -j TEE --gateway 10.0.0.2 -A limit-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 -A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 -A limit-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-337 -A limit-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-338 -A limit-608 -m limit --limit 12/minute -j ULOG -A limit-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-339 -A limit-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 -A limit-610 -j ACCEPT -A limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 -A limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 -A limit-612 -m limit --limit 1/second -j LOG -A limit-612 -j ACCEPT -A limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-343 -A limit-613 -m limit --limit 1/second -j LOG -A limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-344 -A limit-614 -j TEE --gateway 10.0.0.1 -A limit-614 -j TEE --gateway 10.0.0.2 -A limit-614 -j ACCEPT -A limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-345 -A limit-615 -j TEE --gateway 10.0.0.1 -A limit-615 -j TEE --gateway 10.0.0.2 -A limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-346 -A limit-616 -j ACCEPT -A limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-347 -A limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-348 -A limit-618 -m limit --limit 12/minute -j ULOG -A limit-618 -j ACCEPT -A limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-349 -A limit-619 -m limit --limit 12/minute -j ULOG -A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG -A limit-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-350 -A limit-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-351 -A limit-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-352 -A limit-622 -m limit --limit 1/second -j LOG -A limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-353 -A limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-354 -A limit-624 -j TEE --gateway 10.0.0.1 -A limit-624 -j TEE --gateway 10.0.0.2 -A limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-355 -A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-356 -A limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-357 -A limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-358 -A limit-628 -m limit --limit 12/minute -j ULOG -A limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-359 -A limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-360 -A limit-630 -j ACCEPT -A limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-361 -A limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-362 -A limit-632 -m limit --limit 1/second -j LOG -A limit-632 -j ACCEPT -A limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-363 -A limit-633 -m limit --limit 1/second -j LOG -A limit-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-364 -A limit-634 -j TEE --gateway 10.0.0.1 -A limit-634 -j TEE --gateway 10.0.0.2 -A limit-634 -j ACCEPT -A limit-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-365 -A limit-635 -j TEE --gateway 10.0.0.1 -A limit-635 -j TEE --gateway 10.0.0.2 -A limit-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-366 -A limit-636 -j ACCEPT -A limit-637 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-367 -A limit-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-368 -A limit-638 -m limit --limit 12/minute -j ULOG -A limit-638 -j ACCEPT -A limit-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-369 -A limit-639 -m limit --limit 12/minute -j ULOG -A limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-64 -j TEE --gateway 10.0.0.1 -A limit-64 -j TEE --gateway 10.0.0.2 -A limit-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-370 -A limit-640 -m recent --name limit-640 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-371 -A limit-641 -m recent --name limit-641 --rsource --mask 255.255.255.255 --set -A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-372 -A limit-642 -m limit --limit 1/second -j LOG -A limit-642 -m recent --name limit-642 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-373 -A limit-643 -m recent --name limit-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-374 -A limit-644 -j TEE --gateway 10.0.0.1 -A limit-644 -j TEE --gateway 10.0.0.2 -A limit-644 -m recent --name limit-644 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-375 -A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-645 -m recent --name limit-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-376 -A limit-646 -m recent --name limit-646 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-377 -A limit-647 -m recent --name limit-647 --rsource --mask 255.255.255.255 --set -A limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-378 -A limit-648 -m limit --limit 12/minute -j ULOG -A limit-648 -m recent --name limit-648 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-379 -A limit-649 -m recent --name limit-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-380 -A limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-381 -A limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-382 -A limit-652 -m limit --limit 1/second -j LOG -A limit-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-383 -A limit-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-384 -A limit-654 -j TEE --gateway 10.0.0.1 -A limit-654 -j TEE --gateway 10.0.0.2 -A limit-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-385 -A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-386 -A limit-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-387 -A limit-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-388 -A limit-658 -m limit --limit 12/minute -j ULOG -A limit-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-389 -A limit-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-390 -A limit-660 -j ACCEPT -A limit-661 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-391 -A limit-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-392 -A limit-662 -m limit --limit 1/second -j LOG -A limit-662 -j ACCEPT -A limit-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-393 -A limit-663 -m limit --limit 1/second -j LOG -A limit-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-394 -A limit-664 -j TEE --gateway 10.0.0.1 -A limit-664 -j TEE --gateway 10.0.0.2 -A limit-664 -j ACCEPT -A limit-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-395 -A limit-665 -j TEE --gateway 10.0.0.1 -A limit-665 -j TEE --gateway 10.0.0.2 -A limit-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-396 -A limit-666 -j ACCEPT -A limit-667 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-397 -A limit-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-398 -A limit-668 -m limit --limit 12/minute -j ULOG -A limit-668 -j ACCEPT -A limit-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-399 -A limit-669 -m limit --limit 12/minute -j ULOG -A limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-400 -A limit-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-401 -A limit-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-672 -m limit --limit 1/second -j LOG -A limit-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-403 -A limit-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-404 -A limit-674 -j TEE --gateway 10.0.0.1 -A limit-674 -j TEE --gateway 10.0.0.2 -A limit-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-405 -A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-406 -A limit-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-407 -A limit-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-408 -A limit-678 -m limit --limit 12/minute -j ULOG -A limit-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-409 -A limit-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-68 -m limit --limit 12/minute -j ULOG -A limit-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-410 -A limit-680 -j ACCEPT -A limit-681 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-411 -A limit-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-412 -A limit-682 -m limit --limit 1/second -j LOG -A limit-682 -j ACCEPT -A limit-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-413 -A limit-683 -m limit --limit 1/second -j LOG -A limit-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-414 -A limit-684 -j TEE --gateway 10.0.0.1 -A limit-684 -j TEE --gateway 10.0.0.2 -A limit-684 -j ACCEPT -A limit-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-415 -A limit-685 -j TEE --gateway 10.0.0.1 -A limit-685 -j TEE --gateway 10.0.0.2 -A limit-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-416 -A limit-686 -j ACCEPT -A limit-687 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-417 -A limit-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-418 -A limit-688 -m limit --limit 12/minute -j ULOG -A limit-688 -j ACCEPT -A limit-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-419 -A limit-689 -m limit --limit 12/minute -j ULOG -A limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-420 -A limit-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-421 -A limit-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-422 -A limit-692 -m limit --limit 1/second -j LOG -A limit-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-423 -A limit-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-424 -A limit-694 -j TEE --gateway 10.0.0.1 -A limit-694 -j TEE --gateway 10.0.0.2 -A limit-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-425 -A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-426 -A limit-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-427 -A limit-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-428 -A limit-698 -m limit --limit 12/minute -j ULOG -A limit-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-429 -A limit-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-7 -m recent --name limit-7 --rsource --mask 255.255.255.255 --set -A limit-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-70 -j ACCEPT -A limit-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-430 -A limit-700 -j ACCEPT -A limit-701 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-431 -A limit-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-432 -A limit-702 -m limit --limit 1/second -j LOG -A limit-702 -j ACCEPT -A limit-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-433 -A limit-703 -m limit --limit 1/second -j LOG -A limit-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-434 -A limit-704 -j TEE --gateway 10.0.0.1 -A limit-704 -j TEE --gateway 10.0.0.2 -A limit-704 -j ACCEPT -A limit-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-435 -A limit-705 -j TEE --gateway 10.0.0.1 -A limit-705 -j TEE --gateway 10.0.0.2 -A limit-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-436 -A limit-706 -j ACCEPT -A limit-707 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-437 -A limit-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-708 -m limit --limit 12/minute -j ULOG -A limit-708 -j ACCEPT -A limit-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-439 -A limit-709 -m limit --limit 12/minute -j ULOG -A limit-71 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-440 -A limit-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-441 -A limit-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-442 -A limit-712 -m limit --limit 1/second -j LOG -A limit-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-443 -A limit-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-444 -A limit-714 -j TEE --gateway 10.0.0.1 -A limit-714 -j TEE --gateway 10.0.0.2 -A limit-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-445 -A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-446 -A limit-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-447 -A limit-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-448 -A limit-718 -m limit --limit 12/minute -j ULOG -A limit-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-449 -A limit-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-72 -m limit --limit 1/second -j LOG -A limit-72 -j ACCEPT -A limit-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-450 -A limit-720 -j ACCEPT -A limit-721 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-451 -A limit-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-452 -A limit-722 -m limit --limit 1/second -j LOG -A limit-722 -j ACCEPT -A limit-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-453 -A limit-723 -m limit --limit 1/second -j LOG -A limit-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-454 -A limit-724 -j TEE --gateway 10.0.0.1 -A limit-724 -j TEE --gateway 10.0.0.2 -A limit-724 -j ACCEPT -A limit-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-455 -A limit-725 -j TEE --gateway 10.0.0.1 -A limit-725 -j TEE --gateway 10.0.0.2 -A limit-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-456 -A limit-726 -j ACCEPT -A limit-727 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-457 -A limit-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-458 -A limit-728 -m limit --limit 12/minute -j ULOG -A limit-728 -j ACCEPT -A limit-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-459 -A limit-729 -m limit --limit 12/minute -j ULOG -A limit-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-73 -m limit --limit 1/second -j LOG -A limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-730 -m recent --name limit-730 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-731 -m recent --name limit-731 --rsource --mask 255.255.255.255 --set -A limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-732 -m limit --limit 1/second -j LOG -A limit-732 -m recent --name limit-732 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-733 -m recent --name limit-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-734 -j TEE --gateway 10.0.0.1 -A limit-734 -j TEE --gateway 10.0.0.2 -A limit-734 -m recent --name limit-734 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-735 -m recent --name limit-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-736 -m recent --name limit-736 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-737 -m recent --name limit-737 --rsource --mask 255.255.255.255 --set -A limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-738 -m limit --limit 12/minute -j ULOG -A limit-738 -m recent --name limit-738 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-739 -m recent --name limit-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -j TEE --gateway 10.0.0.1 -A limit-74 -j TEE --gateway 10.0.0.2 -A limit-74 -j ACCEPT -A limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-742 -m limit --limit 1/second -j LOG -A limit-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-744 -j TEE --gateway 10.0.0.1 -A limit-744 -j TEE --gateway 10.0.0.2 -A limit-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-748 -m limit --limit 12/minute -j ULOG -A limit-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-75 -j TEE --gateway 10.0.0.1 -A limit-75 -j TEE --gateway 10.0.0.2 -A limit-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-750 -j ACCEPT -A limit-751 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-752 -m limit --limit 1/second -j LOG -A limit-752 -j ACCEPT -A limit-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-753 -m limit --limit 1/second -j LOG -A limit-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-754 -j TEE --gateway 10.0.0.1 -A limit-754 -j TEE --gateway 10.0.0.2 -A limit-754 -j ACCEPT -A limit-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-755 -j TEE --gateway 10.0.0.1 -A limit-755 -j TEE --gateway 10.0.0.2 -A limit-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-756 -j ACCEPT -A limit-757 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-758 -m limit --limit 12/minute -j ULOG -A limit-758 -j ACCEPT -A limit-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-759 -m limit --limit 12/minute -j ULOG -A limit-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT -A limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-762 -m limit --limit 1/second -j LOG -A limit-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-764 -j TEE --gateway 10.0.0.1 -A limit-764 -j TEE --gateway 10.0.0.2 -A limit-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-768 -m limit --limit 12/minute -j ULOG -A limit-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-77 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-770 -j ACCEPT -A limit-771 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-772 -m limit --limit 1/second -j LOG -A limit-772 -j ACCEPT -A limit-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-773 -m limit --limit 1/second -j LOG -A limit-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-774 -j TEE --gateway 10.0.0.1 -A limit-774 -j TEE --gateway 10.0.0.2 -A limit-774 -j ACCEPT -A limit-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-775 -j TEE --gateway 10.0.0.1 -A limit-775 -j TEE --gateway 10.0.0.2 -A limit-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-776 -j ACCEPT -A limit-777 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-778 -m limit --limit 12/minute -j ULOG -A limit-778 -j ACCEPT -A limit-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-779 -m limit --limit 12/minute -j ULOG -A limit-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-78 -m limit --limit 12/minute -j ULOG -A limit-78 -j ACCEPT -A limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-782 -m limit --limit 1/second -j LOG -A limit-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-784 -j TEE --gateway 10.0.0.1 -A limit-784 -j TEE --gateway 10.0.0.2 -A limit-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-788 -m limit --limit 12/minute -j ULOG -A limit-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-79 -m limit --limit 12/minute -j ULOG -A limit-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-790 -j ACCEPT -A limit-791 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-792 -m limit --limit 1/second -j LOG -A limit-792 -j ACCEPT -A limit-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-793 -m limit --limit 1/second -j LOG -A limit-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-794 -j TEE --gateway 10.0.0.1 -A limit-794 -j TEE --gateway 10.0.0.2 -A limit-794 -j ACCEPT -A limit-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-795 -j TEE --gateway 10.0.0.1 -A limit-795 -j TEE --gateway 10.0.0.2 -A limit-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-796 -j ACCEPT -A limit-797 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-798 -m limit --limit 12/minute -j ULOG -A limit-798 -j ACCEPT -A limit-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-799 -m limit --limit 12/minute -j ULOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m limit --limit 12/minute -j ULOG -A limit-8 -m recent --name limit-8 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-802 -m limit --limit 1/second -j LOG -A limit-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-804 -j TEE --gateway 10.0.0.1 -A limit-804 -j TEE --gateway 10.0.0.2 -A limit-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-808 -m limit --limit 12/minute -j ULOG -A limit-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-810 -j ACCEPT -A limit-811 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-812 -m limit --limit 1/second -j LOG -A limit-812 -j ACCEPT -A limit-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-813 -m limit --limit 1/second -j LOG -A limit-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-814 -j TEE --gateway 10.0.0.1 -A limit-814 -j TEE --gateway 10.0.0.2 -A limit-814 -j ACCEPT -A limit-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-815 -j TEE --gateway 10.0.0.1 -A limit-815 -j TEE --gateway 10.0.0.2 -A limit-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-816 -j ACCEPT -A limit-817 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-818 -m limit --limit 12/minute -j ULOG -A limit-818 -j ACCEPT -A limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-819 -m limit --limit 12/minute -j ULOG -A limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-82 -m limit --limit 1/second -j LOG -A limit-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-460 -A limit-820 -m recent --name limit-820 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-461 -A limit-821 -m recent --name limit-821 --rsource --mask 255.255.255.255 --set -A limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-462 -A limit-822 -m limit --limit 1/second -j LOG -A limit-822 -m recent --name limit-822 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-463 -A limit-823 -m recent --name limit-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-464 -A limit-824 -j TEE --gateway 10.0.0.1 -A limit-824 -j TEE --gateway 10.0.0.2 -A limit-824 -m recent --name limit-824 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-465 -A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-825 -m recent --name limit-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-466 -A limit-826 -m recent --name limit-826 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-467 -A limit-827 -m recent --name limit-827 --rsource --mask 255.255.255.255 --set -A limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-468 -A limit-828 -m limit --limit 12/minute -j ULOG -A limit-828 -m recent --name limit-828 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-469 -A limit-829 -m recent --name limit-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-470 -A limit-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-471 -A limit-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-472 -A limit-832 -m limit --limit 1/second -j LOG -A limit-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-473 -A limit-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-474 -A limit-834 -j TEE --gateway 10.0.0.1 -A limit-834 -j TEE --gateway 10.0.0.2 -A limit-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-475 -A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-476 -A limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-477 -A limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-478 -A limit-838 -m limit --limit 12/minute -j ULOG -A limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-479 -A limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-84 -j TEE --gateway 10.0.0.1 -A limit-84 -j TEE --gateway 10.0.0.2 -A limit-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-480 -A limit-840 -j ACCEPT -A limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-481 -A limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-482 -A limit-842 -m limit --limit 1/second -j LOG -A limit-842 -j ACCEPT -A limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-483 -A limit-843 -m limit --limit 1/second -j LOG -A limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-484 -A limit-844 -j TEE --gateway 10.0.0.1 -A limit-844 -j TEE --gateway 10.0.0.2 -A limit-844 -j ACCEPT -A limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-485 -A limit-845 -j TEE --gateway 10.0.0.1 -A limit-845 -j TEE --gateway 10.0.0.2 -A limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-486 -A limit-846 -j ACCEPT -A limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-487 -A limit-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-488 -A limit-848 -m limit --limit 12/minute -j ULOG -A limit-848 -j ACCEPT -A limit-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-489 -A limit-849 -m limit --limit 12/minute -j ULOG -A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-490 -A limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-491 -A limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-492 -A limit-852 -m limit --limit 1/second -j LOG -A limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-493 -A limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-494 -A limit-854 -j TEE --gateway 10.0.0.1 -A limit-854 -j TEE --gateway 10.0.0.2 -A limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-495 -A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-496 -A limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-497 -A limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-498 -A limit-858 -m limit --limit 12/minute -j ULOG -A limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-499 -A limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-500 -A limit-860 -j ACCEPT -A limit-861 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-501 -A limit-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-502 -A limit-862 -m limit --limit 1/second -j LOG -A limit-862 -j ACCEPT -A limit-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-503 -A limit-863 -m limit --limit 1/second -j LOG -A limit-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-504 -A limit-864 -j TEE --gateway 10.0.0.1 -A limit-864 -j TEE --gateway 10.0.0.2 -A limit-864 -j ACCEPT -A limit-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-505 -A limit-865 -j TEE --gateway 10.0.0.1 -A limit-865 -j TEE --gateway 10.0.0.2 -A limit-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-506 -A limit-866 -j ACCEPT -A limit-867 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-507 -A limit-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-508 -A limit-868 -m limit --limit 12/minute -j ULOG -A limit-868 -j ACCEPT -A limit-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-509 -A limit-869 -m limit --limit 12/minute -j ULOG -A limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-510 -A limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-511 -A limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-512 -A limit-872 -m limit --limit 1/second -j LOG -A limit-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-513 -A limit-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-514 -A limit-874 -j TEE --gateway 10.0.0.1 -A limit-874 -j TEE --gateway 10.0.0.2 -A limit-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-515 -A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-516 -A limit-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-517 -A limit-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-518 -A limit-878 -m limit --limit 12/minute -j ULOG -A limit-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-519 -A limit-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-88 -m limit --limit 12/minute -j ULOG -A limit-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-520 -A limit-880 -j ACCEPT -A limit-881 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-521 -A limit-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-522 -A limit-882 -m limit --limit 1/second -j LOG -A limit-882 -j ACCEPT -A limit-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-523 -A limit-883 -m limit --limit 1/second -j LOG -A limit-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-524 -A limit-884 -j TEE --gateway 10.0.0.1 -A limit-884 -j TEE --gateway 10.0.0.2 -A limit-884 -j ACCEPT -A limit-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-525 -A limit-885 -j TEE --gateway 10.0.0.1 -A limit-885 -j TEE --gateway 10.0.0.2 -A limit-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-526 -A limit-886 -j ACCEPT -A limit-887 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-527 -A limit-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-528 -A limit-888 -m limit --limit 12/minute -j ULOG -A limit-888 -j ACCEPT -A limit-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-529 -A limit-889 -m limit --limit 12/minute -j ULOG -A limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-530 -A limit-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-531 -A limit-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-532 -A limit-892 -m limit --limit 1/second -j LOG -A limit-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-533 -A limit-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-534 -A limit-894 -j TEE --gateway 10.0.0.1 -A limit-894 -j TEE --gateway 10.0.0.2 -A limit-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-535 -A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-536 -A limit-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-537 -A limit-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-538 -A limit-898 -m limit --limit 12/minute -j ULOG -A limit-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-539 -A limit-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-9 -m recent --name limit-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-90 -j ACCEPT -A limit-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-540 -A limit-900 -j ACCEPT -A limit-901 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-541 -A limit-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-542 -A limit-902 -m limit --limit 1/second -j LOG -A limit-902 -j ACCEPT -A limit-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-543 -A limit-903 -m limit --limit 1/second -j LOG -A limit-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-544 -A limit-904 -j TEE --gateway 10.0.0.1 -A limit-904 -j TEE --gateway 10.0.0.2 -A limit-904 -j ACCEPT -A limit-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-545 -A limit-905 -j TEE --gateway 10.0.0.1 -A limit-905 -j TEE --gateway 10.0.0.2 -A limit-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-546 -A limit-906 -j ACCEPT -A limit-907 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-547 -A limit-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-548 -A limit-908 -m limit --limit 12/minute -j ULOG -A limit-908 -j ACCEPT -A limit-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-549 -A limit-909 -m limit --limit 12/minute -j ULOG -A limit-91 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-910 -j ACCEPT -A limit-910 -m limit --limit 1/second -j LOG -A limit-910 -j DROP -A limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-911 -j RETURN -A limit-911 -m limit --limit 1/second -j LOG -A limit-911 -j DROP -A limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-912 -j logaccept-0 -A limit-912 -m limit --limit 1/second -j LOG -A limit-912 -j DROP -A limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-913 -j logaccept-1 -A limit-913 -m limit --limit 1/second -j LOG -A limit-913 -j DROP -A limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-914 -j ACCEPT -A limit-914 -m limit --limit 1/second -j LOG -A limit-914 -j DROP -A limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-915 -j logaccept-2 -A limit-915 -m limit --limit 1/second -j LOG -A limit-915 -j DROP -A limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-916 -j ACCEPT -A limit-916 -j DROP -A limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-917 -j RETURN -A limit-917 -j DROP -A limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-918 -j logaccept-3 -A limit-918 -j DROP -A limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-919 -j logaccept-4 -A limit-919 -j DROP -A limit-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG -A limit-92 -j ACCEPT -A limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-920 -j ACCEPT -A limit-920 -j DROP -A limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-921 -j logaccept-5 -A limit-921 -j DROP -A limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-922 -j ACCEPT -A limit-922 -m limit --limit 1/second -j LOG -A limit-922 -j DROP -A limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-923 -j RETURN -A limit-923 -m limit --limit 1/second -j LOG -A limit-923 -j DROP -A limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-924 -j logaccept-6 -A limit-924 -m limit --limit 1/second -j LOG -A limit-924 -j DROP -A limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-925 -j logaccept-7 -A limit-925 -m limit --limit 1/second -j LOG -A limit-925 -j DROP -A limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-926 -j ACCEPT -A limit-926 -m limit --limit 1/second -j LOG -A limit-926 -j DROP -A limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-927 -j logaccept-8 -A limit-927 -m limit --limit 1/second -j LOG -A limit-927 -j DROP -A limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-928 -j ACCEPT -A limit-928 -j TEE --gateway 10.0.0.1 -A limit-928 -j TEE --gateway 10.0.0.2 -A limit-928 -j DROP -A limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-929 -j RETURN -A limit-929 -j TEE --gateway 10.0.0.1 -A limit-929 -j TEE --gateway 10.0.0.2 -A limit-929 -j DROP -A limit-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-93 -m limit --limit 1/second -j LOG -A limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-930 -j logaccept-9 -A limit-930 -j TEE --gateway 10.0.0.1 -A limit-930 -j TEE --gateway 10.0.0.2 -A limit-930 -j DROP -A limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-931 -j logaccept-10 -A limit-931 -j TEE --gateway 10.0.0.1 -A limit-931 -j TEE --gateway 10.0.0.2 -A limit-931 -j DROP -A limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-932 -j ACCEPT -A limit-932 -j TEE --gateway 10.0.0.1 -A limit-932 -j TEE --gateway 10.0.0.2 -A limit-932 -j DROP -A limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-933 -j logaccept-11 -A limit-933 -j TEE --gateway 10.0.0.1 -A limit-933 -j TEE --gateway 10.0.0.2 -A limit-933 -j DROP -A limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-934 -j ACCEPT -A limit-934 -j DROP -A limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-935 -j RETURN -A limit-935 -j DROP -A limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-936 -j logaccept-12 -A limit-936 -j DROP -A limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-937 -j logaccept-13 -A limit-937 -j DROP -A limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-938 -j ACCEPT -A limit-938 -j DROP -A limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-939 -j logaccept-14 -A limit-939 -j DROP -A limit-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-94 -j TEE --gateway 10.0.0.1 -A limit-94 -j TEE --gateway 10.0.0.2 -A limit-94 -j ACCEPT -A limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-940 -j ACCEPT -A limit-940 -m limit --limit 12/minute -j ULOG -A limit-940 -j DROP -A limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-941 -j RETURN -A limit-941 -m limit --limit 12/minute -j ULOG -A limit-941 -j DROP -A limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-942 -j logaccept-15 -A limit-942 -m limit --limit 12/minute -j ULOG -A limit-942 -j DROP -A limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-943 -j logaccept-16 -A limit-943 -m limit --limit 12/minute -j ULOG -A limit-943 -j DROP -A limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-944 -j ACCEPT -A limit-944 -m limit --limit 12/minute -j ULOG -A limit-944 -j DROP -A limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-945 -j logaccept-17 -A limit-945 -m limit --limit 12/minute -j ULOG -A limit-945 -j DROP -A limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-946 -j ACCEPT -A limit-946 -j DROP -A limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-947 -j RETURN -A limit-947 -j DROP -A limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-948 -j logaccept-18 -A limit-948 -j DROP -A limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-949 -j logaccept-19 -A limit-949 -j DROP -A limit-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-95 -j TEE --gateway 10.0.0.1 -A limit-95 -j TEE --gateway 10.0.0.2 -A limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-950 -j ACCEPT -A limit-950 -j DROP -A limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-951 -j logaccept-20 -A limit-951 -j DROP -A limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-952 -j ACCEPT -A limit-952 -m limit --limit 1/second -j LOG -A limit-952 -j DROP -A limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-953 -j RETURN -A limit-953 -m limit --limit 1/second -j LOG -A limit-953 -j DROP -A limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-954 -j logaccept-21 -A limit-954 -m limit --limit 1/second -j LOG -A limit-954 -j DROP -A limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-955 -j logaccept-22 -A limit-955 -m limit --limit 1/second -j LOG -A limit-955 -j DROP -A limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-956 -j ACCEPT -A limit-956 -m limit --limit 1/second -j LOG -A limit-956 -j DROP -A limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-957 -j logaccept-23 -A limit-957 -m limit --limit 1/second -j LOG -A limit-957 -j DROP -A limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-958 -j ACCEPT -A limit-958 -j TEE --gateway 10.0.0.1 -A limit-958 -j TEE --gateway 10.0.0.2 -A limit-958 -j DROP -A limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-959 -j RETURN -A limit-959 -j TEE --gateway 10.0.0.1 -A limit-959 -j TEE --gateway 10.0.0.2 -A limit-959 -j DROP -A limit-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-96 -j ACCEPT -A limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-960 -j logaccept-24 -A limit-960 -j TEE --gateway 10.0.0.1 -A limit-960 -j TEE --gateway 10.0.0.2 -A limit-960 -j DROP -A limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-961 -j logaccept-25 -A limit-961 -j TEE --gateway 10.0.0.1 -A limit-961 -j TEE --gateway 10.0.0.2 -A limit-961 -j DROP -A limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-962 -j ACCEPT -A limit-962 -j TEE --gateway 10.0.0.1 -A limit-962 -j TEE --gateway 10.0.0.2 -A limit-962 -j DROP -A limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-963 -j logaccept-26 -A limit-963 -j TEE --gateway 10.0.0.1 -A limit-963 -j TEE --gateway 10.0.0.2 -A limit-963 -j DROP -A limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-964 -j ACCEPT -A limit-964 -j DROP -A limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-965 -j RETURN -A limit-965 -j DROP -A limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-966 -j logaccept-27 -A limit-966 -j DROP -A limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-967 -j logaccept-28 -A limit-967 -j DROP -A limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-968 -j ACCEPT -A limit-968 -j DROP -A limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-969 -j logaccept-29 -A limit-969 -j DROP -A limit-97 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-970 -j ACCEPT -A limit-970 -m limit --limit 12/minute -j ULOG -A limit-970 -j DROP -A limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-971 -j RETURN -A limit-971 -m limit --limit 12/minute -j ULOG -A limit-971 -j DROP -A limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-972 -j logaccept-30 -A limit-972 -m limit --limit 12/minute -j ULOG -A limit-972 -j DROP -A limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-973 -j logaccept-31 -A limit-973 -m limit --limit 12/minute -j ULOG -A limit-973 -j DROP -A limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-974 -j ACCEPT -A limit-974 -m limit --limit 12/minute -j ULOG -A limit-974 -j DROP -A limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-975 -j logaccept-32 -A limit-975 -m limit --limit 12/minute -j ULOG -A limit-975 -j DROP -A limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-550 -A limit-976 -m recent --name limit-976 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-551 -A limit-977 -m recent --name limit-977 --rsource --mask 255.255.255.255 --set -A limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-552 -A limit-978 -m limit --limit 1/second -j LOG -A limit-978 -m recent --name limit-978 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-553 -A limit-979 -m recent --name limit-979 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -m limit --limit 12/minute -j ULOG -A limit-98 -j ACCEPT -A limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-554 -A limit-980 -j TEE --gateway 10.0.0.1 -A limit-980 -j TEE --gateway 10.0.0.2 -A limit-980 -m recent --name limit-980 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-555 -A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-981 -m recent --name limit-981 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-556 -A limit-982 -m recent --name limit-982 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-557 -A limit-983 -m recent --name limit-983 --rsource --mask 255.255.255.255 --set -A limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-558 -A limit-984 -m limit --limit 12/minute -j ULOG -A limit-984 -m recent --name limit-984 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-559 -A limit-985 -m recent --name limit-985 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-986 -m recent --name limit-986 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-987 -m recent --name limit-987 --rsource --mask 255.255.255.255 --set -A limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-988 -m limit --limit 1/second -j LOG -A limit-988 -m recent --name limit-988 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-989 -m recent --name limit-989 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-99 -m limit --limit 12/minute -j ULOG -A limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-990 -j TEE --gateway 10.0.0.1 -A limit-990 -j TEE --gateway 10.0.0.2 -A limit-990 -m recent --name limit-990 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-991 -m recent --name limit-991 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set -A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-994 -m limit --limit 12/minute -j ULOG -A limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-996 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-997 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-998 -m limit --limit 1/second -j LOG -A limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 -A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 -A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask 255.255.255.255 --set -A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 -A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 -A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask 255.255.255.255 --set -A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 -A limit-ntp-102 -m limit --limit 1/second -j LOG -A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 -A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 -A limit-ntp-104 -j TEE --gateway 10.0.0.1 -A limit-ntp-104 -j TEE --gateway 10.0.0.2 -A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 -A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 -A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 -A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask 255.255.255.255 --set -A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 -A limit-ntp-108 -m limit --limit 12/minute -j ULOG -A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 -A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask 255.255.255.255 --set -A limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 -A limit-ntp-110 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 -A limit-ntp-111 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 -A limit-ntp-112 -m limit --limit 1/second -j LOG -A limit-ntp-112 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 -A limit-ntp-113 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 -A limit-ntp-114 -j TEE --gateway 10.0.0.1 -A limit-ntp-114 -j TEE --gateway 10.0.0.2 -A limit-ntp-114 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 -A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-115 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 -A limit-ntp-116 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 -A limit-ntp-117 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 -A limit-ntp-118 -m limit --limit 12/minute -j ULOG -A limit-ntp-118 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 -A limit-ntp-119 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-12 -m limit --limit 1/second -j LOG -A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-120 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 -A limit-ntp-120 -j ACCEPT -A limit-ntp-122 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 -A limit-ntp-122 -m limit --limit 1/second -j LOG -A limit-ntp-122 -j ACCEPT -A limit-ntp-123 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 -A limit-ntp-123 -m limit --limit 1/second -j LOG -A limit-ntp-124 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 -A limit-ntp-124 -j TEE --gateway 10.0.0.1 -A limit-ntp-124 -j TEE --gateway 10.0.0.2 -A limit-ntp-124 -j ACCEPT -A limit-ntp-125 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 -A limit-ntp-125 -j TEE --gateway 10.0.0.1 -A limit-ntp-125 -j TEE --gateway 10.0.0.2 -A limit-ntp-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 -A limit-ntp-126 -j ACCEPT -A limit-ntp-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 -A limit-ntp-128 -m limit --limit 12/minute -j ULOG -A limit-ntp-128 -j ACCEPT -A limit-ntp-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 -A limit-ntp-129 -m limit --limit 12/minute -j ULOG -A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 -A limit-ntp-130 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 -A limit-ntp-131 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 -A limit-ntp-132 -m limit --limit 1/second -j LOG -A limit-ntp-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 -A limit-ntp-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 -A limit-ntp-134 -j TEE --gateway 10.0.0.1 -A limit-ntp-134 -j TEE --gateway 10.0.0.2 -A limit-ntp-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 -A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 -A limit-ntp-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 -A limit-ntp-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 -A limit-ntp-138 -m limit --limit 12/minute -j ULOG -A limit-ntp-138 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 -A limit-ntp-139 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-14 -j TEE --gateway 10.0.0.1 -A limit-ntp-14 -j TEE --gateway 10.0.0.2 -A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 -A limit-ntp-140 -j ACCEPT -A limit-ntp-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 -A limit-ntp-142 -m limit --limit 1/second -j LOG -A limit-ntp-142 -j ACCEPT -A limit-ntp-143 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 -A limit-ntp-143 -m limit --limit 1/second -j LOG -A limit-ntp-144 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 -A limit-ntp-144 -j TEE --gateway 10.0.0.1 -A limit-ntp-144 -j TEE --gateway 10.0.0.2 -A limit-ntp-144 -j ACCEPT -A limit-ntp-145 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 -A limit-ntp-145 -j TEE --gateway 10.0.0.1 -A limit-ntp-145 -j TEE --gateway 10.0.0.2 -A limit-ntp-146 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 -A limit-ntp-146 -j ACCEPT -A limit-ntp-148 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 -A limit-ntp-148 -m limit --limit 12/minute -j ULOG -A limit-ntp-148 -j ACCEPT -A limit-ntp-149 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 -A limit-ntp-149 -m limit --limit 12/minute -j ULOG -A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 -A limit-ntp-150 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 -A limit-ntp-151 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 -A limit-ntp-152 -m limit --limit 1/second -j LOG -A limit-ntp-152 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 -A limit-ntp-153 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 -A limit-ntp-154 -j TEE --gateway 10.0.0.1 -A limit-ntp-154 -j TEE --gateway 10.0.0.2 -A limit-ntp-154 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 -A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-155 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 -A limit-ntp-156 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 -A limit-ntp-157 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 -A limit-ntp-158 -m limit --limit 12/minute -j ULOG -A limit-ntp-158 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 -A limit-ntp-159 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-160 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 -A limit-ntp-160 -j ACCEPT -A limit-ntp-162 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 -A limit-ntp-162 -m limit --limit 1/second -j LOG -A limit-ntp-162 -j ACCEPT -A limit-ntp-163 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 -A limit-ntp-163 -m limit --limit 1/second -j LOG -A limit-ntp-164 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 -A limit-ntp-164 -j TEE --gateway 10.0.0.1 -A limit-ntp-164 -j TEE --gateway 10.0.0.2 -A limit-ntp-164 -j ACCEPT -A limit-ntp-165 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 -A limit-ntp-165 -j TEE --gateway 10.0.0.1 -A limit-ntp-165 -j TEE --gateway 10.0.0.2 -A limit-ntp-166 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 -A limit-ntp-166 -j ACCEPT -A limit-ntp-168 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 -A limit-ntp-168 -m limit --limit 12/minute -j ULOG -A limit-ntp-168 -j ACCEPT -A limit-ntp-169 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 -A limit-ntp-169 -m limit --limit 12/minute -j ULOG -A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask 255.255.255.255 --set -A limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 -A limit-ntp-170 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 -A limit-ntp-171 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 -A limit-ntp-172 -m limit --limit 1/second -j LOG -A limit-ntp-172 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 -A limit-ntp-173 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 -A limit-ntp-174 -j TEE --gateway 10.0.0.1 -A limit-ntp-174 -j TEE --gateway 10.0.0.2 -A limit-ntp-174 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 -A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-175 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 -A limit-ntp-176 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 -A limit-ntp-177 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 -A limit-ntp-178 -m limit --limit 12/minute -j ULOG -A limit-ntp-178 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 -A limit-ntp-179 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-18 -m limit --limit 12/minute -j ULOG -A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-180 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 -A limit-ntp-180 -j ACCEPT -A limit-ntp-182 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 -A limit-ntp-182 -m limit --limit 1/second -j LOG -A limit-ntp-182 -j ACCEPT -A limit-ntp-183 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 -A limit-ntp-183 -m limit --limit 1/second -j LOG -A limit-ntp-184 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 -A limit-ntp-184 -j TEE --gateway 10.0.0.1 -A limit-ntp-184 -j TEE --gateway 10.0.0.2 -A limit-ntp-184 -j ACCEPT -A limit-ntp-185 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 -A limit-ntp-185 -j TEE --gateway 10.0.0.1 -A limit-ntp-185 -j TEE --gateway 10.0.0.2 -A limit-ntp-186 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 -A limit-ntp-186 -j ACCEPT -A limit-ntp-188 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 -A limit-ntp-188 -m limit --limit 12/minute -j ULOG -A limit-ntp-188 -j ACCEPT -A limit-ntp-189 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 -A limit-ntp-189 -m limit --limit 12/minute -j ULOG -A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 -A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 -A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask 255.255.255.255 --set -A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 -A limit-ntp-192 -m limit --limit 1/second -j LOG -A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 -A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 -A limit-ntp-194 -j TEE --gateway 10.0.0.1 -A limit-ntp-194 -j TEE --gateway 10.0.0.2 -A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 -A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 -A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 -A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask 255.255.255.255 --set -A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 -A limit-ntp-198 -m limit --limit 12/minute -j ULOG -A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 -A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 -A limit-ntp-2 -m limit --limit 1/second -j LOG -A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-20 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 -A limit-ntp-200 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 -A limit-ntp-201 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 -A limit-ntp-202 -m limit --limit 1/second -j LOG -A limit-ntp-202 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 -A limit-ntp-203 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 -A limit-ntp-204 -j TEE --gateway 10.0.0.1 -A limit-ntp-204 -j TEE --gateway 10.0.0.2 -A limit-ntp-204 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 -A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-205 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 -A limit-ntp-206 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 -A limit-ntp-207 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 -A limit-ntp-208 -m limit --limit 12/minute -j ULOG -A limit-ntp-208 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 -A limit-ntp-209 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-21 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-210 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 -A limit-ntp-210 -j ACCEPT -A limit-ntp-212 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 -A limit-ntp-212 -m limit --limit 1/second -j LOG -A limit-ntp-212 -j ACCEPT -A limit-ntp-213 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 -A limit-ntp-213 -m limit --limit 1/second -j LOG -A limit-ntp-214 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 -A limit-ntp-214 -j TEE --gateway 10.0.0.1 -A limit-ntp-214 -j TEE --gateway 10.0.0.2 -A limit-ntp-214 -j ACCEPT -A limit-ntp-215 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 -A limit-ntp-215 -j TEE --gateway 10.0.0.1 -A limit-ntp-215 -j TEE --gateway 10.0.0.2 -A limit-ntp-216 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 -A limit-ntp-216 -j ACCEPT -A limit-ntp-218 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 -A limit-ntp-218 -m limit --limit 12/minute -j ULOG -A limit-ntp-218 -j ACCEPT -A limit-ntp-219 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 -A limit-ntp-219 -m limit --limit 12/minute -j ULOG -A limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-22 -m limit --limit 1/second -j LOG -A limit-ntp-22 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 -A limit-ntp-220 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 -A limit-ntp-221 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 -A limit-ntp-222 -m limit --limit 1/second -j LOG -A limit-ntp-222 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 -A limit-ntp-223 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 -A limit-ntp-224 -j TEE --gateway 10.0.0.1 -A limit-ntp-224 -j TEE --gateway 10.0.0.2 -A limit-ntp-224 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 -A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-225 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 -A limit-ntp-226 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 -A limit-ntp-227 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 -A limit-ntp-228 -m limit --limit 12/minute -j ULOG -A limit-ntp-228 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 -A limit-ntp-229 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-23 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-230 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 -A limit-ntp-230 -j ACCEPT -A limit-ntp-232 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 -A limit-ntp-232 -m limit --limit 1/second -j LOG -A limit-ntp-232 -j ACCEPT -A limit-ntp-233 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 -A limit-ntp-233 -m limit --limit 1/second -j LOG -A limit-ntp-234 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 -A limit-ntp-234 -j TEE --gateway 10.0.0.1 -A limit-ntp-234 -j TEE --gateway 10.0.0.2 -A limit-ntp-234 -j ACCEPT -A limit-ntp-235 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 -A limit-ntp-235 -j TEE --gateway 10.0.0.1 -A limit-ntp-235 -j TEE --gateway 10.0.0.2 -A limit-ntp-236 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 -A limit-ntp-236 -j ACCEPT -A limit-ntp-238 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 -A limit-ntp-238 -m limit --limit 12/minute -j ULOG -A limit-ntp-238 -j ACCEPT -A limit-ntp-239 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 -A limit-ntp-239 -m limit --limit 12/minute -j ULOG -A limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-24 -j TEE --gateway 10.0.0.1 -A limit-ntp-24 -j TEE --gateway 10.0.0.2 -A limit-ntp-24 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 -A limit-ntp-240 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 -A limit-ntp-241 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 -A limit-ntp-242 -m limit --limit 1/second -j LOG -A limit-ntp-242 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 -A limit-ntp-243 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 -A limit-ntp-244 -j TEE --gateway 10.0.0.1 -A limit-ntp-244 -j TEE --gateway 10.0.0.2 -A limit-ntp-244 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 -A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-245 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 -A limit-ntp-246 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 -A limit-ntp-247 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 -A limit-ntp-248 -m limit --limit 12/minute -j ULOG -A limit-ntp-248 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 -A limit-ntp-249 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-25 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-250 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 -A limit-ntp-250 -j ACCEPT -A limit-ntp-252 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 -A limit-ntp-252 -m limit --limit 1/second -j LOG -A limit-ntp-252 -j ACCEPT -A limit-ntp-253 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 -A limit-ntp-253 -m limit --limit 1/second -j LOG -A limit-ntp-254 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 -A limit-ntp-254 -j TEE --gateway 10.0.0.1 -A limit-ntp-254 -j TEE --gateway 10.0.0.2 -A limit-ntp-254 -j ACCEPT -A limit-ntp-255 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 -A limit-ntp-255 -j TEE --gateway 10.0.0.1 -A limit-ntp-255 -j TEE --gateway 10.0.0.2 -A limit-ntp-256 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 -A limit-ntp-256 -j ACCEPT -A limit-ntp-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 -A limit-ntp-258 -m limit --limit 12/minute -j ULOG -A limit-ntp-258 -j ACCEPT -A limit-ntp-259 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 -A limit-ntp-259 -m limit --limit 12/minute -j ULOG -A limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-26 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 -A limit-ntp-260 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 -A limit-ntp-261 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 -A limit-ntp-262 -m limit --limit 1/second -j LOG -A limit-ntp-262 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 -A limit-ntp-263 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 -A limit-ntp-264 -j TEE --gateway 10.0.0.1 -A limit-ntp-264 -j TEE --gateway 10.0.0.2 -A limit-ntp-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 -A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 -A limit-ntp-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 -A limit-ntp-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 -A limit-ntp-268 -m limit --limit 12/minute -j ULOG -A limit-ntp-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 -A limit-ntp-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-27 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 -A limit-ntp-270 -j ACCEPT -A limit-ntp-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 -A limit-ntp-272 -m limit --limit 1/second -j LOG -A limit-ntp-272 -j ACCEPT -A limit-ntp-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 -A limit-ntp-273 -m limit --limit 1/second -j LOG -A limit-ntp-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 -A limit-ntp-274 -j TEE --gateway 10.0.0.1 -A limit-ntp-274 -j TEE --gateway 10.0.0.2 -A limit-ntp-274 -j ACCEPT -A limit-ntp-275 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 -A limit-ntp-275 -j TEE --gateway 10.0.0.1 -A limit-ntp-275 -j TEE --gateway 10.0.0.2 -A limit-ntp-276 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 -A limit-ntp-276 -j ACCEPT -A limit-ntp-278 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 -A limit-ntp-278 -m limit --limit 12/minute -j ULOG -A limit-ntp-278 -j ACCEPT -A limit-ntp-279 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 -A limit-ntp-279 -m limit --limit 12/minute -j ULOG -A limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-28 -m limit --limit 12/minute -j ULOG -A limit-ntp-28 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask 255.255.255.255 --set -A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-282 -m limit --limit 1/second -j LOG -A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-284 -j TEE --gateway 10.0.0.1 -A limit-ntp-284 -j TEE --gateway 10.0.0.2 -A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask 255.255.255.255 --set -A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-288 -m limit --limit 12/minute -j ULOG -A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-29 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-292 -m limit --limit 1/second -j LOG -A limit-ntp-292 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-293 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-294 -j TEE --gateway 10.0.0.1 -A limit-ntp-294 -j TEE --gateway 10.0.0.2 -A limit-ntp-294 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-295 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-296 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-297 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-298 -m limit --limit 12/minute -j ULOG -A limit-ntp-298 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-299 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 -A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-30 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-30 -j ACCEPT -A limit-ntp-300 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-300 -j ACCEPT -A limit-ntp-302 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-302 -m limit --limit 1/second -j LOG -A limit-ntp-302 -j ACCEPT -A limit-ntp-303 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-303 -m limit --limit 1/second -j LOG -A limit-ntp-304 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-304 -j TEE --gateway 10.0.0.1 -A limit-ntp-304 -j TEE --gateway 10.0.0.2 -A limit-ntp-304 -j ACCEPT -A limit-ntp-305 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-305 -j TEE --gateway 10.0.0.1 -A limit-ntp-305 -j TEE --gateway 10.0.0.2 -A limit-ntp-306 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-306 -j ACCEPT -A limit-ntp-308 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-308 -m limit --limit 12/minute -j ULOG -A limit-ntp-308 -j ACCEPT -A limit-ntp-309 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-309 -m limit --limit 12/minute -j ULOG -A limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-310 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-311 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-312 -m limit --limit 1/second -j LOG -A limit-ntp-312 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-313 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-314 -j TEE --gateway 10.0.0.1 -A limit-ntp-314 -j TEE --gateway 10.0.0.2 -A limit-ntp-314 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-315 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-316 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-317 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-318 -m limit --limit 12/minute -j ULOG -A limit-ntp-318 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-319 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-32 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-32 -m limit --limit 1/second -j LOG -A limit-ntp-32 -j ACCEPT -A limit-ntp-320 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-320 -j ACCEPT -A limit-ntp-322 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-322 -m limit --limit 1/second -j LOG -A limit-ntp-322 -j ACCEPT -A limit-ntp-323 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-323 -m limit --limit 1/second -j LOG -A limit-ntp-324 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-324 -j TEE --gateway 10.0.0.1 -A limit-ntp-324 -j TEE --gateway 10.0.0.2 -A limit-ntp-324 -j ACCEPT -A limit-ntp-325 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-325 -j TEE --gateway 10.0.0.1 -A limit-ntp-325 -j TEE --gateway 10.0.0.2 -A limit-ntp-326 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-326 -j ACCEPT -A limit-ntp-328 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-328 -m limit --limit 12/minute -j ULOG -A limit-ntp-328 -j ACCEPT -A limit-ntp-329 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-329 -m limit --limit 12/minute -j ULOG -A limit-ntp-33 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-33 -m limit --limit 1/second -j LOG -A limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-330 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-331 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-332 -m limit --limit 1/second -j LOG -A limit-ntp-332 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-333 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-334 -j TEE --gateway 10.0.0.1 -A limit-ntp-334 -j TEE --gateway 10.0.0.2 -A limit-ntp-334 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-335 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-336 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-337 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-338 -m limit --limit 12/minute -j ULOG -A limit-ntp-338 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-339 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-34 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-34 -j TEE --gateway 10.0.0.1 -A limit-ntp-34 -j TEE --gateway 10.0.0.2 -A limit-ntp-34 -j ACCEPT -A limit-ntp-340 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-340 -j ACCEPT -A limit-ntp-342 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-342 -m limit --limit 1/second -j LOG -A limit-ntp-342 -j ACCEPT -A limit-ntp-343 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-343 -m limit --limit 1/second -j LOG -A limit-ntp-344 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-344 -j TEE --gateway 10.0.0.1 -A limit-ntp-344 -j TEE --gateway 10.0.0.2 -A limit-ntp-344 -j ACCEPT -A limit-ntp-345 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-345 -j TEE --gateway 10.0.0.1 -A limit-ntp-345 -j TEE --gateway 10.0.0.2 -A limit-ntp-346 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-346 -j ACCEPT -A limit-ntp-348 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-348 -m limit --limit 12/minute -j ULOG -A limit-ntp-348 -j ACCEPT -A limit-ntp-349 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-349 -m limit --limit 12/minute -j ULOG -A limit-ntp-35 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-35 -j TEE --gateway 10.0.0.1 -A limit-ntp-35 -j TEE --gateway 10.0.0.2 -A limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-350 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-351 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-352 -m limit --limit 1/second -j LOG -A limit-ntp-352 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-353 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-354 -j TEE --gateway 10.0.0.1 -A limit-ntp-354 -j TEE --gateway 10.0.0.2 -A limit-ntp-354 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-355 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-356 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-357 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-358 -m limit --limit 12/minute -j ULOG -A limit-ntp-358 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-359 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-36 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-36 -j ACCEPT -A limit-ntp-360 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-360 -j ACCEPT -A limit-ntp-362 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-362 -m limit --limit 1/second -j LOG -A limit-ntp-362 -j ACCEPT -A limit-ntp-363 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-363 -m limit --limit 1/second -j LOG -A limit-ntp-364 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-364 -j TEE --gateway 10.0.0.1 -A limit-ntp-364 -j TEE --gateway 10.0.0.2 -A limit-ntp-364 -j ACCEPT -A limit-ntp-365 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-365 -j TEE --gateway 10.0.0.1 -A limit-ntp-365 -j TEE --gateway 10.0.0.2 -A limit-ntp-366 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-366 -j ACCEPT -A limit-ntp-368 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-368 -m limit --limit 12/minute -j ULOG -A limit-ntp-368 -j ACCEPT -A limit-ntp-369 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-369 -m limit --limit 12/minute -j ULOG -A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 -A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 -A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask 255.255.255.255 --set -A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 -A limit-ntp-372 -m limit --limit 1/second -j LOG -A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 -A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 -A limit-ntp-374 -j TEE --gateway 10.0.0.1 -A limit-ntp-374 -j TEE --gateway 10.0.0.2 -A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 -A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 -A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 -A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask 255.255.255.255 --set -A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 -A limit-ntp-378 -m limit --limit 12/minute -j ULOG -A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 -A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-38 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-38 -m limit --limit 12/minute -j ULOG -A limit-ntp-38 -j ACCEPT -A limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 -A limit-ntp-380 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 -A limit-ntp-381 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 -A limit-ntp-382 -m limit --limit 1/second -j LOG -A limit-ntp-382 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 -A limit-ntp-383 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 -A limit-ntp-384 -j TEE --gateway 10.0.0.1 -A limit-ntp-384 -j TEE --gateway 10.0.0.2 -A limit-ntp-384 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 -A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-385 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 -A limit-ntp-386 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 -A limit-ntp-387 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 -A limit-ntp-388 -m limit --limit 12/minute -j ULOG -A limit-ntp-388 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 -A limit-ntp-389 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-39 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-39 -m limit --limit 12/minute -j ULOG -A limit-ntp-390 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 -A limit-ntp-390 -j ACCEPT -A limit-ntp-392 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 -A limit-ntp-392 -m limit --limit 1/second -j LOG -A limit-ntp-392 -j ACCEPT -A limit-ntp-393 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 -A limit-ntp-393 -m limit --limit 1/second -j LOG -A limit-ntp-394 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 -A limit-ntp-394 -j TEE --gateway 10.0.0.1 -A limit-ntp-394 -j TEE --gateway 10.0.0.2 -A limit-ntp-394 -j ACCEPT -A limit-ntp-395 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 -A limit-ntp-395 -j TEE --gateway 10.0.0.1 -A limit-ntp-395 -j TEE --gateway 10.0.0.2 -A limit-ntp-396 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 -A limit-ntp-396 -j ACCEPT -A limit-ntp-398 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 -A limit-ntp-398 -m limit --limit 12/minute -j ULOG -A limit-ntp-398 -j ACCEPT -A limit-ntp-399 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 -A limit-ntp-399 -m limit --limit 12/minute -j ULOG -A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 -A limit-ntp-4 -j TEE --gateway 10.0.0.1 -A limit-ntp-4 -j TEE --gateway 10.0.0.2 -A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-40 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 -A limit-ntp-400 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 -A limit-ntp-401 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 -A limit-ntp-402 -m limit --limit 1/second -j LOG -A limit-ntp-402 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 -A limit-ntp-403 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 -A limit-ntp-404 -j TEE --gateway 10.0.0.1 -A limit-ntp-404 -j TEE --gateway 10.0.0.2 -A limit-ntp-404 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 -A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-405 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 -A limit-ntp-406 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 -A limit-ntp-407 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 -A limit-ntp-408 -m limit --limit 12/minute -j ULOG -A limit-ntp-408 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 -A limit-ntp-409 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-41 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-410 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 -A limit-ntp-410 -j ACCEPT -A limit-ntp-412 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 -A limit-ntp-412 -m limit --limit 1/second -j LOG -A limit-ntp-412 -j ACCEPT -A limit-ntp-413 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 -A limit-ntp-413 -m limit --limit 1/second -j LOG -A limit-ntp-414 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 -A limit-ntp-414 -j TEE --gateway 10.0.0.1 -A limit-ntp-414 -j TEE --gateway 10.0.0.2 -A limit-ntp-414 -j ACCEPT -A limit-ntp-415 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 -A limit-ntp-415 -j TEE --gateway 10.0.0.1 -A limit-ntp-415 -j TEE --gateway 10.0.0.2 -A limit-ntp-416 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 -A limit-ntp-416 -j ACCEPT -A limit-ntp-418 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 -A limit-ntp-418 -m limit --limit 12/minute -j ULOG -A limit-ntp-418 -j ACCEPT -A limit-ntp-419 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 -A limit-ntp-419 -m limit --limit 12/minute -j ULOG -A limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-42 -m limit --limit 1/second -j LOG -A limit-ntp-42 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 -A limit-ntp-420 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 -A limit-ntp-421 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 -A limit-ntp-422 -m limit --limit 1/second -j LOG -A limit-ntp-422 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 -A limit-ntp-423 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 -A limit-ntp-424 -j TEE --gateway 10.0.0.1 -A limit-ntp-424 -j TEE --gateway 10.0.0.2 -A limit-ntp-424 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 -A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-425 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 -A limit-ntp-426 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 -A limit-ntp-427 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 -A limit-ntp-428 -m limit --limit 12/minute -j ULOG -A limit-ntp-428 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 -A limit-ntp-429 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-43 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-430 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 -A limit-ntp-430 -j ACCEPT -A limit-ntp-432 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 -A limit-ntp-432 -m limit --limit 1/second -j LOG -A limit-ntp-432 -j ACCEPT -A limit-ntp-433 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 -A limit-ntp-433 -m limit --limit 1/second -j LOG -A limit-ntp-434 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 -A limit-ntp-434 -j TEE --gateway 10.0.0.1 -A limit-ntp-434 -j TEE --gateway 10.0.0.2 -A limit-ntp-434 -j ACCEPT -A limit-ntp-435 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 -A limit-ntp-435 -j TEE --gateway 10.0.0.1 -A limit-ntp-435 -j TEE --gateway 10.0.0.2 -A limit-ntp-436 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 -A limit-ntp-436 -j ACCEPT -A limit-ntp-438 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 -A limit-ntp-438 -m limit --limit 12/minute -j ULOG -A limit-ntp-438 -j ACCEPT -A limit-ntp-439 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 -A limit-ntp-439 -m limit --limit 12/minute -j ULOG -A limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-44 -j TEE --gateway 10.0.0.1 -A limit-ntp-44 -j TEE --gateway 10.0.0.2 -A limit-ntp-44 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 -A limit-ntp-440 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 -A limit-ntp-441 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 -A limit-ntp-442 -m limit --limit 1/second -j LOG -A limit-ntp-442 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 -A limit-ntp-443 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 -A limit-ntp-444 -j TEE --gateway 10.0.0.1 -A limit-ntp-444 -j TEE --gateway 10.0.0.2 -A limit-ntp-444 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 -A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-445 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 -A limit-ntp-446 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 -A limit-ntp-447 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 -A limit-ntp-448 -m limit --limit 12/minute -j ULOG -A limit-ntp-448 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 -A limit-ntp-449 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-45 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-450 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 -A limit-ntp-450 -j ACCEPT -A limit-ntp-452 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 -A limit-ntp-452 -m limit --limit 1/second -j LOG -A limit-ntp-452 -j ACCEPT -A limit-ntp-453 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 -A limit-ntp-453 -m limit --limit 1/second -j LOG -A limit-ntp-454 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 -A limit-ntp-454 -j TEE --gateway 10.0.0.1 -A limit-ntp-454 -j TEE --gateway 10.0.0.2 -A limit-ntp-454 -j ACCEPT -A limit-ntp-455 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 -A limit-ntp-455 -j TEE --gateway 10.0.0.1 -A limit-ntp-455 -j TEE --gateway 10.0.0.2 -A limit-ntp-456 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 -A limit-ntp-456 -j ACCEPT -A limit-ntp-458 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 -A limit-ntp-458 -m limit --limit 12/minute -j ULOG -A limit-ntp-458 -j ACCEPT -A limit-ntp-459 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 -A limit-ntp-459 -m limit --limit 12/minute -j ULOG -A limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-46 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask 255.255.255.255 --set -A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-462 -m limit --limit 1/second -j LOG -A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-464 -j TEE --gateway 10.0.0.1 -A limit-ntp-464 -j TEE --gateway 10.0.0.2 -A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask 255.255.255.255 --set -A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-468 -m limit --limit 12/minute -j ULOG -A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-47 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-470 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-471 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-472 -m limit --limit 1/second -j LOG -A limit-ntp-472 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-473 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-474 -j TEE --gateway 10.0.0.1 -A limit-ntp-474 -j TEE --gateway 10.0.0.2 -A limit-ntp-474 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-475 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-476 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-477 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-478 -m limit --limit 12/minute -j ULOG -A limit-ntp-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-48 -m limit --limit 12/minute -j ULOG -A limit-ntp-48 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-480 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-480 -j ACCEPT -A limit-ntp-482 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-482 -m limit --limit 1/second -j LOG -A limit-ntp-482 -j ACCEPT -A limit-ntp-483 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-483 -m limit --limit 1/second -j LOG -A limit-ntp-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-484 -j TEE --gateway 10.0.0.1 -A limit-ntp-484 -j TEE --gateway 10.0.0.2 -A limit-ntp-484 -j ACCEPT -A limit-ntp-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-485 -j TEE --gateway 10.0.0.1 -A limit-ntp-485 -j TEE --gateway 10.0.0.2 -A limit-ntp-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-486 -j ACCEPT -A limit-ntp-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-488 -m limit --limit 12/minute -j ULOG -A limit-ntp-488 -j ACCEPT -A limit-ntp-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-489 -m limit --limit 12/minute -j ULOG -A limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-49 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-492 -m limit --limit 1/second -j LOG -A limit-ntp-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-494 -j TEE --gateway 10.0.0.1 -A limit-ntp-494 -j TEE --gateway 10.0.0.2 -A limit-ntp-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-496 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-497 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-498 -m limit --limit 12/minute -j ULOG -A limit-ntp-498 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-499 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 -A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-50 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-50 -j ACCEPT -A limit-ntp-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-500 -j ACCEPT -A limit-ntp-502 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-502 -m limit --limit 1/second -j LOG -A limit-ntp-502 -j ACCEPT -A limit-ntp-503 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-503 -m limit --limit 1/second -j LOG -A limit-ntp-504 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-504 -j TEE --gateway 10.0.0.1 -A limit-ntp-504 -j TEE --gateway 10.0.0.2 -A limit-ntp-504 -j ACCEPT -A limit-ntp-505 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-505 -j TEE --gateway 10.0.0.1 -A limit-ntp-505 -j TEE --gateway 10.0.0.2 -A limit-ntp-506 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-506 -j ACCEPT -A limit-ntp-508 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-508 -m limit --limit 12/minute -j ULOG -A limit-ntp-508 -j ACCEPT -A limit-ntp-509 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-509 -m limit --limit 12/minute -j ULOG -A limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-510 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-511 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-512 -m limit --limit 1/second -j LOG -A limit-ntp-512 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-513 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-514 -j TEE --gateway 10.0.0.1 -A limit-ntp-514 -j TEE --gateway 10.0.0.2 -A limit-ntp-514 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-515 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-516 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-517 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-518 -m limit --limit 12/minute -j ULOG -A limit-ntp-518 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-519 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-52 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-52 -m limit --limit 1/second -j LOG -A limit-ntp-52 -j ACCEPT -A limit-ntp-520 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-520 -j ACCEPT -A limit-ntp-522 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-522 -m limit --limit 1/second -j LOG -A limit-ntp-522 -j ACCEPT -A limit-ntp-523 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-523 -m limit --limit 1/second -j LOG -A limit-ntp-524 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-524 -j TEE --gateway 10.0.0.1 -A limit-ntp-524 -j TEE --gateway 10.0.0.2 -A limit-ntp-524 -j ACCEPT -A limit-ntp-525 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-525 -j TEE --gateway 10.0.0.1 -A limit-ntp-525 -j TEE --gateway 10.0.0.2 -A limit-ntp-526 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-526 -j ACCEPT -A limit-ntp-528 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-528 -m limit --limit 12/minute -j ULOG -A limit-ntp-528 -j ACCEPT -A limit-ntp-529 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-529 -m limit --limit 12/minute -j ULOG -A limit-ntp-53 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-53 -m limit --limit 1/second -j LOG -A limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-530 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-531 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-532 -m limit --limit 1/second -j LOG -A limit-ntp-532 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-533 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-534 -j TEE --gateway 10.0.0.1 -A limit-ntp-534 -j TEE --gateway 10.0.0.2 -A limit-ntp-534 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-535 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-536 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-537 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-538 -m limit --limit 12/minute -j ULOG -A limit-ntp-538 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-539 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-54 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-54 -j TEE --gateway 10.0.0.1 -A limit-ntp-54 -j TEE --gateway 10.0.0.2 -A limit-ntp-54 -j ACCEPT -A limit-ntp-540 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-540 -j ACCEPT -A limit-ntp-542 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-542 -m limit --limit 1/second -j LOG -A limit-ntp-542 -j ACCEPT -A limit-ntp-543 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-543 -m limit --limit 1/second -j LOG -A limit-ntp-544 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-544 -j TEE --gateway 10.0.0.1 -A limit-ntp-544 -j TEE --gateway 10.0.0.2 -A limit-ntp-544 -j ACCEPT -A limit-ntp-545 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-545 -j TEE --gateway 10.0.0.1 -A limit-ntp-545 -j TEE --gateway 10.0.0.2 -A limit-ntp-546 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-546 -j ACCEPT -A limit-ntp-548 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-548 -m limit --limit 12/minute -j ULOG -A limit-ntp-548 -j ACCEPT -A limit-ntp-549 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-549 -m limit --limit 12/minute -j ULOG -A limit-ntp-55 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-55 -j TEE --gateway 10.0.0.1 -A limit-ntp-55 -j TEE --gateway 10.0.0.2 -A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 -A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 -A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask 255.255.255.255 --set -A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 -A limit-ntp-552 -m limit --limit 1/second -j LOG -A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 -A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 -A limit-ntp-554 -j TEE --gateway 10.0.0.1 -A limit-ntp-554 -j TEE --gateway 10.0.0.2 -A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 -A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 -A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 -A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask 255.255.255.255 --set -A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 -A limit-ntp-558 -m limit --limit 12/minute -j ULOG -A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 -A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-56 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-56 -j ACCEPT -A limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 -A limit-ntp-560 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 -A limit-ntp-561 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 -A limit-ntp-562 -m limit --limit 1/second -j LOG -A limit-ntp-562 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 -A limit-ntp-563 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 -A limit-ntp-564 -j TEE --gateway 10.0.0.1 -A limit-ntp-564 -j TEE --gateway 10.0.0.2 -A limit-ntp-564 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 -A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-565 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 -A limit-ntp-566 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 -A limit-ntp-567 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 -A limit-ntp-568 -m limit --limit 12/minute -j ULOG -A limit-ntp-568 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 -A limit-ntp-569 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-570 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 -A limit-ntp-570 -j ACCEPT -A limit-ntp-572 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 -A limit-ntp-572 -m limit --limit 1/second -j LOG -A limit-ntp-572 -j ACCEPT -A limit-ntp-573 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 -A limit-ntp-573 -m limit --limit 1/second -j LOG -A limit-ntp-574 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 -A limit-ntp-574 -j TEE --gateway 10.0.0.1 -A limit-ntp-574 -j TEE --gateway 10.0.0.2 -A limit-ntp-574 -j ACCEPT -A limit-ntp-575 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 -A limit-ntp-575 -j TEE --gateway 10.0.0.1 -A limit-ntp-575 -j TEE --gateway 10.0.0.2 -A limit-ntp-576 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 -A limit-ntp-576 -j ACCEPT -A limit-ntp-578 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 -A limit-ntp-578 -m limit --limit 12/minute -j ULOG -A limit-ntp-578 -j ACCEPT -A limit-ntp-579 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 -A limit-ntp-579 -m limit --limit 12/minute -j ULOG -A limit-ntp-58 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-58 -m limit --limit 12/minute -j ULOG -A limit-ntp-58 -j ACCEPT -A limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 -A limit-ntp-580 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 -A limit-ntp-581 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 -A limit-ntp-582 -m limit --limit 1/second -j LOG -A limit-ntp-582 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 -A limit-ntp-583 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 -A limit-ntp-584 -j TEE --gateway 10.0.0.1 -A limit-ntp-584 -j TEE --gateway 10.0.0.2 -A limit-ntp-584 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 -A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-585 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 -A limit-ntp-586 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 -A limit-ntp-587 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 -A limit-ntp-588 -m limit --limit 12/minute -j ULOG -A limit-ntp-588 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 -A limit-ntp-589 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-59 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-59 -m limit --limit 12/minute -j ULOG -A limit-ntp-590 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 -A limit-ntp-590 -j ACCEPT -A limit-ntp-592 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 -A limit-ntp-592 -m limit --limit 1/second -j LOG -A limit-ntp-592 -j ACCEPT -A limit-ntp-593 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 -A limit-ntp-593 -m limit --limit 1/second -j LOG -A limit-ntp-594 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 -A limit-ntp-594 -j TEE --gateway 10.0.0.1 -A limit-ntp-594 -j TEE --gateway 10.0.0.2 -A limit-ntp-594 -j ACCEPT -A limit-ntp-595 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 -A limit-ntp-595 -j TEE --gateway 10.0.0.1 -A limit-ntp-595 -j TEE --gateway 10.0.0.2 -A limit-ntp-596 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 -A limit-ntp-596 -j ACCEPT -A limit-ntp-598 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 -A limit-ntp-598 -m limit --limit 12/minute -j ULOG -A limit-ntp-598 -j ACCEPT -A limit-ntp-599 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 -A limit-ntp-599 -m limit --limit 12/minute -j ULOG -A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 -A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-60 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 -A limit-ntp-600 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 -A limit-ntp-601 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 -A limit-ntp-602 -m limit --limit 1/second -j LOG -A limit-ntp-602 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 -A limit-ntp-603 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 -A limit-ntp-604 -j TEE --gateway 10.0.0.1 -A limit-ntp-604 -j TEE --gateway 10.0.0.2 -A limit-ntp-604 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 -A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-605 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 -A limit-ntp-606 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 -A limit-ntp-607 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 -A limit-ntp-608 -m limit --limit 12/minute -j ULOG -A limit-ntp-608 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 -A limit-ntp-609 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-61 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-610 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 -A limit-ntp-610 -j ACCEPT -A limit-ntp-612 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 -A limit-ntp-612 -m limit --limit 1/second -j LOG -A limit-ntp-612 -j ACCEPT -A limit-ntp-613 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 -A limit-ntp-613 -m limit --limit 1/second -j LOG -A limit-ntp-614 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 -A limit-ntp-614 -j TEE --gateway 10.0.0.1 -A limit-ntp-614 -j TEE --gateway 10.0.0.2 -A limit-ntp-614 -j ACCEPT -A limit-ntp-615 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 -A limit-ntp-615 -j TEE --gateway 10.0.0.1 -A limit-ntp-615 -j TEE --gateway 10.0.0.2 -A limit-ntp-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 -A limit-ntp-616 -j ACCEPT -A limit-ntp-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 -A limit-ntp-618 -m limit --limit 12/minute -j ULOG -A limit-ntp-618 -j ACCEPT -A limit-ntp-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 -A limit-ntp-619 -m limit --limit 12/minute -j ULOG -A limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-62 -m limit --limit 1/second -j LOG -A limit-ntp-62 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 -A limit-ntp-620 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 -A limit-ntp-621 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 -A limit-ntp-622 -m limit --limit 1/second -j LOG -A limit-ntp-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 -A limit-ntp-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 -A limit-ntp-624 -j TEE --gateway 10.0.0.1 -A limit-ntp-624 -j TEE --gateway 10.0.0.2 -A limit-ntp-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 -A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 -A limit-ntp-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 -A limit-ntp-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 -A limit-ntp-628 -m limit --limit 12/minute -j ULOG -A limit-ntp-628 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 -A limit-ntp-629 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-63 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 -A limit-ntp-630 -j ACCEPT -A limit-ntp-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 -A limit-ntp-632 -m limit --limit 1/second -j LOG -A limit-ntp-632 -j ACCEPT -A limit-ntp-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 -A limit-ntp-633 -m limit --limit 1/second -j LOG -A limit-ntp-634 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 -A limit-ntp-634 -j TEE --gateway 10.0.0.1 -A limit-ntp-634 -j TEE --gateway 10.0.0.2 -A limit-ntp-634 -j ACCEPT -A limit-ntp-635 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 -A limit-ntp-635 -j TEE --gateway 10.0.0.1 -A limit-ntp-635 -j TEE --gateway 10.0.0.2 -A limit-ntp-636 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 -A limit-ntp-636 -j ACCEPT -A limit-ntp-638 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 -A limit-ntp-638 -m limit --limit 12/minute -j ULOG -A limit-ntp-638 -j ACCEPT -A limit-ntp-639 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 -A limit-ntp-639 -m limit --limit 12/minute -j ULOG -A limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-64 -j TEE --gateway 10.0.0.1 -A limit-ntp-64 -j TEE --gateway 10.0.0.2 -A limit-ntp-64 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 -A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 -A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask 255.255.255.255 --set -A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 -A limit-ntp-642 -m limit --limit 1/second -j LOG -A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 -A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 -A limit-ntp-644 -j TEE --gateway 10.0.0.1 -A limit-ntp-644 -j TEE --gateway 10.0.0.2 -A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 -A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 -A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 -A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask 255.255.255.255 --set -A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 -A limit-ntp-648 -m limit --limit 12/minute -j ULOG -A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 -A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-65 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 -A limit-ntp-650 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 -A limit-ntp-651 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 -A limit-ntp-652 -m limit --limit 1/second -j LOG -A limit-ntp-652 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 -A limit-ntp-653 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 -A limit-ntp-654 -j TEE --gateway 10.0.0.1 -A limit-ntp-654 -j TEE --gateway 10.0.0.2 -A limit-ntp-654 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 -A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-655 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 -A limit-ntp-656 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 -A limit-ntp-657 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 -A limit-ntp-658 -m limit --limit 12/minute -j ULOG -A limit-ntp-658 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 -A limit-ntp-659 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-66 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-660 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 -A limit-ntp-660 -j ACCEPT -A limit-ntp-662 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 -A limit-ntp-662 -m limit --limit 1/second -j LOG -A limit-ntp-662 -j ACCEPT -A limit-ntp-663 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 -A limit-ntp-663 -m limit --limit 1/second -j LOG -A limit-ntp-664 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 -A limit-ntp-664 -j TEE --gateway 10.0.0.1 -A limit-ntp-664 -j TEE --gateway 10.0.0.2 -A limit-ntp-664 -j ACCEPT -A limit-ntp-665 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 -A limit-ntp-665 -j TEE --gateway 10.0.0.1 -A limit-ntp-665 -j TEE --gateway 10.0.0.2 -A limit-ntp-666 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 -A limit-ntp-666 -j ACCEPT -A limit-ntp-668 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 -A limit-ntp-668 -m limit --limit 12/minute -j ULOG -A limit-ntp-668 -j ACCEPT -A limit-ntp-669 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 -A limit-ntp-669 -m limit --limit 12/minute -j ULOG -A limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-67 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 -A limit-ntp-670 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 -A limit-ntp-671 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 -A limit-ntp-672 -m limit --limit 1/second -j LOG -A limit-ntp-672 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 -A limit-ntp-673 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 -A limit-ntp-674 -j TEE --gateway 10.0.0.1 -A limit-ntp-674 -j TEE --gateway 10.0.0.2 -A limit-ntp-674 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 -A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-675 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 -A limit-ntp-676 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 -A limit-ntp-677 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 -A limit-ntp-678 -m limit --limit 12/minute -j ULOG -A limit-ntp-678 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 -A limit-ntp-679 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-68 -m limit --limit 12/minute -j ULOG -A limit-ntp-68 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-680 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 -A limit-ntp-680 -j ACCEPT -A limit-ntp-682 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 -A limit-ntp-682 -m limit --limit 1/second -j LOG -A limit-ntp-682 -j ACCEPT -A limit-ntp-683 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 -A limit-ntp-683 -m limit --limit 1/second -j LOG -A limit-ntp-684 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 -A limit-ntp-684 -j TEE --gateway 10.0.0.1 -A limit-ntp-684 -j TEE --gateway 10.0.0.2 -A limit-ntp-684 -j ACCEPT -A limit-ntp-685 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 -A limit-ntp-685 -j TEE --gateway 10.0.0.1 -A limit-ntp-685 -j TEE --gateway 10.0.0.2 -A limit-ntp-686 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 -A limit-ntp-686 -j ACCEPT -A limit-ntp-688 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 -A limit-ntp-688 -m limit --limit 12/minute -j ULOG -A limit-ntp-688 -j ACCEPT -A limit-ntp-689 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 -A limit-ntp-689 -m limit --limit 12/minute -j ULOG -A limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-69 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 -A limit-ntp-690 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 -A limit-ntp-691 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 -A limit-ntp-692 -m limit --limit 1/second -j LOG -A limit-ntp-692 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 -A limit-ntp-693 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 -A limit-ntp-694 -j TEE --gateway 10.0.0.1 -A limit-ntp-694 -j TEE --gateway 10.0.0.2 -A limit-ntp-694 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 -A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-695 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 -A limit-ntp-696 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 -A limit-ntp-697 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 -A limit-ntp-698 -m limit --limit 12/minute -j ULOG -A limit-ntp-698 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 -A limit-ntp-699 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 -A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask 255.255.255.255 --set -A limit-ntp-70 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-70 -j ACCEPT -A limit-ntp-700 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 -A limit-ntp-700 -j ACCEPT -A limit-ntp-702 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 -A limit-ntp-702 -m limit --limit 1/second -j LOG -A limit-ntp-702 -j ACCEPT -A limit-ntp-703 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 -A limit-ntp-703 -m limit --limit 1/second -j LOG -A limit-ntp-704 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 -A limit-ntp-704 -j TEE --gateway 10.0.0.1 -A limit-ntp-704 -j TEE --gateway 10.0.0.2 -A limit-ntp-704 -j ACCEPT -A limit-ntp-705 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 -A limit-ntp-705 -j TEE --gateway 10.0.0.1 -A limit-ntp-705 -j TEE --gateway 10.0.0.2 -A limit-ntp-706 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 -A limit-ntp-706 -j ACCEPT -A limit-ntp-708 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 -A limit-ntp-708 -m limit --limit 12/minute -j ULOG -A limit-ntp-708 -j ACCEPT -A limit-ntp-709 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 -A limit-ntp-709 -m limit --limit 12/minute -j ULOG -A limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 -A limit-ntp-710 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 -A limit-ntp-711 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 -A limit-ntp-712 -m limit --limit 1/second -j LOG -A limit-ntp-712 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 -A limit-ntp-713 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 -A limit-ntp-714 -j TEE --gateway 10.0.0.1 -A limit-ntp-714 -j TEE --gateway 10.0.0.2 -A limit-ntp-714 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 -A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-715 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 -A limit-ntp-716 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 -A limit-ntp-717 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 -A limit-ntp-718 -m limit --limit 12/minute -j ULOG -A limit-ntp-718 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 -A limit-ntp-719 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-72 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-72 -m limit --limit 1/second -j LOG -A limit-ntp-72 -j ACCEPT -A limit-ntp-720 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 -A limit-ntp-720 -j ACCEPT -A limit-ntp-722 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 -A limit-ntp-722 -m limit --limit 1/second -j LOG -A limit-ntp-722 -j ACCEPT -A limit-ntp-723 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 -A limit-ntp-723 -m limit --limit 1/second -j LOG -A limit-ntp-724 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 -A limit-ntp-724 -j TEE --gateway 10.0.0.1 -A limit-ntp-724 -j TEE --gateway 10.0.0.2 -A limit-ntp-724 -j ACCEPT -A limit-ntp-725 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 -A limit-ntp-725 -j TEE --gateway 10.0.0.1 -A limit-ntp-725 -j TEE --gateway 10.0.0.2 -A limit-ntp-726 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 -A limit-ntp-726 -j ACCEPT -A limit-ntp-728 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 -A limit-ntp-728 -m limit --limit 12/minute -j ULOG -A limit-ntp-728 -j ACCEPT -A limit-ntp-729 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 -A limit-ntp-729 -m limit --limit 12/minute -j ULOG -A limit-ntp-73 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-73 -m limit --limit 1/second -j LOG -A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask 255.255.255.255 --set -A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-732 -m limit --limit 1/second -j LOG -A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-734 -j TEE --gateway 10.0.0.1 -A limit-ntp-734 -j TEE --gateway 10.0.0.2 -A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask 255.255.255.255 --set -A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-738 -m limit --limit 12/minute -j ULOG -A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-74 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-74 -j TEE --gateway 10.0.0.1 -A limit-ntp-74 -j TEE --gateway 10.0.0.2 -A limit-ntp-74 -j ACCEPT -A limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-740 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-741 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-742 -m limit --limit 1/second -j LOG -A limit-ntp-742 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-743 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-744 -j TEE --gateway 10.0.0.1 -A limit-ntp-744 -j TEE --gateway 10.0.0.2 -A limit-ntp-744 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-745 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-746 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-747 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-748 -m limit --limit 12/minute -j ULOG -A limit-ntp-748 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-749 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-75 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-75 -j TEE --gateway 10.0.0.1 -A limit-ntp-75 -j TEE --gateway 10.0.0.2 -A limit-ntp-750 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-750 -j ACCEPT -A limit-ntp-752 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-752 -m limit --limit 1/second -j LOG -A limit-ntp-752 -j ACCEPT -A limit-ntp-753 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-753 -m limit --limit 1/second -j LOG -A limit-ntp-754 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-754 -j TEE --gateway 10.0.0.1 -A limit-ntp-754 -j TEE --gateway 10.0.0.2 -A limit-ntp-754 -j ACCEPT -A limit-ntp-755 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-755 -j TEE --gateway 10.0.0.1 -A limit-ntp-755 -j TEE --gateway 10.0.0.2 -A limit-ntp-756 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-756 -j ACCEPT -A limit-ntp-758 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-758 -m limit --limit 12/minute -j ULOG -A limit-ntp-758 -j ACCEPT -A limit-ntp-759 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-759 -m limit --limit 12/minute -j ULOG -A limit-ntp-76 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-76 -j ACCEPT -A limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-760 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-761 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-762 -m limit --limit 1/second -j LOG -A limit-ntp-762 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-763 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-764 -j TEE --gateway 10.0.0.1 -A limit-ntp-764 -j TEE --gateway 10.0.0.2 -A limit-ntp-764 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-765 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-766 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-767 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-768 -m limit --limit 12/minute -j ULOG -A limit-ntp-768 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-769 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-770 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-770 -j ACCEPT -A limit-ntp-772 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-772 -m limit --limit 1/second -j LOG -A limit-ntp-772 -j ACCEPT -A limit-ntp-773 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-773 -m limit --limit 1/second -j LOG -A limit-ntp-774 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-774 -j TEE --gateway 10.0.0.1 -A limit-ntp-774 -j TEE --gateway 10.0.0.2 -A limit-ntp-774 -j ACCEPT -A limit-ntp-775 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-775 -j TEE --gateway 10.0.0.1 -A limit-ntp-775 -j TEE --gateway 10.0.0.2 -A limit-ntp-776 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-776 -j ACCEPT -A limit-ntp-778 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-778 -m limit --limit 12/minute -j ULOG -A limit-ntp-778 -j ACCEPT -A limit-ntp-779 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-779 -m limit --limit 12/minute -j ULOG -A limit-ntp-78 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-78 -m limit --limit 12/minute -j ULOG -A limit-ntp-78 -j ACCEPT -A limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-780 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-781 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-782 -m limit --limit 1/second -j LOG -A limit-ntp-782 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-783 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-784 -j TEE --gateway 10.0.0.1 -A limit-ntp-784 -j TEE --gateway 10.0.0.2 -A limit-ntp-784 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-785 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-786 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-787 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-788 -m limit --limit 12/minute -j ULOG -A limit-ntp-788 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-789 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-79 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-79 -m limit --limit 12/minute -j ULOG -A limit-ntp-790 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-790 -j ACCEPT -A limit-ntp-792 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-792 -m limit --limit 1/second -j LOG -A limit-ntp-792 -j ACCEPT -A limit-ntp-793 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-793 -m limit --limit 1/second -j LOG -A limit-ntp-794 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-794 -j TEE --gateway 10.0.0.1 -A limit-ntp-794 -j TEE --gateway 10.0.0.2 -A limit-ntp-794 -j ACCEPT -A limit-ntp-795 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-795 -j TEE --gateway 10.0.0.1 -A limit-ntp-795 -j TEE --gateway 10.0.0.2 -A limit-ntp-796 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-796 -j ACCEPT -A limit-ntp-798 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-798 -m limit --limit 12/minute -j ULOG -A limit-ntp-798 -j ACCEPT -A limit-ntp-799 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-799 -m limit --limit 12/minute -j ULOG -A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 -A limit-ntp-8 -m limit --limit 12/minute -j ULOG -A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-80 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-800 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-801 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-802 -m limit --limit 1/second -j LOG -A limit-ntp-802 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-803 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-804 -j TEE --gateway 10.0.0.1 -A limit-ntp-804 -j TEE --gateway 10.0.0.2 -A limit-ntp-804 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-805 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-806 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-807 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-808 -m limit --limit 12/minute -j ULOG -A limit-ntp-808 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-809 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-81 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-810 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-810 -j ACCEPT -A limit-ntp-812 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-812 -m limit --limit 1/second -j LOG -A limit-ntp-812 -j ACCEPT -A limit-ntp-813 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-813 -m limit --limit 1/second -j LOG -A limit-ntp-814 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-814 -j TEE --gateway 10.0.0.1 -A limit-ntp-814 -j TEE --gateway 10.0.0.2 -A limit-ntp-814 -j ACCEPT -A limit-ntp-815 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-815 -j TEE --gateway 10.0.0.1 -A limit-ntp-815 -j TEE --gateway 10.0.0.2 -A limit-ntp-816 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-816 -j ACCEPT -A limit-ntp-818 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-818 -m limit --limit 12/minute -j ULOG -A limit-ntp-818 -j ACCEPT -A limit-ntp-819 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-819 -m limit --limit 12/minute -j ULOG -A limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-82 -m limit --limit 1/second -j LOG -A limit-ntp-82 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 -A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 -A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask 255.255.255.255 --set -A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 -A limit-ntp-822 -m limit --limit 1/second -j LOG -A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 -A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 -A limit-ntp-824 -j TEE --gateway 10.0.0.1 -A limit-ntp-824 -j TEE --gateway 10.0.0.2 -A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 -A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 -A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 -A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask 255.255.255.255 --set -A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 -A limit-ntp-828 -m limit --limit 12/minute -j ULOG -A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 -A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-83 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 -A limit-ntp-830 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 -A limit-ntp-831 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 -A limit-ntp-832 -m limit --limit 1/second -j LOG -A limit-ntp-832 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 -A limit-ntp-833 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 -A limit-ntp-834 -j TEE --gateway 10.0.0.1 -A limit-ntp-834 -j TEE --gateway 10.0.0.2 -A limit-ntp-834 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 -A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-835 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 -A limit-ntp-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 -A limit-ntp-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set -A limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 -A limit-ntp-838 -m limit --limit 12/minute -j ULOG -A limit-ntp-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 -A limit-ntp-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-84 -j TEE --gateway 10.0.0.1 -A limit-ntp-84 -j TEE --gateway 10.0.0.2 -A limit-ntp-84 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-840 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 -A limit-ntp-840 -j ACCEPT -A limit-ntp-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 -A limit-ntp-842 -m limit --limit 1/second -j LOG -A limit-ntp-842 -j ACCEPT -A limit-ntp-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 -A limit-ntp-843 -m limit --limit 1/second -j LOG -A limit-ntp-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 -A limit-ntp-844 -j TEE --gateway 10.0.0.1 -A limit-ntp-844 -j TEE --gateway 10.0.0.2 -A limit-ntp-844 -j ACCEPT -A limit-ntp-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 -A limit-ntp-845 -j TEE --gateway 10.0.0.1 -A limit-ntp-845 -j TEE --gateway 10.0.0.2 -A limit-ntp-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 -A limit-ntp-846 -j ACCEPT -A limit-ntp-848 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 -A limit-ntp-848 -m limit --limit 12/minute -j ULOG -A limit-ntp-848 -j ACCEPT -A limit-ntp-849 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 -A limit-ntp-849 -m limit --limit 12/minute -j ULOG -A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-85 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 -A limit-ntp-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 -A limit-ntp-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 -A limit-ntp-852 -m limit --limit 1/second -j LOG -A limit-ntp-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 -A limit-ntp-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG -A limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 -A limit-ntp-854 -j TEE --gateway 10.0.0.1 -A limit-ntp-854 -j TEE --gateway 10.0.0.2 -A limit-ntp-854 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 -A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-855 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 -A limit-ntp-856 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 -A limit-ntp-857 -m recent --name user:A --rdest --mask 255.255.255.255 --set -A limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 -A limit-ntp-858 -m limit --limit 12/minute -j ULOG -A limit-ntp-858 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT -A limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 -A limit-ntp-859 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-86 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-860 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 -A limit-ntp-860 -j ACCEPT -A limit-ntp-862 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 -A limit-ntp-862 -m limit --limit 1/second -j LOG -A limit-ntp-862 -j ACCEPT -A limit-ntp-863 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 -A limit-ntp-863 -m limit --limit 1/second -j LOG -A limit-ntp-864 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 -A limit-ntp-864 -j TEE --gateway 10.0.0.1 -A limit-ntp-864 -j TEE --gateway 10.0.0.2 -A limit-ntp-864 -j ACCEPT -A limit-ntp-865 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 -A limit-ntp-865 -j TEE --gateway 10.0.0.1 -A limit-ntp-865 -j TEE --gateway 10.0.0.2 -A limit-ntp-866 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 -A limit-ntp-866 -j ACCEPT -A limit-ntp-868 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 -A limit-ntp-868 -m limit --limit 12/minute -j ULOG -A limit-ntp-868 -j ACCEPT -A limit-ntp-869 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 -A limit-ntp-869 -m limit --limit 12/minute -j ULOG -A limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-87 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 -A limit-ntp-870 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 -A limit-ntp-871 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 -A limit-ntp-872 -m limit --limit 1/second -j LOG -A limit-ntp-872 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 -A limit-ntp-873 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 -A limit-ntp-874 -j TEE --gateway 10.0.0.1 -A limit-ntp-874 -j TEE --gateway 10.0.0.2 -A limit-ntp-874 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 -A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-875 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 -A limit-ntp-876 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 -A limit-ntp-877 -m recent --name user:C --rsource --mask 254.0.0.0 --set -A limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 -A limit-ntp-878 -m limit --limit 12/minute -j ULOG -A limit-ntp-878 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 -A limit-ntp-879 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-88 -m limit --limit 12/minute -j ULOG -A limit-ntp-88 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-880 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 -A limit-ntp-880 -j ACCEPT -A limit-ntp-882 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 -A limit-ntp-882 -m limit --limit 1/second -j LOG -A limit-ntp-882 -j ACCEPT -A limit-ntp-883 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 -A limit-ntp-883 -m limit --limit 1/second -j LOG -A limit-ntp-884 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 -A limit-ntp-884 -j TEE --gateway 10.0.0.1 -A limit-ntp-884 -j TEE --gateway 10.0.0.2 -A limit-ntp-884 -j ACCEPT -A limit-ntp-885 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 -A limit-ntp-885 -j TEE --gateway 10.0.0.1 -A limit-ntp-885 -j TEE --gateway 10.0.0.2 -A limit-ntp-886 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 -A limit-ntp-886 -j ACCEPT -A limit-ntp-888 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 -A limit-ntp-888 -m limit --limit 12/minute -j ULOG -A limit-ntp-888 -j ACCEPT -A limit-ntp-889 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 -A limit-ntp-889 -m limit --limit 12/minute -j ULOG -A limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-89 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 -A limit-ntp-890 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 -A limit-ntp-891 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 -A limit-ntp-892 -m limit --limit 1/second -j LOG -A limit-ntp-892 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 -A limit-ntp-893 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG -A limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 -A limit-ntp-894 -j TEE --gateway 10.0.0.1 -A limit-ntp-894 -j TEE --gateway 10.0.0.2 -A limit-ntp-894 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 -A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.1 -A limit-ntp-895 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j TEE --gateway 10.0.0.2 -A limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 -A limit-ntp-896 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 -A limit-ntp-897 -m recent --name user:C --rdest --mask 254.0.0.0 --set -A limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 -A limit-ntp-898 -m limit --limit 12/minute -j ULOG -A limit-ntp-898 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT -A limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 -A limit-ntp-899 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 -A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask 255.255.255.255 --set -m limit --limit 12/minute -j ULOG -A limit-ntp-90 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-90 -j ACCEPT -A limit-ntp-900 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 -A limit-ntp-900 -j ACCEPT -A limit-ntp-902 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 -A limit-ntp-902 -m limit --limit 1/second -j LOG -A limit-ntp-902 -j ACCEPT -A limit-ntp-903 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 -A limit-ntp-903 -m limit --limit 1/second -j LOG -A limit-ntp-904 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 -A limit-ntp-904 -j TEE --gateway 10.0.0.1 -A limit-ntp-904 -j TEE --gateway 10.0.0.2 -A limit-ntp-904 -j ACCEPT -A limit-ntp-905 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 -A limit-ntp-905 -j TEE --gateway 10.0.0.1 -A limit-ntp-905 -j TEE --gateway 10.0.0.2 -A limit-ntp-906 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 -A limit-ntp-906 -j ACCEPT -A limit-ntp-908 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 -A limit-ntp-908 -m limit --limit 12/minute -j ULOG -A limit-ntp-908 -j ACCEPT -A limit-ntp-909 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 -A limit-ntp-909 -m limit --limit 12/minute -j ULOG -A limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-910 -j ACCEPT -A limit-ntp-910 -m limit --limit 1/second -j LOG -A limit-ntp-910 -j DROP -A limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-911 -j RETURN -A limit-ntp-911 -m limit --limit 1/second -j LOG -A limit-ntp-911 -j DROP -A limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 -A limit-ntp-912 -m limit --limit 1/second -j LOG -A limit-ntp-912 -j DROP -A limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 -A limit-ntp-913 -m limit --limit 1/second -j LOG -A limit-ntp-913 -j DROP -A limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-914 -j ACCEPT -A limit-ntp-914 -m limit --limit 1/second -j LOG -A limit-ntp-914 -j DROP -A limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 -A limit-ntp-915 -m limit --limit 1/second -j LOG -A limit-ntp-915 -j DROP -A limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-916 -j ACCEPT -A limit-ntp-916 -j DROP -A limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-917 -j RETURN -A limit-ntp-917 -j DROP -A limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 -A limit-ntp-918 -j DROP -A limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 -A limit-ntp-919 -j DROP -A limit-ntp-92 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-92 -m limit --limit 1/second -j LOG -A limit-ntp-92 -j ACCEPT -A limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-920 -j ACCEPT -A limit-ntp-920 -j DROP -A limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 -A limit-ntp-921 -j DROP -A limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-922 -j ACCEPT -A limit-ntp-922 -m limit --limit 1/second -j LOG -A limit-ntp-922 -j DROP -A limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-923 -j RETURN -A limit-ntp-923 -m limit --limit 1/second -j LOG -A limit-ntp-923 -j DROP -A limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 -A limit-ntp-924 -m limit --limit 1/second -j LOG -A limit-ntp-924 -j DROP -A limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 -A limit-ntp-925 -m limit --limit 1/second -j LOG -A limit-ntp-925 -j DROP -A limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-926 -j ACCEPT -A limit-ntp-926 -m limit --limit 1/second -j LOG -A limit-ntp-926 -j DROP -A limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 -A limit-ntp-927 -m limit --limit 1/second -j LOG -A limit-ntp-927 -j DROP -A limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-928 -j ACCEPT -A limit-ntp-928 -j TEE --gateway 10.0.0.1 -A limit-ntp-928 -j TEE --gateway 10.0.0.2 -A limit-ntp-928 -j DROP -A limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-929 -j RETURN -A limit-ntp-929 -j TEE --gateway 10.0.0.1 -A limit-ntp-929 -j TEE --gateway 10.0.0.2 -A limit-ntp-929 -j DROP -A limit-ntp-93 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-93 -m limit --limit 1/second -j LOG -A limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 -A limit-ntp-930 -j TEE --gateway 10.0.0.1 -A limit-ntp-930 -j TEE --gateway 10.0.0.2 -A limit-ntp-930 -j DROP -A limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 -A limit-ntp-931 -j TEE --gateway 10.0.0.1 -A limit-ntp-931 -j TEE --gateway 10.0.0.2 -A limit-ntp-931 -j DROP -A limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-932 -j ACCEPT -A limit-ntp-932 -j TEE --gateway 10.0.0.1 -A limit-ntp-932 -j TEE --gateway 10.0.0.2 -A limit-ntp-932 -j DROP -A limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 -A limit-ntp-933 -j TEE --gateway 10.0.0.1 -A limit-ntp-933 -j TEE --gateway 10.0.0.2 -A limit-ntp-933 -j DROP -A limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-934 -j ACCEPT -A limit-ntp-934 -j DROP -A limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-935 -j RETURN -A limit-ntp-935 -j DROP -A limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 -A limit-ntp-936 -j DROP -A limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 -A limit-ntp-937 -j DROP -A limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-938 -j ACCEPT -A limit-ntp-938 -j DROP -A limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 -A limit-ntp-939 -j DROP -A limit-ntp-94 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-94 -j TEE --gateway 10.0.0.1 -A limit-ntp-94 -j TEE --gateway 10.0.0.2 -A limit-ntp-94 -j ACCEPT -A limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-940 -j ACCEPT -A limit-ntp-940 -m limit --limit 12/minute -j ULOG -A limit-ntp-940 -j DROP -A limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-941 -j RETURN -A limit-ntp-941 -m limit --limit 12/minute -j ULOG -A limit-ntp-941 -j DROP -A limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 -A limit-ntp-942 -m limit --limit 12/minute -j ULOG -A limit-ntp-942 -j DROP -A limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 -A limit-ntp-943 -m limit --limit 12/minute -j ULOG -A limit-ntp-943 -j DROP -A limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-944 -j ACCEPT -A limit-ntp-944 -m limit --limit 12/minute -j ULOG -A limit-ntp-944 -j DROP -A limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 -A limit-ntp-945 -m limit --limit 12/minute -j ULOG -A limit-ntp-945 -j DROP -A limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-946 -j ACCEPT -A limit-ntp-946 -j DROP -A limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-947 -j RETURN -A limit-ntp-947 -j DROP -A limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 -A limit-ntp-948 -j DROP -A limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 -A limit-ntp-949 -j DROP -A limit-ntp-95 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-95 -j TEE --gateway 10.0.0.1 -A limit-ntp-95 -j TEE --gateway 10.0.0.2 -A limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-950 -j ACCEPT -A limit-ntp-950 -j DROP -A limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 -A limit-ntp-951 -j DROP -A limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-952 -j ACCEPT -A limit-ntp-952 -m limit --limit 1/second -j LOG -A limit-ntp-952 -j DROP -A limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-953 -j RETURN -A limit-ntp-953 -m limit --limit 1/second -j LOG -A limit-ntp-953 -j DROP -A limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 -A limit-ntp-954 -m limit --limit 1/second -j LOG -A limit-ntp-954 -j DROP -A limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 -A limit-ntp-955 -m limit --limit 1/second -j LOG -A limit-ntp-955 -j DROP -A limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-956 -j ACCEPT -A limit-ntp-956 -m limit --limit 1/second -j LOG -A limit-ntp-956 -j DROP -A limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 -A limit-ntp-957 -m limit --limit 1/second -j LOG -A limit-ntp-957 -j DROP -A limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-958 -j ACCEPT -A limit-ntp-958 -j TEE --gateway 10.0.0.1 -A limit-ntp-958 -j TEE --gateway 10.0.0.2 -A limit-ntp-958 -j DROP -A limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-959 -j RETURN -A limit-ntp-959 -j TEE --gateway 10.0.0.1 -A limit-ntp-959 -j TEE --gateway 10.0.0.2 -A limit-ntp-959 -j DROP -A limit-ntp-96 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-96 -j ACCEPT -A limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 -A limit-ntp-960 -j TEE --gateway 10.0.0.1 -A limit-ntp-960 -j TEE --gateway 10.0.0.2 -A limit-ntp-960 -j DROP -A limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 -A limit-ntp-961 -j TEE --gateway 10.0.0.1 -A limit-ntp-961 -j TEE --gateway 10.0.0.2 -A limit-ntp-961 -j DROP -A limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-962 -j ACCEPT -A limit-ntp-962 -j TEE --gateway 10.0.0.1 -A limit-ntp-962 -j TEE --gateway 10.0.0.2 -A limit-ntp-962 -j DROP -A limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 -A limit-ntp-963 -j TEE --gateway 10.0.0.1 -A limit-ntp-963 -j TEE --gateway 10.0.0.2 -A limit-ntp-963 -j DROP -A limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-964 -j ACCEPT -A limit-ntp-964 -j DROP -A limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-965 -j RETURN -A limit-ntp-965 -j DROP -A limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 -A limit-ntp-966 -j DROP -A limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 -A limit-ntp-967 -j DROP -A limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-968 -j ACCEPT -A limit-ntp-968 -j DROP -A limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 -A limit-ntp-969 -j DROP -A limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-970 -j ACCEPT -A limit-ntp-970 -m limit --limit 12/minute -j ULOG -A limit-ntp-970 -j DROP -A limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-971 -j RETURN -A limit-ntp-971 -m limit --limit 12/minute -j ULOG -A limit-ntp-971 -j DROP -A limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 -A limit-ntp-972 -m limit --limit 12/minute -j ULOG -A limit-ntp-972 -j DROP -A limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 -A limit-ntp-973 -m limit --limit 12/minute -j ULOG -A limit-ntp-973 -j DROP -A limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-974 -j ACCEPT -A limit-ntp-974 -m limit --limit 12/minute -j ULOG -A limit-ntp-974 -j DROP -A limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 -A limit-ntp-975 -m limit --limit 12/minute -j ULOG -A limit-ntp-975 -j DROP -A limit-ntp-98 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-98 -m limit --limit 12/minute -j ULOG -A limit-ntp-98 -j ACCEPT -A limit-ntp-99 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-99 -m limit --limit 12/minute -j ULOG -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -j TEE --gateway 10.0.0.1 -A logaccept-1 -j TEE --gateway 10.0.0.2 -A logaccept-1 -j ACCEPT -A logaccept-10 -j TEE --gateway 10.0.0.1 -A logaccept-10 -j TEE --gateway 10.0.0.2 -A logaccept-10 -j ACCEPT -A logaccept-11 -m limit --limit 12/minute -j ULOG -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT -A logaccept-13 -j TEE --gateway 10.0.0.1 -A logaccept-13 -j TEE --gateway 10.0.0.2 -A logaccept-13 -j ACCEPT -A logaccept-14 -m limit --limit 12/minute -j ULOG -A logaccept-14 -j ACCEPT -A logaccept-15 -m limit --limit 1/second -j LOG -A logaccept-15 -j ACCEPT -A logaccept-16 -j TEE --gateway 10.0.0.1 -A logaccept-16 -j TEE --gateway 10.0.0.2 -A logaccept-16 -j ACCEPT -A logaccept-17 -m limit --limit 12/minute -j ULOG -A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT -A logaccept-19 -j TEE --gateway 10.0.0.1 -A logaccept-19 -j TEE --gateway 10.0.0.2 -A logaccept-19 -j ACCEPT -A logaccept-2 -m limit --limit 12/minute -j ULOG -A logaccept-2 -j ACCEPT -A logaccept-20 -m limit --limit 12/minute -j ULOG -A logaccept-20 -j ACCEPT -A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT -A logaccept-22 -j TEE --gateway 10.0.0.1 -A logaccept-22 -j TEE --gateway 10.0.0.2 -A logaccept-22 -j ACCEPT -A logaccept-23 -m limit --limit 12/minute -j ULOG -A logaccept-23 -j ACCEPT -A logaccept-24 -m limit --limit 1/second -j LOG -A logaccept-24 -j ACCEPT -A logaccept-25 -j TEE --gateway 10.0.0.1 -A logaccept-25 -j TEE --gateway 10.0.0.2 -A logaccept-25 -j ACCEPT -A logaccept-26 -m limit --limit 12/minute -j ULOG -A logaccept-26 -j ACCEPT -A logaccept-27 -m limit --limit 1/second -j LOG -A logaccept-27 -j ACCEPT -A logaccept-28 -j TEE --gateway 10.0.0.1 -A logaccept-28 -j TEE --gateway 10.0.0.2 -A logaccept-28 -j ACCEPT -A logaccept-29 -m limit --limit 12/minute -j ULOG -A logaccept-29 -j ACCEPT -A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT -A logaccept-30 -m limit --limit 1/second -j LOG -A logaccept-30 -j ACCEPT -A logaccept-31 -j TEE --gateway 10.0.0.1 -A logaccept-31 -j TEE --gateway 10.0.0.2 -A logaccept-31 -j ACCEPT -A logaccept-32 -m limit --limit 12/minute -j ULOG -A logaccept-32 -j ACCEPT -A logaccept-33 -m limit --limit 1/second -j LOG -A logaccept-33 -j ACCEPT -A logaccept-34 -j TEE --gateway 10.0.0.1 -A logaccept-34 -j TEE --gateway 10.0.0.2 -A logaccept-34 -j ACCEPT -A logaccept-35 -m limit --limit 12/minute -j ULOG -A logaccept-35 -j ACCEPT -A logaccept-36 -m limit --limit 1/second -j LOG -A logaccept-36 -j ACCEPT -A logaccept-37 -j TEE --gateway 10.0.0.1 -A logaccept-37 -j TEE --gateway 10.0.0.2 -A logaccept-37 -j ACCEPT -A logaccept-38 -m limit --limit 12/minute -j ULOG -A logaccept-38 -j ACCEPT -A logaccept-39 -m limit --limit 1/second -j LOG -A logaccept-39 -j ACCEPT -A logaccept-4 -j TEE --gateway 10.0.0.1 -A logaccept-4 -j TEE --gateway 10.0.0.2 -A logaccept-4 -j ACCEPT -A logaccept-40 -j TEE --gateway 10.0.0.1 -A logaccept-40 -j TEE --gateway 10.0.0.2 -A logaccept-40 -j ACCEPT -A logaccept-41 -m limit --limit 12/minute -j ULOG -A logaccept-41 -j ACCEPT -A logaccept-42 -m limit --limit 1/second -j LOG -A logaccept-42 -j ACCEPT -A logaccept-43 -j TEE --gateway 10.0.0.1 -A logaccept-43 -j TEE --gateway 10.0.0.2 -A logaccept-43 -j ACCEPT -A logaccept-44 -m limit --limit 12/minute -j ULOG -A logaccept-44 -j ACCEPT -A logaccept-45 -m limit --limit 1/second -j LOG -A logaccept-45 -j ACCEPT -A logaccept-46 -j TEE --gateway 10.0.0.1 -A logaccept-46 -j TEE --gateway 10.0.0.2 -A logaccept-46 -j ACCEPT -A logaccept-47 -m limit --limit 12/minute -j ULOG -A logaccept-47 -j ACCEPT -A logaccept-48 -m limit --limit 1/second -j LOG -A logaccept-48 -j ACCEPT -A logaccept-49 -j TEE --gateway 10.0.0.1 -A logaccept-49 -j TEE --gateway 10.0.0.2 -A logaccept-49 -j ACCEPT -A logaccept-5 -m limit --limit 12/minute -j ULOG -A logaccept-5 -j ACCEPT -A logaccept-50 -m limit --limit 12/minute -j ULOG -A logaccept-50 -j ACCEPT -A logaccept-51 -m limit --limit 1/second -j LOG -A logaccept-51 -j ACCEPT -A logaccept-52 -j TEE --gateway 10.0.0.1 -A logaccept-52 -j TEE --gateway 10.0.0.2 -A logaccept-52 -j ACCEPT -A logaccept-53 -m limit --limit 12/minute -j ULOG -A logaccept-53 -j ACCEPT -A logaccept-54 -m limit --limit 1/second -j LOG -A logaccept-54 -j ACCEPT -A logaccept-55 -j TEE --gateway 10.0.0.1 -A logaccept-55 -j TEE --gateway 10.0.0.2 -A logaccept-55 -j ACCEPT -A logaccept-56 -m limit --limit 12/minute -j ULOG -A logaccept-56 -j ACCEPT -A logaccept-57 -m limit --limit 1/second -j LOG -A logaccept-57 -j ACCEPT -A logaccept-58 -j TEE --gateway 10.0.0.1 -A logaccept-58 -j TEE --gateway 10.0.0.2 -A logaccept-58 -j ACCEPT -A logaccept-59 -m limit --limit 12/minute -j ULOG -A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT -A logaccept-60 -m limit --limit 1/second -j LOG -A logaccept-60 -j ACCEPT -A logaccept-61 -j TEE --gateway 10.0.0.1 -A logaccept-61 -j TEE --gateway 10.0.0.2 -A logaccept-61 -j ACCEPT -A logaccept-62 -m limit --limit 12/minute -j ULOG -A logaccept-62 -j ACCEPT -A logaccept-63 -m limit --limit 1/second -j LOG -A logaccept-63 -j ACCEPT -A logaccept-64 -j TEE --gateway 10.0.0.1 -A logaccept-64 -j TEE --gateway 10.0.0.2 -A logaccept-64 -j ACCEPT -A logaccept-65 -m limit --limit 12/minute -j ULOG -A logaccept-65 -j ACCEPT -A logaccept-66 -m limit --limit 1/second -j LOG -A logaccept-66 -j ACCEPT -A logaccept-67 -j LOG -A logaccept-67 -j ACCEPT -A logaccept-68 -j TEE --gateway 10.0.0.1 -A logaccept-68 -j TEE --gateway 10.0.0.2 -A logaccept-68 -j ACCEPT -A logaccept-69 -m limit --limit 12/minute -j ULOG -A logaccept-69 -j ACCEPT -A logaccept-7 -j TEE --gateway 10.0.0.1 -A logaccept-7 -j TEE --gateway 10.0.0.2 -A logaccept-7 -j ACCEPT -A logaccept-8 -m limit --limit 12/minute -j ULOG -A logaccept-8 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT -A logaccept-final-1 -j TEE --gateway 10.0.0.1 -A logaccept-final-1 -j TEE --gateway 10.0.0.2 -A logaccept-final-1 -j ACCEPT -A logaccept-final-10 -j TEE --gateway 10.0.0.1 -A logaccept-final-10 -j TEE --gateway 10.0.0.2 -A logaccept-final-10 -j ACCEPT -A logaccept-final-100 -j TEE --gateway 10.0.0.1 -A logaccept-final-100 -j TEE --gateway 10.0.0.2 -A logaccept-final-100 -j ACCEPT -A logaccept-final-101 -m limit --limit 12/minute -j ULOG -A logaccept-final-101 -j ACCEPT -A logaccept-final-102 -m limit --limit 1/second -j LOG -A logaccept-final-102 -j ACCEPT -A logaccept-final-103 -j TEE --gateway 10.0.0.1 -A logaccept-final-103 -j TEE --gateway 10.0.0.2 -A logaccept-final-103 -j ACCEPT -A logaccept-final-104 -m limit --limit 12/minute -j ULOG -A logaccept-final-104 -j ACCEPT -A logaccept-final-105 -m limit --limit 1/second -j LOG -A logaccept-final-105 -j ACCEPT -A logaccept-final-106 -j TEE --gateway 10.0.0.1 -A logaccept-final-106 -j TEE --gateway 10.0.0.2 -A logaccept-final-106 -j ACCEPT -A logaccept-final-107 -m limit --limit 12/minute -j ULOG -A logaccept-final-107 -j ACCEPT -A logaccept-final-108 -m limit --limit 1/second -j LOG -A logaccept-final-108 -j ACCEPT -A logaccept-final-109 -j TEE --gateway 10.0.0.1 -A logaccept-final-109 -j TEE --gateway 10.0.0.2 -A logaccept-final-109 -j ACCEPT -A logaccept-final-11 -m limit --limit 12/minute -j ULOG -A logaccept-final-11 -j ACCEPT -A logaccept-final-110 -m limit --limit 12/minute -j ULOG -A logaccept-final-110 -j ACCEPT -A logaccept-final-111 -m limit --limit 1/second -j LOG -A logaccept-final-111 -j ACCEPT -A logaccept-final-112 -j TEE --gateway 10.0.0.1 -A logaccept-final-112 -j TEE --gateway 10.0.0.2 -A logaccept-final-112 -j ACCEPT -A logaccept-final-113 -m limit --limit 12/minute -j ULOG -A logaccept-final-113 -j ACCEPT -A logaccept-final-114 -m limit --limit 1/second -j LOG -A logaccept-final-114 -j ACCEPT -A logaccept-final-115 -j TEE --gateway 10.0.0.1 -A logaccept-final-115 -j TEE --gateway 10.0.0.2 -A logaccept-final-115 -j ACCEPT -A logaccept-final-116 -m limit --limit 12/minute -j ULOG -A logaccept-final-116 -j ACCEPT -A logaccept-final-117 -m limit --limit 1/second -j LOG -A logaccept-final-117 -j ACCEPT -A logaccept-final-118 -j TEE --gateway 10.0.0.1 -A logaccept-final-118 -j TEE --gateway 10.0.0.2 -A logaccept-final-118 -j ACCEPT -A logaccept-final-119 -m limit --limit 12/minute -j ULOG -A logaccept-final-119 -j ACCEPT -A logaccept-final-12 -m limit --limit 1/second -j LOG -A logaccept-final-12 -j ACCEPT -A logaccept-final-120 -m limit --limit 1/second -j LOG -A logaccept-final-120 -j ACCEPT -A logaccept-final-121 -j TEE --gateway 10.0.0.1 -A logaccept-final-121 -j TEE --gateway 10.0.0.2 -A logaccept-final-121 -j ACCEPT -A logaccept-final-122 -m limit --limit 12/minute -j ULOG -A logaccept-final-122 -j ACCEPT -A logaccept-final-123 -m limit --limit 1/second -j LOG -A logaccept-final-123 -j ACCEPT -A logaccept-final-124 -j TEE --gateway 10.0.0.1 -A logaccept-final-124 -j TEE --gateway 10.0.0.2 -A logaccept-final-124 -j ACCEPT -A logaccept-final-125 -m limit --limit 12/minute -j ULOG -A logaccept-final-125 -j ACCEPT -A logaccept-final-126 -m limit --limit 1/second -j LOG -A logaccept-final-126 -j ACCEPT -A logaccept-final-127 -j TEE --gateway 10.0.0.1 -A logaccept-final-127 -j TEE --gateway 10.0.0.2 -A logaccept-final-127 -j ACCEPT -A logaccept-final-128 -m limit --limit 12/minute -j ULOG -A logaccept-final-128 -j ACCEPT -A logaccept-final-129 -m limit --limit 1/second -j LOG -A logaccept-final-129 -j ACCEPT -A logaccept-final-13 -j TEE --gateway 10.0.0.1 -A logaccept-final-13 -j TEE --gateway 10.0.0.2 -A logaccept-final-13 -j ACCEPT -A logaccept-final-130 -j TEE --gateway 10.0.0.1 -A logaccept-final-130 -j TEE --gateway 10.0.0.2 -A logaccept-final-130 -j ACCEPT -A logaccept-final-131 -m limit --limit 12/minute -j ULOG -A logaccept-final-131 -j ACCEPT -A logaccept-final-132 -m limit --limit 1/second -j LOG -A logaccept-final-132 -j ACCEPT -A logaccept-final-133 -j TEE --gateway 10.0.0.1 -A logaccept-final-133 -j TEE --gateway 10.0.0.2 -A logaccept-final-133 -j ACCEPT -A logaccept-final-134 -m limit --limit 12/minute -j ULOG -A logaccept-final-134 -j ACCEPT -A logaccept-final-135 -m limit --limit 1/second -j LOG -A logaccept-final-135 -j ACCEPT -A logaccept-final-136 -j TEE --gateway 10.0.0.1 -A logaccept-final-136 -j TEE --gateway 10.0.0.2 -A logaccept-final-136 -j ACCEPT -A logaccept-final-137 -m limit --limit 12/minute -j ULOG -A logaccept-final-137 -j ACCEPT -A logaccept-final-138 -m limit --limit 1/second -j LOG -A logaccept-final-138 -j ACCEPT -A logaccept-final-139 -j TEE --gateway 10.0.0.1 -A logaccept-final-139 -j TEE --gateway 10.0.0.2 -A logaccept-final-139 -j ACCEPT -A logaccept-final-14 -m limit --limit 12/minute -j ULOG -A logaccept-final-14 -j ACCEPT -A logaccept-final-140 -m limit --limit 12/minute -j ULOG -A logaccept-final-140 -j ACCEPT -A logaccept-final-141 -m limit --limit 1/second -j LOG -A logaccept-final-141 -j ACCEPT -A logaccept-final-142 -j TEE --gateway 10.0.0.1 -A logaccept-final-142 -j TEE --gateway 10.0.0.2 -A logaccept-final-142 -j ACCEPT -A logaccept-final-143 -m limit --limit 12/minute -j ULOG -A logaccept-final-143 -j ACCEPT -A logaccept-final-144 -m limit --limit 1/second -j LOG -A logaccept-final-144 -j ACCEPT -A logaccept-final-145 -j TEE --gateway 10.0.0.1 -A logaccept-final-145 -j TEE --gateway 10.0.0.2 -A logaccept-final-145 -j ACCEPT -A logaccept-final-146 -m limit --limit 12/minute -j ULOG -A logaccept-final-146 -j ACCEPT -A logaccept-final-147 -m limit --limit 1/second -j LOG -A logaccept-final-147 -j ACCEPT -A logaccept-final-148 -j TEE --gateway 10.0.0.1 -A logaccept-final-148 -j TEE --gateway 10.0.0.2 -A logaccept-final-148 -j ACCEPT -A logaccept-final-149 -m limit --limit 12/minute -j ULOG -A logaccept-final-149 -j ACCEPT -A logaccept-final-15 -m limit --limit 1/second -j LOG -A logaccept-final-15 -j ACCEPT -A logaccept-final-150 -m limit --limit 1/second -j LOG -A logaccept-final-150 -j ACCEPT -A logaccept-final-151 -j TEE --gateway 10.0.0.1 -A logaccept-final-151 -j TEE --gateway 10.0.0.2 -A logaccept-final-151 -j ACCEPT -A logaccept-final-152 -m limit --limit 12/minute -j ULOG -A logaccept-final-152 -j ACCEPT -A logaccept-final-153 -m limit --limit 1/second -j LOG -A logaccept-final-153 -j ACCEPT -A logaccept-final-154 -j TEE --gateway 10.0.0.1 -A logaccept-final-154 -j TEE --gateway 10.0.0.2 -A logaccept-final-154 -j ACCEPT -A logaccept-final-155 -m limit --limit 12/minute -j ULOG -A logaccept-final-155 -j ACCEPT -A logaccept-final-156 -m limit --limit 1/second -j LOG -A logaccept-final-156 -j ACCEPT -A logaccept-final-157 -j TEE --gateway 10.0.0.1 -A logaccept-final-157 -j TEE --gateway 10.0.0.2 -A logaccept-final-157 -j ACCEPT -A logaccept-final-158 -m limit --limit 12/minute -j ULOG -A logaccept-final-158 -j ACCEPT -A logaccept-final-159 -m limit --limit 1/second -j LOG -A logaccept-final-159 -j ACCEPT -A logaccept-final-16 -j TEE --gateway 10.0.0.1 -A logaccept-final-16 -j TEE --gateway 10.0.0.2 -A logaccept-final-16 -j ACCEPT -A logaccept-final-160 -j TEE --gateway 10.0.0.1 -A logaccept-final-160 -j TEE --gateway 10.0.0.2 -A logaccept-final-160 -j ACCEPT -A logaccept-final-161 -m limit --limit 12/minute -j ULOG -A logaccept-final-161 -j ACCEPT -A logaccept-final-162 -m limit --limit 1/second -j LOG -A logaccept-final-162 -j ACCEPT -A logaccept-final-163 -j TEE --gateway 10.0.0.1 -A logaccept-final-163 -j TEE --gateway 10.0.0.2 -A logaccept-final-163 -j ACCEPT -A logaccept-final-164 -m limit --limit 12/minute -j ULOG -A logaccept-final-164 -j ACCEPT -A logaccept-final-165 -m limit --limit 1/second -j LOG -A logaccept-final-165 -j ACCEPT -A logaccept-final-166 -j TEE --gateway 10.0.0.1 -A logaccept-final-166 -j TEE --gateway 10.0.0.2 -A logaccept-final-166 -j ACCEPT -A logaccept-final-167 -m limit --limit 12/minute -j ULOG -A logaccept-final-167 -j ACCEPT -A logaccept-final-168 -m limit --limit 1/second -j LOG -A logaccept-final-168 -j ACCEPT -A logaccept-final-169 -j TEE --gateway 10.0.0.1 -A logaccept-final-169 -j TEE --gateway 10.0.0.2 -A logaccept-final-169 -j ACCEPT -A logaccept-final-17 -m limit --limit 12/minute -j ULOG -A logaccept-final-17 -j ACCEPT -A logaccept-final-170 -m limit --limit 12/minute -j ULOG -A logaccept-final-170 -j ACCEPT -A logaccept-final-171 -m limit --limit 1/second -j LOG -A logaccept-final-171 -j ACCEPT -A logaccept-final-172 -j TEE --gateway 10.0.0.1 -A logaccept-final-172 -j TEE --gateway 10.0.0.2 -A logaccept-final-172 -j ACCEPT -A logaccept-final-173 -m limit --limit 12/minute -j ULOG -A logaccept-final-173 -j ACCEPT -A logaccept-final-174 -m limit --limit 1/second -j LOG -A logaccept-final-174 -j ACCEPT -A logaccept-final-175 -j TEE --gateway 10.0.0.1 -A logaccept-final-175 -j TEE --gateway 10.0.0.2 -A logaccept-final-175 -j ACCEPT -A logaccept-final-176 -m limit --limit 12/minute -j ULOG -A logaccept-final-176 -j ACCEPT -A logaccept-final-177 -m limit --limit 1/second -j LOG -A logaccept-final-177 -j ACCEPT -A logaccept-final-178 -j TEE --gateway 10.0.0.1 -A logaccept-final-178 -j TEE --gateway 10.0.0.2 -A logaccept-final-178 -j ACCEPT -A logaccept-final-179 -m limit --limit 12/minute -j ULOG -A logaccept-final-179 -j ACCEPT -A logaccept-final-18 -m limit --limit 1/second -j LOG -A logaccept-final-18 -j ACCEPT -A logaccept-final-180 -m limit --limit 1/second -j LOG -A logaccept-final-180 -j ACCEPT -A logaccept-final-181 -j TEE --gateway 10.0.0.1 -A logaccept-final-181 -j TEE --gateway 10.0.0.2 -A logaccept-final-181 -j ACCEPT -A logaccept-final-182 -m limit --limit 12/minute -j ULOG -A logaccept-final-182 -j ACCEPT -A logaccept-final-183 -m limit --limit 1/second -j LOG -A logaccept-final-183 -j ACCEPT -A logaccept-final-184 -j TEE --gateway 10.0.0.1 -A logaccept-final-184 -j TEE --gateway 10.0.0.2 -A logaccept-final-184 -j ACCEPT -A logaccept-final-185 -m limit --limit 12/minute -j ULOG -A logaccept-final-185 -j ACCEPT -A logaccept-final-186 -m limit --limit 1/second -j LOG -A logaccept-final-186 -j ACCEPT -A logaccept-final-187 -j TEE --gateway 10.0.0.1 -A logaccept-final-187 -j TEE --gateway 10.0.0.2 -A logaccept-final-187 -j ACCEPT -A logaccept-final-188 -m limit --limit 12/minute -j ULOG -A logaccept-final-188 -j ACCEPT -A logaccept-final-189 -m limit --limit 1/second -j LOG -A logaccept-final-189 -j ACCEPT -A logaccept-final-19 -j TEE --gateway 10.0.0.1 -A logaccept-final-19 -j TEE --gateway 10.0.0.2 -A logaccept-final-19 -j ACCEPT -A logaccept-final-190 -j TEE --gateway 10.0.0.1 -A logaccept-final-190 -j TEE --gateway 10.0.0.2 -A logaccept-final-190 -j ACCEPT -A logaccept-final-191 -m limit --limit 12/minute -j ULOG -A logaccept-final-191 -j ACCEPT -A logaccept-final-192 -m limit --limit 1/second -j LOG -A logaccept-final-192 -j ACCEPT -A logaccept-final-193 -j TEE --gateway 10.0.0.1 -A logaccept-final-193 -j TEE --gateway 10.0.0.2 -A logaccept-final-193 -j ACCEPT -A logaccept-final-194 -m limit --limit 12/minute -j ULOG -A logaccept-final-194 -j ACCEPT -A logaccept-final-195 -m limit --limit 1/second -j LOG -A logaccept-final-195 -j ACCEPT -A logaccept-final-196 -j TEE --gateway 10.0.0.1 -A logaccept-final-196 -j TEE --gateway 10.0.0.2 -A logaccept-final-196 -j ACCEPT -A logaccept-final-197 -m limit --limit 12/minute -j ULOG -A logaccept-final-197 -j ACCEPT -A logaccept-final-198 -m limit --limit 1/second -j LOG -A logaccept-final-198 -j ACCEPT -A logaccept-final-199 -j TEE --gateway 10.0.0.1 -A logaccept-final-199 -j TEE --gateway 10.0.0.2 -A logaccept-final-199 -j ACCEPT -A logaccept-final-2 -m limit --limit 12/minute -j ULOG -A logaccept-final-2 -j ACCEPT -A logaccept-final-20 -m limit --limit 12/minute -j ULOG -A logaccept-final-20 -j ACCEPT -A logaccept-final-200 -m limit --limit 12/minute -j ULOG -A logaccept-final-200 -j ACCEPT -A logaccept-final-201 -m limit --limit 1/second -j LOG -A logaccept-final-201 -j ACCEPT -A logaccept-final-202 -j TEE --gateway 10.0.0.1 -A logaccept-final-202 -j TEE --gateway 10.0.0.2 -A logaccept-final-202 -j ACCEPT -A logaccept-final-203 -m limit --limit 12/minute -j ULOG -A logaccept-final-203 -j ACCEPT -A logaccept-final-204 -m limit --limit 1/second -j LOG -A logaccept-final-204 -j ACCEPT -A logaccept-final-205 -j TEE --gateway 10.0.0.1 -A logaccept-final-205 -j TEE --gateway 10.0.0.2 -A logaccept-final-205 -j ACCEPT -A logaccept-final-206 -m limit --limit 12/minute -j ULOG -A logaccept-final-206 -j ACCEPT -A logaccept-final-207 -m limit --limit 1/second -j LOG -A logaccept-final-207 -j ACCEPT -A logaccept-final-208 -j TEE --gateway 10.0.0.1 -A logaccept-final-208 -j TEE --gateway 10.0.0.2 -A logaccept-final-208 -j ACCEPT -A logaccept-final-209 -m limit --limit 12/minute -j ULOG -A logaccept-final-209 -j ACCEPT -A logaccept-final-21 -m limit --limit 1/second -j LOG -A logaccept-final-21 -j ACCEPT -A logaccept-final-210 -m limit --limit 1/second -j LOG -A logaccept-final-210 -j ACCEPT -A logaccept-final-211 -j TEE --gateway 10.0.0.1 -A logaccept-final-211 -j TEE --gateway 10.0.0.2 -A logaccept-final-211 -j ACCEPT -A logaccept-final-212 -m limit --limit 12/minute -j ULOG -A logaccept-final-212 -j ACCEPT -A logaccept-final-213 -m limit --limit 1/second -j LOG -A logaccept-final-213 -j ACCEPT -A logaccept-final-214 -j TEE --gateway 10.0.0.1 -A logaccept-final-214 -j TEE --gateway 10.0.0.2 -A logaccept-final-214 -j ACCEPT -A logaccept-final-215 -m limit --limit 12/minute -j ULOG -A logaccept-final-215 -j ACCEPT -A logaccept-final-216 -m limit --limit 1/second -j LOG -A logaccept-final-216 -j ACCEPT -A logaccept-final-217 -j TEE --gateway 10.0.0.1 -A logaccept-final-217 -j TEE --gateway 10.0.0.2 -A logaccept-final-217 -j ACCEPT -A logaccept-final-218 -m limit --limit 12/minute -j ULOG -A logaccept-final-218 -j ACCEPT -A logaccept-final-219 -m limit --limit 1/second -j LOG -A logaccept-final-219 -j ACCEPT -A logaccept-final-22 -j TEE --gateway 10.0.0.1 -A logaccept-final-22 -j TEE --gateway 10.0.0.2 -A logaccept-final-22 -j ACCEPT -A logaccept-final-220 -j TEE --gateway 10.0.0.1 -A logaccept-final-220 -j TEE --gateway 10.0.0.2 -A logaccept-final-220 -j ACCEPT -A logaccept-final-221 -m limit --limit 12/minute -j ULOG -A logaccept-final-221 -j ACCEPT -A logaccept-final-222 -m limit --limit 1/second -j LOG -A logaccept-final-222 -j ACCEPT -A logaccept-final-223 -j TEE --gateway 10.0.0.1 -A logaccept-final-223 -j TEE --gateway 10.0.0.2 -A logaccept-final-223 -j ACCEPT -A logaccept-final-224 -m limit --limit 12/minute -j ULOG -A logaccept-final-224 -j ACCEPT -A logaccept-final-225 -m limit --limit 1/second -j LOG -A logaccept-final-225 -j ACCEPT -A logaccept-final-226 -j TEE --gateway 10.0.0.1 -A logaccept-final-226 -j TEE --gateway 10.0.0.2 -A logaccept-final-226 -j ACCEPT -A logaccept-final-227 -m limit --limit 12/minute -j ULOG -A logaccept-final-227 -j ACCEPT -A logaccept-final-228 -m limit --limit 1/second -j LOG -A logaccept-final-228 -j ACCEPT -A logaccept-final-229 -j TEE --gateway 10.0.0.1 -A logaccept-final-229 -j TEE --gateway 10.0.0.2 -A logaccept-final-229 -j ACCEPT -A logaccept-final-23 -m limit --limit 12/minute -j ULOG -A logaccept-final-23 -j ACCEPT -A logaccept-final-230 -m limit --limit 12/minute -j ULOG -A logaccept-final-230 -j ACCEPT -A logaccept-final-231 -m limit --limit 1/second -j LOG -A logaccept-final-231 -j ACCEPT -A logaccept-final-232 -j TEE --gateway 10.0.0.1 -A logaccept-final-232 -j TEE --gateway 10.0.0.2 -A logaccept-final-232 -j ACCEPT -A logaccept-final-233 -m limit --limit 12/minute -j ULOG -A logaccept-final-233 -j ACCEPT -A logaccept-final-234 -m limit --limit 1/second -j LOG -A logaccept-final-234 -j ACCEPT -A logaccept-final-235 -j TEE --gateway 10.0.0.1 -A logaccept-final-235 -j TEE --gateway 10.0.0.2 -A logaccept-final-235 -j ACCEPT -A logaccept-final-236 -m limit --limit 12/minute -j ULOG -A logaccept-final-236 -j ACCEPT -A logaccept-final-237 -m limit --limit 1/second -j LOG -A logaccept-final-237 -j ACCEPT -A logaccept-final-238 -j TEE --gateway 10.0.0.1 -A logaccept-final-238 -j TEE --gateway 10.0.0.2 -A logaccept-final-238 -j ACCEPT -A logaccept-final-239 -m limit --limit 12/minute -j ULOG -A logaccept-final-239 -j ACCEPT -A logaccept-final-24 -m limit --limit 1/second -j LOG -A logaccept-final-24 -j ACCEPT -A logaccept-final-240 -m limit --limit 1/second -j LOG -A logaccept-final-240 -j ACCEPT -A logaccept-final-241 -j TEE --gateway 10.0.0.1 -A logaccept-final-241 -j TEE --gateway 10.0.0.2 -A logaccept-final-241 -j ACCEPT -A logaccept-final-242 -m limit --limit 12/minute -j ULOG -A logaccept-final-242 -j ACCEPT -A logaccept-final-243 -m limit --limit 1/second -j LOG -A logaccept-final-243 -j ACCEPT -A logaccept-final-244 -j TEE --gateway 10.0.0.1 -A logaccept-final-244 -j TEE --gateway 10.0.0.2 -A logaccept-final-244 -j ACCEPT -A logaccept-final-245 -m limit --limit 12/minute -j ULOG -A logaccept-final-245 -j ACCEPT -A logaccept-final-246 -m limit --limit 1/second -j LOG -A logaccept-final-246 -j ACCEPT -A logaccept-final-247 -j TEE --gateway 10.0.0.1 -A logaccept-final-247 -j TEE --gateway 10.0.0.2 -A logaccept-final-247 -j ACCEPT -A logaccept-final-248 -m limit --limit 12/minute -j ULOG -A logaccept-final-248 -j ACCEPT -A logaccept-final-249 -m limit --limit 1/second -j LOG -A logaccept-final-249 -j ACCEPT -A logaccept-final-25 -j TEE --gateway 10.0.0.1 -A logaccept-final-25 -j TEE --gateway 10.0.0.2 -A logaccept-final-25 -j ACCEPT -A logaccept-final-250 -j TEE --gateway 10.0.0.1 -A logaccept-final-250 -j TEE --gateway 10.0.0.2 -A logaccept-final-250 -j ACCEPT -A logaccept-final-251 -m limit --limit 12/minute -j ULOG -A logaccept-final-251 -j ACCEPT -A logaccept-final-252 -m limit --limit 1/second -j LOG -A logaccept-final-252 -j ACCEPT -A logaccept-final-253 -j TEE --gateway 10.0.0.1 -A logaccept-final-253 -j TEE --gateway 10.0.0.2 -A logaccept-final-253 -j ACCEPT -A logaccept-final-254 -m limit --limit 12/minute -j ULOG -A logaccept-final-254 -j ACCEPT -A logaccept-final-255 -m limit --limit 1/second -j LOG -A logaccept-final-255 -j ACCEPT -A logaccept-final-256 -j TEE --gateway 10.0.0.1 -A logaccept-final-256 -j TEE --gateway 10.0.0.2 -A logaccept-final-256 -j ACCEPT -A logaccept-final-257 -m limit --limit 12/minute -j ULOG -A logaccept-final-257 -j ACCEPT -A logaccept-final-258 -m limit --limit 1/second -j LOG -A logaccept-final-258 -j ACCEPT -A logaccept-final-259 -j TEE --gateway 10.0.0.1 -A logaccept-final-259 -j TEE --gateway 10.0.0.2 -A logaccept-final-259 -j ACCEPT -A logaccept-final-26 -m limit --limit 12/minute -j ULOG -A logaccept-final-26 -j ACCEPT -A logaccept-final-260 -m limit --limit 12/minute -j ULOG -A logaccept-final-260 -j ACCEPT -A logaccept-final-261 -m limit --limit 1/second -j LOG -A logaccept-final-261 -j ACCEPT -A logaccept-final-262 -j TEE --gateway 10.0.0.1 -A logaccept-final-262 -j TEE --gateway 10.0.0.2 -A logaccept-final-262 -j ACCEPT -A logaccept-final-263 -m limit --limit 12/minute -j ULOG -A logaccept-final-263 -j ACCEPT -A logaccept-final-264 -m limit --limit 1/second -j LOG -A logaccept-final-264 -j ACCEPT -A logaccept-final-265 -j TEE --gateway 10.0.0.1 -A logaccept-final-265 -j TEE --gateway 10.0.0.2 -A logaccept-final-265 -j ACCEPT -A logaccept-final-266 -m limit --limit 12/minute -j ULOG -A logaccept-final-266 -j ACCEPT -A logaccept-final-267 -m limit --limit 1/second -j LOG -A logaccept-final-267 -j ACCEPT -A logaccept-final-268 -j TEE --gateway 10.0.0.1 -A logaccept-final-268 -j TEE --gateway 10.0.0.2 -A logaccept-final-268 -j ACCEPT -A logaccept-final-269 -m limit --limit 12/minute -j ULOG -A logaccept-final-269 -j ACCEPT -A logaccept-final-27 -m limit --limit 1/second -j LOG -A logaccept-final-27 -j ACCEPT -A logaccept-final-270 -m limit --limit 1/second -j LOG -A logaccept-final-270 -j ACCEPT -A logaccept-final-271 -j TEE --gateway 10.0.0.1 -A logaccept-final-271 -j TEE --gateway 10.0.0.2 -A logaccept-final-271 -j ACCEPT -A logaccept-final-272 -m limit --limit 12/minute -j ULOG -A logaccept-final-272 -j ACCEPT -A logaccept-final-273 -m limit --limit 1/second -j LOG -A logaccept-final-273 -j ACCEPT -A logaccept-final-274 -j TEE --gateway 10.0.0.1 -A logaccept-final-274 -j TEE --gateway 10.0.0.2 -A logaccept-final-274 -j ACCEPT -A logaccept-final-275 -m limit --limit 12/minute -j ULOG -A logaccept-final-275 -j ACCEPT -A logaccept-final-276 -m limit --limit 1/second -j LOG -A logaccept-final-276 -j ACCEPT -A logaccept-final-277 -j TEE --gateway 10.0.0.1 -A logaccept-final-277 -j TEE --gateway 10.0.0.2 -A logaccept-final-277 -j ACCEPT -A logaccept-final-278 -m limit --limit 12/minute -j ULOG -A logaccept-final-278 -j ACCEPT -A logaccept-final-279 -m limit --limit 1/second -j LOG -A logaccept-final-279 -j ACCEPT -A logaccept-final-28 -j TEE --gateway 10.0.0.1 -A logaccept-final-28 -j TEE --gateway 10.0.0.2 -A logaccept-final-28 -j ACCEPT -A logaccept-final-280 -j TEE --gateway 10.0.0.1 -A logaccept-final-280 -j TEE --gateway 10.0.0.2 -A logaccept-final-280 -j ACCEPT -A logaccept-final-281 -m limit --limit 12/minute -j ULOG -A logaccept-final-281 -j ACCEPT -A logaccept-final-282 -m limit --limit 1/second -j LOG -A logaccept-final-282 -j ACCEPT -A logaccept-final-283 -j TEE --gateway 10.0.0.1 -A logaccept-final-283 -j TEE --gateway 10.0.0.2 -A logaccept-final-283 -j ACCEPT -A logaccept-final-284 -m limit --limit 12/minute -j ULOG -A logaccept-final-284 -j ACCEPT -A logaccept-final-285 -m limit --limit 1/second -j LOG -A logaccept-final-285 -j ACCEPT -A logaccept-final-286 -j TEE --gateway 10.0.0.1 -A logaccept-final-286 -j TEE --gateway 10.0.0.2 -A logaccept-final-286 -j ACCEPT -A logaccept-final-287 -m limit --limit 12/minute -j ULOG -A logaccept-final-287 -j ACCEPT -A logaccept-final-288 -m limit --limit 1/second -j LOG -A logaccept-final-288 -j ACCEPT -A logaccept-final-289 -j TEE --gateway 10.0.0.1 -A logaccept-final-289 -j TEE --gateway 10.0.0.2 -A logaccept-final-289 -j ACCEPT -A logaccept-final-29 -m limit --limit 12/minute -j ULOG -A logaccept-final-29 -j ACCEPT -A logaccept-final-290 -m limit --limit 12/minute -j ULOG -A logaccept-final-290 -j ACCEPT -A logaccept-final-291 -m limit --limit 1/second -j LOG -A logaccept-final-291 -j ACCEPT -A logaccept-final-292 -j TEE --gateway 10.0.0.1 -A logaccept-final-292 -j TEE --gateway 10.0.0.2 -A logaccept-final-292 -j ACCEPT -A logaccept-final-293 -m limit --limit 12/minute -j ULOG -A logaccept-final-293 -j ACCEPT -A logaccept-final-294 -m limit --limit 1/second -j LOG -A logaccept-final-294 -j ACCEPT -A logaccept-final-295 -j TEE --gateway 10.0.0.1 -A logaccept-final-295 -j TEE --gateway 10.0.0.2 -A logaccept-final-295 -j ACCEPT -A logaccept-final-296 -m limit --limit 12/minute -j ULOG -A logaccept-final-296 -j ACCEPT -A logaccept-final-297 -m limit --limit 1/second -j LOG -A logaccept-final-297 -j ACCEPT -A logaccept-final-298 -j TEE --gateway 10.0.0.1 -A logaccept-final-298 -j TEE --gateway 10.0.0.2 -A logaccept-final-298 -j ACCEPT -A logaccept-final-299 -m limit --limit 12/minute -j ULOG -A logaccept-final-299 -j ACCEPT -A logaccept-final-3 -m limit --limit 1/second -j LOG -A logaccept-final-3 -j ACCEPT -A logaccept-final-30 -m limit --limit 1/second -j LOG -A logaccept-final-30 -j ACCEPT -A logaccept-final-300 -m limit --limit 1/second -j LOG -A logaccept-final-300 -j ACCEPT -A logaccept-final-301 -j TEE --gateway 10.0.0.1 -A logaccept-final-301 -j TEE --gateway 10.0.0.2 -A logaccept-final-301 -j ACCEPT -A logaccept-final-302 -m limit --limit 12/minute -j ULOG -A logaccept-final-302 -j ACCEPT -A logaccept-final-303 -m limit --limit 1/second -j LOG -A logaccept-final-303 -j ACCEPT -A logaccept-final-304 -j TEE --gateway 10.0.0.1 -A logaccept-final-304 -j TEE --gateway 10.0.0.2 -A logaccept-final-304 -j ACCEPT -A logaccept-final-305 -m limit --limit 12/minute -j ULOG -A logaccept-final-305 -j ACCEPT -A logaccept-final-31 -j TEE --gateway 10.0.0.1 -A logaccept-final-31 -j TEE --gateway 10.0.0.2 -A logaccept-final-31 -j ACCEPT -A logaccept-final-32 -m limit --limit 12/minute -j ULOG -A logaccept-final-32 -j ACCEPT -A logaccept-final-33 -m limit --limit 1/second -j LOG -A logaccept-final-33 -j ACCEPT -A logaccept-final-34 -j TEE --gateway 10.0.0.1 -A logaccept-final-34 -j TEE --gateway 10.0.0.2 -A logaccept-final-34 -j ACCEPT -A logaccept-final-35 -m limit --limit 12/minute -j ULOG -A logaccept-final-35 -j ACCEPT -A logaccept-final-36 -m limit --limit 1/second -j LOG -A logaccept-final-36 -j ACCEPT -A logaccept-final-37 -j TEE --gateway 10.0.0.1 -A logaccept-final-37 -j TEE --gateway 10.0.0.2 -A logaccept-final-37 -j ACCEPT -A logaccept-final-38 -m limit --limit 12/minute -j ULOG -A logaccept-final-38 -j ACCEPT -A logaccept-final-39 -m limit --limit 1/second -j LOG -A logaccept-final-39 -j ACCEPT -A logaccept-final-4 -j TEE --gateway 10.0.0.1 -A logaccept-final-4 -j TEE --gateway 10.0.0.2 -A logaccept-final-4 -j ACCEPT -A logaccept-final-40 -j TEE --gateway 10.0.0.1 -A logaccept-final-40 -j TEE --gateway 10.0.0.2 -A logaccept-final-40 -j ACCEPT -A logaccept-final-41 -m limit --limit 12/minute -j ULOG -A logaccept-final-41 -j ACCEPT -A logaccept-final-42 -m limit --limit 1/second -j LOG -A logaccept-final-42 -j ACCEPT -A logaccept-final-43 -j TEE --gateway 10.0.0.1 -A logaccept-final-43 -j TEE --gateway 10.0.0.2 -A logaccept-final-43 -j ACCEPT -A logaccept-final-44 -m limit --limit 12/minute -j ULOG -A logaccept-final-44 -j ACCEPT -A logaccept-final-45 -m limit --limit 1/second -j LOG -A logaccept-final-45 -j ACCEPT -A logaccept-final-46 -j TEE --gateway 10.0.0.1 -A logaccept-final-46 -j TEE --gateway 10.0.0.2 -A logaccept-final-46 -j ACCEPT -A logaccept-final-47 -m limit --limit 12/minute -j ULOG -A logaccept-final-47 -j ACCEPT -A logaccept-final-48 -m limit --limit 1/second -j LOG -A logaccept-final-48 -j ACCEPT -A logaccept-final-49 -j TEE --gateway 10.0.0.1 -A logaccept-final-49 -j TEE --gateway 10.0.0.2 -A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -m limit --limit 12/minute -j ULOG -A logaccept-final-5 -j ACCEPT -A logaccept-final-50 -m limit --limit 12/minute -j ULOG -A logaccept-final-50 -j ACCEPT -A logaccept-final-51 -m limit --limit 1/second -j LOG -A logaccept-final-51 -j ACCEPT -A logaccept-final-52 -j TEE --gateway 10.0.0.1 -A logaccept-final-52 -j TEE --gateway 10.0.0.2 -A logaccept-final-52 -j ACCEPT -A logaccept-final-53 -m limit --limit 12/minute -j ULOG -A logaccept-final-53 -j ACCEPT -A logaccept-final-54 -m limit --limit 1/second -j LOG -A logaccept-final-54 -j ACCEPT -A logaccept-final-55 -j TEE --gateway 10.0.0.1 -A logaccept-final-55 -j TEE --gateway 10.0.0.2 -A logaccept-final-55 -j ACCEPT -A logaccept-final-56 -m limit --limit 12/minute -j ULOG -A logaccept-final-56 -j ACCEPT -A logaccept-final-57 -m limit --limit 1/second -j LOG -A logaccept-final-57 -j ACCEPT -A logaccept-final-58 -j TEE --gateway 10.0.0.1 -A logaccept-final-58 -j TEE --gateway 10.0.0.2 -A logaccept-final-58 -j ACCEPT -A logaccept-final-59 -m limit --limit 12/minute -j ULOG -A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT -A logaccept-final-60 -m limit --limit 1/second -j LOG -A logaccept-final-60 -j ACCEPT -A logaccept-final-61 -j TEE --gateway 10.0.0.1 -A logaccept-final-61 -j TEE --gateway 10.0.0.2 -A logaccept-final-61 -j ACCEPT -A logaccept-final-62 -m limit --limit 12/minute -j ULOG -A logaccept-final-62 -j ACCEPT -A logaccept-final-63 -m limit --limit 1/second -j LOG -A logaccept-final-63 -j ACCEPT -A logaccept-final-64 -j TEE --gateway 10.0.0.1 -A logaccept-final-64 -j TEE --gateway 10.0.0.2 -A logaccept-final-64 -j ACCEPT -A logaccept-final-65 -m limit --limit 12/minute -j ULOG -A logaccept-final-65 -j ACCEPT -A logaccept-final-66 -m limit --limit 1/second -j LOG -A logaccept-final-66 -j ACCEPT -A logaccept-final-67 -j TEE --gateway 10.0.0.1 -A logaccept-final-67 -j TEE --gateway 10.0.0.2 -A logaccept-final-67 -j ACCEPT -A logaccept-final-68 -m limit --limit 12/minute -j ULOG -A logaccept-final-68 -j ACCEPT -A logaccept-final-69 -m limit --limit 1/second -j LOG -A logaccept-final-69 -j ACCEPT -A logaccept-final-7 -j TEE --gateway 10.0.0.1 -A logaccept-final-7 -j TEE --gateway 10.0.0.2 -A logaccept-final-7 -j ACCEPT -A logaccept-final-70 -j TEE --gateway 10.0.0.1 -A logaccept-final-70 -j TEE --gateway 10.0.0.2 -A logaccept-final-70 -j ACCEPT -A logaccept-final-71 -m limit --limit 12/minute -j ULOG -A logaccept-final-71 -j ACCEPT -A logaccept-final-72 -m limit --limit 1/second -j LOG -A logaccept-final-72 -j ACCEPT -A logaccept-final-73 -j TEE --gateway 10.0.0.1 -A logaccept-final-73 -j TEE --gateway 10.0.0.2 -A logaccept-final-73 -j ACCEPT -A logaccept-final-74 -m limit --limit 12/minute -j ULOG -A logaccept-final-74 -j ACCEPT -A logaccept-final-75 -m limit --limit 1/second -j LOG -A logaccept-final-75 -j ACCEPT -A logaccept-final-76 -j TEE --gateway 10.0.0.1 -A logaccept-final-76 -j TEE --gateway 10.0.0.2 -A logaccept-final-76 -j ACCEPT -A logaccept-final-77 -m limit --limit 12/minute -j ULOG -A logaccept-final-77 -j ACCEPT -A logaccept-final-78 -m limit --limit 1/second -j LOG -A logaccept-final-78 -j ACCEPT -A logaccept-final-79 -j TEE --gateway 10.0.0.1 -A logaccept-final-79 -j TEE --gateway 10.0.0.2 -A logaccept-final-79 -j ACCEPT -A logaccept-final-8 -m limit --limit 12/minute -j ULOG -A logaccept-final-8 -j ACCEPT -A logaccept-final-80 -m limit --limit 12/minute -j ULOG -A logaccept-final-80 -j ACCEPT -A logaccept-final-81 -m limit --limit 1/second -j LOG -A logaccept-final-81 -j ACCEPT -A logaccept-final-82 -j TEE --gateway 10.0.0.1 -A logaccept-final-82 -j TEE --gateway 10.0.0.2 -A logaccept-final-82 -j ACCEPT -A logaccept-final-83 -m limit --limit 12/minute -j ULOG -A logaccept-final-83 -j ACCEPT -A logaccept-final-84 -m limit --limit 1/second -j LOG -A logaccept-final-84 -j ACCEPT -A logaccept-final-85 -j TEE --gateway 10.0.0.1 -A logaccept-final-85 -j TEE --gateway 10.0.0.2 -A logaccept-final-85 -j ACCEPT -A logaccept-final-86 -m limit --limit 12/minute -j ULOG -A logaccept-final-86 -j ACCEPT -A logaccept-final-87 -m limit --limit 1/second -j LOG -A logaccept-final-87 -j ACCEPT -A logaccept-final-88 -j TEE --gateway 10.0.0.1 -A logaccept-final-88 -j TEE --gateway 10.0.0.2 -A logaccept-final-88 -j ACCEPT -A logaccept-final-89 -m limit --limit 12/minute -j ULOG -A logaccept-final-89 -j ACCEPT -A logaccept-final-9 -m limit --limit 1/second -j LOG -A logaccept-final-9 -j ACCEPT -A logaccept-final-90 -m limit --limit 1/second -j LOG -A logaccept-final-90 -j ACCEPT -A logaccept-final-91 -j TEE --gateway 10.0.0.1 -A logaccept-final-91 -j TEE --gateway 10.0.0.2 -A logaccept-final-91 -j ACCEPT -A logaccept-final-92 -m limit --limit 12/minute -j ULOG -A logaccept-final-92 -j ACCEPT -A logaccept-final-93 -m limit --limit 1/second -j LOG -A logaccept-final-93 -j ACCEPT -A logaccept-final-94 -j TEE --gateway 10.0.0.1 -A logaccept-final-94 -j TEE --gateway 10.0.0.2 -A logaccept-final-94 -j ACCEPT -A logaccept-final-95 -m limit --limit 12/minute -j ULOG -A logaccept-final-95 -j ACCEPT -A logaccept-final-96 -m limit --limit 1/second -j LOG -A logaccept-final-96 -j ACCEPT -A logaccept-final-97 -j TEE --gateway 10.0.0.1 -A logaccept-final-97 -j TEE --gateway 10.0.0.2 -A logaccept-final-97 -j ACCEPT -A logaccept-final-98 -m limit --limit 12/minute -j ULOG -A logaccept-final-98 -j ACCEPT -A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT -A logaccept-ntp-0 -m limit --limit 1/second -j LOG -A logaccept-ntp-0 -j ACCEPT -A logaccept-ntp-1 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-1 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-1 -j ACCEPT -A logaccept-ntp-10 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-10 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-10 -j ACCEPT -A logaccept-ntp-11 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-11 -j ACCEPT -A logaccept-ntp-12 -m limit --limit 1/second -j LOG -A logaccept-ntp-12 -j ACCEPT -A logaccept-ntp-13 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-13 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-13 -j ACCEPT -A logaccept-ntp-14 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-14 -j ACCEPT -A logaccept-ntp-15 -m limit --limit 1/second -j LOG -A logaccept-ntp-15 -j ACCEPT -A logaccept-ntp-16 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-16 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-16 -j ACCEPT -A logaccept-ntp-17 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-17 -j ACCEPT -A logaccept-ntp-18 -m limit --limit 1/second -j LOG -A logaccept-ntp-18 -j ACCEPT -A logaccept-ntp-19 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-19 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-19 -j ACCEPT -A logaccept-ntp-2 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-2 -j ACCEPT -A logaccept-ntp-20 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-20 -j ACCEPT -A logaccept-ntp-21 -m limit --limit 1/second -j LOG -A logaccept-ntp-21 -j ACCEPT -A logaccept-ntp-22 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-22 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-22 -j ACCEPT -A logaccept-ntp-23 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-23 -j ACCEPT -A logaccept-ntp-24 -m limit --limit 1/second -j LOG -A logaccept-ntp-24 -j ACCEPT -A logaccept-ntp-25 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-25 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-25 -j ACCEPT -A logaccept-ntp-26 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-26 -j ACCEPT -A logaccept-ntp-27 -m limit --limit 1/second -j LOG -A logaccept-ntp-27 -j ACCEPT -A logaccept-ntp-28 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-28 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-28 -j ACCEPT -A logaccept-ntp-29 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-29 -j ACCEPT -A logaccept-ntp-3 -m limit --limit 1/second -j LOG -A logaccept-ntp-3 -j ACCEPT -A logaccept-ntp-30 -m limit --limit 1/second -j LOG -A logaccept-ntp-30 -j ACCEPT -A logaccept-ntp-31 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-31 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-31 -j ACCEPT -A logaccept-ntp-32 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-32 -j ACCEPT -A logaccept-ntp-4 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-4 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-4 -j ACCEPT -A logaccept-ntp-5 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-5 -j ACCEPT -A logaccept-ntp-6 -m limit --limit 1/second -j LOG -A logaccept-ntp-6 -j ACCEPT -A logaccept-ntp-7 -j TEE --gateway 10.0.0.1 -A logaccept-ntp-7 -j TEE --gateway 10.0.0.2 -A logaccept-ntp-7 -j ACCEPT -A logaccept-ntp-8 -m limit --limit 12/minute -j ULOG -A logaccept-ntp-8 -j ACCEPT -A logaccept-ntp-9 -m limit --limit 1/second -j LOG -A logaccept-ntp-9 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP -A logdrop-100 -j TEE --gateway 10.0.0.1 -A logdrop-100 -j TEE --gateway 10.0.0.2 -A logdrop-100 -j DROP -A logdrop-1000 -j TEE --gateway 10.0.0.1 -A logdrop-1000 -j TEE --gateway 10.0.0.2 -A logdrop-1000 -j DROP -A logdrop-1001 -j TEE --gateway 10.0.0.1 -A logdrop-1001 -j TEE --gateway 10.0.0.2 -A logdrop-1001 -j DROP -A logdrop-1002 -j TEE --gateway 10.0.0.1 -A logdrop-1002 -j TEE --gateway 10.0.0.2 -A logdrop-1002 -j DROP -A logdrop-1003 -j TEE --gateway 10.0.0.1 -A logdrop-1003 -j TEE --gateway 10.0.0.2 -A logdrop-1003 -j DROP -A logdrop-1004 -j TEE --gateway 10.0.0.1 -A logdrop-1004 -j TEE --gateway 10.0.0.2 -A logdrop-1004 -j DROP -A logdrop-1005 -j TEE --gateway 10.0.0.1 -A logdrop-1005 -j TEE --gateway 10.0.0.2 -A logdrop-1005 -j DROP -A logdrop-1006 -j TEE --gateway 10.0.0.1 -A logdrop-1006 -j TEE --gateway 10.0.0.2 -A logdrop-1006 -j DROP -A logdrop-1007 -j TEE --gateway 10.0.0.1 -A logdrop-1007 -j TEE --gateway 10.0.0.2 -A logdrop-1007 -j DROP -A logdrop-1008 -j TEE --gateway 10.0.0.1 -A logdrop-1008 -j TEE --gateway 10.0.0.2 -A logdrop-1008 -j DROP -A logdrop-1009 -j TEE --gateway 10.0.0.1 -A logdrop-1009 -j TEE --gateway 10.0.0.2 -A logdrop-1009 -j DROP -A logdrop-101 -j TEE --gateway 10.0.0.1 -A logdrop-101 -j TEE --gateway 10.0.0.2 -A logdrop-101 -j DROP -A logdrop-1010 -m limit --limit 12/minute -j ULOG -A logdrop-1010 -j DROP -A logdrop-1011 -m limit --limit 12/minute -j ULOG -A logdrop-1011 -j DROP -A logdrop-1012 -m limit --limit 12/minute -j ULOG -A logdrop-1012 -j DROP -A logdrop-1013 -m limit --limit 12/minute -j ULOG -A logdrop-1013 -j DROP -A logdrop-1014 -m limit --limit 12/minute -j ULOG -A logdrop-1014 -j DROP -A logdrop-1015 -m limit --limit 12/minute -j ULOG -A logdrop-1015 -j DROP -A logdrop-1016 -m limit --limit 12/minute -j ULOG -A logdrop-1016 -j DROP -A logdrop-1017 -m limit --limit 12/minute -j ULOG -A logdrop-1017 -j DROP -A logdrop-1018 -m limit --limit 12/minute -j ULOG -A logdrop-1018 -j DROP -A logdrop-1019 -m limit --limit 12/minute -j ULOG -A logdrop-1019 -j DROP -A logdrop-102 -j TEE --gateway 10.0.0.1 -A logdrop-102 -j TEE --gateway 10.0.0.2 -A logdrop-102 -j DROP -A logdrop-1020 -m limit --limit 12/minute -j ULOG -A logdrop-1020 -j DROP -A logdrop-1021 -m limit --limit 12/minute -j ULOG -A logdrop-1021 -j DROP -A logdrop-1022 -m limit --limit 12/minute -j ULOG -A logdrop-1022 -j DROP -A logdrop-1023 -m limit --limit 12/minute -j ULOG -A logdrop-1023 -j DROP -A logdrop-1024 -m limit --limit 12/minute -j ULOG -A logdrop-1024 -j DROP -A logdrop-1025 -m limit --limit 12/minute -j ULOG -A logdrop-1025 -j DROP -A logdrop-1026 -m limit --limit 12/minute -j ULOG -A logdrop-1026 -j DROP -A logdrop-1027 -m limit --limit 12/minute -j ULOG -A logdrop-1027 -j DROP -A logdrop-1028 -m limit --limit 12/minute -j ULOG -A logdrop-1028 -j DROP -A logdrop-1029 -m limit --limit 12/minute -j ULOG -A logdrop-1029 -j DROP -A logdrop-103 -j TEE --gateway 10.0.0.1 -A logdrop-103 -j TEE --gateway 10.0.0.2 -A logdrop-103 -j DROP -A logdrop-1030 -m limit --limit 12/minute -j ULOG -A logdrop-1030 -j DROP -A logdrop-1031 -m limit --limit 12/minute -j ULOG -A logdrop-1031 -j DROP -A logdrop-1032 -m limit --limit 12/minute -j ULOG -A logdrop-1032 -j DROP -A logdrop-1033 -m limit --limit 12/minute -j ULOG -A logdrop-1033 -j DROP -A logdrop-1034 -m limit --limit 12/minute -j ULOG -A logdrop-1034 -j DROP -A logdrop-1035 -m limit --limit 12/minute -j ULOG -A logdrop-1035 -j DROP -A logdrop-1036 -m limit --limit 12/minute -j ULOG -A logdrop-1036 -j DROP -A logdrop-1037 -m limit --limit 12/minute -j ULOG -A logdrop-1037 -j DROP -A logdrop-1038 -m limit --limit 12/minute -j ULOG -A logdrop-1038 -j DROP -A logdrop-1039 -m limit --limit 12/minute -j ULOG -A logdrop-1039 -j DROP -A logdrop-104 -j TEE --gateway 10.0.0.1 -A logdrop-104 -j TEE --gateway 10.0.0.2 -A logdrop-104 -j DROP -A logdrop-1040 -m limit --limit 12/minute -j ULOG -A logdrop-1040 -j DROP -A logdrop-1041 -m limit --limit 12/minute -j ULOG -A logdrop-1041 -j DROP -A logdrop-1042 -m limit --limit 12/minute -j ULOG -A logdrop-1042 -j DROP -A logdrop-1043 -m limit --limit 12/minute -j ULOG -A logdrop-1043 -j DROP -A logdrop-1044 -m limit --limit 12/minute -j ULOG -A logdrop-1044 -j DROP -A logdrop-1045 -m limit --limit 12/minute -j ULOG -A logdrop-1045 -j DROP -A logdrop-1046 -m limit --limit 12/minute -j ULOG -A logdrop-1046 -j DROP -A logdrop-1047 -m limit --limit 12/minute -j ULOG -A logdrop-1047 -j DROP -A logdrop-1048 -m limit --limit 12/minute -j ULOG -A logdrop-1048 -j DROP -A logdrop-1049 -m limit --limit 12/minute -j ULOG -A logdrop-1049 -j DROP -A logdrop-105 -j TEE --gateway 10.0.0.1 -A logdrop-105 -j TEE --gateway 10.0.0.2 -A logdrop-105 -j DROP -A logdrop-1050 -m limit --limit 12/minute -j ULOG -A logdrop-1050 -j DROP -A logdrop-1051 -m limit --limit 12/minute -j ULOG -A logdrop-1051 -j DROP -A logdrop-1052 -m limit --limit 12/minute -j ULOG -A logdrop-1052 -j DROP -A logdrop-1053 -m limit --limit 12/minute -j ULOG -A logdrop-1053 -j DROP -A logdrop-1054 -m limit --limit 12/minute -j ULOG -A logdrop-1054 -j DROP -A logdrop-1055 -m limit --limit 12/minute -j ULOG -A logdrop-1055 -j DROP -A logdrop-1056 -m limit --limit 12/minute -j ULOG -A logdrop-1056 -j DROP -A logdrop-1057 -m limit --limit 12/minute -j ULOG -A logdrop-1057 -j DROP -A logdrop-1058 -m limit --limit 12/minute -j ULOG -A logdrop-1058 -j DROP -A logdrop-1059 -m limit --limit 12/minute -j ULOG -A logdrop-1059 -j DROP -A logdrop-106 -j TEE --gateway 10.0.0.1 -A logdrop-106 -j TEE --gateway 10.0.0.2 -A logdrop-106 -j DROP -A logdrop-1060 -m limit --limit 12/minute -j ULOG -A logdrop-1060 -j DROP -A logdrop-1061 -m limit --limit 12/minute -j ULOG -A logdrop-1061 -j DROP -A logdrop-1062 -m limit --limit 12/minute -j ULOG -A logdrop-1062 -j DROP -A logdrop-1063 -m limit --limit 12/minute -j ULOG -A logdrop-1063 -j DROP -A logdrop-1064 -m limit --limit 12/minute -j ULOG -A logdrop-1064 -j DROP -A logdrop-1065 -m limit --limit 12/minute -j ULOG -A logdrop-1065 -j DROP -A logdrop-1066 -m limit --limit 12/minute -j ULOG -A logdrop-1066 -j DROP -A logdrop-1067 -m limit --limit 12/minute -j ULOG -A logdrop-1067 -j DROP -A logdrop-1068 -m limit --limit 12/minute -j ULOG -A logdrop-1068 -j DROP -A logdrop-1069 -m limit --limit 12/minute -j ULOG -A logdrop-1069 -j DROP -A logdrop-107 -j TEE --gateway 10.0.0.1 -A logdrop-107 -j TEE --gateway 10.0.0.2 -A logdrop-107 -j DROP -A logdrop-1070 -m limit --limit 12/minute -j ULOG -A logdrop-1070 -j DROP -A logdrop-1071 -m limit --limit 12/minute -j ULOG -A logdrop-1071 -j DROP -A logdrop-1072 -m limit --limit 12/minute -j ULOG -A logdrop-1072 -j DROP -A logdrop-1073 -m limit --limit 12/minute -j ULOG -A logdrop-1073 -j DROP -A logdrop-1074 -m limit --limit 12/minute -j ULOG -A logdrop-1074 -j DROP -A logdrop-1075 -m limit --limit 12/minute -j ULOG -A logdrop-1075 -j DROP -A logdrop-1076 -m limit --limit 12/minute -j ULOG -A logdrop-1076 -j DROP -A logdrop-1077 -m limit --limit 12/minute -j ULOG -A logdrop-1077 -j DROP -A logdrop-1078 -m limit --limit 12/minute -j ULOG -A logdrop-1078 -j DROP -A logdrop-1079 -m limit --limit 12/minute -j ULOG -A logdrop-1079 -j DROP -A logdrop-108 -j TEE --gateway 10.0.0.1 -A logdrop-108 -j TEE --gateway 10.0.0.2 -A logdrop-108 -j DROP -A logdrop-1080 -m limit --limit 12/minute -j ULOG -A logdrop-1080 -j DROP -A logdrop-1081 -m limit --limit 12/minute -j ULOG -A logdrop-1081 -j DROP -A logdrop-1082 -m limit --limit 12/minute -j ULOG -A logdrop-1082 -j DROP -A logdrop-1083 -m limit --limit 12/minute -j ULOG -A logdrop-1083 -j DROP -A logdrop-1084 -m limit --limit 12/minute -j ULOG -A logdrop-1084 -j DROP -A logdrop-1085 -m limit --limit 12/minute -j ULOG -A logdrop-1085 -j DROP -A logdrop-1086 -m limit --limit 12/minute -j ULOG -A logdrop-1086 -j DROP -A logdrop-1087 -m limit --limit 12/minute -j ULOG -A logdrop-1087 -j DROP -A logdrop-1088 -m limit --limit 12/minute -j ULOG -A logdrop-1088 -j DROP -A logdrop-1089 -m limit --limit 12/minute -j ULOG -A logdrop-1089 -j DROP -A logdrop-109 -j TEE --gateway 10.0.0.1 -A logdrop-109 -j TEE --gateway 10.0.0.2 -A logdrop-109 -j DROP -A logdrop-1090 -m limit --limit 12/minute -j ULOG -A logdrop-1090 -j DROP -A logdrop-1091 -m limit --limit 12/minute -j ULOG -A logdrop-1091 -j DROP -A logdrop-1092 -m limit --limit 12/minute -j ULOG -A logdrop-1092 -j DROP -A logdrop-1093 -m limit --limit 12/minute -j ULOG -A logdrop-1093 -j DROP -A logdrop-1094 -m limit --limit 12/minute -j ULOG -A logdrop-1094 -j DROP -A logdrop-1095 -m limit --limit 12/minute -j ULOG -A logdrop-1095 -j DROP -A logdrop-1096 -m limit --limit 12/minute -j ULOG -A logdrop-1096 -j DROP -A logdrop-1097 -m limit --limit 12/minute -j ULOG -A logdrop-1097 -j DROP -A logdrop-1098 -m limit --limit 12/minute -j ULOG -A logdrop-1098 -j DROP -A logdrop-1099 -m limit --limit 12/minute -j ULOG -A logdrop-1099 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP -A logdrop-110 -j TEE --gateway 10.0.0.1 -A logdrop-110 -j TEE --gateway 10.0.0.2 -A logdrop-110 -j DROP -A logdrop-1100 -m limit --limit 1/second -j LOG -A logdrop-1100 -j DROP -A logdrop-1101 -m limit --limit 1/second -j LOG -A logdrop-1101 -j DROP -A logdrop-1102 -m limit --limit 1/second -j LOG -A logdrop-1102 -j DROP -A logdrop-1103 -m limit --limit 1/second -j LOG -A logdrop-1103 -j DROP -A logdrop-1104 -m limit --limit 1/second -j LOG -A logdrop-1104 -j DROP -A logdrop-1105 -m limit --limit 1/second -j LOG -A logdrop-1105 -j DROP -A logdrop-1106 -m limit --limit 1/second -j LOG -A logdrop-1106 -j DROP -A logdrop-1107 -m limit --limit 1/second -j LOG -A logdrop-1107 -j DROP -A logdrop-1108 -m limit --limit 1/second -j LOG -A logdrop-1108 -j DROP -A logdrop-1109 -m limit --limit 1/second -j LOG -A logdrop-1109 -j DROP -A logdrop-111 -j TEE --gateway 10.0.0.1 -A logdrop-111 -j TEE --gateway 10.0.0.2 -A logdrop-111 -j DROP -A logdrop-1110 -m limit --limit 1/second -j LOG -A logdrop-1110 -j DROP -A logdrop-1111 -m limit --limit 1/second -j LOG -A logdrop-1111 -j DROP -A logdrop-1112 -m limit --limit 1/second -j LOG -A logdrop-1112 -j DROP -A logdrop-1113 -m limit --limit 1/second -j LOG -A logdrop-1113 -j DROP -A logdrop-1114 -m limit --limit 1/second -j LOG -A logdrop-1114 -j DROP -A logdrop-1115 -m limit --limit 1/second -j LOG -A logdrop-1115 -j DROP -A logdrop-1116 -m limit --limit 1/second -j LOG -A logdrop-1116 -j DROP -A logdrop-1117 -m limit --limit 1/second -j LOG -A logdrop-1117 -j DROP -A logdrop-1118 -m limit --limit 1/second -j LOG -A logdrop-1118 -j DROP -A logdrop-1119 -m limit --limit 1/second -j LOG -A logdrop-1119 -j DROP -A logdrop-112 -j TEE --gateway 10.0.0.1 -A logdrop-112 -j TEE --gateway 10.0.0.2 -A logdrop-112 -j DROP -A logdrop-1120 -m limit --limit 1/second -j LOG -A logdrop-1120 -j DROP -A logdrop-1121 -m limit --limit 1/second -j LOG -A logdrop-1121 -j DROP -A logdrop-1122 -m limit --limit 1/second -j LOG -A logdrop-1122 -j DROP -A logdrop-1123 -m limit --limit 1/second -j LOG -A logdrop-1123 -j DROP -A logdrop-1124 -m limit --limit 1/second -j LOG -A logdrop-1124 -j DROP -A logdrop-1125 -m limit --limit 1/second -j LOG -A logdrop-1125 -j DROP -A logdrop-1126 -m limit --limit 1/second -j LOG -A logdrop-1126 -j DROP -A logdrop-1127 -m limit --limit 1/second -j LOG -A logdrop-1127 -j DROP -A logdrop-1128 -m limit --limit 1/second -j LOG -A logdrop-1128 -j DROP -A logdrop-1129 -m limit --limit 1/second -j LOG -A logdrop-1129 -j DROP -A logdrop-113 -j TEE --gateway 10.0.0.1 -A logdrop-113 -j TEE --gateway 10.0.0.2 -A logdrop-113 -j DROP -A logdrop-1130 -m limit --limit 1/second -j LOG -A logdrop-1130 -j DROP -A logdrop-1131 -m limit --limit 1/second -j LOG -A logdrop-1131 -j DROP -A logdrop-1132 -m limit --limit 1/second -j LOG -A logdrop-1132 -j DROP -A logdrop-1133 -m limit --limit 1/second -j LOG -A logdrop-1133 -j DROP -A logdrop-1134 -m limit --limit 1/second -j LOG -A logdrop-1134 -j DROP -A logdrop-1135 -m limit --limit 1/second -j LOG -A logdrop-1135 -j DROP -A logdrop-1136 -m limit --limit 1/second -j LOG -A logdrop-1136 -j DROP -A logdrop-1137 -m limit --limit 1/second -j LOG -A logdrop-1137 -j DROP -A logdrop-1138 -m limit --limit 1/second -j LOG -A logdrop-1138 -j DROP -A logdrop-1139 -m limit --limit 1/second -j LOG -A logdrop-1139 -j DROP -A logdrop-114 -j TEE --gateway 10.0.0.1 -A logdrop-114 -j TEE --gateway 10.0.0.2 -A logdrop-114 -j DROP -A logdrop-1140 -m limit --limit 1/second -j LOG -A logdrop-1140 -j DROP -A logdrop-1141 -m limit --limit 1/second -j LOG -A logdrop-1141 -j DROP -A logdrop-1142 -m limit --limit 1/second -j LOG -A logdrop-1142 -j DROP -A logdrop-1143 -m limit --limit 1/second -j LOG -A logdrop-1143 -j DROP -A logdrop-1144 -m limit --limit 1/second -j LOG -A logdrop-1144 -j DROP -A logdrop-1145 -m limit --limit 1/second -j LOG -A logdrop-1145 -j DROP -A logdrop-1146 -m limit --limit 1/second -j LOG -A logdrop-1146 -j DROP -A logdrop-1147 -m limit --limit 1/second -j LOG -A logdrop-1147 -j DROP -A logdrop-1148 -m limit --limit 1/second -j LOG -A logdrop-1148 -j DROP -A logdrop-1149 -m limit --limit 1/second -j LOG -A logdrop-1149 -j DROP -A logdrop-115 -j TEE --gateway 10.0.0.1 -A logdrop-115 -j TEE --gateway 10.0.0.2 -A logdrop-115 -j DROP -A logdrop-1150 -m limit --limit 1/second -j LOG -A logdrop-1150 -j DROP -A logdrop-1151 -m limit --limit 1/second -j LOG -A logdrop-1151 -j DROP -A logdrop-1152 -m limit --limit 1/second -j LOG -A logdrop-1152 -j DROP -A logdrop-1153 -m limit --limit 1/second -j LOG -A logdrop-1153 -j DROP -A logdrop-1154 -m limit --limit 1/second -j LOG -A logdrop-1154 -j DROP -A logdrop-1155 -m limit --limit 1/second -j LOG -A logdrop-1155 -j DROP -A logdrop-1156 -m limit --limit 1/second -j LOG -A logdrop-1156 -j DROP -A logdrop-1157 -m limit --limit 1/second -j LOG -A logdrop-1157 -j DROP -A logdrop-1158 -m limit --limit 1/second -j LOG -A logdrop-1158 -j DROP -A logdrop-1159 -m limit --limit 1/second -j LOG -A logdrop-1159 -j DROP -A logdrop-116 -j TEE --gateway 10.0.0.1 -A logdrop-116 -j TEE --gateway 10.0.0.2 -A logdrop-116 -j DROP -A logdrop-1160 -m limit --limit 1/second -j LOG -A logdrop-1160 -j DROP -A logdrop-1161 -m limit --limit 1/second -j LOG -A logdrop-1161 -j DROP -A logdrop-1162 -m limit --limit 1/second -j LOG -A logdrop-1162 -j DROP -A logdrop-1163 -m limit --limit 1/second -j LOG -A logdrop-1163 -j DROP -A logdrop-1164 -m limit --limit 1/second -j LOG -A logdrop-1164 -j DROP -A logdrop-1165 -m limit --limit 1/second -j LOG -A logdrop-1165 -j DROP -A logdrop-1166 -m limit --limit 1/second -j LOG -A logdrop-1166 -j DROP -A logdrop-1167 -m limit --limit 1/second -j LOG -A logdrop-1167 -j DROP -A logdrop-1168 -m limit --limit 1/second -j LOG -A logdrop-1168 -j DROP -A logdrop-1169 -m limit --limit 1/second -j LOG -A logdrop-1169 -j DROP -A logdrop-117 -j TEE --gateway 10.0.0.1 -A logdrop-117 -j TEE --gateway 10.0.0.2 -A logdrop-117 -j DROP -A logdrop-1170 -m limit --limit 1/second -j LOG -A logdrop-1170 -j DROP -A logdrop-1171 -m limit --limit 1/second -j LOG -A logdrop-1171 -j DROP -A logdrop-1172 -m limit --limit 1/second -j LOG -A logdrop-1172 -j DROP -A logdrop-1173 -m limit --limit 1/second -j LOG -A logdrop-1173 -j DROP -A logdrop-1174 -m limit --limit 1/second -j LOG -A logdrop-1174 -j DROP -A logdrop-1175 -m limit --limit 1/second -j LOG -A logdrop-1175 -j DROP -A logdrop-1176 -m limit --limit 1/second -j LOG -A logdrop-1176 -j DROP -A logdrop-1177 -m limit --limit 1/second -j LOG -A logdrop-1177 -j DROP -A logdrop-1178 -m limit --limit 1/second -j LOG -A logdrop-1178 -j DROP -A logdrop-1179 -m limit --limit 1/second -j LOG -A logdrop-1179 -j DROP -A logdrop-118 -j TEE --gateway 10.0.0.1 -A logdrop-118 -j TEE --gateway 10.0.0.2 -A logdrop-118 -j DROP -A logdrop-1180 -m limit --limit 1/second -j LOG -A logdrop-1180 -j DROP -A logdrop-1181 -m limit --limit 1/second -j LOG -A logdrop-1181 -j DROP -A logdrop-1182 -m limit --limit 1/second -j LOG -A logdrop-1182 -j DROP -A logdrop-1183 -m limit --limit 1/second -j LOG -A logdrop-1183 -j DROP -A logdrop-1184 -m limit --limit 1/second -j LOG -A logdrop-1184 -j DROP -A logdrop-1185 -m limit --limit 1/second -j LOG -A logdrop-1185 -j DROP -A logdrop-1186 -m limit --limit 1/second -j LOG -A logdrop-1186 -j DROP -A logdrop-1187 -m limit --limit 1/second -j LOG -A logdrop-1187 -j DROP -A logdrop-1188 -m limit --limit 1/second -j LOG -A logdrop-1188 -j DROP -A logdrop-1189 -m limit --limit 1/second -j LOG -A logdrop-1189 -j DROP -A logdrop-119 -j TEE --gateway 10.0.0.1 -A logdrop-119 -j TEE --gateway 10.0.0.2 -A logdrop-119 -j DROP -A logdrop-1190 -m limit --limit 1/second -j LOG -A logdrop-1190 -j DROP -A logdrop-1191 -m limit --limit 1/second -j LOG -A logdrop-1191 -j DROP -A logdrop-1192 -m limit --limit 1/second -j LOG -A logdrop-1192 -j DROP -A logdrop-1193 -m limit --limit 1/second -j LOG -A logdrop-1193 -j DROP -A logdrop-1194 -m limit --limit 1/second -j LOG -A logdrop-1194 -j DROP -A logdrop-1195 -m limit --limit 1/second -j LOG -A logdrop-1195 -j DROP -A logdrop-1196 -m limit --limit 1/second -j LOG -A logdrop-1196 -j DROP -A logdrop-1197 -m limit --limit 1/second -j LOG -A logdrop-1197 -j DROP -A logdrop-1198 -m limit --limit 1/second -j LOG -A logdrop-1198 -j DROP -A logdrop-1199 -m limit --limit 1/second -j LOG -A logdrop-1199 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP -A logdrop-120 -j TEE --gateway 10.0.0.1 -A logdrop-120 -j TEE --gateway 10.0.0.2 -A logdrop-120 -j DROP -A logdrop-1200 -j TEE --gateway 10.0.0.1 -A logdrop-1200 -j TEE --gateway 10.0.0.2 -A logdrop-1200 -j DROP -A logdrop-1201 -j TEE --gateway 10.0.0.1 -A logdrop-1201 -j TEE --gateway 10.0.0.2 -A logdrop-1201 -j DROP -A logdrop-1202 -j TEE --gateway 10.0.0.1 -A logdrop-1202 -j TEE --gateway 10.0.0.2 -A logdrop-1202 -j DROP -A logdrop-1203 -j TEE --gateway 10.0.0.1 -A logdrop-1203 -j TEE --gateway 10.0.0.2 -A logdrop-1203 -j DROP -A logdrop-1204 -j TEE --gateway 10.0.0.1 -A logdrop-1204 -j TEE --gateway 10.0.0.2 -A logdrop-1204 -j DROP -A logdrop-1205 -j TEE --gateway 10.0.0.1 -A logdrop-1205 -j TEE --gateway 10.0.0.2 -A logdrop-1205 -j DROP -A logdrop-1206 -j TEE --gateway 10.0.0.1 -A logdrop-1206 -j TEE --gateway 10.0.0.2 -A logdrop-1206 -j DROP -A logdrop-1207 -j TEE --gateway 10.0.0.1 -A logdrop-1207 -j TEE --gateway 10.0.0.2 -A logdrop-1207 -j DROP -A logdrop-1208 -j TEE --gateway 10.0.0.1 -A logdrop-1208 -j TEE --gateway 10.0.0.2 -A logdrop-1208 -j DROP -A logdrop-1209 -j TEE --gateway 10.0.0.1 -A logdrop-1209 -j TEE --gateway 10.0.0.2 -A logdrop-1209 -j DROP -A logdrop-121 -j TEE --gateway 10.0.0.1 -A logdrop-121 -j TEE --gateway 10.0.0.2 -A logdrop-121 -j DROP -A logdrop-1210 -j TEE --gateway 10.0.0.1 -A logdrop-1210 -j TEE --gateway 10.0.0.2 -A logdrop-1210 -j DROP -A logdrop-1211 -j TEE --gateway 10.0.0.1 -A logdrop-1211 -j TEE --gateway 10.0.0.2 -A logdrop-1211 -j DROP -A logdrop-1212 -j TEE --gateway 10.0.0.1 -A logdrop-1212 -j TEE --gateway 10.0.0.2 -A logdrop-1212 -j DROP -A logdrop-1213 -j TEE --gateway 10.0.0.1 -A logdrop-1213 -j TEE --gateway 10.0.0.2 -A logdrop-1213 -j DROP -A logdrop-1214 -j TEE --gateway 10.0.0.1 -A logdrop-1214 -j TEE --gateway 10.0.0.2 -A logdrop-1214 -j DROP -A logdrop-1215 -j TEE --gateway 10.0.0.1 -A logdrop-1215 -j TEE --gateway 10.0.0.2 -A logdrop-1215 -j DROP -A logdrop-1216 -j TEE --gateway 10.0.0.1 -A logdrop-1216 -j TEE --gateway 10.0.0.2 -A logdrop-1216 -j DROP -A logdrop-1217 -j TEE --gateway 10.0.0.1 -A logdrop-1217 -j TEE --gateway 10.0.0.2 -A logdrop-1217 -j DROP -A logdrop-1218 -j TEE --gateway 10.0.0.1 -A logdrop-1218 -j TEE --gateway 10.0.0.2 -A logdrop-1218 -j DROP -A logdrop-1219 -j TEE --gateway 10.0.0.1 -A logdrop-1219 -j TEE --gateway 10.0.0.2 -A logdrop-1219 -j DROP -A logdrop-122 -j TEE --gateway 10.0.0.1 -A logdrop-122 -j TEE --gateway 10.0.0.2 -A logdrop-122 -j DROP -A logdrop-1220 -j TEE --gateway 10.0.0.1 -A logdrop-1220 -j TEE --gateway 10.0.0.2 -A logdrop-1220 -j DROP -A logdrop-1221 -j TEE --gateway 10.0.0.1 -A logdrop-1221 -j TEE --gateway 10.0.0.2 -A logdrop-1221 -j DROP -A logdrop-1222 -j TEE --gateway 10.0.0.1 -A logdrop-1222 -j TEE --gateway 10.0.0.2 -A logdrop-1222 -j DROP -A logdrop-1223 -j TEE --gateway 10.0.0.1 -A logdrop-1223 -j TEE --gateway 10.0.0.2 -A logdrop-1223 -j DROP -A logdrop-1224 -j TEE --gateway 10.0.0.1 -A logdrop-1224 -j TEE --gateway 10.0.0.2 -A logdrop-1224 -j DROP -A logdrop-1225 -j TEE --gateway 10.0.0.1 -A logdrop-1225 -j TEE --gateway 10.0.0.2 -A logdrop-1225 -j DROP -A logdrop-1226 -j TEE --gateway 10.0.0.1 -A logdrop-1226 -j TEE --gateway 10.0.0.2 -A logdrop-1226 -j DROP -A logdrop-1227 -j TEE --gateway 10.0.0.1 -A logdrop-1227 -j TEE --gateway 10.0.0.2 -A logdrop-1227 -j DROP -A logdrop-1228 -j TEE --gateway 10.0.0.1 -A logdrop-1228 -j TEE --gateway 10.0.0.2 -A logdrop-1228 -j DROP -A logdrop-1229 -j TEE --gateway 10.0.0.1 -A logdrop-1229 -j TEE --gateway 10.0.0.2 -A logdrop-1229 -j DROP -A logdrop-123 -j TEE --gateway 10.0.0.1 -A logdrop-123 -j TEE --gateway 10.0.0.2 -A logdrop-123 -j DROP -A logdrop-1230 -j TEE --gateway 10.0.0.1 -A logdrop-1230 -j TEE --gateway 10.0.0.2 -A logdrop-1230 -j DROP -A logdrop-1231 -j TEE --gateway 10.0.0.1 -A logdrop-1231 -j TEE --gateway 10.0.0.2 -A logdrop-1231 -j DROP -A logdrop-1232 -j TEE --gateway 10.0.0.1 -A logdrop-1232 -j TEE --gateway 10.0.0.2 -A logdrop-1232 -j DROP -A logdrop-1233 -j TEE --gateway 10.0.0.1 -A logdrop-1233 -j TEE --gateway 10.0.0.2 -A logdrop-1233 -j DROP -A logdrop-1234 -j TEE --gateway 10.0.0.1 -A logdrop-1234 -j TEE --gateway 10.0.0.2 -A logdrop-1234 -j DROP -A logdrop-1235 -j TEE --gateway 10.0.0.1 -A logdrop-1235 -j TEE --gateway 10.0.0.2 -A logdrop-1235 -j DROP -A logdrop-1236 -j TEE --gateway 10.0.0.1 -A logdrop-1236 -j TEE --gateway 10.0.0.2 -A logdrop-1236 -j DROP -A logdrop-1237 -j TEE --gateway 10.0.0.1 -A logdrop-1237 -j TEE --gateway 10.0.0.2 -A logdrop-1237 -j DROP -A logdrop-1238 -j TEE --gateway 10.0.0.1 -A logdrop-1238 -j TEE --gateway 10.0.0.2 -A logdrop-1238 -j DROP -A logdrop-1239 -j TEE --gateway 10.0.0.1 -A logdrop-1239 -j TEE --gateway 10.0.0.2 -A logdrop-1239 -j DROP -A logdrop-124 -j TEE --gateway 10.0.0.1 -A logdrop-124 -j TEE --gateway 10.0.0.2 -A logdrop-124 -j DROP -A logdrop-1240 -j TEE --gateway 10.0.0.1 -A logdrop-1240 -j TEE --gateway 10.0.0.2 -A logdrop-1240 -j DROP -A logdrop-1241 -j TEE --gateway 10.0.0.1 -A logdrop-1241 -j TEE --gateway 10.0.0.2 -A logdrop-1241 -j DROP -A logdrop-1242 -j TEE --gateway 10.0.0.1 -A logdrop-1242 -j TEE --gateway 10.0.0.2 -A logdrop-1242 -j DROP -A logdrop-1243 -j TEE --gateway 10.0.0.1 -A logdrop-1243 -j TEE --gateway 10.0.0.2 -A logdrop-1243 -j DROP -A logdrop-1244 -j TEE --gateway 10.0.0.1 -A logdrop-1244 -j TEE --gateway 10.0.0.2 -A logdrop-1244 -j DROP -A logdrop-1245 -j TEE --gateway 10.0.0.1 -A logdrop-1245 -j TEE --gateway 10.0.0.2 -A logdrop-1245 -j DROP -A logdrop-1246 -j TEE --gateway 10.0.0.1 -A logdrop-1246 -j TEE --gateway 10.0.0.2 -A logdrop-1246 -j DROP -A logdrop-1247 -j TEE --gateway 10.0.0.1 -A logdrop-1247 -j TEE --gateway 10.0.0.2 -A logdrop-1247 -j DROP -A logdrop-1248 -j TEE --gateway 10.0.0.1 -A logdrop-1248 -j TEE --gateway 10.0.0.2 -A logdrop-1248 -j DROP -A logdrop-1249 -j TEE --gateway 10.0.0.1 -A logdrop-1249 -j TEE --gateway 10.0.0.2 -A logdrop-1249 -j DROP -A logdrop-125 -j TEE --gateway 10.0.0.1 -A logdrop-125 -j TEE --gateway 10.0.0.2 -A logdrop-125 -j DROP -A logdrop-1250 -j TEE --gateway 10.0.0.1 -A logdrop-1250 -j TEE --gateway 10.0.0.2 -A logdrop-1250 -j DROP -A logdrop-1251 -j TEE --gateway 10.0.0.1 -A logdrop-1251 -j TEE --gateway 10.0.0.2 -A logdrop-1251 -j DROP -A logdrop-1252 -j TEE --gateway 10.0.0.1 -A logdrop-1252 -j TEE --gateway 10.0.0.2 -A logdrop-1252 -j DROP -A logdrop-1253 -j TEE --gateway 10.0.0.1 -A logdrop-1253 -j TEE --gateway 10.0.0.2 -A logdrop-1253 -j DROP -A logdrop-1254 -j TEE --gateway 10.0.0.1 -A logdrop-1254 -j TEE --gateway 10.0.0.2 -A logdrop-1254 -j DROP -A logdrop-1255 -j TEE --gateway 10.0.0.1 -A logdrop-1255 -j TEE --gateway 10.0.0.2 -A logdrop-1255 -j DROP -A logdrop-1256 -j TEE --gateway 10.0.0.1 -A logdrop-1256 -j TEE --gateway 10.0.0.2 -A logdrop-1256 -j DROP -A logdrop-1257 -j TEE --gateway 10.0.0.1 -A logdrop-1257 -j TEE --gateway 10.0.0.2 -A logdrop-1257 -j DROP -A logdrop-1258 -j TEE --gateway 10.0.0.1 -A logdrop-1258 -j TEE --gateway 10.0.0.2 -A logdrop-1258 -j DROP -A logdrop-1259 -j TEE --gateway 10.0.0.1 -A logdrop-1259 -j TEE --gateway 10.0.0.2 -A logdrop-1259 -j DROP -A logdrop-126 -j TEE --gateway 10.0.0.1 -A logdrop-126 -j TEE --gateway 10.0.0.2 -A logdrop-126 -j DROP -A logdrop-1260 -j TEE --gateway 10.0.0.1 -A logdrop-1260 -j TEE --gateway 10.0.0.2 -A logdrop-1260 -j DROP -A logdrop-1261 -j TEE --gateway 10.0.0.1 -A logdrop-1261 -j TEE --gateway 10.0.0.2 -A logdrop-1261 -j DROP -A logdrop-1262 -j TEE --gateway 10.0.0.1 -A logdrop-1262 -j TEE --gateway 10.0.0.2 -A logdrop-1262 -j DROP -A logdrop-1263 -j TEE --gateway 10.0.0.1 -A logdrop-1263 -j TEE --gateway 10.0.0.2 -A logdrop-1263 -j DROP -A logdrop-1264 -j TEE --gateway 10.0.0.1 -A logdrop-1264 -j TEE --gateway 10.0.0.2 -A logdrop-1264 -j DROP -A logdrop-1265 -j TEE --gateway 10.0.0.1 -A logdrop-1265 -j TEE --gateway 10.0.0.2 -A logdrop-1265 -j DROP -A logdrop-1266 -j TEE --gateway 10.0.0.1 -A logdrop-1266 -j TEE --gateway 10.0.0.2 -A logdrop-1266 -j DROP -A logdrop-1267 -j TEE --gateway 10.0.0.1 -A logdrop-1267 -j TEE --gateway 10.0.0.2 -A logdrop-1267 -j DROP -A logdrop-1268 -j TEE --gateway 10.0.0.1 -A logdrop-1268 -j TEE --gateway 10.0.0.2 -A logdrop-1268 -j DROP -A logdrop-1269 -j TEE --gateway 10.0.0.1 -A logdrop-1269 -j TEE --gateway 10.0.0.2 -A logdrop-1269 -j DROP -A logdrop-127 -j TEE --gateway 10.0.0.1 -A logdrop-127 -j TEE --gateway 10.0.0.2 -A logdrop-127 -j DROP -A logdrop-1270 -j TEE --gateway 10.0.0.1 -A logdrop-1270 -j TEE --gateway 10.0.0.2 -A logdrop-1270 -j DROP -A logdrop-1271 -j TEE --gateway 10.0.0.1 -A logdrop-1271 -j TEE --gateway 10.0.0.2 -A logdrop-1271 -j DROP -A logdrop-1272 -j TEE --gateway 10.0.0.1 -A logdrop-1272 -j TEE --gateway 10.0.0.2 -A logdrop-1272 -j DROP -A logdrop-1273 -j TEE --gateway 10.0.0.1 -A logdrop-1273 -j TEE --gateway 10.0.0.2 -A logdrop-1273 -j DROP -A logdrop-1274 -j TEE --gateway 10.0.0.1 -A logdrop-1274 -j TEE --gateway 10.0.0.2 -A logdrop-1274 -j DROP -A logdrop-1275 -j TEE --gateway 10.0.0.1 -A logdrop-1275 -j TEE --gateway 10.0.0.2 -A logdrop-1275 -j DROP -A logdrop-1276 -j TEE --gateway 10.0.0.1 -A logdrop-1276 -j TEE --gateway 10.0.0.2 -A logdrop-1276 -j DROP -A logdrop-1277 -j TEE --gateway 10.0.0.1 -A logdrop-1277 -j TEE --gateway 10.0.0.2 -A logdrop-1277 -j DROP -A logdrop-1278 -j TEE --gateway 10.0.0.1 -A logdrop-1278 -j TEE --gateway 10.0.0.2 -A logdrop-1278 -j DROP -A logdrop-1279 -j TEE --gateway 10.0.0.1 -A logdrop-1279 -j TEE --gateway 10.0.0.2 -A logdrop-1279 -j DROP -A logdrop-128 -j TEE --gateway 10.0.0.1 -A logdrop-128 -j TEE --gateway 10.0.0.2 -A logdrop-128 -j DROP -A logdrop-1280 -j TEE --gateway 10.0.0.1 -A logdrop-1280 -j TEE --gateway 10.0.0.2 -A logdrop-1280 -j DROP -A logdrop-1281 -j TEE --gateway 10.0.0.1 -A logdrop-1281 -j TEE --gateway 10.0.0.2 -A logdrop-1281 -j DROP -A logdrop-1282 -j TEE --gateway 10.0.0.1 -A logdrop-1282 -j TEE --gateway 10.0.0.2 -A logdrop-1282 -j DROP -A logdrop-1283 -j TEE --gateway 10.0.0.1 -A logdrop-1283 -j TEE --gateway 10.0.0.2 -A logdrop-1283 -j DROP -A logdrop-1284 -j TEE --gateway 10.0.0.1 -A logdrop-1284 -j TEE --gateway 10.0.0.2 -A logdrop-1284 -j DROP -A logdrop-1285 -j TEE --gateway 10.0.0.1 -A logdrop-1285 -j TEE --gateway 10.0.0.2 -A logdrop-1285 -j DROP -A logdrop-1286 -j TEE --gateway 10.0.0.1 -A logdrop-1286 -j TEE --gateway 10.0.0.2 -A logdrop-1286 -j DROP -A logdrop-1287 -j TEE --gateway 10.0.0.1 -A logdrop-1287 -j TEE --gateway 10.0.0.2 -A logdrop-1287 -j DROP -A logdrop-1288 -j TEE --gateway 10.0.0.1 -A logdrop-1288 -j TEE --gateway 10.0.0.2 -A logdrop-1288 -j DROP -A logdrop-1289 -j TEE --gateway 10.0.0.1 -A logdrop-1289 -j TEE --gateway 10.0.0.2 -A logdrop-1289 -j DROP -A logdrop-129 -j TEE --gateway 10.0.0.1 -A logdrop-129 -j TEE --gateway 10.0.0.2 -A logdrop-129 -j DROP -A logdrop-1290 -m limit --limit 12/minute -j ULOG -A logdrop-1290 -j DROP -A logdrop-1291 -m limit --limit 12/minute -j ULOG -A logdrop-1291 -j DROP -A logdrop-1292 -m limit --limit 12/minute -j ULOG -A logdrop-1292 -j DROP -A logdrop-1293 -m limit --limit 12/minute -j ULOG -A logdrop-1293 -j DROP -A logdrop-1294 -m limit --limit 12/minute -j ULOG -A logdrop-1294 -j DROP -A logdrop-1295 -m limit --limit 12/minute -j ULOG -A logdrop-1295 -j DROP -A logdrop-1296 -m limit --limit 12/minute -j ULOG -A logdrop-1296 -j DROP -A logdrop-1297 -m limit --limit 12/minute -j ULOG -A logdrop-1297 -j DROP -A logdrop-1298 -m limit --limit 12/minute -j ULOG -A logdrop-1298 -j DROP -A logdrop-1299 -m limit --limit 12/minute -j ULOG -A logdrop-1299 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG -A logdrop-13 -j DROP -A logdrop-130 -j TEE --gateway 10.0.0.1 -A logdrop-130 -j TEE --gateway 10.0.0.2 -A logdrop-130 -j DROP -A logdrop-1300 -m limit --limit 12/minute -j ULOG -A logdrop-1300 -j DROP -A logdrop-1301 -m limit --limit 12/minute -j ULOG -A logdrop-1301 -j DROP -A logdrop-1302 -m limit --limit 12/minute -j ULOG -A logdrop-1302 -j DROP -A logdrop-1303 -m limit --limit 12/minute -j ULOG -A logdrop-1303 -j DROP -A logdrop-1304 -m limit --limit 12/minute -j ULOG -A logdrop-1304 -j DROP -A logdrop-1305 -m limit --limit 12/minute -j ULOG -A logdrop-1305 -j DROP -A logdrop-1306 -m limit --limit 12/minute -j ULOG -A logdrop-1306 -j DROP -A logdrop-1307 -m limit --limit 12/minute -j ULOG -A logdrop-1307 -j DROP -A logdrop-1308 -m limit --limit 12/minute -j ULOG -A logdrop-1308 -j DROP -A logdrop-1309 -m limit --limit 12/minute -j ULOG -A logdrop-1309 -j DROP -A logdrop-131 -j TEE --gateway 10.0.0.1 -A logdrop-131 -j TEE --gateway 10.0.0.2 -A logdrop-131 -j DROP -A logdrop-1310 -m limit --limit 12/minute -j ULOG -A logdrop-1310 -j DROP -A logdrop-1311 -m limit --limit 12/minute -j ULOG -A logdrop-1311 -j DROP -A logdrop-1312 -m limit --limit 12/minute -j ULOG -A logdrop-1312 -j DROP -A logdrop-1313 -m limit --limit 12/minute -j ULOG -A logdrop-1313 -j DROP -A logdrop-1314 -m limit --limit 12/minute -j ULOG -A logdrop-1314 -j DROP -A logdrop-1315 -m limit --limit 12/minute -j ULOG -A logdrop-1315 -j DROP -A logdrop-1316 -m limit --limit 12/minute -j ULOG -A logdrop-1316 -j DROP -A logdrop-1317 -m limit --limit 12/minute -j ULOG -A logdrop-1317 -j DROP -A logdrop-1318 -m limit --limit 12/minute -j ULOG -A logdrop-1318 -j DROP -A logdrop-1319 -m limit --limit 12/minute -j ULOG -A logdrop-1319 -j DROP -A logdrop-132 -j TEE --gateway 10.0.0.1 -A logdrop-132 -j TEE --gateway 10.0.0.2 -A logdrop-132 -j DROP -A logdrop-1320 -m limit --limit 12/minute -j ULOG -A logdrop-1320 -j DROP -A logdrop-1321 -m limit --limit 12/minute -j ULOG -A logdrop-1321 -j DROP -A logdrop-1322 -m limit --limit 12/minute -j ULOG -A logdrop-1322 -j DROP -A logdrop-1323 -m limit --limit 12/minute -j ULOG -A logdrop-1323 -j DROP -A logdrop-1324 -m limit --limit 12/minute -j ULOG -A logdrop-1324 -j DROP -A logdrop-1325 -m limit --limit 12/minute -j ULOG -A logdrop-1325 -j DROP -A logdrop-1326 -m limit --limit 12/minute -j ULOG -A logdrop-1326 -j DROP -A logdrop-1327 -m limit --limit 12/minute -j ULOG -A logdrop-1327 -j DROP -A logdrop-1328 -m limit --limit 12/minute -j ULOG -A logdrop-1328 -j DROP -A logdrop-1329 -m limit --limit 12/minute -j ULOG -A logdrop-1329 -j DROP -A logdrop-133 -j TEE --gateway 10.0.0.1 -A logdrop-133 -j TEE --gateway 10.0.0.2 -A logdrop-133 -j DROP -A logdrop-1330 -m limit --limit 12/minute -j ULOG -A logdrop-1330 -j DROP -A logdrop-1331 -m limit --limit 12/minute -j ULOG -A logdrop-1331 -j DROP -A logdrop-1332 -m limit --limit 12/minute -j ULOG -A logdrop-1332 -j DROP -A logdrop-1333 -m limit --limit 12/minute -j ULOG -A logdrop-1333 -j DROP -A logdrop-1334 -m limit --limit 12/minute -j ULOG -A logdrop-1334 -j DROP -A logdrop-1335 -m limit --limit 12/minute -j ULOG -A logdrop-1335 -j DROP -A logdrop-1336 -m limit --limit 12/minute -j ULOG -A logdrop-1336 -j DROP -A logdrop-1337 -m limit --limit 12/minute -j ULOG -A logdrop-1337 -j DROP -A logdrop-1338 -m limit --limit 12/minute -j ULOG -A logdrop-1338 -j DROP -A logdrop-1339 -m limit --limit 12/minute -j ULOG -A logdrop-1339 -j DROP -A logdrop-134 -j TEE --gateway 10.0.0.1 -A logdrop-134 -j TEE --gateway 10.0.0.2 -A logdrop-134 -j DROP -A logdrop-1340 -m limit --limit 12/minute -j ULOG -A logdrop-1340 -j DROP -A logdrop-1341 -m limit --limit 12/minute -j ULOG -A logdrop-1341 -j DROP -A logdrop-1342 -m limit --limit 12/minute -j ULOG -A logdrop-1342 -j DROP -A logdrop-1343 -m limit --limit 12/minute -j ULOG -A logdrop-1343 -j DROP -A logdrop-1344 -m limit --limit 12/minute -j ULOG -A logdrop-1344 -j DROP -A logdrop-1345 -m limit --limit 12/minute -j ULOG -A logdrop-1345 -j DROP -A logdrop-1346 -m limit --limit 12/minute -j ULOG -A logdrop-1346 -j DROP -A logdrop-1347 -m limit --limit 12/minute -j ULOG -A logdrop-1347 -j DROP -A logdrop-1348 -m limit --limit 12/minute -j ULOG -A logdrop-1348 -j DROP -A logdrop-1349 -m limit --limit 12/minute -j ULOG -A logdrop-1349 -j DROP -A logdrop-135 -j TEE --gateway 10.0.0.1 -A logdrop-135 -j TEE --gateway 10.0.0.2 -A logdrop-135 -j DROP -A logdrop-1350 -m limit --limit 12/minute -j ULOG -A logdrop-1350 -j DROP -A logdrop-1351 -m limit --limit 12/minute -j ULOG -A logdrop-1351 -j DROP -A logdrop-1352 -m limit --limit 12/minute -j ULOG -A logdrop-1352 -j DROP -A logdrop-1353 -m limit --limit 12/minute -j ULOG -A logdrop-1353 -j DROP -A logdrop-1354 -m limit --limit 12/minute -j ULOG -A logdrop-1354 -j DROP -A logdrop-1355 -m limit --limit 12/minute -j ULOG -A logdrop-1355 -j DROP -A logdrop-1356 -m limit --limit 12/minute -j ULOG -A logdrop-1356 -j DROP -A logdrop-1357 -m limit --limit 12/minute -j ULOG -A logdrop-1357 -j DROP -A logdrop-1358 -m limit --limit 12/minute -j ULOG -A logdrop-1358 -j DROP -A logdrop-1359 -m limit --limit 12/minute -j ULOG -A logdrop-1359 -j DROP -A logdrop-136 -j TEE --gateway 10.0.0.1 -A logdrop-136 -j TEE --gateway 10.0.0.2 -A logdrop-136 -j DROP -A logdrop-1360 -m limit --limit 12/minute -j ULOG -A logdrop-1360 -j DROP -A logdrop-1361 -m limit --limit 12/minute -j ULOG -A logdrop-1361 -j DROP -A logdrop-1362 -m limit --limit 12/minute -j ULOG -A logdrop-1362 -j DROP -A logdrop-1363 -m limit --limit 12/minute -j ULOG -A logdrop-1363 -j DROP -A logdrop-1364 -m limit --limit 12/minute -j ULOG -A logdrop-1364 -j DROP -A logdrop-1365 -m limit --limit 12/minute -j ULOG -A logdrop-1365 -j DROP -A logdrop-1366 -m limit --limit 12/minute -j ULOG -A logdrop-1366 -j DROP -A logdrop-1367 -m limit --limit 12/minute -j ULOG -A logdrop-1367 -j DROP -A logdrop-1368 -m limit --limit 12/minute -j ULOG -A logdrop-1368 -j DROP -A logdrop-1369 -m limit --limit 12/minute -j ULOG -A logdrop-1369 -j DROP -A logdrop-137 -j TEE --gateway 10.0.0.1 -A logdrop-137 -j TEE --gateway 10.0.0.2 -A logdrop-137 -j DROP -A logdrop-1370 -m limit --limit 12/minute -j ULOG -A logdrop-1370 -j DROP -A logdrop-1371 -m limit --limit 12/minute -j ULOG -A logdrop-1371 -j DROP -A logdrop-1372 -m limit --limit 12/minute -j ULOG -A logdrop-1372 -j DROP -A logdrop-1373 -m limit --limit 12/minute -j ULOG -A logdrop-1373 -j DROP -A logdrop-1374 -m limit --limit 12/minute -j ULOG -A logdrop-1374 -j DROP -A logdrop-1375 -m limit --limit 12/minute -j ULOG -A logdrop-1375 -j DROP -A logdrop-1376 -m limit --limit 12/minute -j ULOG -A logdrop-1376 -j DROP -A logdrop-1377 -m limit --limit 12/minute -j ULOG -A logdrop-1377 -j DROP -A logdrop-1378 -m limit --limit 12/minute -j ULOG -A logdrop-1378 -j DROP -A logdrop-1379 -m limit --limit 12/minute -j ULOG -A logdrop-1379 -j DROP -A logdrop-138 -j TEE --gateway 10.0.0.1 -A logdrop-138 -j TEE --gateway 10.0.0.2 -A logdrop-138 -j DROP -A logdrop-1380 -m limit --limit 1/second -j LOG -A logdrop-1380 -j DROP -A logdrop-1381 -m limit --limit 1/second -j LOG -A logdrop-1381 -j DROP -A logdrop-1382 -m limit --limit 1/second -j LOG -A logdrop-1382 -j DROP -A logdrop-1383 -m limit --limit 1/second -j LOG -A logdrop-1383 -j DROP -A logdrop-1384 -m limit --limit 1/second -j LOG -A logdrop-1384 -j DROP -A logdrop-1385 -m limit --limit 1/second -j LOG -A logdrop-1385 -j DROP -A logdrop-1386 -m limit --limit 1/second -j LOG -A logdrop-1386 -j DROP -A logdrop-1387 -m limit --limit 1/second -j LOG -A logdrop-1387 -j DROP -A logdrop-1388 -m limit --limit 1/second -j LOG -A logdrop-1388 -j DROP -A logdrop-1389 -m limit --limit 1/second -j LOG -A logdrop-1389 -j DROP -A logdrop-139 -j TEE --gateway 10.0.0.1 -A logdrop-139 -j TEE --gateway 10.0.0.2 -A logdrop-139 -j DROP -A logdrop-1390 -m limit --limit 1/second -j LOG -A logdrop-1390 -j DROP -A logdrop-1391 -m limit --limit 1/second -j LOG -A logdrop-1391 -j DROP -A logdrop-1392 -m limit --limit 1/second -j LOG -A logdrop-1392 -j DROP -A logdrop-1393 -m limit --limit 1/second -j LOG -A logdrop-1393 -j DROP -A logdrop-1394 -m limit --limit 1/second -j LOG -A logdrop-1394 -j DROP -A logdrop-1395 -m limit --limit 1/second -j LOG -A logdrop-1395 -j DROP -A logdrop-1396 -m limit --limit 1/second -j LOG -A logdrop-1396 -j DROP -A logdrop-1397 -m limit --limit 1/second -j LOG -A logdrop-1397 -j DROP -A logdrop-1398 -m limit --limit 1/second -j LOG -A logdrop-1398 -j DROP -A logdrop-1399 -m limit --limit 1/second -j LOG -A logdrop-1399 -j DROP -A logdrop-14 -m limit --limit 1/second -j LOG -A logdrop-14 -j DROP -A logdrop-140 -j TEE --gateway 10.0.0.1 -A logdrop-140 -j TEE --gateway 10.0.0.2 -A logdrop-140 -j DROP -A logdrop-1400 -m limit --limit 1/second -j LOG -A logdrop-1400 -j DROP -A logdrop-1401 -m limit --limit 1/second -j LOG -A logdrop-1401 -j DROP -A logdrop-1402 -m limit --limit 1/second -j LOG -A logdrop-1402 -j DROP -A logdrop-1403 -m limit --limit 1/second -j LOG -A logdrop-1403 -j DROP -A logdrop-1404 -m limit --limit 1/second -j LOG -A logdrop-1404 -j DROP -A logdrop-1405 -m limit --limit 1/second -j LOG -A logdrop-1405 -j DROP -A logdrop-1406 -m limit --limit 1/second -j LOG -A logdrop-1406 -j DROP -A logdrop-1407 -m limit --limit 1/second -j LOG -A logdrop-1407 -j DROP -A logdrop-1408 -m limit --limit 1/second -j LOG -A logdrop-1408 -j DROP -A logdrop-1409 -m limit --limit 1/second -j LOG -A logdrop-1409 -j DROP -A logdrop-141 -j TEE --gateway 10.0.0.1 -A logdrop-141 -j TEE --gateway 10.0.0.2 -A logdrop-141 -j DROP -A logdrop-1410 -m limit --limit 1/second -j LOG -A logdrop-1410 -j DROP -A logdrop-1411 -m limit --limit 1/second -j LOG -A logdrop-1411 -j DROP -A logdrop-1412 -m limit --limit 1/second -j LOG -A logdrop-1412 -j DROP -A logdrop-1413 -m limit --limit 1/second -j LOG -A logdrop-1413 -j DROP -A logdrop-1414 -m limit --limit 1/second -j LOG -A logdrop-1414 -j DROP -A logdrop-1415 -m limit --limit 1/second -j LOG -A logdrop-1415 -j DROP -A logdrop-1416 -m limit --limit 1/second -j LOG -A logdrop-1416 -j DROP -A logdrop-1417 -m limit --limit 1/second -j LOG -A logdrop-1417 -j DROP -A logdrop-1418 -m limit --limit 1/second -j LOG -A logdrop-1418 -j DROP -A logdrop-1419 -m limit --limit 1/second -j LOG -A logdrop-1419 -j DROP -A logdrop-142 -j TEE --gateway 10.0.0.1 -A logdrop-142 -j TEE --gateway 10.0.0.2 -A logdrop-142 -j DROP -A logdrop-1420 -m limit --limit 1/second -j LOG -A logdrop-1420 -j DROP -A logdrop-1421 -m limit --limit 1/second -j LOG -A logdrop-1421 -j DROP -A logdrop-1422 -m limit --limit 1/second -j LOG -A logdrop-1422 -j DROP -A logdrop-1423 -m limit --limit 1/second -j LOG -A logdrop-1423 -j DROP -A logdrop-1424 -m limit --limit 1/second -j LOG -A logdrop-1424 -j DROP -A logdrop-1425 -m limit --limit 1/second -j LOG -A logdrop-1425 -j DROP -A logdrop-1426 -m limit --limit 1/second -j LOG -A logdrop-1426 -j DROP -A logdrop-1427 -m limit --limit 1/second -j LOG -A logdrop-1427 -j DROP -A logdrop-1428 -m limit --limit 1/second -j LOG -A logdrop-1428 -j DROP -A logdrop-1429 -m limit --limit 1/second -j LOG -A logdrop-1429 -j DROP -A logdrop-143 -j TEE --gateway 10.0.0.1 -A logdrop-143 -j TEE --gateway 10.0.0.2 -A logdrop-143 -j DROP -A logdrop-1430 -m limit --limit 1/second -j LOG -A logdrop-1430 -j DROP -A logdrop-1431 -m limit --limit 1/second -j LOG -A logdrop-1431 -j DROP -A logdrop-1432 -m limit --limit 1/second -j LOG -A logdrop-1432 -j DROP -A logdrop-1433 -m limit --limit 1/second -j LOG -A logdrop-1433 -j DROP -A logdrop-1434 -m limit --limit 1/second -j LOG -A logdrop-1434 -j DROP -A logdrop-1435 -m limit --limit 1/second -j LOG -A logdrop-1435 -j DROP -A logdrop-1436 -m limit --limit 1/second -j LOG -A logdrop-1436 -j DROP -A logdrop-1437 -m limit --limit 1/second -j LOG -A logdrop-1437 -j DROP -A logdrop-1438 -m limit --limit 1/second -j LOG -A logdrop-1438 -j DROP -A logdrop-1439 -m limit --limit 1/second -j LOG -A logdrop-1439 -j DROP -A logdrop-144 -j TEE --gateway 10.0.0.1 -A logdrop-144 -j TEE --gateway 10.0.0.2 -A logdrop-144 -j DROP -A logdrop-1440 -m limit --limit 1/second -j LOG -A logdrop-1440 -j DROP -A logdrop-1441 -m limit --limit 1/second -j LOG -A logdrop-1441 -j DROP -A logdrop-1442 -m limit --limit 1/second -j LOG -A logdrop-1442 -j DROP -A logdrop-1443 -m limit --limit 1/second -j LOG -A logdrop-1443 -j DROP -A logdrop-1444 -m limit --limit 1/second -j LOG -A logdrop-1444 -j DROP -A logdrop-1445 -m limit --limit 1/second -j LOG -A logdrop-1445 -j DROP -A logdrop-1446 -m limit --limit 1/second -j LOG -A logdrop-1446 -j DROP -A logdrop-1447 -m limit --limit 1/second -j LOG -A logdrop-1447 -j DROP -A logdrop-1448 -m limit --limit 1/second -j LOG -A logdrop-1448 -j DROP -A logdrop-1449 -m limit --limit 1/second -j LOG -A logdrop-1449 -j DROP -A logdrop-145 -j TEE --gateway 10.0.0.1 -A logdrop-145 -j TEE --gateway 10.0.0.2 -A logdrop-145 -j DROP -A logdrop-1450 -m limit --limit 1/second -j LOG -A logdrop-1450 -j DROP -A logdrop-1451 -m limit --limit 1/second -j LOG -A logdrop-1451 -j DROP -A logdrop-1452 -m limit --limit 1/second -j LOG -A logdrop-1452 -j DROP -A logdrop-1453 -m limit --limit 1/second -j LOG -A logdrop-1453 -j DROP -A logdrop-1454 -m limit --limit 1/second -j LOG -A logdrop-1454 -j DROP -A logdrop-1455 -m limit --limit 1/second -j LOG -A logdrop-1455 -j DROP -A logdrop-1456 -m limit --limit 1/second -j LOG -A logdrop-1456 -j DROP -A logdrop-1457 -m limit --limit 1/second -j LOG -A logdrop-1457 -j DROP -A logdrop-1458 -m limit --limit 1/second -j LOG -A logdrop-1458 -j DROP -A logdrop-1459 -m limit --limit 1/second -j LOG -A logdrop-1459 -j DROP -A logdrop-146 -j TEE --gateway 10.0.0.1 -A logdrop-146 -j TEE --gateway 10.0.0.2 -A logdrop-146 -j DROP -A logdrop-1460 -m limit --limit 1/second -j LOG -A logdrop-1460 -j DROP -A logdrop-1461 -m limit --limit 1/second -j LOG -A logdrop-1461 -j DROP -A logdrop-1462 -m limit --limit 1/second -j LOG -A logdrop-1462 -j DROP -A logdrop-1463 -m limit --limit 1/second -j LOG -A logdrop-1463 -j DROP -A logdrop-1464 -m limit --limit 1/second -j LOG -A logdrop-1464 -j DROP -A logdrop-1465 -m limit --limit 1/second -j LOG -A logdrop-1465 -j DROP -A logdrop-1466 -m limit --limit 1/second -j LOG -A logdrop-1466 -j DROP -A logdrop-1467 -m limit --limit 1/second -j LOG -A logdrop-1467 -j DROP -A logdrop-1468 -m limit --limit 1/second -j LOG -A logdrop-1468 -j DROP -A logdrop-1469 -m limit --limit 1/second -j LOG -A logdrop-1469 -j DROP -A logdrop-147 -j TEE --gateway 10.0.0.1 -A logdrop-147 -j TEE --gateway 10.0.0.2 -A logdrop-147 -j DROP -A logdrop-1470 -j TEE --gateway 10.0.0.1 -A logdrop-1470 -j TEE --gateway 10.0.0.2 -A logdrop-1470 -j DROP -A logdrop-1471 -j TEE --gateway 10.0.0.1 -A logdrop-1471 -j TEE --gateway 10.0.0.2 -A logdrop-1471 -j DROP -A logdrop-1472 -j TEE --gateway 10.0.0.1 -A logdrop-1472 -j TEE --gateway 10.0.0.2 -A logdrop-1472 -j DROP -A logdrop-1473 -j TEE --gateway 10.0.0.1 -A logdrop-1473 -j TEE --gateway 10.0.0.2 -A logdrop-1473 -j DROP -A logdrop-1474 -j TEE --gateway 10.0.0.1 -A logdrop-1474 -j TEE --gateway 10.0.0.2 -A logdrop-1474 -j DROP -A logdrop-1475 -j TEE --gateway 10.0.0.1 -A logdrop-1475 -j TEE --gateway 10.0.0.2 -A logdrop-1475 -j DROP -A logdrop-1476 -j TEE --gateway 10.0.0.1 -A logdrop-1476 -j TEE --gateway 10.0.0.2 -A logdrop-1476 -j DROP -A logdrop-1477 -j TEE --gateway 10.0.0.1 -A logdrop-1477 -j TEE --gateway 10.0.0.2 -A logdrop-1477 -j DROP -A logdrop-1478 -j TEE --gateway 10.0.0.1 -A logdrop-1478 -j TEE --gateway 10.0.0.2 -A logdrop-1478 -j DROP -A logdrop-1479 -j TEE --gateway 10.0.0.1 -A logdrop-1479 -j TEE --gateway 10.0.0.2 -A logdrop-1479 -j DROP -A logdrop-148 -j TEE --gateway 10.0.0.1 -A logdrop-148 -j TEE --gateway 10.0.0.2 -A logdrop-148 -j DROP -A logdrop-1480 -j TEE --gateway 10.0.0.1 -A logdrop-1480 -j TEE --gateway 10.0.0.2 -A logdrop-1480 -j DROP -A logdrop-1481 -j TEE --gateway 10.0.0.1 -A logdrop-1481 -j TEE --gateway 10.0.0.2 -A logdrop-1481 -j DROP -A logdrop-1482 -j TEE --gateway 10.0.0.1 -A logdrop-1482 -j TEE --gateway 10.0.0.2 -A logdrop-1482 -j DROP -A logdrop-1483 -j TEE --gateway 10.0.0.1 -A logdrop-1483 -j TEE --gateway 10.0.0.2 -A logdrop-1483 -j DROP -A logdrop-1484 -j TEE --gateway 10.0.0.1 -A logdrop-1484 -j TEE --gateway 10.0.0.2 -A logdrop-1484 -j DROP -A logdrop-1485 -j TEE --gateway 10.0.0.1 -A logdrop-1485 -j TEE --gateway 10.0.0.2 -A logdrop-1485 -j DROP -A logdrop-1486 -j TEE --gateway 10.0.0.1 -A logdrop-1486 -j TEE --gateway 10.0.0.2 -A logdrop-1486 -j DROP -A logdrop-1487 -j TEE --gateway 10.0.0.1 -A logdrop-1487 -j TEE --gateway 10.0.0.2 -A logdrop-1487 -j DROP -A logdrop-1488 -j TEE --gateway 10.0.0.1 -A logdrop-1488 -j TEE --gateway 10.0.0.2 -A logdrop-1488 -j DROP -A logdrop-1489 -j TEE --gateway 10.0.0.1 -A logdrop-1489 -j TEE --gateway 10.0.0.2 -A logdrop-1489 -j DROP -A logdrop-149 -j TEE --gateway 10.0.0.1 -A logdrop-149 -j TEE --gateway 10.0.0.2 -A logdrop-149 -j DROP -A logdrop-1490 -j TEE --gateway 10.0.0.1 -A logdrop-1490 -j TEE --gateway 10.0.0.2 -A logdrop-1490 -j DROP -A logdrop-1491 -j TEE --gateway 10.0.0.1 -A logdrop-1491 -j TEE --gateway 10.0.0.2 -A logdrop-1491 -j DROP -A logdrop-1492 -j TEE --gateway 10.0.0.1 -A logdrop-1492 -j TEE --gateway 10.0.0.2 -A logdrop-1492 -j DROP -A logdrop-1493 -j TEE --gateway 10.0.0.1 -A logdrop-1493 -j TEE --gateway 10.0.0.2 -A logdrop-1493 -j DROP -A logdrop-1494 -j TEE --gateway 10.0.0.1 -A logdrop-1494 -j TEE --gateway 10.0.0.2 -A logdrop-1494 -j DROP -A logdrop-1495 -j TEE --gateway 10.0.0.1 -A logdrop-1495 -j TEE --gateway 10.0.0.2 -A logdrop-1495 -j DROP -A logdrop-1496 -j TEE --gateway 10.0.0.1 -A logdrop-1496 -j TEE --gateway 10.0.0.2 -A logdrop-1496 -j DROP -A logdrop-1497 -j TEE --gateway 10.0.0.1 -A logdrop-1497 -j TEE --gateway 10.0.0.2 -A logdrop-1497 -j DROP -A logdrop-1498 -j TEE --gateway 10.0.0.1 -A logdrop-1498 -j TEE --gateway 10.0.0.2 -A logdrop-1498 -j DROP -A logdrop-1499 -j TEE --gateway 10.0.0.1 -A logdrop-1499 -j TEE --gateway 10.0.0.2 -A logdrop-1499 -j DROP -A logdrop-15 -m limit --limit 1/second -j LOG -A logdrop-15 -j DROP -A logdrop-150 -j TEE --gateway 10.0.0.1 -A logdrop-150 -j TEE --gateway 10.0.0.2 -A logdrop-150 -j DROP -A logdrop-1500 -j TEE --gateway 10.0.0.1 -A logdrop-1500 -j TEE --gateway 10.0.0.2 -A logdrop-1500 -j DROP -A logdrop-1501 -j TEE --gateway 10.0.0.1 -A logdrop-1501 -j TEE --gateway 10.0.0.2 -A logdrop-1501 -j DROP -A logdrop-1502 -j TEE --gateway 10.0.0.1 -A logdrop-1502 -j TEE --gateway 10.0.0.2 -A logdrop-1502 -j DROP -A logdrop-1503 -j TEE --gateway 10.0.0.1 -A logdrop-1503 -j TEE --gateway 10.0.0.2 -A logdrop-1503 -j DROP -A logdrop-1504 -j TEE --gateway 10.0.0.1 -A logdrop-1504 -j TEE --gateway 10.0.0.2 -A logdrop-1504 -j DROP -A logdrop-1505 -j TEE --gateway 10.0.0.1 -A logdrop-1505 -j TEE --gateway 10.0.0.2 -A logdrop-1505 -j DROP -A logdrop-1506 -j TEE --gateway 10.0.0.1 -A logdrop-1506 -j TEE --gateway 10.0.0.2 -A logdrop-1506 -j DROP -A logdrop-1507 -j TEE --gateway 10.0.0.1 -A logdrop-1507 -j TEE --gateway 10.0.0.2 -A logdrop-1507 -j DROP -A logdrop-1508 -j TEE --gateway 10.0.0.1 -A logdrop-1508 -j TEE --gateway 10.0.0.2 -A logdrop-1508 -j DROP -A logdrop-1509 -j TEE --gateway 10.0.0.1 -A logdrop-1509 -j TEE --gateway 10.0.0.2 -A logdrop-1509 -j DROP -A logdrop-151 -j TEE --gateway 10.0.0.1 -A logdrop-151 -j TEE --gateway 10.0.0.2 -A logdrop-151 -j DROP -A logdrop-1510 -j TEE --gateway 10.0.0.1 -A logdrop-1510 -j TEE --gateway 10.0.0.2 -A logdrop-1510 -j DROP -A logdrop-1511 -j TEE --gateway 10.0.0.1 -A logdrop-1511 -j TEE --gateway 10.0.0.2 -A logdrop-1511 -j DROP -A logdrop-1512 -j TEE --gateway 10.0.0.1 -A logdrop-1512 -j TEE --gateway 10.0.0.2 -A logdrop-1512 -j DROP -A logdrop-1513 -j TEE --gateway 10.0.0.1 -A logdrop-1513 -j TEE --gateway 10.0.0.2 -A logdrop-1513 -j DROP -A logdrop-1514 -j TEE --gateway 10.0.0.1 -A logdrop-1514 -j TEE --gateway 10.0.0.2 -A logdrop-1514 -j DROP -A logdrop-1515 -j TEE --gateway 10.0.0.1 -A logdrop-1515 -j TEE --gateway 10.0.0.2 -A logdrop-1515 -j DROP -A logdrop-1516 -j TEE --gateway 10.0.0.1 -A logdrop-1516 -j TEE --gateway 10.0.0.2 -A logdrop-1516 -j DROP -A logdrop-1517 -j TEE --gateway 10.0.0.1 -A logdrop-1517 -j TEE --gateway 10.0.0.2 -A logdrop-1517 -j DROP -A logdrop-1518 -j TEE --gateway 10.0.0.1 -A logdrop-1518 -j TEE --gateway 10.0.0.2 -A logdrop-1518 -j DROP -A logdrop-1519 -j TEE --gateway 10.0.0.1 -A logdrop-1519 -j TEE --gateway 10.0.0.2 -A logdrop-1519 -j DROP -A logdrop-152 -j TEE --gateway 10.0.0.1 -A logdrop-152 -j TEE --gateway 10.0.0.2 -A logdrop-152 -j DROP -A logdrop-1520 -j TEE --gateway 10.0.0.1 -A logdrop-1520 -j TEE --gateway 10.0.0.2 -A logdrop-1520 -j DROP -A logdrop-1521 -j TEE --gateway 10.0.0.1 -A logdrop-1521 -j TEE --gateway 10.0.0.2 -A logdrop-1521 -j DROP -A logdrop-1522 -j TEE --gateway 10.0.0.1 -A logdrop-1522 -j TEE --gateway 10.0.0.2 -A logdrop-1522 -j DROP -A logdrop-1523 -j TEE --gateway 10.0.0.1 -A logdrop-1523 -j TEE --gateway 10.0.0.2 -A logdrop-1523 -j DROP -A logdrop-1524 -j TEE --gateway 10.0.0.1 -A logdrop-1524 -j TEE --gateway 10.0.0.2 -A logdrop-1524 -j DROP -A logdrop-1525 -j TEE --gateway 10.0.0.1 -A logdrop-1525 -j TEE --gateway 10.0.0.2 -A logdrop-1525 -j DROP -A logdrop-1526 -j TEE --gateway 10.0.0.1 -A logdrop-1526 -j TEE --gateway 10.0.0.2 -A logdrop-1526 -j DROP -A logdrop-1527 -j TEE --gateway 10.0.0.1 -A logdrop-1527 -j TEE --gateway 10.0.0.2 -A logdrop-1527 -j DROP -A logdrop-1528 -j TEE --gateway 10.0.0.1 -A logdrop-1528 -j TEE --gateway 10.0.0.2 -A logdrop-1528 -j DROP -A logdrop-1529 -j TEE --gateway 10.0.0.1 -A logdrop-1529 -j TEE --gateway 10.0.0.2 -A logdrop-1529 -j DROP -A logdrop-153 -j TEE --gateway 10.0.0.1 -A logdrop-153 -j TEE --gateway 10.0.0.2 -A logdrop-153 -j DROP -A logdrop-1530 -j TEE --gateway 10.0.0.1 -A logdrop-1530 -j TEE --gateway 10.0.0.2 -A logdrop-1530 -j DROP -A logdrop-1531 -j TEE --gateway 10.0.0.1 -A logdrop-1531 -j TEE --gateway 10.0.0.2 -A logdrop-1531 -j DROP -A logdrop-1532 -j TEE --gateway 10.0.0.1 -A logdrop-1532 -j TEE --gateway 10.0.0.2 -A logdrop-1532 -j DROP -A logdrop-1533 -j TEE --gateway 10.0.0.1 -A logdrop-1533 -j TEE --gateway 10.0.0.2 -A logdrop-1533 -j DROP -A logdrop-1534 -j TEE --gateway 10.0.0.1 -A logdrop-1534 -j TEE --gateway 10.0.0.2 -A logdrop-1534 -j DROP -A logdrop-1535 -j TEE --gateway 10.0.0.1 -A logdrop-1535 -j TEE --gateway 10.0.0.2 -A logdrop-1535 -j DROP -A logdrop-1536 -j TEE --gateway 10.0.0.1 -A logdrop-1536 -j TEE --gateway 10.0.0.2 -A logdrop-1536 -j DROP -A logdrop-1537 -j TEE --gateway 10.0.0.1 -A logdrop-1537 -j TEE --gateway 10.0.0.2 -A logdrop-1537 -j DROP -A logdrop-1538 -j TEE --gateway 10.0.0.1 -A logdrop-1538 -j TEE --gateway 10.0.0.2 -A logdrop-1538 -j DROP -A logdrop-1539 -j TEE --gateway 10.0.0.1 -A logdrop-1539 -j TEE --gateway 10.0.0.2 -A logdrop-1539 -j DROP -A logdrop-154 -j TEE --gateway 10.0.0.1 -A logdrop-154 -j TEE --gateway 10.0.0.2 -A logdrop-154 -j DROP -A logdrop-1540 -j TEE --gateway 10.0.0.1 -A logdrop-1540 -j TEE --gateway 10.0.0.2 -A logdrop-1540 -j DROP -A logdrop-1541 -j TEE --gateway 10.0.0.1 -A logdrop-1541 -j TEE --gateway 10.0.0.2 -A logdrop-1541 -j DROP -A logdrop-1542 -j TEE --gateway 10.0.0.1 -A logdrop-1542 -j TEE --gateway 10.0.0.2 -A logdrop-1542 -j DROP -A logdrop-1543 -j TEE --gateway 10.0.0.1 -A logdrop-1543 -j TEE --gateway 10.0.0.2 -A logdrop-1543 -j DROP -A logdrop-1544 -j TEE --gateway 10.0.0.1 -A logdrop-1544 -j TEE --gateway 10.0.0.2 -A logdrop-1544 -j DROP -A logdrop-1545 -j TEE --gateway 10.0.0.1 -A logdrop-1545 -j TEE --gateway 10.0.0.2 -A logdrop-1545 -j DROP -A logdrop-1546 -j TEE --gateway 10.0.0.1 -A logdrop-1546 -j TEE --gateway 10.0.0.2 -A logdrop-1546 -j DROP -A logdrop-1547 -j TEE --gateway 10.0.0.1 -A logdrop-1547 -j TEE --gateway 10.0.0.2 -A logdrop-1547 -j DROP -A logdrop-1548 -j TEE --gateway 10.0.0.1 -A logdrop-1548 -j TEE --gateway 10.0.0.2 -A logdrop-1548 -j DROP -A logdrop-1549 -j TEE --gateway 10.0.0.1 -A logdrop-1549 -j TEE --gateway 10.0.0.2 -A logdrop-1549 -j DROP -A logdrop-155 -j TEE --gateway 10.0.0.1 -A logdrop-155 -j TEE --gateway 10.0.0.2 -A logdrop-155 -j DROP -A logdrop-1550 -j TEE --gateway 10.0.0.1 -A logdrop-1550 -j TEE --gateway 10.0.0.2 -A logdrop-1550 -j DROP -A logdrop-1551 -j TEE --gateway 10.0.0.1 -A logdrop-1551 -j TEE --gateway 10.0.0.2 -A logdrop-1551 -j DROP -A logdrop-1552 -j TEE --gateway 10.0.0.1 -A logdrop-1552 -j TEE --gateway 10.0.0.2 -A logdrop-1552 -j DROP -A logdrop-1553 -j TEE --gateway 10.0.0.1 -A logdrop-1553 -j TEE --gateway 10.0.0.2 -A logdrop-1553 -j DROP -A logdrop-1554 -j TEE --gateway 10.0.0.1 -A logdrop-1554 -j TEE --gateway 10.0.0.2 -A logdrop-1554 -j DROP -A logdrop-1555 -j TEE --gateway 10.0.0.1 -A logdrop-1555 -j TEE --gateway 10.0.0.2 -A logdrop-1555 -j DROP -A logdrop-1556 -j TEE --gateway 10.0.0.1 -A logdrop-1556 -j TEE --gateway 10.0.0.2 -A logdrop-1556 -j DROP -A logdrop-1557 -j TEE --gateway 10.0.0.1 -A logdrop-1557 -j TEE --gateway 10.0.0.2 -A logdrop-1557 -j DROP -A logdrop-1558 -j TEE --gateway 10.0.0.1 -A logdrop-1558 -j TEE --gateway 10.0.0.2 -A logdrop-1558 -j DROP -A logdrop-1559 -j TEE --gateway 10.0.0.1 -A logdrop-1559 -j TEE --gateway 10.0.0.2 -A logdrop-1559 -j DROP -A logdrop-156 -j TEE --gateway 10.0.0.1 -A logdrop-156 -j TEE --gateway 10.0.0.2 -A logdrop-156 -j DROP -A logdrop-1560 -m limit --limit 12/minute -j ULOG -A logdrop-1560 -j DROP -A logdrop-1561 -m limit --limit 12/minute -j ULOG -A logdrop-1561 -j DROP -A logdrop-1562 -m limit --limit 12/minute -j ULOG -A logdrop-1562 -j DROP -A logdrop-1563 -m limit --limit 12/minute -j ULOG -A logdrop-1563 -j DROP -A logdrop-1564 -m limit --limit 12/minute -j ULOG -A logdrop-1564 -j DROP -A logdrop-1565 -m limit --limit 12/minute -j ULOG -A logdrop-1565 -j DROP -A logdrop-1566 -m limit --limit 12/minute -j ULOG -A logdrop-1566 -j DROP -A logdrop-1567 -m limit --limit 12/minute -j ULOG -A logdrop-1567 -j DROP -A logdrop-1568 -m limit --limit 12/minute -j ULOG -A logdrop-1568 -j DROP -A logdrop-1569 -m limit --limit 12/minute -j ULOG -A logdrop-1569 -j DROP -A logdrop-157 -j TEE --gateway 10.0.0.1 -A logdrop-157 -j TEE --gateway 10.0.0.2 -A logdrop-157 -j DROP -A logdrop-1570 -m limit --limit 12/minute -j ULOG -A logdrop-1570 -j DROP -A logdrop-1571 -m limit --limit 12/minute -j ULOG -A logdrop-1571 -j DROP -A logdrop-1572 -m limit --limit 12/minute -j ULOG -A logdrop-1572 -j DROP -A logdrop-1573 -m limit --limit 12/minute -j ULOG -A logdrop-1573 -j DROP -A logdrop-1574 -m limit --limit 12/minute -j ULOG -A logdrop-1574 -j DROP -A logdrop-1575 -m limit --limit 12/minute -j ULOG -A logdrop-1575 -j DROP -A logdrop-1576 -m limit --limit 12/minute -j ULOG -A logdrop-1576 -j DROP -A logdrop-1577 -m limit --limit 12/minute -j ULOG -A logdrop-1577 -j DROP -A logdrop-1578 -m limit --limit 12/minute -j ULOG -A logdrop-1578 -j DROP -A logdrop-1579 -m limit --limit 12/minute -j ULOG -A logdrop-1579 -j DROP -A logdrop-158 -j TEE --gateway 10.0.0.1 -A logdrop-158 -j TEE --gateway 10.0.0.2 -A logdrop-158 -j DROP -A logdrop-1580 -m limit --limit 12/minute -j ULOG -A logdrop-1580 -j DROP -A logdrop-1581 -m limit --limit 12/minute -j ULOG -A logdrop-1581 -j DROP -A logdrop-1582 -m limit --limit 12/minute -j ULOG -A logdrop-1582 -j DROP -A logdrop-1583 -m limit --limit 12/minute -j ULOG -A logdrop-1583 -j DROP -A logdrop-1584 -m limit --limit 12/minute -j ULOG -A logdrop-1584 -j DROP -A logdrop-1585 -m limit --limit 12/minute -j ULOG -A logdrop-1585 -j DROP -A logdrop-1586 -m limit --limit 12/minute -j ULOG -A logdrop-1586 -j DROP -A logdrop-1587 -m limit --limit 12/minute -j ULOG -A logdrop-1587 -j DROP -A logdrop-1588 -m limit --limit 12/minute -j ULOG -A logdrop-1588 -j DROP -A logdrop-1589 -m limit --limit 12/minute -j ULOG -A logdrop-1589 -j DROP -A logdrop-159 -j TEE --gateway 10.0.0.1 -A logdrop-159 -j TEE --gateway 10.0.0.2 -A logdrop-159 -j DROP -A logdrop-1590 -m limit --limit 12/minute -j ULOG -A logdrop-1590 -j DROP -A logdrop-1591 -m limit --limit 12/minute -j ULOG -A logdrop-1591 -j DROP -A logdrop-1592 -m limit --limit 12/minute -j ULOG -A logdrop-1592 -j DROP -A logdrop-1593 -m limit --limit 12/minute -j ULOG -A logdrop-1593 -j DROP -A logdrop-1594 -m limit --limit 12/minute -j ULOG -A logdrop-1594 -j DROP -A logdrop-1595 -m limit --limit 12/minute -j ULOG -A logdrop-1595 -j DROP -A logdrop-1596 -m limit --limit 12/minute -j ULOG -A logdrop-1596 -j DROP -A logdrop-1597 -m limit --limit 12/minute -j ULOG -A logdrop-1597 -j DROP -A logdrop-1598 -m limit --limit 12/minute -j ULOG -A logdrop-1598 -j DROP -A logdrop-1599 -m limit --limit 12/minute -j ULOG -A logdrop-1599 -j DROP -A logdrop-16 -m limit --limit 1/second -j LOG -A logdrop-16 -j DROP -A logdrop-160 -j TEE --gateway 10.0.0.1 -A logdrop-160 -j TEE --gateway 10.0.0.2 -A logdrop-160 -j DROP -A logdrop-1600 -m limit --limit 12/minute -j ULOG -A logdrop-1600 -j DROP -A logdrop-1601 -m limit --limit 12/minute -j ULOG -A logdrop-1601 -j DROP -A logdrop-1602 -m limit --limit 12/minute -j ULOG -A logdrop-1602 -j DROP -A logdrop-1603 -m limit --limit 12/minute -j ULOG -A logdrop-1603 -j DROP -A logdrop-1604 -m limit --limit 12/minute -j ULOG -A logdrop-1604 -j DROP -A logdrop-1605 -m limit --limit 12/minute -j ULOG -A logdrop-1605 -j DROP -A logdrop-1606 -m limit --limit 12/minute -j ULOG -A logdrop-1606 -j DROP -A logdrop-1607 -m limit --limit 12/minute -j ULOG -A logdrop-1607 -j DROP -A logdrop-1608 -m limit --limit 12/minute -j ULOG -A logdrop-1608 -j DROP -A logdrop-1609 -m limit --limit 12/minute -j ULOG -A logdrop-1609 -j DROP -A logdrop-161 -j TEE --gateway 10.0.0.1 -A logdrop-161 -j TEE --gateway 10.0.0.2 -A logdrop-161 -j DROP -A logdrop-1610 -m limit --limit 12/minute -j ULOG -A logdrop-1610 -j DROP -A logdrop-1611 -m limit --limit 12/minute -j ULOG -A logdrop-1611 -j DROP -A logdrop-1612 -m limit --limit 12/minute -j ULOG -A logdrop-1612 -j DROP -A logdrop-1613 -m limit --limit 12/minute -j ULOG -A logdrop-1613 -j DROP -A logdrop-1614 -m limit --limit 12/minute -j ULOG -A logdrop-1614 -j DROP -A logdrop-1615 -m limit --limit 12/minute -j ULOG -A logdrop-1615 -j DROP -A logdrop-1616 -m limit --limit 12/minute -j ULOG -A logdrop-1616 -j DROP -A logdrop-1617 -m limit --limit 12/minute -j ULOG -A logdrop-1617 -j DROP -A logdrop-1618 -m limit --limit 12/minute -j ULOG -A logdrop-1618 -j DROP -A logdrop-1619 -m limit --limit 12/minute -j ULOG -A logdrop-1619 -j DROP -A logdrop-162 -j TEE --gateway 10.0.0.1 -A logdrop-162 -j TEE --gateway 10.0.0.2 -A logdrop-162 -j DROP -A logdrop-1620 -m limit --limit 12/minute -j ULOG -A logdrop-1620 -j DROP -A logdrop-1621 -m limit --limit 12/minute -j ULOG -A logdrop-1621 -j DROP -A logdrop-1622 -m limit --limit 12/minute -j ULOG -A logdrop-1622 -j DROP -A logdrop-1623 -m limit --limit 12/minute -j ULOG -A logdrop-1623 -j DROP -A logdrop-1624 -m limit --limit 12/minute -j ULOG -A logdrop-1624 -j DROP -A logdrop-1625 -m limit --limit 12/minute -j ULOG -A logdrop-1625 -j DROP -A logdrop-1626 -m limit --limit 12/minute -j ULOG -A logdrop-1626 -j DROP -A logdrop-1627 -m limit --limit 12/minute -j ULOG -A logdrop-1627 -j DROP -A logdrop-1628 -m limit --limit 12/minute -j ULOG -A logdrop-1628 -j DROP -A logdrop-1629 -m limit --limit 12/minute -j ULOG -A logdrop-1629 -j DROP -A logdrop-163 -j TEE --gateway 10.0.0.1 -A logdrop-163 -j TEE --gateway 10.0.0.2 -A logdrop-163 -j DROP -A logdrop-1630 -m limit --limit 12/minute -j ULOG -A logdrop-1630 -j DROP -A logdrop-1631 -m limit --limit 12/minute -j ULOG -A logdrop-1631 -j DROP -A logdrop-1632 -m limit --limit 12/minute -j ULOG -A logdrop-1632 -j DROP -A logdrop-1633 -m limit --limit 12/minute -j ULOG -A logdrop-1633 -j DROP -A logdrop-1634 -m limit --limit 12/minute -j ULOG -A logdrop-1634 -j DROP -A logdrop-1635 -m limit --limit 12/minute -j ULOG -A logdrop-1635 -j DROP -A logdrop-1636 -m limit --limit 12/minute -j ULOG -A logdrop-1636 -j DROP -A logdrop-1637 -m limit --limit 12/minute -j ULOG -A logdrop-1637 -j DROP -A logdrop-1638 -m limit --limit 12/minute -j ULOG -A logdrop-1638 -j DROP -A logdrop-1639 -m limit --limit 12/minute -j ULOG -A logdrop-1639 -j DROP -A logdrop-164 -j TEE --gateway 10.0.0.1 -A logdrop-164 -j TEE --gateway 10.0.0.2 -A logdrop-164 -j DROP -A logdrop-1640 -m limit --limit 12/minute -j ULOG -A logdrop-1640 -j DROP -A logdrop-1641 -m limit --limit 12/minute -j ULOG -A logdrop-1641 -j DROP -A logdrop-1642 -m limit --limit 12/minute -j ULOG -A logdrop-1642 -j DROP -A logdrop-1643 -m limit --limit 12/minute -j ULOG -A logdrop-1643 -j DROP -A logdrop-1644 -m limit --limit 12/minute -j ULOG -A logdrop-1644 -j DROP -A logdrop-1645 -m limit --limit 12/minute -j ULOG -A logdrop-1645 -j DROP -A logdrop-1646 -m limit --limit 12/minute -j ULOG -A logdrop-1646 -j DROP -A logdrop-1647 -m limit --limit 12/minute -j ULOG -A logdrop-1647 -j DROP -A logdrop-1648 -m limit --limit 12/minute -j ULOG -A logdrop-1648 -j DROP -A logdrop-1649 -m limit --limit 12/minute -j ULOG -A logdrop-1649 -j DROP -A logdrop-165 -j TEE --gateway 10.0.0.1 -A logdrop-165 -j TEE --gateway 10.0.0.2 -A logdrop-165 -j DROP -A logdrop-1650 -m limit --limit 1/second -j LOG -A logdrop-1650 -j DROP -A logdrop-1651 -m limit --limit 1/second -j LOG -A logdrop-1651 -j DROP -A logdrop-1652 -j LOG -A logdrop-1652 -j DROP -A logdrop-1653 -j TEE --gateway 10.0.0.1 -A logdrop-1653 -j TEE --gateway 10.0.0.2 -A logdrop-1653 -j DROP -A logdrop-1654 -m limit --limit 12/minute -j ULOG -A logdrop-1654 -j DROP -A logdrop-166 -j TEE --gateway 10.0.0.1 -A logdrop-166 -j TEE --gateway 10.0.0.2 -A logdrop-166 -j DROP -A logdrop-167 -j TEE --gateway 10.0.0.1 -A logdrop-167 -j TEE --gateway 10.0.0.2 -A logdrop-167 -j DROP -A logdrop-168 -j TEE --gateway 10.0.0.1 -A logdrop-168 -j TEE --gateway 10.0.0.2 -A logdrop-168 -j DROP -A logdrop-169 -j TEE --gateway 10.0.0.1 -A logdrop-169 -j TEE --gateway 10.0.0.2 -A logdrop-169 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP -A logdrop-170 -j TEE --gateway 10.0.0.1 -A logdrop-170 -j TEE --gateway 10.0.0.2 -A logdrop-170 -j DROP -A logdrop-171 -j TEE --gateway 10.0.0.1 -A logdrop-171 -j TEE --gateway 10.0.0.2 -A logdrop-171 -j DROP -A logdrop-172 -j TEE --gateway 10.0.0.1 -A logdrop-172 -j TEE --gateway 10.0.0.2 -A logdrop-172 -j DROP -A logdrop-173 -j TEE --gateway 10.0.0.1 -A logdrop-173 -j TEE --gateway 10.0.0.2 -A logdrop-173 -j DROP -A logdrop-174 -j TEE --gateway 10.0.0.1 -A logdrop-174 -j TEE --gateway 10.0.0.2 -A logdrop-174 -j DROP -A logdrop-175 -j TEE --gateway 10.0.0.1 -A logdrop-175 -j TEE --gateway 10.0.0.2 -A logdrop-175 -j DROP -A logdrop-176 -j TEE --gateway 10.0.0.1 -A logdrop-176 -j TEE --gateway 10.0.0.2 -A logdrop-176 -j DROP -A logdrop-177 -j TEE --gateway 10.0.0.1 -A logdrop-177 -j TEE --gateway 10.0.0.2 -A logdrop-177 -j DROP -A logdrop-178 -j TEE --gateway 10.0.0.1 -A logdrop-178 -j TEE --gateway 10.0.0.2 -A logdrop-178 -j DROP -A logdrop-179 -j TEE --gateway 10.0.0.1 -A logdrop-179 -j TEE --gateway 10.0.0.2 -A logdrop-179 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP -A logdrop-180 -j TEE --gateway 10.0.0.1 -A logdrop-180 -j TEE --gateway 10.0.0.2 -A logdrop-180 -j DROP -A logdrop-181 -j TEE --gateway 10.0.0.1 -A logdrop-181 -j TEE --gateway 10.0.0.2 -A logdrop-181 -j DROP -A logdrop-182 -j TEE --gateway 10.0.0.1 -A logdrop-182 -j TEE --gateway 10.0.0.2 -A logdrop-182 -j DROP -A logdrop-183 -j TEE --gateway 10.0.0.1 -A logdrop-183 -j TEE --gateway 10.0.0.2 -A logdrop-183 -j DROP -A logdrop-184 -j TEE --gateway 10.0.0.1 -A logdrop-184 -j TEE --gateway 10.0.0.2 -A logdrop-184 -j DROP -A logdrop-185 -j TEE --gateway 10.0.0.1 -A logdrop-185 -j TEE --gateway 10.0.0.2 -A logdrop-185 -j DROP -A logdrop-186 -j TEE --gateway 10.0.0.1 -A logdrop-186 -j TEE --gateway 10.0.0.2 -A logdrop-186 -j DROP -A logdrop-187 -j TEE --gateway 10.0.0.1 -A logdrop-187 -j TEE --gateway 10.0.0.2 -A logdrop-187 -j DROP -A logdrop-188 -j TEE --gateway 10.0.0.1 -A logdrop-188 -j TEE --gateway 10.0.0.2 -A logdrop-188 -j DROP -A logdrop-189 -j TEE --gateway 10.0.0.1 -A logdrop-189 -j TEE --gateway 10.0.0.2 -A logdrop-189 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP -A logdrop-190 -m limit --limit 12/minute -j ULOG -A logdrop-190 -j DROP -A logdrop-191 -m limit --limit 12/minute -j ULOG -A logdrop-191 -j DROP -A logdrop-192 -m limit --limit 12/minute -j ULOG -A logdrop-192 -j DROP -A logdrop-193 -m limit --limit 12/minute -j ULOG -A logdrop-193 -j DROP -A logdrop-194 -m limit --limit 12/minute -j ULOG -A logdrop-194 -j DROP -A logdrop-195 -m limit --limit 12/minute -j ULOG -A logdrop-195 -j DROP -A logdrop-196 -m limit --limit 12/minute -j ULOG -A logdrop-196 -j DROP -A logdrop-197 -m limit --limit 12/minute -j ULOG -A logdrop-197 -j DROP -A logdrop-198 -m limit --limit 12/minute -j ULOG -A logdrop-198 -j DROP -A logdrop-199 -m limit --limit 12/minute -j ULOG -A logdrop-199 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP -A logdrop-200 -m limit --limit 12/minute -j ULOG -A logdrop-200 -j DROP -A logdrop-201 -m limit --limit 12/minute -j ULOG -A logdrop-201 -j DROP -A logdrop-202 -m limit --limit 12/minute -j ULOG -A logdrop-202 -j DROP -A logdrop-203 -m limit --limit 12/minute -j ULOG -A logdrop-203 -j DROP -A logdrop-204 -m limit --limit 12/minute -j ULOG -A logdrop-204 -j DROP -A logdrop-205 -m limit --limit 12/minute -j ULOG -A logdrop-205 -j DROP -A logdrop-206 -m limit --limit 12/minute -j ULOG -A logdrop-206 -j DROP -A logdrop-207 -m limit --limit 12/minute -j ULOG -A logdrop-207 -j DROP -A logdrop-208 -m limit --limit 12/minute -j ULOG -A logdrop-208 -j DROP -A logdrop-209 -m limit --limit 12/minute -j ULOG -A logdrop-209 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP -A logdrop-210 -m limit --limit 12/minute -j ULOG -A logdrop-210 -j DROP -A logdrop-211 -m limit --limit 12/minute -j ULOG -A logdrop-211 -j DROP -A logdrop-212 -m limit --limit 12/minute -j ULOG -A logdrop-212 -j DROP -A logdrop-213 -m limit --limit 12/minute -j ULOG -A logdrop-213 -j DROP -A logdrop-214 -m limit --limit 12/minute -j ULOG -A logdrop-214 -j DROP -A logdrop-215 -m limit --limit 12/minute -j ULOG -A logdrop-215 -j DROP -A logdrop-216 -m limit --limit 12/minute -j ULOG -A logdrop-216 -j DROP -A logdrop-217 -m limit --limit 12/minute -j ULOG -A logdrop-217 -j DROP -A logdrop-218 -m limit --limit 12/minute -j ULOG -A logdrop-218 -j DROP -A logdrop-219 -m limit --limit 12/minute -j ULOG -A logdrop-219 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP -A logdrop-220 -m limit --limit 12/minute -j ULOG -A logdrop-220 -j DROP -A logdrop-221 -m limit --limit 12/minute -j ULOG -A logdrop-221 -j DROP -A logdrop-222 -m limit --limit 12/minute -j ULOG -A logdrop-222 -j DROP -A logdrop-223 -m limit --limit 12/minute -j ULOG -A logdrop-223 -j DROP -A logdrop-224 -m limit --limit 12/minute -j ULOG -A logdrop-224 -j DROP -A logdrop-225 -m limit --limit 12/minute -j ULOG -A logdrop-225 -j DROP -A logdrop-226 -m limit --limit 12/minute -j ULOG -A logdrop-226 -j DROP -A logdrop-227 -m limit --limit 12/minute -j ULOG -A logdrop-227 -j DROP -A logdrop-228 -m limit --limit 12/minute -j ULOG -A logdrop-228 -j DROP -A logdrop-229 -m limit --limit 12/minute -j ULOG -A logdrop-229 -j DROP -A logdrop-23 -m limit --limit 1/second -j LOG -A logdrop-23 -j DROP -A logdrop-230 -m limit --limit 12/minute -j ULOG -A logdrop-230 -j DROP -A logdrop-231 -m limit --limit 12/minute -j ULOG -A logdrop-231 -j DROP -A logdrop-232 -m limit --limit 12/minute -j ULOG -A logdrop-232 -j DROP -A logdrop-233 -m limit --limit 12/minute -j ULOG -A logdrop-233 -j DROP -A logdrop-234 -m limit --limit 12/minute -j ULOG -A logdrop-234 -j DROP -A logdrop-235 -m limit --limit 12/minute -j ULOG -A logdrop-235 -j DROP -A logdrop-236 -m limit --limit 12/minute -j ULOG -A logdrop-236 -j DROP -A logdrop-237 -m limit --limit 12/minute -j ULOG -A logdrop-237 -j DROP -A logdrop-238 -m limit --limit 12/minute -j ULOG -A logdrop-238 -j DROP -A logdrop-239 -m limit --limit 12/minute -j ULOG -A logdrop-239 -j DROP -A logdrop-24 -m limit --limit 1/second -j LOG -A logdrop-24 -j DROP -A logdrop-240 -m limit --limit 12/minute -j ULOG -A logdrop-240 -j DROP -A logdrop-241 -m limit --limit 12/minute -j ULOG -A logdrop-241 -j DROP -A logdrop-242 -m limit --limit 12/minute -j ULOG -A logdrop-242 -j DROP -A logdrop-243 -m limit --limit 12/minute -j ULOG -A logdrop-243 -j DROP -A logdrop-244 -m limit --limit 12/minute -j ULOG -A logdrop-244 -j DROP -A logdrop-245 -m limit --limit 12/minute -j ULOG -A logdrop-245 -j DROP -A logdrop-246 -m limit --limit 12/minute -j ULOG -A logdrop-246 -j DROP -A logdrop-247 -m limit --limit 12/minute -j ULOG -A logdrop-247 -j DROP -A logdrop-248 -m limit --limit 12/minute -j ULOG -A logdrop-248 -j DROP -A logdrop-249 -m limit --limit 12/minute -j ULOG -A logdrop-249 -j DROP -A logdrop-25 -m limit --limit 1/second -j LOG -A logdrop-25 -j DROP -A logdrop-250 -m limit --limit 12/minute -j ULOG -A logdrop-250 -j DROP -A logdrop-251 -m limit --limit 12/minute -j ULOG -A logdrop-251 -j DROP -A logdrop-252 -m limit --limit 12/minute -j ULOG -A logdrop-252 -j DROP -A logdrop-253 -m limit --limit 12/minute -j ULOG -A logdrop-253 -j DROP -A logdrop-254 -m limit --limit 12/minute -j ULOG -A logdrop-254 -j DROP -A logdrop-255 -m limit --limit 12/minute -j ULOG -A logdrop-255 -j DROP -A logdrop-256 -m limit --limit 12/minute -j ULOG -A logdrop-256 -j DROP -A logdrop-257 -m limit --limit 12/minute -j ULOG -A logdrop-257 -j DROP -A logdrop-258 -m limit --limit 12/minute -j ULOG -A logdrop-258 -j DROP -A logdrop-259 -m limit --limit 12/minute -j ULOG -A logdrop-259 -j DROP -A logdrop-26 -m limit --limit 1/second -j LOG -A logdrop-26 -j DROP -A logdrop-260 -m limit --limit 12/minute -j ULOG -A logdrop-260 -j DROP -A logdrop-261 -m limit --limit 12/minute -j ULOG -A logdrop-261 -j DROP -A logdrop-262 -m limit --limit 12/minute -j ULOG -A logdrop-262 -j DROP -A logdrop-263 -m limit --limit 12/minute -j ULOG -A logdrop-263 -j DROP -A logdrop-264 -m limit --limit 12/minute -j ULOG -A logdrop-264 -j DROP -A logdrop-265 -m limit --limit 12/minute -j ULOG -A logdrop-265 -j DROP -A logdrop-266 -m limit --limit 12/minute -j ULOG -A logdrop-266 -j DROP -A logdrop-267 -m limit --limit 12/minute -j ULOG -A logdrop-267 -j DROP -A logdrop-268 -m limit --limit 12/minute -j ULOG -A logdrop-268 -j DROP -A logdrop-269 -m limit --limit 12/minute -j ULOG -A logdrop-269 -j DROP -A logdrop-27 -m limit --limit 1/second -j LOG -A logdrop-27 -j DROP -A logdrop-270 -m limit --limit 12/minute -j ULOG -A logdrop-270 -j DROP -A logdrop-271 -m limit --limit 12/minute -j ULOG -A logdrop-271 -j DROP -A logdrop-272 -m limit --limit 12/minute -j ULOG -A logdrop-272 -j DROP -A logdrop-273 -m limit --limit 12/minute -j ULOG -A logdrop-273 -j DROP -A logdrop-274 -m limit --limit 12/minute -j ULOG -A logdrop-274 -j DROP -A logdrop-275 -m limit --limit 12/minute -j ULOG -A logdrop-275 -j DROP -A logdrop-276 -m limit --limit 12/minute -j ULOG -A logdrop-276 -j DROP -A logdrop-277 -m limit --limit 12/minute -j ULOG -A logdrop-277 -j DROP -A logdrop-278 -m limit --limit 12/minute -j ULOG -A logdrop-278 -j DROP -A logdrop-279 -m limit --limit 12/minute -j ULOG -A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP -A logdrop-280 -m limit --limit 1/second -j LOG -A logdrop-280 -j DROP -A logdrop-281 -m limit --limit 1/second -j LOG -A logdrop-281 -j DROP -A logdrop-282 -m limit --limit 1/second -j LOG -A logdrop-282 -j DROP -A logdrop-283 -m limit --limit 1/second -j LOG -A logdrop-283 -j DROP -A logdrop-284 -m limit --limit 1/second -j LOG -A logdrop-284 -j DROP -A logdrop-285 -m limit --limit 1/second -j LOG -A logdrop-285 -j DROP -A logdrop-286 -m limit --limit 1/second -j LOG -A logdrop-286 -j DROP -A logdrop-287 -m limit --limit 1/second -j LOG -A logdrop-287 -j DROP -A logdrop-288 -m limit --limit 1/second -j LOG -A logdrop-288 -j DROP -A logdrop-289 -m limit --limit 1/second -j LOG -A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP -A logdrop-290 -m limit --limit 1/second -j LOG -A logdrop-290 -j DROP -A logdrop-291 -m limit --limit 1/second -j LOG -A logdrop-291 -j DROP -A logdrop-292 -m limit --limit 1/second -j LOG -A logdrop-292 -j DROP -A logdrop-293 -m limit --limit 1/second -j LOG -A logdrop-293 -j DROP -A logdrop-294 -m limit --limit 1/second -j LOG -A logdrop-294 -j DROP -A logdrop-295 -m limit --limit 1/second -j LOG -A logdrop-295 -j DROP -A logdrop-296 -m limit --limit 1/second -j LOG -A logdrop-296 -j DROP -A logdrop-297 -m limit --limit 1/second -j LOG -A logdrop-297 -j DROP -A logdrop-298 -m limit --limit 1/second -j LOG -A logdrop-298 -j DROP -A logdrop-299 -m limit --limit 1/second -j LOG -A logdrop-299 -j DROP -A logdrop-3 -m limit --limit 1/second -j LOG -A logdrop-3 -j DROP -A logdrop-30 -m limit --limit 1/second -j LOG -A logdrop-30 -j DROP -A logdrop-300 -m limit --limit 1/second -j LOG -A logdrop-300 -j DROP -A logdrop-301 -m limit --limit 1/second -j LOG -A logdrop-301 -j DROP -A logdrop-302 -m limit --limit 1/second -j LOG -A logdrop-302 -j DROP -A logdrop-303 -m limit --limit 1/second -j LOG -A logdrop-303 -j DROP -A logdrop-304 -m limit --limit 1/second -j LOG -A logdrop-304 -j DROP -A logdrop-305 -m limit --limit 1/second -j LOG -A logdrop-305 -j DROP -A logdrop-306 -m limit --limit 1/second -j LOG -A logdrop-306 -j DROP -A logdrop-307 -m limit --limit 1/second -j LOG -A logdrop-307 -j DROP -A logdrop-308 -m limit --limit 1/second -j LOG -A logdrop-308 -j DROP -A logdrop-309 -m limit --limit 1/second -j LOG -A logdrop-309 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP -A logdrop-310 -m limit --limit 1/second -j LOG -A logdrop-310 -j DROP -A logdrop-311 -m limit --limit 1/second -j LOG -A logdrop-311 -j DROP -A logdrop-312 -m limit --limit 1/second -j LOG -A logdrop-312 -j DROP -A logdrop-313 -m limit --limit 1/second -j LOG -A logdrop-313 -j DROP -A logdrop-314 -m limit --limit 1/second -j LOG -A logdrop-314 -j DROP -A logdrop-315 -m limit --limit 1/second -j LOG -A logdrop-315 -j DROP -A logdrop-316 -m limit --limit 1/second -j LOG -A logdrop-316 -j DROP -A logdrop-317 -m limit --limit 1/second -j LOG -A logdrop-317 -j DROP -A logdrop-318 -m limit --limit 1/second -j LOG -A logdrop-318 -j DROP -A logdrop-319 -m limit --limit 1/second -j LOG -A logdrop-319 -j DROP -A logdrop-32 -m limit --limit 1/second -j LOG -A logdrop-32 -j DROP -A logdrop-320 -m limit --limit 1/second -j LOG -A logdrop-320 -j DROP -A logdrop-321 -m limit --limit 1/second -j LOG -A logdrop-321 -j DROP -A logdrop-322 -m limit --limit 1/second -j LOG -A logdrop-322 -j DROP -A logdrop-323 -m limit --limit 1/second -j LOG -A logdrop-323 -j DROP -A logdrop-324 -m limit --limit 1/second -j LOG -A logdrop-324 -j DROP -A logdrop-325 -m limit --limit 1/second -j LOG -A logdrop-325 -j DROP -A logdrop-326 -m limit --limit 1/second -j LOG -A logdrop-326 -j DROP -A logdrop-327 -m limit --limit 1/second -j LOG -A logdrop-327 -j DROP -A logdrop-328 -m limit --limit 1/second -j LOG -A logdrop-328 -j DROP -A logdrop-329 -m limit --limit 1/second -j LOG -A logdrop-329 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP -A logdrop-330 -m limit --limit 1/second -j LOG -A logdrop-330 -j DROP -A logdrop-331 -m limit --limit 1/second -j LOG -A logdrop-331 -j DROP -A logdrop-332 -m limit --limit 1/second -j LOG -A logdrop-332 -j DROP -A logdrop-333 -m limit --limit 1/second -j LOG -A logdrop-333 -j DROP -A logdrop-334 -m limit --limit 1/second -j LOG -A logdrop-334 -j DROP -A logdrop-335 -m limit --limit 1/second -j LOG -A logdrop-335 -j DROP -A logdrop-336 -m limit --limit 1/second -j LOG -A logdrop-336 -j DROP -A logdrop-337 -m limit --limit 1/second -j LOG -A logdrop-337 -j DROP -A logdrop-338 -m limit --limit 1/second -j LOG -A logdrop-338 -j DROP -A logdrop-339 -m limit --limit 1/second -j LOG -A logdrop-339 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP -A logdrop-340 -m limit --limit 1/second -j LOG -A logdrop-340 -j DROP -A logdrop-341 -m limit --limit 1/second -j LOG -A logdrop-341 -j DROP -A logdrop-342 -m limit --limit 1/second -j LOG -A logdrop-342 -j DROP -A logdrop-343 -m limit --limit 1/second -j LOG -A logdrop-343 -j DROP -A logdrop-344 -m limit --limit 1/second -j LOG -A logdrop-344 -j DROP -A logdrop-345 -m limit --limit 1/second -j LOG -A logdrop-345 -j DROP -A logdrop-346 -m limit --limit 1/second -j LOG -A logdrop-346 -j DROP -A logdrop-347 -m limit --limit 1/second -j LOG -A logdrop-347 -j DROP -A logdrop-348 -m limit --limit 1/second -j LOG -A logdrop-348 -j DROP -A logdrop-349 -m limit --limit 1/second -j LOG -A logdrop-349 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP -A logdrop-350 -m limit --limit 1/second -j LOG -A logdrop-350 -j DROP -A logdrop-351 -m limit --limit 1/second -j LOG -A logdrop-351 -j DROP -A logdrop-352 -m limit --limit 1/second -j LOG -A logdrop-352 -j DROP -A logdrop-353 -m limit --limit 1/second -j LOG -A logdrop-353 -j DROP -A logdrop-354 -m limit --limit 1/second -j LOG -A logdrop-354 -j DROP -A logdrop-355 -m limit --limit 1/second -j LOG -A logdrop-355 -j DROP -A logdrop-356 -m limit --limit 1/second -j LOG -A logdrop-356 -j DROP -A logdrop-357 -m limit --limit 1/second -j LOG -A logdrop-357 -j DROP -A logdrop-358 -m limit --limit 1/second -j LOG -A logdrop-358 -j DROP -A logdrop-359 -m limit --limit 1/second -j LOG -A logdrop-359 -j DROP -A logdrop-36 -m limit --limit 1/second -j LOG -A logdrop-36 -j DROP -A logdrop-360 -m limit --limit 1/second -j LOG -A logdrop-360 -j DROP -A logdrop-361 -m limit --limit 1/second -j LOG -A logdrop-361 -j DROP -A logdrop-362 -m limit --limit 1/second -j LOG -A logdrop-362 -j DROP -A logdrop-363 -m limit --limit 1/second -j LOG -A logdrop-363 -j DROP -A logdrop-364 -m limit --limit 1/second -j LOG -A logdrop-364 -j DROP -A logdrop-365 -m limit --limit 1/second -j LOG -A logdrop-365 -j DROP -A logdrop-366 -m limit --limit 1/second -j LOG -A logdrop-366 -j DROP -A logdrop-367 -m limit --limit 1/second -j LOG -A logdrop-367 -j DROP -A logdrop-368 -m limit --limit 1/second -j LOG -A logdrop-368 -j DROP -A logdrop-369 -m limit --limit 1/second -j LOG -A logdrop-369 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP -A logdrop-370 -j TEE --gateway 10.0.0.1 -A logdrop-370 -j TEE --gateway 10.0.0.2 -A logdrop-370 -j DROP -A logdrop-371 -j TEE --gateway 10.0.0.1 -A logdrop-371 -j TEE --gateway 10.0.0.2 -A logdrop-371 -j DROP -A logdrop-372 -j TEE --gateway 10.0.0.1 -A logdrop-372 -j TEE --gateway 10.0.0.2 -A logdrop-372 -j DROP -A logdrop-373 -j TEE --gateway 10.0.0.1 -A logdrop-373 -j TEE --gateway 10.0.0.2 -A logdrop-373 -j DROP -A logdrop-374 -j TEE --gateway 10.0.0.1 -A logdrop-374 -j TEE --gateway 10.0.0.2 -A logdrop-374 -j DROP -A logdrop-375 -j TEE --gateway 10.0.0.1 -A logdrop-375 -j TEE --gateway 10.0.0.2 -A logdrop-375 -j DROP -A logdrop-376 -j TEE --gateway 10.0.0.1 -A logdrop-376 -j TEE --gateway 10.0.0.2 -A logdrop-376 -j DROP -A logdrop-377 -j TEE --gateway 10.0.0.1 -A logdrop-377 -j TEE --gateway 10.0.0.2 -A logdrop-377 -j DROP -A logdrop-378 -j TEE --gateway 10.0.0.1 -A logdrop-378 -j TEE --gateway 10.0.0.2 -A logdrop-378 -j DROP -A logdrop-379 -j TEE --gateway 10.0.0.1 -A logdrop-379 -j TEE --gateway 10.0.0.2 -A logdrop-379 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG -A logdrop-38 -j DROP -A logdrop-380 -j TEE --gateway 10.0.0.1 -A logdrop-380 -j TEE --gateway 10.0.0.2 -A logdrop-380 -j DROP -A logdrop-381 -j TEE --gateway 10.0.0.1 -A logdrop-381 -j TEE --gateway 10.0.0.2 -A logdrop-381 -j DROP -A logdrop-382 -j TEE --gateway 10.0.0.1 -A logdrop-382 -j TEE --gateway 10.0.0.2 -A logdrop-382 -j DROP -A logdrop-383 -j TEE --gateway 10.0.0.1 -A logdrop-383 -j TEE --gateway 10.0.0.2 -A logdrop-383 -j DROP -A logdrop-384 -j TEE --gateway 10.0.0.1 -A logdrop-384 -j TEE --gateway 10.0.0.2 -A logdrop-384 -j DROP -A logdrop-385 -j TEE --gateway 10.0.0.1 -A logdrop-385 -j TEE --gateway 10.0.0.2 -A logdrop-385 -j DROP -A logdrop-386 -j TEE --gateway 10.0.0.1 -A logdrop-386 -j TEE --gateway 10.0.0.2 -A logdrop-386 -j DROP -A logdrop-387 -j TEE --gateway 10.0.0.1 -A logdrop-387 -j TEE --gateway 10.0.0.2 -A logdrop-387 -j DROP -A logdrop-388 -j TEE --gateway 10.0.0.1 -A logdrop-388 -j TEE --gateway 10.0.0.2 -A logdrop-388 -j DROP -A logdrop-389 -j TEE --gateway 10.0.0.1 -A logdrop-389 -j TEE --gateway 10.0.0.2 -A logdrop-389 -j DROP -A logdrop-39 -m limit --limit 1/second -j LOG -A logdrop-39 -j DROP -A logdrop-390 -j TEE --gateway 10.0.0.1 -A logdrop-390 -j TEE --gateway 10.0.0.2 -A logdrop-390 -j DROP -A logdrop-391 -j TEE --gateway 10.0.0.1 -A logdrop-391 -j TEE --gateway 10.0.0.2 -A logdrop-391 -j DROP -A logdrop-392 -j TEE --gateway 10.0.0.1 -A logdrop-392 -j TEE --gateway 10.0.0.2 -A logdrop-392 -j DROP -A logdrop-393 -j TEE --gateway 10.0.0.1 -A logdrop-393 -j TEE --gateway 10.0.0.2 -A logdrop-393 -j DROP -A logdrop-394 -j TEE --gateway 10.0.0.1 -A logdrop-394 -j TEE --gateway 10.0.0.2 -A logdrop-394 -j DROP -A logdrop-395 -j TEE --gateway 10.0.0.1 -A logdrop-395 -j TEE --gateway 10.0.0.2 -A logdrop-395 -j DROP -A logdrop-396 -j TEE --gateway 10.0.0.1 -A logdrop-396 -j TEE --gateway 10.0.0.2 -A logdrop-396 -j DROP -A logdrop-397 -j TEE --gateway 10.0.0.1 -A logdrop-397 -j TEE --gateway 10.0.0.2 -A logdrop-397 -j DROP -A logdrop-398 -j TEE --gateway 10.0.0.1 -A logdrop-398 -j TEE --gateway 10.0.0.2 -A logdrop-398 -j DROP -A logdrop-399 -j TEE --gateway 10.0.0.1 -A logdrop-399 -j TEE --gateway 10.0.0.2 -A logdrop-399 -j DROP -A logdrop-4 -m limit --limit 1/second -j LOG -A logdrop-4 -j DROP -A logdrop-40 -m limit --limit 1/second -j LOG -A logdrop-40 -j DROP -A logdrop-400 -j TEE --gateway 10.0.0.1 -A logdrop-400 -j TEE --gateway 10.0.0.2 -A logdrop-400 -j DROP -A logdrop-401 -j TEE --gateway 10.0.0.1 -A logdrop-401 -j TEE --gateway 10.0.0.2 -A logdrop-401 -j DROP -A logdrop-402 -j TEE --gateway 10.0.0.1 -A logdrop-402 -j TEE --gateway 10.0.0.2 -A logdrop-402 -j DROP -A logdrop-403 -j TEE --gateway 10.0.0.1 -A logdrop-403 -j TEE --gateway 10.0.0.2 -A logdrop-403 -j DROP -A logdrop-404 -j TEE --gateway 10.0.0.1 -A logdrop-404 -j TEE --gateway 10.0.0.2 -A logdrop-404 -j DROP -A logdrop-405 -j TEE --gateway 10.0.0.1 -A logdrop-405 -j TEE --gateway 10.0.0.2 -A logdrop-405 -j DROP -A logdrop-406 -j TEE --gateway 10.0.0.1 -A logdrop-406 -j TEE --gateway 10.0.0.2 -A logdrop-406 -j DROP -A logdrop-407 -j TEE --gateway 10.0.0.1 -A logdrop-407 -j TEE --gateway 10.0.0.2 -A logdrop-407 -j DROP -A logdrop-408 -j TEE --gateway 10.0.0.1 -A logdrop-408 -j TEE --gateway 10.0.0.2 -A logdrop-408 -j DROP -A logdrop-409 -j TEE --gateway 10.0.0.1 -A logdrop-409 -j TEE --gateway 10.0.0.2 -A logdrop-409 -j DROP -A logdrop-41 -m limit --limit 1/second -j LOG -A logdrop-41 -j DROP -A logdrop-410 -j TEE --gateway 10.0.0.1 -A logdrop-410 -j TEE --gateway 10.0.0.2 -A logdrop-410 -j DROP -A logdrop-411 -j TEE --gateway 10.0.0.1 -A logdrop-411 -j TEE --gateway 10.0.0.2 -A logdrop-411 -j DROP -A logdrop-412 -j TEE --gateway 10.0.0.1 -A logdrop-412 -j TEE --gateway 10.0.0.2 -A logdrop-412 -j DROP -A logdrop-413 -j TEE --gateway 10.0.0.1 -A logdrop-413 -j TEE --gateway 10.0.0.2 -A logdrop-413 -j DROP -A logdrop-414 -j TEE --gateway 10.0.0.1 -A logdrop-414 -j TEE --gateway 10.0.0.2 -A logdrop-414 -j DROP -A logdrop-415 -j TEE --gateway 10.0.0.1 -A logdrop-415 -j TEE --gateway 10.0.0.2 -A logdrop-415 -j DROP -A logdrop-416 -j TEE --gateway 10.0.0.1 -A logdrop-416 -j TEE --gateway 10.0.0.2 -A logdrop-416 -j DROP -A logdrop-417 -j TEE --gateway 10.0.0.1 -A logdrop-417 -j TEE --gateway 10.0.0.2 -A logdrop-417 -j DROP -A logdrop-418 -j TEE --gateway 10.0.0.1 -A logdrop-418 -j TEE --gateway 10.0.0.2 -A logdrop-418 -j DROP -A logdrop-419 -j TEE --gateway 10.0.0.1 -A logdrop-419 -j TEE --gateway 10.0.0.2 -A logdrop-419 -j DROP -A logdrop-42 -m limit --limit 1/second -j LOG -A logdrop-42 -j DROP -A logdrop-420 -j TEE --gateway 10.0.0.1 -A logdrop-420 -j TEE --gateway 10.0.0.2 -A logdrop-420 -j DROP -A logdrop-421 -j TEE --gateway 10.0.0.1 -A logdrop-421 -j TEE --gateway 10.0.0.2 -A logdrop-421 -j DROP -A logdrop-422 -j TEE --gateway 10.0.0.1 -A logdrop-422 -j TEE --gateway 10.0.0.2 -A logdrop-422 -j DROP -A logdrop-423 -j TEE --gateway 10.0.0.1 -A logdrop-423 -j TEE --gateway 10.0.0.2 -A logdrop-423 -j DROP -A logdrop-424 -j TEE --gateway 10.0.0.1 -A logdrop-424 -j TEE --gateway 10.0.0.2 -A logdrop-424 -j DROP -A logdrop-425 -j TEE --gateway 10.0.0.1 -A logdrop-425 -j TEE --gateway 10.0.0.2 -A logdrop-425 -j DROP -A logdrop-426 -j TEE --gateway 10.0.0.1 -A logdrop-426 -j TEE --gateway 10.0.0.2 -A logdrop-426 -j DROP -A logdrop-427 -j TEE --gateway 10.0.0.1 -A logdrop-427 -j TEE --gateway 10.0.0.2 -A logdrop-427 -j DROP -A logdrop-428 -j TEE --gateway 10.0.0.1 -A logdrop-428 -j TEE --gateway 10.0.0.2 -A logdrop-428 -j DROP -A logdrop-429 -j TEE --gateway 10.0.0.1 -A logdrop-429 -j TEE --gateway 10.0.0.2 -A logdrop-429 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP -A logdrop-430 -j TEE --gateway 10.0.0.1 -A logdrop-430 -j TEE --gateway 10.0.0.2 -A logdrop-430 -j DROP -A logdrop-431 -j TEE --gateway 10.0.0.1 -A logdrop-431 -j TEE --gateway 10.0.0.2 -A logdrop-431 -j DROP -A logdrop-432 -j TEE --gateway 10.0.0.1 -A logdrop-432 -j TEE --gateway 10.0.0.2 -A logdrop-432 -j DROP -A logdrop-433 -j TEE --gateway 10.0.0.1 -A logdrop-433 -j TEE --gateway 10.0.0.2 -A logdrop-433 -j DROP -A logdrop-434 -j TEE --gateway 10.0.0.1 -A logdrop-434 -j TEE --gateway 10.0.0.2 -A logdrop-434 -j DROP -A logdrop-435 -j TEE --gateway 10.0.0.1 -A logdrop-435 -j TEE --gateway 10.0.0.2 -A logdrop-435 -j DROP -A logdrop-436 -j TEE --gateway 10.0.0.1 -A logdrop-436 -j TEE --gateway 10.0.0.2 -A logdrop-436 -j DROP -A logdrop-437 -j TEE --gateway 10.0.0.1 -A logdrop-437 -j TEE --gateway 10.0.0.2 -A logdrop-437 -j DROP -A logdrop-438 -j TEE --gateway 10.0.0.1 -A logdrop-438 -j TEE --gateway 10.0.0.2 -A logdrop-438 -j DROP -A logdrop-439 -j TEE --gateway 10.0.0.1 -A logdrop-439 -j TEE --gateway 10.0.0.2 -A logdrop-439 -j DROP -A logdrop-44 -m limit --limit 1/second -j LOG -A logdrop-44 -j DROP -A logdrop-440 -j TEE --gateway 10.0.0.1 -A logdrop-440 -j TEE --gateway 10.0.0.2 -A logdrop-440 -j DROP -A logdrop-441 -j TEE --gateway 10.0.0.1 -A logdrop-441 -j TEE --gateway 10.0.0.2 -A logdrop-441 -j DROP -A logdrop-442 -j TEE --gateway 10.0.0.1 -A logdrop-442 -j TEE --gateway 10.0.0.2 -A logdrop-442 -j DROP -A logdrop-443 -j TEE --gateway 10.0.0.1 -A logdrop-443 -j TEE --gateway 10.0.0.2 -A logdrop-443 -j DROP -A logdrop-444 -j TEE --gateway 10.0.0.1 -A logdrop-444 -j TEE --gateway 10.0.0.2 -A logdrop-444 -j DROP -A logdrop-445 -j TEE --gateway 10.0.0.1 -A logdrop-445 -j TEE --gateway 10.0.0.2 -A logdrop-445 -j DROP -A logdrop-446 -j TEE --gateway 10.0.0.1 -A logdrop-446 -j TEE --gateway 10.0.0.2 -A logdrop-446 -j DROP -A logdrop-447 -j TEE --gateway 10.0.0.1 -A logdrop-447 -j TEE --gateway 10.0.0.2 -A logdrop-447 -j DROP -A logdrop-448 -j TEE --gateway 10.0.0.1 -A logdrop-448 -j TEE --gateway 10.0.0.2 -A logdrop-448 -j DROP -A logdrop-449 -j TEE --gateway 10.0.0.1 -A logdrop-449 -j TEE --gateway 10.0.0.2 -A logdrop-449 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP -A logdrop-450 -j TEE --gateway 10.0.0.1 -A logdrop-450 -j TEE --gateway 10.0.0.2 -A logdrop-450 -j DROP -A logdrop-451 -j TEE --gateway 10.0.0.1 -A logdrop-451 -j TEE --gateway 10.0.0.2 -A logdrop-451 -j DROP -A logdrop-452 -j TEE --gateway 10.0.0.1 -A logdrop-452 -j TEE --gateway 10.0.0.2 -A logdrop-452 -j DROP -A logdrop-453 -j TEE --gateway 10.0.0.1 -A logdrop-453 -j TEE --gateway 10.0.0.2 -A logdrop-453 -j DROP -A logdrop-454 -j TEE --gateway 10.0.0.1 -A logdrop-454 -j TEE --gateway 10.0.0.2 -A logdrop-454 -j DROP -A logdrop-455 -j TEE --gateway 10.0.0.1 -A logdrop-455 -j TEE --gateway 10.0.0.2 -A logdrop-455 -j DROP -A logdrop-456 -j TEE --gateway 10.0.0.1 -A logdrop-456 -j TEE --gateway 10.0.0.2 -A logdrop-456 -j DROP -A logdrop-457 -j TEE --gateway 10.0.0.1 -A logdrop-457 -j TEE --gateway 10.0.0.2 -A logdrop-457 -j DROP -A logdrop-458 -j TEE --gateway 10.0.0.1 -A logdrop-458 -j TEE --gateway 10.0.0.2 -A logdrop-458 -j DROP -A logdrop-459 -j TEE --gateway 10.0.0.1 -A logdrop-459 -j TEE --gateway 10.0.0.2 -A logdrop-459 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-460 -m limit --limit 12/minute -j ULOG -A logdrop-460 -j DROP -A logdrop-461 -m limit --limit 12/minute -j ULOG -A logdrop-461 -j DROP -A logdrop-462 -m limit --limit 12/minute -j ULOG -A logdrop-462 -j DROP -A logdrop-463 -m limit --limit 12/minute -j ULOG -A logdrop-463 -j DROP -A logdrop-464 -m limit --limit 12/minute -j ULOG -A logdrop-464 -j DROP -A logdrop-465 -m limit --limit 12/minute -j ULOG -A logdrop-465 -j DROP -A logdrop-466 -m limit --limit 12/minute -j ULOG -A logdrop-466 -j DROP -A logdrop-467 -m limit --limit 12/minute -j ULOG -A logdrop-467 -j DROP -A logdrop-468 -m limit --limit 12/minute -j ULOG -A logdrop-468 -j DROP -A logdrop-469 -m limit --limit 12/minute -j ULOG -A logdrop-469 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP -A logdrop-470 -m limit --limit 12/minute -j ULOG -A logdrop-470 -j DROP -A logdrop-471 -m limit --limit 12/minute -j ULOG -A logdrop-471 -j DROP -A logdrop-472 -m limit --limit 12/minute -j ULOG -A logdrop-472 -j DROP -A logdrop-473 -m limit --limit 12/minute -j ULOG -A logdrop-473 -j DROP -A logdrop-474 -m limit --limit 12/minute -j ULOG -A logdrop-474 -j DROP -A logdrop-475 -m limit --limit 12/minute -j ULOG -A logdrop-475 -j DROP -A logdrop-476 -m limit --limit 12/minute -j ULOG -A logdrop-476 -j DROP -A logdrop-477 -m limit --limit 12/minute -j ULOG -A logdrop-477 -j DROP -A logdrop-478 -m limit --limit 12/minute -j ULOG -A logdrop-478 -j DROP -A logdrop-479 -m limit --limit 12/minute -j ULOG -A logdrop-479 -j DROP -A logdrop-48 -m limit --limit 1/second -j LOG -A logdrop-48 -j DROP -A logdrop-480 -m limit --limit 12/minute -j ULOG -A logdrop-480 -j DROP -A logdrop-481 -m limit --limit 12/minute -j ULOG -A logdrop-481 -j DROP -A logdrop-482 -m limit --limit 12/minute -j ULOG -A logdrop-482 -j DROP -A logdrop-483 -m limit --limit 12/minute -j ULOG -A logdrop-483 -j DROP -A logdrop-484 -m limit --limit 12/minute -j ULOG -A logdrop-484 -j DROP -A logdrop-485 -m limit --limit 12/minute -j ULOG -A logdrop-485 -j DROP -A logdrop-486 -m limit --limit 12/minute -j ULOG -A logdrop-486 -j DROP -A logdrop-487 -m limit --limit 12/minute -j ULOG -A logdrop-487 -j DROP -A logdrop-488 -m limit --limit 12/minute -j ULOG -A logdrop-488 -j DROP -A logdrop-489 -m limit --limit 12/minute -j ULOG -A logdrop-489 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP -A logdrop-490 -m limit --limit 12/minute -j ULOG -A logdrop-490 -j DROP -A logdrop-491 -m limit --limit 12/minute -j ULOG -A logdrop-491 -j DROP -A logdrop-492 -m limit --limit 12/minute -j ULOG -A logdrop-492 -j DROP -A logdrop-493 -m limit --limit 12/minute -j ULOG -A logdrop-493 -j DROP -A logdrop-494 -m limit --limit 12/minute -j ULOG -A logdrop-494 -j DROP -A logdrop-495 -m limit --limit 12/minute -j ULOG -A logdrop-495 -j DROP -A logdrop-496 -m limit --limit 12/minute -j ULOG -A logdrop-496 -j DROP -A logdrop-497 -m limit --limit 12/minute -j ULOG -A logdrop-497 -j DROP -A logdrop-498 -m limit --limit 12/minute -j ULOG -A logdrop-498 -j DROP -A logdrop-499 -m limit --limit 12/minute -j ULOG -A logdrop-499 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP -A logdrop-50 -m limit --limit 1/second -j LOG -A logdrop-50 -j DROP -A logdrop-500 -m limit --limit 12/minute -j ULOG -A logdrop-500 -j DROP -A logdrop-501 -m limit --limit 12/minute -j ULOG -A logdrop-501 -j DROP -A logdrop-502 -m limit --limit 12/minute -j ULOG -A logdrop-502 -j DROP -A logdrop-503 -m limit --limit 12/minute -j ULOG -A logdrop-503 -j DROP -A logdrop-504 -m limit --limit 12/minute -j ULOG -A logdrop-504 -j DROP -A logdrop-505 -m limit --limit 12/minute -j ULOG -A logdrop-505 -j DROP -A logdrop-506 -m limit --limit 12/minute -j ULOG -A logdrop-506 -j DROP -A logdrop-507 -m limit --limit 12/minute -j ULOG -A logdrop-507 -j DROP -A logdrop-508 -m limit --limit 12/minute -j ULOG -A logdrop-508 -j DROP -A logdrop-509 -m limit --limit 12/minute -j ULOG -A logdrop-509 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP -A logdrop-510 -m limit --limit 12/minute -j ULOG -A logdrop-510 -j DROP -A logdrop-511 -m limit --limit 12/minute -j ULOG -A logdrop-511 -j DROP -A logdrop-512 -m limit --limit 12/minute -j ULOG -A logdrop-512 -j DROP -A logdrop-513 -m limit --limit 12/minute -j ULOG -A logdrop-513 -j DROP -A logdrop-514 -m limit --limit 12/minute -j ULOG -A logdrop-514 -j DROP -A logdrop-515 -m limit --limit 12/minute -j ULOG -A logdrop-515 -j DROP -A logdrop-516 -m limit --limit 12/minute -j ULOG -A logdrop-516 -j DROP -A logdrop-517 -m limit --limit 12/minute -j ULOG -A logdrop-517 -j DROP -A logdrop-518 -m limit --limit 12/minute -j ULOG -A logdrop-518 -j DROP -A logdrop-519 -m limit --limit 12/minute -j ULOG -A logdrop-519 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP -A logdrop-520 -m limit --limit 12/minute -j ULOG -A logdrop-520 -j DROP -A logdrop-521 -m limit --limit 12/minute -j ULOG -A logdrop-521 -j DROP -A logdrop-522 -m limit --limit 12/minute -j ULOG -A logdrop-522 -j DROP -A logdrop-523 -m limit --limit 12/minute -j ULOG -A logdrop-523 -j DROP -A logdrop-524 -m limit --limit 12/minute -j ULOG -A logdrop-524 -j DROP -A logdrop-525 -m limit --limit 12/minute -j ULOG -A logdrop-525 -j DROP -A logdrop-526 -m limit --limit 12/minute -j ULOG -A logdrop-526 -j DROP -A logdrop-527 -m limit --limit 12/minute -j ULOG -A logdrop-527 -j DROP -A logdrop-528 -m limit --limit 12/minute -j ULOG -A logdrop-528 -j DROP -A logdrop-529 -m limit --limit 12/minute -j ULOG -A logdrop-529 -j DROP -A logdrop-53 -m limit --limit 1/second -j LOG -A logdrop-53 -j DROP -A logdrop-530 -m limit --limit 12/minute -j ULOG -A logdrop-530 -j DROP -A logdrop-531 -m limit --limit 12/minute -j ULOG -A logdrop-531 -j DROP -A logdrop-532 -m limit --limit 12/minute -j ULOG -A logdrop-532 -j DROP -A logdrop-533 -m limit --limit 12/minute -j ULOG -A logdrop-533 -j DROP -A logdrop-534 -m limit --limit 12/minute -j ULOG -A logdrop-534 -j DROP -A logdrop-535 -m limit --limit 12/minute -j ULOG -A logdrop-535 -j DROP -A logdrop-536 -m limit --limit 12/minute -j ULOG -A logdrop-536 -j DROP -A logdrop-537 -m limit --limit 12/minute -j ULOG -A logdrop-537 -j DROP -A logdrop-538 -m limit --limit 12/minute -j ULOG -A logdrop-538 -j DROP -A logdrop-539 -m limit --limit 12/minute -j ULOG -A logdrop-539 -j DROP -A logdrop-54 -m limit --limit 1/second -j LOG -A logdrop-54 -j DROP -A logdrop-540 -m limit --limit 12/minute -j ULOG -A logdrop-540 -j DROP -A logdrop-541 -m limit --limit 12/minute -j ULOG -A logdrop-541 -j DROP -A logdrop-542 -m limit --limit 12/minute -j ULOG -A logdrop-542 -j DROP -A logdrop-543 -m limit --limit 12/minute -j ULOG -A logdrop-543 -j DROP -A logdrop-544 -m limit --limit 12/minute -j ULOG -A logdrop-544 -j DROP -A logdrop-545 -m limit --limit 12/minute -j ULOG -A logdrop-545 -j DROP -A logdrop-546 -m limit --limit 12/minute -j ULOG -A logdrop-546 -j DROP -A logdrop-547 -m limit --limit 12/minute -j ULOG -A logdrop-547 -j DROP -A logdrop-548 -m limit --limit 12/minute -j ULOG -A logdrop-548 -j DROP -A logdrop-549 -m limit --limit 12/minute -j ULOG -A logdrop-549 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP -A logdrop-550 -m limit --limit 1/second -j LOG -A logdrop-550 -j DROP -A logdrop-551 -m limit --limit 1/second -j LOG -A logdrop-551 -j DROP -A logdrop-552 -m limit --limit 1/second -j LOG -A logdrop-552 -j DROP -A logdrop-553 -m limit --limit 1/second -j LOG -A logdrop-553 -j DROP -A logdrop-554 -m limit --limit 1/second -j LOG -A logdrop-554 -j DROP -A logdrop-555 -m limit --limit 1/second -j LOG -A logdrop-555 -j DROP -A logdrop-556 -m limit --limit 1/second -j LOG -A logdrop-556 -j DROP -A logdrop-557 -m limit --limit 1/second -j LOG -A logdrop-557 -j DROP -A logdrop-558 -m limit --limit 1/second -j LOG -A logdrop-558 -j DROP -A logdrop-559 -m limit --limit 1/second -j LOG -A logdrop-559 -j DROP -A logdrop-56 -m limit --limit 1/second -j LOG -A logdrop-56 -j DROP -A logdrop-560 -m limit --limit 1/second -j LOG -A logdrop-560 -j DROP -A logdrop-561 -m limit --limit 1/second -j LOG -A logdrop-561 -j DROP -A logdrop-562 -m limit --limit 1/second -j LOG -A logdrop-562 -j DROP -A logdrop-563 -m limit --limit 1/second -j LOG -A logdrop-563 -j DROP -A logdrop-564 -m limit --limit 1/second -j LOG -A logdrop-564 -j DROP -A logdrop-565 -m limit --limit 1/second -j LOG -A logdrop-565 -j DROP -A logdrop-566 -m limit --limit 1/second -j LOG -A logdrop-566 -j DROP -A logdrop-567 -m limit --limit 1/second -j LOG -A logdrop-567 -j DROP -A logdrop-568 -m limit --limit 1/second -j LOG -A logdrop-568 -j DROP -A logdrop-569 -m limit --limit 1/second -j LOG -A logdrop-569 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP -A logdrop-570 -m limit --limit 1/second -j LOG -A logdrop-570 -j DROP -A logdrop-571 -m limit --limit 1/second -j LOG -A logdrop-571 -j DROP -A logdrop-572 -m limit --limit 1/second -j LOG -A logdrop-572 -j DROP -A logdrop-573 -m limit --limit 1/second -j LOG -A logdrop-573 -j DROP -A logdrop-574 -m limit --limit 1/second -j LOG -A logdrop-574 -j DROP -A logdrop-575 -m limit --limit 1/second -j LOG -A logdrop-575 -j DROP -A logdrop-576 -m limit --limit 1/second -j LOG -A logdrop-576 -j DROP -A logdrop-577 -m limit --limit 1/second -j LOG -A logdrop-577 -j DROP -A logdrop-578 -m limit --limit 1/second -j LOG -A logdrop-578 -j DROP -A logdrop-579 -m limit --limit 1/second -j LOG -A logdrop-579 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG -A logdrop-58 -j DROP -A logdrop-580 -m limit --limit 1/second -j LOG -A logdrop-580 -j DROP -A logdrop-581 -m limit --limit 1/second -j LOG -A logdrop-581 -j DROP -A logdrop-582 -m limit --limit 1/second -j LOG -A logdrop-582 -j DROP -A logdrop-583 -m limit --limit 1/second -j LOG -A logdrop-583 -j DROP -A logdrop-584 -m limit --limit 1/second -j LOG -A logdrop-584 -j DROP -A logdrop-585 -m limit --limit 1/second -j LOG -A logdrop-585 -j DROP -A logdrop-586 -m limit --limit 1/second -j LOG -A logdrop-586 -j DROP -A logdrop-587 -m limit --limit 1/second -j LOG -A logdrop-587 -j DROP -A logdrop-588 -m limit --limit 1/second -j LOG -A logdrop-588 -j DROP -A logdrop-589 -m limit --limit 1/second -j LOG -A logdrop-589 -j DROP -A logdrop-59 -m limit --limit 1/second -j LOG -A logdrop-59 -j DROP -A logdrop-590 -m limit --limit 1/second -j LOG -A logdrop-590 -j DROP -A logdrop-591 -m limit --limit 1/second -j LOG -A logdrop-591 -j DROP -A logdrop-592 -m limit --limit 1/second -j LOG -A logdrop-592 -j DROP -A logdrop-593 -m limit --limit 1/second -j LOG -A logdrop-593 -j DROP -A logdrop-594 -m limit --limit 1/second -j LOG -A logdrop-594 -j DROP -A logdrop-595 -m limit --limit 1/second -j LOG -A logdrop-595 -j DROP -A logdrop-596 -m limit --limit 1/second -j LOG -A logdrop-596 -j DROP -A logdrop-597 -m limit --limit 1/second -j LOG -A logdrop-597 -j DROP -A logdrop-598 -m limit --limit 1/second -j LOG -A logdrop-598 -j DROP -A logdrop-599 -m limit --limit 1/second -j LOG -A logdrop-599 -j DROP -A logdrop-6 -m limit --limit 1/second -j LOG -A logdrop-6 -j DROP -A logdrop-60 -m limit --limit 1/second -j LOG -A logdrop-60 -j DROP -A logdrop-600 -m limit --limit 1/second -j LOG -A logdrop-600 -j DROP -A logdrop-601 -m limit --limit 1/second -j LOG -A logdrop-601 -j DROP -A logdrop-602 -m limit --limit 1/second -j LOG -A logdrop-602 -j DROP -A logdrop-603 -m limit --limit 1/second -j LOG -A logdrop-603 -j DROP -A logdrop-604 -m limit --limit 1/second -j LOG -A logdrop-604 -j DROP -A logdrop-605 -m limit --limit 1/second -j LOG -A logdrop-605 -j DROP -A logdrop-606 -m limit --limit 1/second -j LOG -A logdrop-606 -j DROP -A logdrop-607 -m limit --limit 1/second -j LOG -A logdrop-607 -j DROP -A logdrop-608 -m limit --limit 1/second -j LOG -A logdrop-608 -j DROP -A logdrop-609 -m limit --limit 1/second -j LOG -A logdrop-609 -j DROP -A logdrop-61 -m limit --limit 1/second -j LOG -A logdrop-61 -j DROP -A logdrop-610 -m limit --limit 1/second -j LOG -A logdrop-610 -j DROP -A logdrop-611 -m limit --limit 1/second -j LOG -A logdrop-611 -j DROP -A logdrop-612 -m limit --limit 1/second -j LOG -A logdrop-612 -j DROP -A logdrop-613 -m limit --limit 1/second -j LOG -A logdrop-613 -j DROP -A logdrop-614 -m limit --limit 1/second -j LOG -A logdrop-614 -j DROP -A logdrop-615 -m limit --limit 1/second -j LOG -A logdrop-615 -j DROP -A logdrop-616 -m limit --limit 1/second -j LOG -A logdrop-616 -j DROP -A logdrop-617 -m limit --limit 1/second -j LOG -A logdrop-617 -j DROP -A logdrop-618 -m limit --limit 1/second -j LOG -A logdrop-618 -j DROP -A logdrop-619 -m limit --limit 1/second -j LOG -A logdrop-619 -j DROP -A logdrop-62 -m limit --limit 1/second -j LOG -A logdrop-62 -j DROP -A logdrop-620 -m limit --limit 1/second -j LOG -A logdrop-620 -j DROP -A logdrop-621 -m limit --limit 1/second -j LOG -A logdrop-621 -j DROP -A logdrop-622 -m limit --limit 1/second -j LOG -A logdrop-622 -j DROP -A logdrop-623 -m limit --limit 1/second -j LOG -A logdrop-623 -j DROP -A logdrop-624 -m limit --limit 1/second -j LOG -A logdrop-624 -j DROP -A logdrop-625 -m limit --limit 1/second -j LOG -A logdrop-625 -j DROP -A logdrop-626 -m limit --limit 1/second -j LOG -A logdrop-626 -j DROP -A logdrop-627 -m limit --limit 1/second -j LOG -A logdrop-627 -j DROP -A logdrop-628 -m limit --limit 1/second -j LOG -A logdrop-628 -j DROP -A logdrop-629 -m limit --limit 1/second -j LOG -A logdrop-629 -j DROP -A logdrop-63 -m limit --limit 1/second -j LOG -A logdrop-63 -j DROP -A logdrop-630 -m limit --limit 1/second -j LOG -A logdrop-630 -j DROP -A logdrop-631 -m limit --limit 1/second -j LOG -A logdrop-631 -j DROP -A logdrop-632 -m limit --limit 1/second -j LOG -A logdrop-632 -j DROP -A logdrop-633 -m limit --limit 1/second -j LOG -A logdrop-633 -j DROP -A logdrop-634 -m limit --limit 1/second -j LOG -A logdrop-634 -j DROP -A logdrop-635 -m limit --limit 1/second -j LOG -A logdrop-635 -j DROP -A logdrop-636 -m limit --limit 1/second -j LOG -A logdrop-636 -j DROP -A logdrop-637 -m limit --limit 1/second -j LOG -A logdrop-637 -j DROP -A logdrop-638 -m limit --limit 1/second -j LOG -A logdrop-638 -j DROP -A logdrop-639 -m limit --limit 1/second -j LOG -A logdrop-639 -j DROP -A logdrop-64 -m limit --limit 1/second -j LOG -A logdrop-64 -j DROP -A logdrop-640 -m limit --limit 1/second -j LOG -A logdrop-640 -j DROP -A logdrop-641 -m limit --limit 1/second -j LOG -A logdrop-641 -j DROP -A logdrop-642 -m limit --limit 1/second -j LOG -A logdrop-642 -j DROP -A logdrop-643 -m limit --limit 1/second -j LOG -A logdrop-643 -j DROP -A logdrop-644 -m limit --limit 1/second -j LOG -A logdrop-644 -j DROP -A logdrop-645 -m limit --limit 1/second -j LOG -A logdrop-645 -j DROP -A logdrop-646 -m limit --limit 1/second -j LOG -A logdrop-646 -j DROP -A logdrop-647 -m limit --limit 1/second -j LOG -A logdrop-647 -j DROP -A logdrop-648 -m limit --limit 1/second -j LOG -A logdrop-648 -j DROP -A logdrop-649 -m limit --limit 1/second -j LOG -A logdrop-649 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP -A logdrop-650 -j TEE --gateway 10.0.0.1 -A logdrop-650 -j TEE --gateway 10.0.0.2 -A logdrop-650 -j DROP -A logdrop-651 -j TEE --gateway 10.0.0.1 -A logdrop-651 -j TEE --gateway 10.0.0.2 -A logdrop-651 -j DROP -A logdrop-652 -j TEE --gateway 10.0.0.1 -A logdrop-652 -j TEE --gateway 10.0.0.2 -A logdrop-652 -j DROP -A logdrop-653 -j TEE --gateway 10.0.0.1 -A logdrop-653 -j TEE --gateway 10.0.0.2 -A logdrop-653 -j DROP -A logdrop-654 -j TEE --gateway 10.0.0.1 -A logdrop-654 -j TEE --gateway 10.0.0.2 -A logdrop-654 -j DROP -A logdrop-655 -j TEE --gateway 10.0.0.1 -A logdrop-655 -j TEE --gateway 10.0.0.2 -A logdrop-655 -j DROP -A logdrop-656 -j TEE --gateway 10.0.0.1 -A logdrop-656 -j TEE --gateway 10.0.0.2 -A logdrop-656 -j DROP -A logdrop-657 -j TEE --gateway 10.0.0.1 -A logdrop-657 -j TEE --gateway 10.0.0.2 -A logdrop-657 -j DROP -A logdrop-658 -j TEE --gateway 10.0.0.1 -A logdrop-658 -j TEE --gateway 10.0.0.2 -A logdrop-658 -j DROP -A logdrop-659 -j TEE --gateway 10.0.0.1 -A logdrop-659 -j TEE --gateway 10.0.0.2 -A logdrop-659 -j DROP -A logdrop-66 -m limit --limit 1/second -j LOG -A logdrop-66 -j DROP -A logdrop-660 -j TEE --gateway 10.0.0.1 -A logdrop-660 -j TEE --gateway 10.0.0.2 -A logdrop-660 -j DROP -A logdrop-661 -j TEE --gateway 10.0.0.1 -A logdrop-661 -j TEE --gateway 10.0.0.2 -A logdrop-661 -j DROP -A logdrop-662 -j TEE --gateway 10.0.0.1 -A logdrop-662 -j TEE --gateway 10.0.0.2 -A logdrop-662 -j DROP -A logdrop-663 -j TEE --gateway 10.0.0.1 -A logdrop-663 -j TEE --gateway 10.0.0.2 -A logdrop-663 -j DROP -A logdrop-664 -j TEE --gateway 10.0.0.1 -A logdrop-664 -j TEE --gateway 10.0.0.2 -A logdrop-664 -j DROP -A logdrop-665 -j TEE --gateway 10.0.0.1 -A logdrop-665 -j TEE --gateway 10.0.0.2 -A logdrop-665 -j DROP -A logdrop-666 -j TEE --gateway 10.0.0.1 -A logdrop-666 -j TEE --gateway 10.0.0.2 -A logdrop-666 -j DROP -A logdrop-667 -j TEE --gateway 10.0.0.1 -A logdrop-667 -j TEE --gateway 10.0.0.2 -A logdrop-667 -j DROP -A logdrop-668 -j TEE --gateway 10.0.0.1 -A logdrop-668 -j TEE --gateway 10.0.0.2 -A logdrop-668 -j DROP -A logdrop-669 -j TEE --gateway 10.0.0.1 -A logdrop-669 -j TEE --gateway 10.0.0.2 -A logdrop-669 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP -A logdrop-670 -j TEE --gateway 10.0.0.1 -A logdrop-670 -j TEE --gateway 10.0.0.2 -A logdrop-670 -j DROP -A logdrop-671 -j TEE --gateway 10.0.0.1 -A logdrop-671 -j TEE --gateway 10.0.0.2 -A logdrop-671 -j DROP -A logdrop-672 -j TEE --gateway 10.0.0.1 -A logdrop-672 -j TEE --gateway 10.0.0.2 -A logdrop-672 -j DROP -A logdrop-673 -j TEE --gateway 10.0.0.1 -A logdrop-673 -j TEE --gateway 10.0.0.2 -A logdrop-673 -j DROP -A logdrop-674 -j TEE --gateway 10.0.0.1 -A logdrop-674 -j TEE --gateway 10.0.0.2 -A logdrop-674 -j DROP -A logdrop-675 -j TEE --gateway 10.0.0.1 -A logdrop-675 -j TEE --gateway 10.0.0.2 -A logdrop-675 -j DROP -A logdrop-676 -j TEE --gateway 10.0.0.1 -A logdrop-676 -j TEE --gateway 10.0.0.2 -A logdrop-676 -j DROP -A logdrop-677 -j TEE --gateway 10.0.0.1 -A logdrop-677 -j TEE --gateway 10.0.0.2 -A logdrop-677 -j DROP -A logdrop-678 -j TEE --gateway 10.0.0.1 -A logdrop-678 -j TEE --gateway 10.0.0.2 -A logdrop-678 -j DROP -A logdrop-679 -j TEE --gateway 10.0.0.1 -A logdrop-679 -j TEE --gateway 10.0.0.2 -A logdrop-679 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG -A logdrop-68 -j DROP -A logdrop-680 -j TEE --gateway 10.0.0.1 -A logdrop-680 -j TEE --gateway 10.0.0.2 -A logdrop-680 -j DROP -A logdrop-681 -j TEE --gateway 10.0.0.1 -A logdrop-681 -j TEE --gateway 10.0.0.2 -A logdrop-681 -j DROP -A logdrop-682 -j TEE --gateway 10.0.0.1 -A logdrop-682 -j TEE --gateway 10.0.0.2 -A logdrop-682 -j DROP -A logdrop-683 -j TEE --gateway 10.0.0.1 -A logdrop-683 -j TEE --gateway 10.0.0.2 -A logdrop-683 -j DROP -A logdrop-684 -j TEE --gateway 10.0.0.1 -A logdrop-684 -j TEE --gateway 10.0.0.2 -A logdrop-684 -j DROP -A logdrop-685 -j TEE --gateway 10.0.0.1 -A logdrop-685 -j TEE --gateway 10.0.0.2 -A logdrop-685 -j DROP -A logdrop-686 -j TEE --gateway 10.0.0.1 -A logdrop-686 -j TEE --gateway 10.0.0.2 -A logdrop-686 -j DROP -A logdrop-687 -j TEE --gateway 10.0.0.1 -A logdrop-687 -j TEE --gateway 10.0.0.2 -A logdrop-687 -j DROP -A logdrop-688 -j TEE --gateway 10.0.0.1 -A logdrop-688 -j TEE --gateway 10.0.0.2 -A logdrop-688 -j DROP -A logdrop-689 -j TEE --gateway 10.0.0.1 -A logdrop-689 -j TEE --gateway 10.0.0.2 -A logdrop-689 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP -A logdrop-690 -j TEE --gateway 10.0.0.1 -A logdrop-690 -j TEE --gateway 10.0.0.2 -A logdrop-690 -j DROP -A logdrop-691 -j TEE --gateway 10.0.0.1 -A logdrop-691 -j TEE --gateway 10.0.0.2 -A logdrop-691 -j DROP -A logdrop-692 -j TEE --gateway 10.0.0.1 -A logdrop-692 -j TEE --gateway 10.0.0.2 -A logdrop-692 -j DROP -A logdrop-693 -j TEE --gateway 10.0.0.1 -A logdrop-693 -j TEE --gateway 10.0.0.2 -A logdrop-693 -j DROP -A logdrop-694 -j TEE --gateway 10.0.0.1 -A logdrop-694 -j TEE --gateway 10.0.0.2 -A logdrop-694 -j DROP -A logdrop-695 -j TEE --gateway 10.0.0.1 -A logdrop-695 -j TEE --gateway 10.0.0.2 -A logdrop-695 -j DROP -A logdrop-696 -j TEE --gateway 10.0.0.1 -A logdrop-696 -j TEE --gateway 10.0.0.2 -A logdrop-696 -j DROP -A logdrop-697 -j TEE --gateway 10.0.0.1 -A logdrop-697 -j TEE --gateway 10.0.0.2 -A logdrop-697 -j DROP -A logdrop-698 -j TEE --gateway 10.0.0.1 -A logdrop-698 -j TEE --gateway 10.0.0.2 -A logdrop-698 -j DROP -A logdrop-699 -j TEE --gateway 10.0.0.1 -A logdrop-699 -j TEE --gateway 10.0.0.2 -A logdrop-699 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG -A logdrop-7 -j DROP -A logdrop-70 -m limit --limit 1/second -j LOG -A logdrop-70 -j DROP -A logdrop-700 -j TEE --gateway 10.0.0.1 -A logdrop-700 -j TEE --gateway 10.0.0.2 -A logdrop-700 -j DROP -A logdrop-701 -j TEE --gateway 10.0.0.1 -A logdrop-701 -j TEE --gateway 10.0.0.2 -A logdrop-701 -j DROP -A logdrop-702 -j TEE --gateway 10.0.0.1 -A logdrop-702 -j TEE --gateway 10.0.0.2 -A logdrop-702 -j DROP -A logdrop-703 -j TEE --gateway 10.0.0.1 -A logdrop-703 -j TEE --gateway 10.0.0.2 -A logdrop-703 -j DROP -A logdrop-704 -j TEE --gateway 10.0.0.1 -A logdrop-704 -j TEE --gateway 10.0.0.2 -A logdrop-704 -j DROP -A logdrop-705 -j TEE --gateway 10.0.0.1 -A logdrop-705 -j TEE --gateway 10.0.0.2 -A logdrop-705 -j DROP -A logdrop-706 -j TEE --gateway 10.0.0.1 -A logdrop-706 -j TEE --gateway 10.0.0.2 -A logdrop-706 -j DROP -A logdrop-707 -j TEE --gateway 10.0.0.1 -A logdrop-707 -j TEE --gateway 10.0.0.2 -A logdrop-707 -j DROP -A logdrop-708 -j TEE --gateway 10.0.0.1 -A logdrop-708 -j TEE --gateway 10.0.0.2 -A logdrop-708 -j DROP -A logdrop-709 -j TEE --gateway 10.0.0.1 -A logdrop-709 -j TEE --gateway 10.0.0.2 -A logdrop-709 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP -A logdrop-710 -j TEE --gateway 10.0.0.1 -A logdrop-710 -j TEE --gateway 10.0.0.2 -A logdrop-710 -j DROP -A logdrop-711 -j TEE --gateway 10.0.0.1 -A logdrop-711 -j TEE --gateway 10.0.0.2 -A logdrop-711 -j DROP -A logdrop-712 -j TEE --gateway 10.0.0.1 -A logdrop-712 -j TEE --gateway 10.0.0.2 -A logdrop-712 -j DROP -A logdrop-713 -j TEE --gateway 10.0.0.1 -A logdrop-713 -j TEE --gateway 10.0.0.2 -A logdrop-713 -j DROP -A logdrop-714 -j TEE --gateway 10.0.0.1 -A logdrop-714 -j TEE --gateway 10.0.0.2 -A logdrop-714 -j DROP -A logdrop-715 -j TEE --gateway 10.0.0.1 -A logdrop-715 -j TEE --gateway 10.0.0.2 -A logdrop-715 -j DROP -A logdrop-716 -j TEE --gateway 10.0.0.1 -A logdrop-716 -j TEE --gateway 10.0.0.2 -A logdrop-716 -j DROP -A logdrop-717 -j TEE --gateway 10.0.0.1 -A logdrop-717 -j TEE --gateway 10.0.0.2 -A logdrop-717 -j DROP -A logdrop-718 -j TEE --gateway 10.0.0.1 -A logdrop-718 -j TEE --gateway 10.0.0.2 -A logdrop-718 -j DROP -A logdrop-719 -j TEE --gateway 10.0.0.1 -A logdrop-719 -j TEE --gateway 10.0.0.2 -A logdrop-719 -j DROP -A logdrop-72 -m limit --limit 1/second -j LOG -A logdrop-72 -j DROP -A logdrop-720 -j TEE --gateway 10.0.0.1 -A logdrop-720 -j TEE --gateway 10.0.0.2 -A logdrop-720 -j DROP -A logdrop-721 -j TEE --gateway 10.0.0.1 -A logdrop-721 -j TEE --gateway 10.0.0.2 -A logdrop-721 -j DROP -A logdrop-722 -j TEE --gateway 10.0.0.1 -A logdrop-722 -j TEE --gateway 10.0.0.2 -A logdrop-722 -j DROP -A logdrop-723 -j TEE --gateway 10.0.0.1 -A logdrop-723 -j TEE --gateway 10.0.0.2 -A logdrop-723 -j DROP -A logdrop-724 -j TEE --gateway 10.0.0.1 -A logdrop-724 -j TEE --gateway 10.0.0.2 -A logdrop-724 -j DROP -A logdrop-725 -j TEE --gateway 10.0.0.1 -A logdrop-725 -j TEE --gateway 10.0.0.2 -A logdrop-725 -j DROP -A logdrop-726 -j TEE --gateway 10.0.0.1 -A logdrop-726 -j TEE --gateway 10.0.0.2 -A logdrop-726 -j DROP -A logdrop-727 -j TEE --gateway 10.0.0.1 -A logdrop-727 -j TEE --gateway 10.0.0.2 -A logdrop-727 -j DROP -A logdrop-728 -j TEE --gateway 10.0.0.1 -A logdrop-728 -j TEE --gateway 10.0.0.2 -A logdrop-728 -j DROP -A logdrop-729 -j TEE --gateway 10.0.0.1 -A logdrop-729 -j TEE --gateway 10.0.0.2 -A logdrop-729 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP -A logdrop-730 -j TEE --gateway 10.0.0.1 -A logdrop-730 -j TEE --gateway 10.0.0.2 -A logdrop-730 -j DROP -A logdrop-731 -j TEE --gateway 10.0.0.1 -A logdrop-731 -j TEE --gateway 10.0.0.2 -A logdrop-731 -j DROP -A logdrop-732 -j TEE --gateway 10.0.0.1 -A logdrop-732 -j TEE --gateway 10.0.0.2 -A logdrop-732 -j DROP -A logdrop-733 -j TEE --gateway 10.0.0.1 -A logdrop-733 -j TEE --gateway 10.0.0.2 -A logdrop-733 -j DROP -A logdrop-734 -j TEE --gateway 10.0.0.1 -A logdrop-734 -j TEE --gateway 10.0.0.2 -A logdrop-734 -j DROP -A logdrop-735 -j TEE --gateway 10.0.0.1 -A logdrop-735 -j TEE --gateway 10.0.0.2 -A logdrop-735 -j DROP -A logdrop-736 -j TEE --gateway 10.0.0.1 -A logdrop-736 -j TEE --gateway 10.0.0.2 -A logdrop-736 -j DROP -A logdrop-737 -j TEE --gateway 10.0.0.1 -A logdrop-737 -j TEE --gateway 10.0.0.2 -A logdrop-737 -j DROP -A logdrop-738 -j TEE --gateway 10.0.0.1 -A logdrop-738 -j TEE --gateway 10.0.0.2 -A logdrop-738 -j DROP -A logdrop-739 -j TEE --gateway 10.0.0.1 -A logdrop-739 -j TEE --gateway 10.0.0.2 -A logdrop-739 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP -A logdrop-740 -m limit --limit 12/minute -j ULOG -A logdrop-740 -j DROP -A logdrop-741 -m limit --limit 12/minute -j ULOG -A logdrop-741 -j DROP -A logdrop-742 -m limit --limit 12/minute -j ULOG -A logdrop-742 -j DROP -A logdrop-743 -m limit --limit 12/minute -j ULOG -A logdrop-743 -j DROP -A logdrop-744 -m limit --limit 12/minute -j ULOG -A logdrop-744 -j DROP -A logdrop-745 -m limit --limit 12/minute -j ULOG -A logdrop-745 -j DROP -A logdrop-746 -m limit --limit 12/minute -j ULOG -A logdrop-746 -j DROP -A logdrop-747 -m limit --limit 12/minute -j ULOG -A logdrop-747 -j DROP -A logdrop-748 -m limit --limit 12/minute -j ULOG -A logdrop-748 -j DROP -A logdrop-749 -m limit --limit 12/minute -j ULOG -A logdrop-749 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP -A logdrop-750 -m limit --limit 12/minute -j ULOG -A logdrop-750 -j DROP -A logdrop-751 -m limit --limit 12/minute -j ULOG -A logdrop-751 -j DROP -A logdrop-752 -m limit --limit 12/minute -j ULOG -A logdrop-752 -j DROP -A logdrop-753 -m limit --limit 12/minute -j ULOG -A logdrop-753 -j DROP -A logdrop-754 -m limit --limit 12/minute -j ULOG -A logdrop-754 -j DROP -A logdrop-755 -m limit --limit 12/minute -j ULOG -A logdrop-755 -j DROP -A logdrop-756 -m limit --limit 12/minute -j ULOG -A logdrop-756 -j DROP -A logdrop-757 -m limit --limit 12/minute -j ULOG -A logdrop-757 -j DROP -A logdrop-758 -m limit --limit 12/minute -j ULOG -A logdrop-758 -j DROP -A logdrop-759 -m limit --limit 12/minute -j ULOG -A logdrop-759 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP -A logdrop-760 -m limit --limit 12/minute -j ULOG -A logdrop-760 -j DROP -A logdrop-761 -m limit --limit 12/minute -j ULOG -A logdrop-761 -j DROP -A logdrop-762 -m limit --limit 12/minute -j ULOG -A logdrop-762 -j DROP -A logdrop-763 -m limit --limit 12/minute -j ULOG -A logdrop-763 -j DROP -A logdrop-764 -m limit --limit 12/minute -j ULOG -A logdrop-764 -j DROP -A logdrop-765 -m limit --limit 12/minute -j ULOG -A logdrop-765 -j DROP -A logdrop-766 -m limit --limit 12/minute -j ULOG -A logdrop-766 -j DROP -A logdrop-767 -m limit --limit 12/minute -j ULOG -A logdrop-767 -j DROP -A logdrop-768 -m limit --limit 12/minute -j ULOG -A logdrop-768 -j DROP -A logdrop-769 -m limit --limit 12/minute -j ULOG -A logdrop-769 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP -A logdrop-770 -m limit --limit 12/minute -j ULOG -A logdrop-770 -j DROP -A logdrop-771 -m limit --limit 12/minute -j ULOG -A logdrop-771 -j DROP -A logdrop-772 -m limit --limit 12/minute -j ULOG -A logdrop-772 -j DROP -A logdrop-773 -m limit --limit 12/minute -j ULOG -A logdrop-773 -j DROP -A logdrop-774 -m limit --limit 12/minute -j ULOG -A logdrop-774 -j DROP -A logdrop-775 -m limit --limit 12/minute -j ULOG -A logdrop-775 -j DROP -A logdrop-776 -m limit --limit 12/minute -j ULOG -A logdrop-776 -j DROP -A logdrop-777 -m limit --limit 12/minute -j ULOG -A logdrop-777 -j DROP -A logdrop-778 -m limit --limit 12/minute -j ULOG -A logdrop-778 -j DROP -A logdrop-779 -m limit --limit 12/minute -j ULOG -A logdrop-779 -j DROP -A logdrop-78 -m limit --limit 1/second -j LOG -A logdrop-78 -j DROP -A logdrop-780 -m limit --limit 12/minute -j ULOG -A logdrop-780 -j DROP -A logdrop-781 -m limit --limit 12/minute -j ULOG -A logdrop-781 -j DROP -A logdrop-782 -m limit --limit 12/minute -j ULOG -A logdrop-782 -j DROP -A logdrop-783 -m limit --limit 12/minute -j ULOG -A logdrop-783 -j DROP -A logdrop-784 -m limit --limit 12/minute -j ULOG -A logdrop-784 -j DROP -A logdrop-785 -m limit --limit 12/minute -j ULOG -A logdrop-785 -j DROP -A logdrop-786 -m limit --limit 12/minute -j ULOG -A logdrop-786 -j DROP -A logdrop-787 -m limit --limit 12/minute -j ULOG -A logdrop-787 -j DROP -A logdrop-788 -m limit --limit 12/minute -j ULOG -A logdrop-788 -j DROP -A logdrop-789 -m limit --limit 12/minute -j ULOG -A logdrop-789 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP -A logdrop-790 -m limit --limit 12/minute -j ULOG -A logdrop-790 -j DROP -A logdrop-791 -m limit --limit 12/minute -j ULOG -A logdrop-791 -j DROP -A logdrop-792 -m limit --limit 12/minute -j ULOG -A logdrop-792 -j DROP -A logdrop-793 -m limit --limit 12/minute -j ULOG -A logdrop-793 -j DROP -A logdrop-794 -m limit --limit 12/minute -j ULOG -A logdrop-794 -j DROP -A logdrop-795 -m limit --limit 12/minute -j ULOG -A logdrop-795 -j DROP -A logdrop-796 -m limit --limit 12/minute -j ULOG -A logdrop-796 -j DROP -A logdrop-797 -m limit --limit 12/minute -j ULOG -A logdrop-797 -j DROP -A logdrop-798 -m limit --limit 12/minute -j ULOG -A logdrop-798 -j DROP -A logdrop-799 -m limit --limit 12/minute -j ULOG -A logdrop-799 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP -A logdrop-80 -m limit --limit 1/second -j LOG -A logdrop-80 -j DROP -A logdrop-800 -m limit --limit 12/minute -j ULOG -A logdrop-800 -j DROP -A logdrop-801 -m limit --limit 12/minute -j ULOG -A logdrop-801 -j DROP -A logdrop-802 -m limit --limit 12/minute -j ULOG -A logdrop-802 -j DROP -A logdrop-803 -m limit --limit 12/minute -j ULOG -A logdrop-803 -j DROP -A logdrop-804 -m limit --limit 12/minute -j ULOG -A logdrop-804 -j DROP -A logdrop-805 -m limit --limit 12/minute -j ULOG -A logdrop-805 -j DROP -A logdrop-806 -m limit --limit 12/minute -j ULOG -A logdrop-806 -j DROP -A logdrop-807 -m limit --limit 12/minute -j ULOG -A logdrop-807 -j DROP -A logdrop-808 -m limit --limit 12/minute -j ULOG -A logdrop-808 -j DROP -A logdrop-809 -m limit --limit 12/minute -j ULOG -A logdrop-809 -j DROP -A logdrop-81 -m limit --limit 1/second -j LOG -A logdrop-81 -j DROP -A logdrop-810 -m limit --limit 12/minute -j ULOG -A logdrop-810 -j DROP -A logdrop-811 -m limit --limit 12/minute -j ULOG -A logdrop-811 -j DROP -A logdrop-812 -m limit --limit 12/minute -j ULOG -A logdrop-812 -j DROP -A logdrop-813 -m limit --limit 12/minute -j ULOG -A logdrop-813 -j DROP -A logdrop-814 -m limit --limit 12/minute -j ULOG -A logdrop-814 -j DROP -A logdrop-815 -m limit --limit 12/minute -j ULOG -A logdrop-815 -j DROP -A logdrop-816 -m limit --limit 12/minute -j ULOG -A logdrop-816 -j DROP -A logdrop-817 -m limit --limit 12/minute -j ULOG -A logdrop-817 -j DROP -A logdrop-818 -m limit --limit 12/minute -j ULOG -A logdrop-818 -j DROP -A logdrop-819 -m limit --limit 12/minute -j ULOG -A logdrop-819 -j DROP -A logdrop-82 -m limit --limit 1/second -j LOG -A logdrop-82 -j DROP -A logdrop-820 -m limit --limit 12/minute -j ULOG -A logdrop-820 -j DROP -A logdrop-821 -m limit --limit 12/minute -j ULOG -A logdrop-821 -j DROP -A logdrop-822 -m limit --limit 12/minute -j ULOG -A logdrop-822 -j DROP -A logdrop-823 -m limit --limit 12/minute -j ULOG -A logdrop-823 -j DROP -A logdrop-824 -m limit --limit 12/minute -j ULOG -A logdrop-824 -j DROP -A logdrop-825 -m limit --limit 12/minute -j ULOG -A logdrop-825 -j DROP -A logdrop-826 -m limit --limit 12/minute -j ULOG -A logdrop-826 -j DROP -A logdrop-827 -m limit --limit 12/minute -j ULOG -A logdrop-827 -j DROP -A logdrop-828 -m limit --limit 12/minute -j ULOG -A logdrop-828 -j DROP -A logdrop-829 -m limit --limit 12/minute -j ULOG -A logdrop-829 -j DROP -A logdrop-83 -m limit --limit 1/second -j LOG -A logdrop-83 -j DROP -A logdrop-830 -m limit --limit 1/second -j LOG -A logdrop-830 -j DROP -A logdrop-831 -m limit --limit 1/second -j LOG -A logdrop-831 -j DROP -A logdrop-832 -m limit --limit 1/second -j LOG -A logdrop-832 -j DROP -A logdrop-833 -m limit --limit 1/second -j LOG -A logdrop-833 -j DROP -A logdrop-834 -m limit --limit 1/second -j LOG -A logdrop-834 -j DROP -A logdrop-835 -m limit --limit 1/second -j LOG -A logdrop-835 -j DROP -A logdrop-836 -m limit --limit 1/second -j LOG -A logdrop-836 -j DROP -A logdrop-837 -m limit --limit 1/second -j LOG -A logdrop-837 -j DROP -A logdrop-838 -m limit --limit 1/second -j LOG -A logdrop-838 -j DROP -A logdrop-839 -m limit --limit 1/second -j LOG -A logdrop-839 -j DROP -A logdrop-84 -m limit --limit 1/second -j LOG -A logdrop-84 -j DROP -A logdrop-840 -m limit --limit 1/second -j LOG -A logdrop-840 -j DROP -A logdrop-841 -m limit --limit 1/second -j LOG -A logdrop-841 -j DROP -A logdrop-842 -m limit --limit 1/second -j LOG -A logdrop-842 -j DROP -A logdrop-843 -m limit --limit 1/second -j LOG -A logdrop-843 -j DROP -A logdrop-844 -m limit --limit 1/second -j LOG -A logdrop-844 -j DROP -A logdrop-845 -m limit --limit 1/second -j LOG -A logdrop-845 -j DROP -A logdrop-846 -m limit --limit 1/second -j LOG -A logdrop-846 -j DROP -A logdrop-847 -m limit --limit 1/second -j LOG -A logdrop-847 -j DROP -A logdrop-848 -m limit --limit 1/second -j LOG -A logdrop-848 -j DROP -A logdrop-849 -m limit --limit 1/second -j LOG -A logdrop-849 -j DROP -A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP -A logdrop-850 -m limit --limit 1/second -j LOG -A logdrop-850 -j DROP -A logdrop-851 -m limit --limit 1/second -j LOG -A logdrop-851 -j DROP -A logdrop-852 -m limit --limit 1/second -j LOG -A logdrop-852 -j DROP -A logdrop-853 -m limit --limit 1/second -j LOG -A logdrop-853 -j DROP -A logdrop-854 -m limit --limit 1/second -j LOG -A logdrop-854 -j DROP -A logdrop-855 -m limit --limit 1/second -j LOG -A logdrop-855 -j DROP -A logdrop-856 -m limit --limit 1/second -j LOG -A logdrop-856 -j DROP -A logdrop-857 -m limit --limit 1/second -j LOG -A logdrop-857 -j DROP -A logdrop-858 -m limit --limit 1/second -j LOG -A logdrop-858 -j DROP -A logdrop-859 -m limit --limit 1/second -j LOG -A logdrop-859 -j DROP -A logdrop-86 -m limit --limit 1/second -j LOG -A logdrop-86 -j DROP -A logdrop-860 -m limit --limit 1/second -j LOG -A logdrop-860 -j DROP -A logdrop-861 -m limit --limit 1/second -j LOG -A logdrop-861 -j DROP -A logdrop-862 -m limit --limit 1/second -j LOG -A logdrop-862 -j DROP -A logdrop-863 -m limit --limit 1/second -j LOG -A logdrop-863 -j DROP -A logdrop-864 -m limit --limit 1/second -j LOG -A logdrop-864 -j DROP -A logdrop-865 -m limit --limit 1/second -j LOG -A logdrop-865 -j DROP -A logdrop-866 -m limit --limit 1/second -j LOG -A logdrop-866 -j DROP -A logdrop-867 -m limit --limit 1/second -j LOG -A logdrop-867 -j DROP -A logdrop-868 -m limit --limit 1/second -j LOG -A logdrop-868 -j DROP -A logdrop-869 -m limit --limit 1/second -j LOG -A logdrop-869 -j DROP -A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP -A logdrop-870 -m limit --limit 1/second -j LOG -A logdrop-870 -j DROP -A logdrop-871 -m limit --limit 1/second -j LOG -A logdrop-871 -j DROP -A logdrop-872 -m limit --limit 1/second -j LOG -A logdrop-872 -j DROP -A logdrop-873 -m limit --limit 1/second -j LOG -A logdrop-873 -j DROP -A logdrop-874 -m limit --limit 1/second -j LOG -A logdrop-874 -j DROP -A logdrop-875 -m limit --limit 1/second -j LOG -A logdrop-875 -j DROP -A logdrop-876 -m limit --limit 1/second -j LOG -A logdrop-876 -j DROP -A logdrop-877 -m limit --limit 1/second -j LOG -A logdrop-877 -j DROP -A logdrop-878 -m limit --limit 1/second -j LOG -A logdrop-878 -j DROP -A logdrop-879 -m limit --limit 1/second -j LOG -A logdrop-879 -j DROP -A logdrop-88 -m limit --limit 1/second -j LOG -A logdrop-88 -j DROP -A logdrop-880 -m limit --limit 1/second -j LOG -A logdrop-880 -j DROP -A logdrop-881 -m limit --limit 1/second -j LOG -A logdrop-881 -j DROP -A logdrop-882 -m limit --limit 1/second -j LOG -A logdrop-882 -j DROP -A logdrop-883 -m limit --limit 1/second -j LOG -A logdrop-883 -j DROP -A logdrop-884 -m limit --limit 1/second -j LOG -A logdrop-884 -j DROP -A logdrop-885 -m limit --limit 1/second -j LOG -A logdrop-885 -j DROP -A logdrop-886 -m limit --limit 1/second -j LOG -A logdrop-886 -j DROP -A logdrop-887 -m limit --limit 1/second -j LOG -A logdrop-887 -j DROP -A logdrop-888 -m limit --limit 1/second -j LOG -A logdrop-888 -j DROP -A logdrop-889 -m limit --limit 1/second -j LOG -A logdrop-889 -j DROP -A logdrop-89 -m limit --limit 1/second -j LOG -A logdrop-89 -j DROP -A logdrop-890 -m limit --limit 1/second -j LOG -A logdrop-890 -j DROP -A logdrop-891 -m limit --limit 1/second -j LOG -A logdrop-891 -j DROP -A logdrop-892 -m limit --limit 1/second -j LOG -A logdrop-892 -j DROP -A logdrop-893 -m limit --limit 1/second -j LOG -A logdrop-893 -j DROP -A logdrop-894 -m limit --limit 1/second -j LOG -A logdrop-894 -j DROP -A logdrop-895 -m limit --limit 1/second -j LOG -A logdrop-895 -j DROP -A logdrop-896 -m limit --limit 1/second -j LOG -A logdrop-896 -j DROP -A logdrop-897 -m limit --limit 1/second -j LOG -A logdrop-897 -j DROP -A logdrop-898 -m limit --limit 1/second -j LOG -A logdrop-898 -j DROP -A logdrop-899 -m limit --limit 1/second -j LOG -A logdrop-899 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP -A logdrop-90 -m limit --limit 1/second -j LOG -A logdrop-90 -j DROP -A logdrop-900 -m limit --limit 1/second -j LOG -A logdrop-900 -j DROP -A logdrop-901 -m limit --limit 1/second -j LOG -A logdrop-901 -j DROP -A logdrop-902 -m limit --limit 1/second -j LOG -A logdrop-902 -j DROP -A logdrop-903 -m limit --limit 1/second -j LOG -A logdrop-903 -j DROP -A logdrop-904 -m limit --limit 1/second -j LOG -A logdrop-904 -j DROP -A logdrop-905 -m limit --limit 1/second -j LOG -A logdrop-905 -j DROP -A logdrop-906 -m limit --limit 1/second -j LOG -A logdrop-906 -j DROP -A logdrop-907 -m limit --limit 1/second -j LOG -A logdrop-907 -j DROP -A logdrop-908 -m limit --limit 1/second -j LOG -A logdrop-908 -j DROP -A logdrop-909 -m limit --limit 1/second -j LOG -A logdrop-909 -j DROP -A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-910 -m limit --limit 1/second -j LOG -A logdrop-910 -j DROP -A logdrop-911 -m limit --limit 1/second -j LOG -A logdrop-911 -j DROP -A logdrop-912 -m limit --limit 1/second -j LOG -A logdrop-912 -j DROP -A logdrop-913 -m limit --limit 1/second -j LOG -A logdrop-913 -j DROP -A logdrop-914 -m limit --limit 1/second -j LOG -A logdrop-914 -j DROP -A logdrop-915 -m limit --limit 1/second -j LOG -A logdrop-915 -j DROP -A logdrop-916 -m limit --limit 1/second -j LOG -A logdrop-916 -j DROP -A logdrop-917 -m limit --limit 1/second -j LOG -A logdrop-917 -j DROP -A logdrop-918 -m limit --limit 1/second -j LOG -A logdrop-918 -j DROP -A logdrop-919 -m limit --limit 1/second -j LOG -A logdrop-919 -j DROP -A logdrop-92 -m limit --limit 1/second -j LOG -A logdrop-92 -j DROP -A logdrop-920 -j TEE --gateway 10.0.0.1 -A logdrop-920 -j TEE --gateway 10.0.0.2 -A logdrop-920 -j DROP -A logdrop-921 -j TEE --gateway 10.0.0.1 -A logdrop-921 -j TEE --gateway 10.0.0.2 -A logdrop-921 -j DROP -A logdrop-922 -j TEE --gateway 10.0.0.1 -A logdrop-922 -j TEE --gateway 10.0.0.2 -A logdrop-922 -j DROP -A logdrop-923 -j TEE --gateway 10.0.0.1 -A logdrop-923 -j TEE --gateway 10.0.0.2 -A logdrop-923 -j DROP -A logdrop-924 -j TEE --gateway 10.0.0.1 -A logdrop-924 -j TEE --gateway 10.0.0.2 -A logdrop-924 -j DROP -A logdrop-925 -j TEE --gateway 10.0.0.1 -A logdrop-925 -j TEE --gateway 10.0.0.2 -A logdrop-925 -j DROP -A logdrop-926 -j TEE --gateway 10.0.0.1 -A logdrop-926 -j TEE --gateway 10.0.0.2 -A logdrop-926 -j DROP -A logdrop-927 -j TEE --gateway 10.0.0.1 -A logdrop-927 -j TEE --gateway 10.0.0.2 -A logdrop-927 -j DROP -A logdrop-928 -j TEE --gateway 10.0.0.1 -A logdrop-928 -j TEE --gateway 10.0.0.2 -A logdrop-928 -j DROP -A logdrop-929 -j TEE --gateway 10.0.0.1 -A logdrop-929 -j TEE --gateway 10.0.0.2 -A logdrop-929 -j DROP -A logdrop-93 -m limit --limit 1/second -j LOG -A logdrop-93 -j DROP -A logdrop-930 -j TEE --gateway 10.0.0.1 -A logdrop-930 -j TEE --gateway 10.0.0.2 -A logdrop-930 -j DROP -A logdrop-931 -j TEE --gateway 10.0.0.1 -A logdrop-931 -j TEE --gateway 10.0.0.2 -A logdrop-931 -j DROP -A logdrop-932 -j TEE --gateway 10.0.0.1 -A logdrop-932 -j TEE --gateway 10.0.0.2 -A logdrop-932 -j DROP -A logdrop-933 -j TEE --gateway 10.0.0.1 -A logdrop-933 -j TEE --gateway 10.0.0.2 -A logdrop-933 -j DROP -A logdrop-934 -j TEE --gateway 10.0.0.1 -A logdrop-934 -j TEE --gateway 10.0.0.2 -A logdrop-934 -j DROP -A logdrop-935 -j TEE --gateway 10.0.0.1 -A logdrop-935 -j TEE --gateway 10.0.0.2 -A logdrop-935 -j DROP -A logdrop-936 -j TEE --gateway 10.0.0.1 -A logdrop-936 -j TEE --gateway 10.0.0.2 -A logdrop-936 -j DROP -A logdrop-937 -j TEE --gateway 10.0.0.1 -A logdrop-937 -j TEE --gateway 10.0.0.2 -A logdrop-937 -j DROP -A logdrop-938 -j TEE --gateway 10.0.0.1 -A logdrop-938 -j TEE --gateway 10.0.0.2 -A logdrop-938 -j DROP -A logdrop-939 -j TEE --gateway 10.0.0.1 -A logdrop-939 -j TEE --gateway 10.0.0.2 -A logdrop-939 -j DROP -A logdrop-94 -m limit --limit 1/second -j LOG -A logdrop-94 -j DROP -A logdrop-940 -j TEE --gateway 10.0.0.1 -A logdrop-940 -j TEE --gateway 10.0.0.2 -A logdrop-940 -j DROP -A logdrop-941 -j TEE --gateway 10.0.0.1 -A logdrop-941 -j TEE --gateway 10.0.0.2 -A logdrop-941 -j DROP -A logdrop-942 -j TEE --gateway 10.0.0.1 -A logdrop-942 -j TEE --gateway 10.0.0.2 -A logdrop-942 -j DROP -A logdrop-943 -j TEE --gateway 10.0.0.1 -A logdrop-943 -j TEE --gateway 10.0.0.2 -A logdrop-943 -j DROP -A logdrop-944 -j TEE --gateway 10.0.0.1 -A logdrop-944 -j TEE --gateway 10.0.0.2 -A logdrop-944 -j DROP -A logdrop-945 -j TEE --gateway 10.0.0.1 -A logdrop-945 -j TEE --gateway 10.0.0.2 -A logdrop-945 -j DROP -A logdrop-946 -j TEE --gateway 10.0.0.1 -A logdrop-946 -j TEE --gateway 10.0.0.2 -A logdrop-946 -j DROP -A logdrop-947 -j TEE --gateway 10.0.0.1 -A logdrop-947 -j TEE --gateway 10.0.0.2 -A logdrop-947 -j DROP -A logdrop-948 -j TEE --gateway 10.0.0.1 -A logdrop-948 -j TEE --gateway 10.0.0.2 -A logdrop-948 -j DROP -A logdrop-949 -j TEE --gateway 10.0.0.1 -A logdrop-949 -j TEE --gateway 10.0.0.2 -A logdrop-949 -j DROP -A logdrop-95 -m limit --limit 1/second -j LOG -A logdrop-95 -j DROP -A logdrop-950 -j TEE --gateway 10.0.0.1 -A logdrop-950 -j TEE --gateway 10.0.0.2 -A logdrop-950 -j DROP -A logdrop-951 -j TEE --gateway 10.0.0.1 -A logdrop-951 -j TEE --gateway 10.0.0.2 -A logdrop-951 -j DROP -A logdrop-952 -j TEE --gateway 10.0.0.1 -A logdrop-952 -j TEE --gateway 10.0.0.2 -A logdrop-952 -j DROP -A logdrop-953 -j TEE --gateway 10.0.0.1 -A logdrop-953 -j TEE --gateway 10.0.0.2 -A logdrop-953 -j DROP -A logdrop-954 -j TEE --gateway 10.0.0.1 -A logdrop-954 -j TEE --gateway 10.0.0.2 -A logdrop-954 -j DROP -A logdrop-955 -j TEE --gateway 10.0.0.1 -A logdrop-955 -j TEE --gateway 10.0.0.2 -A logdrop-955 -j DROP -A logdrop-956 -j TEE --gateway 10.0.0.1 -A logdrop-956 -j TEE --gateway 10.0.0.2 -A logdrop-956 -j DROP -A logdrop-957 -j TEE --gateway 10.0.0.1 -A logdrop-957 -j TEE --gateway 10.0.0.2 -A logdrop-957 -j DROP -A logdrop-958 -j TEE --gateway 10.0.0.1 -A logdrop-958 -j TEE --gateway 10.0.0.2 -A logdrop-958 -j DROP -A logdrop-959 -j TEE --gateway 10.0.0.1 -A logdrop-959 -j TEE --gateway 10.0.0.2 -A logdrop-959 -j DROP -A logdrop-96 -m limit --limit 1/second -j LOG -A logdrop-96 -j DROP -A logdrop-960 -j TEE --gateway 10.0.0.1 -A logdrop-960 -j TEE --gateway 10.0.0.2 -A logdrop-960 -j DROP -A logdrop-961 -j TEE --gateway 10.0.0.1 -A logdrop-961 -j TEE --gateway 10.0.0.2 -A logdrop-961 -j DROP -A logdrop-962 -j TEE --gateway 10.0.0.1 -A logdrop-962 -j TEE --gateway 10.0.0.2 -A logdrop-962 -j DROP -A logdrop-963 -j TEE --gateway 10.0.0.1 -A logdrop-963 -j TEE --gateway 10.0.0.2 -A logdrop-963 -j DROP -A logdrop-964 -j TEE --gateway 10.0.0.1 -A logdrop-964 -j TEE --gateway 10.0.0.2 -A logdrop-964 -j DROP -A logdrop-965 -j TEE --gateway 10.0.0.1 -A logdrop-965 -j TEE --gateway 10.0.0.2 -A logdrop-965 -j DROP -A logdrop-966 -j TEE --gateway 10.0.0.1 -A logdrop-966 -j TEE --gateway 10.0.0.2 -A logdrop-966 -j DROP -A logdrop-967 -j TEE --gateway 10.0.0.1 -A logdrop-967 -j TEE --gateway 10.0.0.2 -A logdrop-967 -j DROP -A logdrop-968 -j TEE --gateway 10.0.0.1 -A logdrop-968 -j TEE --gateway 10.0.0.2 -A logdrop-968 -j DROP -A logdrop-969 -j TEE --gateway 10.0.0.1 -A logdrop-969 -j TEE --gateway 10.0.0.2 -A logdrop-969 -j DROP -A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP -A logdrop-970 -j TEE --gateway 10.0.0.1 -A logdrop-970 -j TEE --gateway 10.0.0.2 -A logdrop-970 -j DROP -A logdrop-971 -j TEE --gateway 10.0.0.1 -A logdrop-971 -j TEE --gateway 10.0.0.2 -A logdrop-971 -j DROP -A logdrop-972 -j TEE --gateway 10.0.0.1 -A logdrop-972 -j TEE --gateway 10.0.0.2 -A logdrop-972 -j DROP -A logdrop-973 -j TEE --gateway 10.0.0.1 -A logdrop-973 -j TEE --gateway 10.0.0.2 -A logdrop-973 -j DROP -A logdrop-974 -j TEE --gateway 10.0.0.1 -A logdrop-974 -j TEE --gateway 10.0.0.2 -A logdrop-974 -j DROP -A logdrop-975 -j TEE --gateway 10.0.0.1 -A logdrop-975 -j TEE --gateway 10.0.0.2 -A logdrop-975 -j DROP -A logdrop-976 -j TEE --gateway 10.0.0.1 -A logdrop-976 -j TEE --gateway 10.0.0.2 -A logdrop-976 -j DROP -A logdrop-977 -j TEE --gateway 10.0.0.1 -A logdrop-977 -j TEE --gateway 10.0.0.2 -A logdrop-977 -j DROP -A logdrop-978 -j TEE --gateway 10.0.0.1 -A logdrop-978 -j TEE --gateway 10.0.0.2 -A logdrop-978 -j DROP -A logdrop-979 -j TEE --gateway 10.0.0.1 -A logdrop-979 -j TEE --gateway 10.0.0.2 -A logdrop-979 -j DROP -A logdrop-98 -m limit --limit 1/second -j LOG -A logdrop-98 -j DROP -A logdrop-980 -j TEE --gateway 10.0.0.1 -A logdrop-980 -j TEE --gateway 10.0.0.2 -A logdrop-980 -j DROP -A logdrop-981 -j TEE --gateway 10.0.0.1 -A logdrop-981 -j TEE --gateway 10.0.0.2 -A logdrop-981 -j DROP -A logdrop-982 -j TEE --gateway 10.0.0.1 -A logdrop-982 -j TEE --gateway 10.0.0.2 -A logdrop-982 -j DROP -A logdrop-983 -j TEE --gateway 10.0.0.1 -A logdrop-983 -j TEE --gateway 10.0.0.2 -A logdrop-983 -j DROP -A logdrop-984 -j TEE --gateway 10.0.0.1 -A logdrop-984 -j TEE --gateway 10.0.0.2 -A logdrop-984 -j DROP -A logdrop-985 -j TEE --gateway 10.0.0.1 -A logdrop-985 -j TEE --gateway 10.0.0.2 -A logdrop-985 -j DROP -A logdrop-986 -j TEE --gateway 10.0.0.1 -A logdrop-986 -j TEE --gateway 10.0.0.2 -A logdrop-986 -j DROP -A logdrop-987 -j TEE --gateway 10.0.0.1 -A logdrop-987 -j TEE --gateway 10.0.0.2 -A logdrop-987 -j DROP -A logdrop-988 -j TEE --gateway 10.0.0.1 -A logdrop-988 -j TEE --gateway 10.0.0.2 -A logdrop-988 -j DROP -A logdrop-989 -j TEE --gateway 10.0.0.1 -A logdrop-989 -j TEE --gateway 10.0.0.2 -A logdrop-989 -j DROP -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logdrop-990 -j TEE --gateway 10.0.0.1 -A logdrop-990 -j TEE --gateway 10.0.0.2 -A logdrop-990 -j DROP -A logdrop-991 -j TEE --gateway 10.0.0.1 -A logdrop-991 -j TEE --gateway 10.0.0.2 -A logdrop-991 -j DROP -A logdrop-992 -j TEE --gateway 10.0.0.1 -A logdrop-992 -j TEE --gateway 10.0.0.2 -A logdrop-992 -j DROP -A logdrop-993 -j TEE --gateway 10.0.0.1 -A logdrop-993 -j TEE --gateway 10.0.0.2 -A logdrop-993 -j DROP -A logdrop-994 -j TEE --gateway 10.0.0.1 -A logdrop-994 -j TEE --gateway 10.0.0.2 -A logdrop-994 -j DROP -A logdrop-995 -j TEE --gateway 10.0.0.1 -A logdrop-995 -j TEE --gateway 10.0.0.2 -A logdrop-995 -j DROP -A logdrop-996 -j TEE --gateway 10.0.0.1 -A logdrop-996 -j TEE --gateway 10.0.0.2 -A logdrop-996 -j DROP -A logdrop-997 -j TEE --gateway 10.0.0.1 -A logdrop-997 -j TEE --gateway 10.0.0.2 -A logdrop-997 -j DROP -A logdrop-998 -j TEE --gateway 10.0.0.1 -A logdrop-998 -j TEE --gateway 10.0.0.2 -A logdrop-998 -j DROP -A logdrop-999 -j TEE --gateway 10.0.0.1 -A logdrop-999 -j TEE --gateway 10.0.0.2 -A logdrop-999 -j DROP -A logdrop-ntp-0 -m limit --limit 1/second -j LOG -A logdrop-ntp-0 -j DROP -A logdrop-ntp-1 -m limit --limit 1/second -j LOG -A logdrop-ntp-1 -j DROP -A logdrop-ntp-10 -m limit --limit 1/second -j LOG -A logdrop-ntp-10 -j DROP -A logdrop-ntp-100 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-100 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-100 -j DROP -A logdrop-ntp-101 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-101 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-101 -j DROP -A logdrop-ntp-102 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-102 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-102 -j DROP -A logdrop-ntp-103 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-103 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-103 -j DROP -A logdrop-ntp-104 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-104 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-104 -j DROP -A logdrop-ntp-105 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-105 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-105 -j DROP -A logdrop-ntp-106 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-106 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-106 -j DROP -A logdrop-ntp-107 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-107 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-107 -j DROP -A logdrop-ntp-108 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-108 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-108 -j DROP -A logdrop-ntp-109 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-109 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-109 -j DROP -A logdrop-ntp-11 -m limit --limit 1/second -j LOG -A logdrop-ntp-11 -j DROP -A logdrop-ntp-110 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-110 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-110 -j DROP -A logdrop-ntp-111 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-111 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-111 -j DROP -A logdrop-ntp-112 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-112 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-112 -j DROP -A logdrop-ntp-113 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-113 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-113 -j DROP -A logdrop-ntp-114 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-114 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-114 -j DROP -A logdrop-ntp-115 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-115 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-115 -j DROP -A logdrop-ntp-116 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-116 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-116 -j DROP -A logdrop-ntp-117 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-117 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-117 -j DROP -A logdrop-ntp-118 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-118 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-118 -j DROP -A logdrop-ntp-119 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-119 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-119 -j DROP -A logdrop-ntp-12 -m limit --limit 1/second -j LOG -A logdrop-ntp-12 -j DROP -A logdrop-ntp-120 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-120 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-120 -j DROP -A logdrop-ntp-121 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-121 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-121 -j DROP -A logdrop-ntp-122 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-122 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-122 -j DROP -A logdrop-ntp-123 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-123 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-123 -j DROP -A logdrop-ntp-124 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-124 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-124 -j DROP -A logdrop-ntp-125 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-125 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-125 -j DROP -A logdrop-ntp-126 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-126 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-126 -j DROP -A logdrop-ntp-127 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-127 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-127 -j DROP -A logdrop-ntp-128 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-128 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-128 -j DROP -A logdrop-ntp-129 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-129 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-129 -j DROP -A logdrop-ntp-13 -m limit --limit 1/second -j LOG -A logdrop-ntp-13 -j DROP -A logdrop-ntp-130 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-130 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-130 -j DROP -A logdrop-ntp-131 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-131 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-131 -j DROP -A logdrop-ntp-132 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-132 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-132 -j DROP -A logdrop-ntp-133 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-133 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-133 -j DROP -A logdrop-ntp-134 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-134 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-134 -j DROP -A logdrop-ntp-135 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-135 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-135 -j DROP -A logdrop-ntp-136 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-136 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-136 -j DROP -A logdrop-ntp-137 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-137 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-137 -j DROP -A logdrop-ntp-138 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-138 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-138 -j DROP -A logdrop-ntp-139 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-139 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-139 -j DROP -A logdrop-ntp-14 -m limit --limit 1/second -j LOG -A logdrop-ntp-14 -j DROP -A logdrop-ntp-140 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-140 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-140 -j DROP -A logdrop-ntp-141 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-141 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-141 -j DROP -A logdrop-ntp-142 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-142 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-142 -j DROP -A logdrop-ntp-143 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-143 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-143 -j DROP -A logdrop-ntp-144 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-144 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-144 -j DROP -A logdrop-ntp-145 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-145 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-145 -j DROP -A logdrop-ntp-146 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-146 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-146 -j DROP -A logdrop-ntp-147 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-147 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-147 -j DROP -A logdrop-ntp-148 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-148 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-148 -j DROP -A logdrop-ntp-149 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-149 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-149 -j DROP -A logdrop-ntp-15 -m limit --limit 1/second -j LOG -A logdrop-ntp-15 -j DROP -A logdrop-ntp-150 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-150 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-150 -j DROP -A logdrop-ntp-151 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-151 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-151 -j DROP -A logdrop-ntp-152 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-152 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-152 -j DROP -A logdrop-ntp-153 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-153 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-153 -j DROP -A logdrop-ntp-154 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-154 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-154 -j DROP -A logdrop-ntp-155 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-155 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-155 -j DROP -A logdrop-ntp-156 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-156 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-156 -j DROP -A logdrop-ntp-157 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-157 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-157 -j DROP -A logdrop-ntp-158 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-158 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-158 -j DROP -A logdrop-ntp-159 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-159 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-159 -j DROP -A logdrop-ntp-16 -m limit --limit 1/second -j LOG -A logdrop-ntp-16 -j DROP -A logdrop-ntp-160 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-160 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-160 -j DROP -A logdrop-ntp-161 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-161 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-161 -j DROP -A logdrop-ntp-162 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-162 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-162 -j DROP -A logdrop-ntp-163 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-163 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-163 -j DROP -A logdrop-ntp-164 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-164 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-164 -j DROP -A logdrop-ntp-165 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-165 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-165 -j DROP -A logdrop-ntp-166 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-166 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-166 -j DROP -A logdrop-ntp-167 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-167 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-167 -j DROP -A logdrop-ntp-168 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-168 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-168 -j DROP -A logdrop-ntp-169 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-169 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-169 -j DROP -A logdrop-ntp-17 -m limit --limit 1/second -j LOG -A logdrop-ntp-17 -j DROP -A logdrop-ntp-170 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-170 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-170 -j DROP -A logdrop-ntp-171 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-171 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-171 -j DROP -A logdrop-ntp-172 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-172 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-172 -j DROP -A logdrop-ntp-173 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-173 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-173 -j DROP -A logdrop-ntp-174 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-174 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-174 -j DROP -A logdrop-ntp-175 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-175 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-175 -j DROP -A logdrop-ntp-176 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-176 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-176 -j DROP -A logdrop-ntp-177 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-177 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-177 -j DROP -A logdrop-ntp-178 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-178 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-178 -j DROP -A logdrop-ntp-179 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-179 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-179 -j DROP -A logdrop-ntp-18 -m limit --limit 1/second -j LOG -A logdrop-ntp-18 -j DROP -A logdrop-ntp-180 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-180 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-180 -j DROP -A logdrop-ntp-181 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-181 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-181 -j DROP -A logdrop-ntp-182 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-182 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-182 -j DROP -A logdrop-ntp-183 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-183 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-183 -j DROP -A logdrop-ntp-184 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-184 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-184 -j DROP -A logdrop-ntp-185 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-185 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-185 -j DROP -A logdrop-ntp-186 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-186 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-186 -j DROP -A logdrop-ntp-187 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-187 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-187 -j DROP -A logdrop-ntp-188 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-188 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-188 -j DROP -A logdrop-ntp-189 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-189 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-189 -j DROP -A logdrop-ntp-19 -m limit --limit 1/second -j LOG -A logdrop-ntp-19 -j DROP -A logdrop-ntp-190 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-190 -j DROP -A logdrop-ntp-191 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-191 -j DROP -A logdrop-ntp-192 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-192 -j DROP -A logdrop-ntp-193 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-193 -j DROP -A logdrop-ntp-194 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-194 -j DROP -A logdrop-ntp-195 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-195 -j DROP -A logdrop-ntp-196 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-196 -j DROP -A logdrop-ntp-197 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-197 -j DROP -A logdrop-ntp-198 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-198 -j DROP -A logdrop-ntp-199 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-199 -j DROP -A logdrop-ntp-2 -m limit --limit 1/second -j LOG -A logdrop-ntp-2 -j DROP -A logdrop-ntp-20 -m limit --limit 1/second -j LOG -A logdrop-ntp-20 -j DROP -A logdrop-ntp-200 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-200 -j DROP -A logdrop-ntp-201 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-201 -j DROP -A logdrop-ntp-202 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-202 -j DROP -A logdrop-ntp-203 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-203 -j DROP -A logdrop-ntp-204 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-204 -j DROP -A logdrop-ntp-205 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-205 -j DROP -A logdrop-ntp-206 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-206 -j DROP -A logdrop-ntp-207 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-207 -j DROP -A logdrop-ntp-208 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-208 -j DROP -A logdrop-ntp-209 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-209 -j DROP -A logdrop-ntp-21 -m limit --limit 1/second -j LOG -A logdrop-ntp-21 -j DROP -A logdrop-ntp-210 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-210 -j DROP -A logdrop-ntp-211 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-211 -j DROP -A logdrop-ntp-212 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-212 -j DROP -A logdrop-ntp-213 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-213 -j DROP -A logdrop-ntp-214 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-214 -j DROP -A logdrop-ntp-215 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-215 -j DROP -A logdrop-ntp-216 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-216 -j DROP -A logdrop-ntp-217 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-217 -j DROP -A logdrop-ntp-218 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-218 -j DROP -A logdrop-ntp-219 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-219 -j DROP -A logdrop-ntp-22 -m limit --limit 1/second -j LOG -A logdrop-ntp-22 -j DROP -A logdrop-ntp-220 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-220 -j DROP -A logdrop-ntp-221 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-221 -j DROP -A logdrop-ntp-222 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-222 -j DROP -A logdrop-ntp-223 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-223 -j DROP -A logdrop-ntp-224 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-224 -j DROP -A logdrop-ntp-225 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-225 -j DROP -A logdrop-ntp-226 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-226 -j DROP -A logdrop-ntp-227 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-227 -j DROP -A logdrop-ntp-228 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-228 -j DROP -A logdrop-ntp-229 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-229 -j DROP -A logdrop-ntp-23 -m limit --limit 1/second -j LOG -A logdrop-ntp-23 -j DROP -A logdrop-ntp-230 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-230 -j DROP -A logdrop-ntp-231 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-231 -j DROP -A logdrop-ntp-232 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-232 -j DROP -A logdrop-ntp-233 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-233 -j DROP -A logdrop-ntp-234 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-234 -j DROP -A logdrop-ntp-235 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-235 -j DROP -A logdrop-ntp-236 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-236 -j DROP -A logdrop-ntp-237 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-237 -j DROP -A logdrop-ntp-238 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-238 -j DROP -A logdrop-ntp-239 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-239 -j DROP -A logdrop-ntp-24 -m limit --limit 1/second -j LOG -A logdrop-ntp-24 -j DROP -A logdrop-ntp-240 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-240 -j DROP -A logdrop-ntp-241 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-241 -j DROP -A logdrop-ntp-242 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-242 -j DROP -A logdrop-ntp-243 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-243 -j DROP -A logdrop-ntp-244 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-244 -j DROP -A logdrop-ntp-245 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-245 -j DROP -A logdrop-ntp-246 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-246 -j DROP -A logdrop-ntp-247 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-247 -j DROP -A logdrop-ntp-248 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-248 -j DROP -A logdrop-ntp-249 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-249 -j DROP -A logdrop-ntp-25 -m limit --limit 1/second -j LOG -A logdrop-ntp-25 -j DROP -A logdrop-ntp-250 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-250 -j DROP -A logdrop-ntp-251 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-251 -j DROP -A logdrop-ntp-252 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-252 -j DROP -A logdrop-ntp-253 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-253 -j DROP -A logdrop-ntp-254 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-254 -j DROP -A logdrop-ntp-255 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-255 -j DROP -A logdrop-ntp-256 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-256 -j DROP -A logdrop-ntp-257 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-257 -j DROP -A logdrop-ntp-258 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-258 -j DROP -A logdrop-ntp-259 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-259 -j DROP -A logdrop-ntp-26 -m limit --limit 1/second -j LOG -A logdrop-ntp-26 -j DROP -A logdrop-ntp-260 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-260 -j DROP -A logdrop-ntp-261 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-261 -j DROP -A logdrop-ntp-262 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-262 -j DROP -A logdrop-ntp-263 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-263 -j DROP -A logdrop-ntp-264 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-264 -j DROP -A logdrop-ntp-265 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-265 -j DROP -A logdrop-ntp-266 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-266 -j DROP -A logdrop-ntp-267 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-267 -j DROP -A logdrop-ntp-268 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-268 -j DROP -A logdrop-ntp-269 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-269 -j DROP -A logdrop-ntp-27 -m limit --limit 1/second -j LOG -A logdrop-ntp-27 -j DROP -A logdrop-ntp-270 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-270 -j DROP -A logdrop-ntp-271 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-271 -j DROP -A logdrop-ntp-272 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-272 -j DROP -A logdrop-ntp-273 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-273 -j DROP -A logdrop-ntp-274 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-274 -j DROP -A logdrop-ntp-275 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-275 -j DROP -A logdrop-ntp-276 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-276 -j DROP -A logdrop-ntp-277 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-277 -j DROP -A logdrop-ntp-278 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-278 -j DROP -A logdrop-ntp-279 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-279 -j DROP -A logdrop-ntp-28 -m limit --limit 1/second -j LOG -A logdrop-ntp-28 -j DROP -A logdrop-ntp-280 -m limit --limit 1/second -j LOG -A logdrop-ntp-280 -j DROP -A logdrop-ntp-281 -m limit --limit 1/second -j LOG -A logdrop-ntp-281 -j DROP -A logdrop-ntp-282 -m limit --limit 1/second -j LOG -A logdrop-ntp-282 -j DROP -A logdrop-ntp-283 -m limit --limit 1/second -j LOG -A logdrop-ntp-283 -j DROP -A logdrop-ntp-284 -m limit --limit 1/second -j LOG -A logdrop-ntp-284 -j DROP -A logdrop-ntp-285 -m limit --limit 1/second -j LOG -A logdrop-ntp-285 -j DROP -A logdrop-ntp-286 -m limit --limit 1/second -j LOG -A logdrop-ntp-286 -j DROP -A logdrop-ntp-287 -m limit --limit 1/second -j LOG -A logdrop-ntp-287 -j DROP -A logdrop-ntp-288 -m limit --limit 1/second -j LOG -A logdrop-ntp-288 -j DROP -A logdrop-ntp-289 -m limit --limit 1/second -j LOG -A logdrop-ntp-289 -j DROP -A logdrop-ntp-29 -m limit --limit 1/second -j LOG -A logdrop-ntp-29 -j DROP -A logdrop-ntp-290 -m limit --limit 1/second -j LOG -A logdrop-ntp-290 -j DROP -A logdrop-ntp-291 -m limit --limit 1/second -j LOG -A logdrop-ntp-291 -j DROP -A logdrop-ntp-292 -m limit --limit 1/second -j LOG -A logdrop-ntp-292 -j DROP -A logdrop-ntp-293 -m limit --limit 1/second -j LOG -A logdrop-ntp-293 -j DROP -A logdrop-ntp-294 -m limit --limit 1/second -j LOG -A logdrop-ntp-294 -j DROP -A logdrop-ntp-295 -m limit --limit 1/second -j LOG -A logdrop-ntp-295 -j DROP -A logdrop-ntp-296 -m limit --limit 1/second -j LOG -A logdrop-ntp-296 -j DROP -A logdrop-ntp-297 -m limit --limit 1/second -j LOG -A logdrop-ntp-297 -j DROP -A logdrop-ntp-298 -m limit --limit 1/second -j LOG -A logdrop-ntp-298 -j DROP -A logdrop-ntp-299 -m limit --limit 1/second -j LOG -A logdrop-ntp-299 -j DROP -A logdrop-ntp-3 -m limit --limit 1/second -j LOG -A logdrop-ntp-3 -j DROP -A logdrop-ntp-30 -m limit --limit 1/second -j LOG -A logdrop-ntp-30 -j DROP -A logdrop-ntp-300 -m limit --limit 1/second -j LOG -A logdrop-ntp-300 -j DROP -A logdrop-ntp-301 -m limit --limit 1/second -j LOG -A logdrop-ntp-301 -j DROP -A logdrop-ntp-302 -m limit --limit 1/second -j LOG -A logdrop-ntp-302 -j DROP -A logdrop-ntp-303 -m limit --limit 1/second -j LOG -A logdrop-ntp-303 -j DROP -A logdrop-ntp-304 -m limit --limit 1/second -j LOG -A logdrop-ntp-304 -j DROP -A logdrop-ntp-305 -m limit --limit 1/second -j LOG -A logdrop-ntp-305 -j DROP -A logdrop-ntp-306 -m limit --limit 1/second -j LOG -A logdrop-ntp-306 -j DROP -A logdrop-ntp-307 -m limit --limit 1/second -j LOG -A logdrop-ntp-307 -j DROP -A logdrop-ntp-308 -m limit --limit 1/second -j LOG -A logdrop-ntp-308 -j DROP -A logdrop-ntp-309 -m limit --limit 1/second -j LOG -A logdrop-ntp-309 -j DROP -A logdrop-ntp-31 -m limit --limit 1/second -j LOG -A logdrop-ntp-31 -j DROP -A logdrop-ntp-310 -m limit --limit 1/second -j LOG -A logdrop-ntp-310 -j DROP -A logdrop-ntp-311 -m limit --limit 1/second -j LOG -A logdrop-ntp-311 -j DROP -A logdrop-ntp-312 -m limit --limit 1/second -j LOG -A logdrop-ntp-312 -j DROP -A logdrop-ntp-313 -m limit --limit 1/second -j LOG -A logdrop-ntp-313 -j DROP -A logdrop-ntp-314 -m limit --limit 1/second -j LOG -A logdrop-ntp-314 -j DROP -A logdrop-ntp-315 -m limit --limit 1/second -j LOG -A logdrop-ntp-315 -j DROP -A logdrop-ntp-316 -m limit --limit 1/second -j LOG -A logdrop-ntp-316 -j DROP -A logdrop-ntp-317 -m limit --limit 1/second -j LOG -A logdrop-ntp-317 -j DROP -A logdrop-ntp-318 -m limit --limit 1/second -j LOG -A logdrop-ntp-318 -j DROP -A logdrop-ntp-319 -m limit --limit 1/second -j LOG -A logdrop-ntp-319 -j DROP -A logdrop-ntp-32 -m limit --limit 1/second -j LOG -A logdrop-ntp-32 -j DROP -A logdrop-ntp-320 -m limit --limit 1/second -j LOG -A logdrop-ntp-320 -j DROP -A logdrop-ntp-321 -m limit --limit 1/second -j LOG -A logdrop-ntp-321 -j DROP -A logdrop-ntp-322 -m limit --limit 1/second -j LOG -A logdrop-ntp-322 -j DROP -A logdrop-ntp-323 -m limit --limit 1/second -j LOG -A logdrop-ntp-323 -j DROP -A logdrop-ntp-324 -m limit --limit 1/second -j LOG -A logdrop-ntp-324 -j DROP -A logdrop-ntp-325 -m limit --limit 1/second -j LOG -A logdrop-ntp-325 -j DROP -A logdrop-ntp-326 -m limit --limit 1/second -j LOG -A logdrop-ntp-326 -j DROP -A logdrop-ntp-327 -m limit --limit 1/second -j LOG -A logdrop-ntp-327 -j DROP -A logdrop-ntp-328 -m limit --limit 1/second -j LOG -A logdrop-ntp-328 -j DROP -A logdrop-ntp-329 -m limit --limit 1/second -j LOG -A logdrop-ntp-329 -j DROP -A logdrop-ntp-33 -m limit --limit 1/second -j LOG -A logdrop-ntp-33 -j DROP -A logdrop-ntp-330 -m limit --limit 1/second -j LOG -A logdrop-ntp-330 -j DROP -A logdrop-ntp-331 -m limit --limit 1/second -j LOG -A logdrop-ntp-331 -j DROP -A logdrop-ntp-332 -m limit --limit 1/second -j LOG -A logdrop-ntp-332 -j DROP -A logdrop-ntp-333 -m limit --limit 1/second -j LOG -A logdrop-ntp-333 -j DROP -A logdrop-ntp-334 -m limit --limit 1/second -j LOG -A logdrop-ntp-334 -j DROP -A logdrop-ntp-335 -m limit --limit 1/second -j LOG -A logdrop-ntp-335 -j DROP -A logdrop-ntp-336 -m limit --limit 1/second -j LOG -A logdrop-ntp-336 -j DROP -A logdrop-ntp-337 -m limit --limit 1/second -j LOG -A logdrop-ntp-337 -j DROP -A logdrop-ntp-338 -m limit --limit 1/second -j LOG -A logdrop-ntp-338 -j DROP -A logdrop-ntp-339 -m limit --limit 1/second -j LOG -A logdrop-ntp-339 -j DROP -A logdrop-ntp-34 -m limit --limit 1/second -j LOG -A logdrop-ntp-34 -j DROP -A logdrop-ntp-340 -m limit --limit 1/second -j LOG -A logdrop-ntp-340 -j DROP -A logdrop-ntp-341 -m limit --limit 1/second -j LOG -A logdrop-ntp-341 -j DROP -A logdrop-ntp-342 -m limit --limit 1/second -j LOG -A logdrop-ntp-342 -j DROP -A logdrop-ntp-343 -m limit --limit 1/second -j LOG -A logdrop-ntp-343 -j DROP -A logdrop-ntp-344 -m limit --limit 1/second -j LOG -A logdrop-ntp-344 -j DROP -A logdrop-ntp-345 -m limit --limit 1/second -j LOG -A logdrop-ntp-345 -j DROP -A logdrop-ntp-346 -m limit --limit 1/second -j LOG -A logdrop-ntp-346 -j DROP -A logdrop-ntp-347 -m limit --limit 1/second -j LOG -A logdrop-ntp-347 -j DROP -A logdrop-ntp-348 -m limit --limit 1/second -j LOG -A logdrop-ntp-348 -j DROP -A logdrop-ntp-349 -m limit --limit 1/second -j LOG -A logdrop-ntp-349 -j DROP -A logdrop-ntp-35 -m limit --limit 1/second -j LOG -A logdrop-ntp-35 -j DROP -A logdrop-ntp-350 -m limit --limit 1/second -j LOG -A logdrop-ntp-350 -j DROP -A logdrop-ntp-351 -m limit --limit 1/second -j LOG -A logdrop-ntp-351 -j DROP -A logdrop-ntp-352 -m limit --limit 1/second -j LOG -A logdrop-ntp-352 -j DROP -A logdrop-ntp-353 -m limit --limit 1/second -j LOG -A logdrop-ntp-353 -j DROP -A logdrop-ntp-354 -m limit --limit 1/second -j LOG -A logdrop-ntp-354 -j DROP -A logdrop-ntp-355 -m limit --limit 1/second -j LOG -A logdrop-ntp-355 -j DROP -A logdrop-ntp-356 -m limit --limit 1/second -j LOG -A logdrop-ntp-356 -j DROP -A logdrop-ntp-357 -m limit --limit 1/second -j LOG -A logdrop-ntp-357 -j DROP -A logdrop-ntp-358 -m limit --limit 1/second -j LOG -A logdrop-ntp-358 -j DROP -A logdrop-ntp-359 -m limit --limit 1/second -j LOG -A logdrop-ntp-359 -j DROP -A logdrop-ntp-36 -m limit --limit 1/second -j LOG -A logdrop-ntp-36 -j DROP -A logdrop-ntp-360 -m limit --limit 1/second -j LOG -A logdrop-ntp-360 -j DROP -A logdrop-ntp-361 -m limit --limit 1/second -j LOG -A logdrop-ntp-361 -j DROP -A logdrop-ntp-362 -m limit --limit 1/second -j LOG -A logdrop-ntp-362 -j DROP -A logdrop-ntp-363 -m limit --limit 1/second -j LOG -A logdrop-ntp-363 -j DROP -A logdrop-ntp-364 -m limit --limit 1/second -j LOG -A logdrop-ntp-364 -j DROP -A logdrop-ntp-365 -m limit --limit 1/second -j LOG -A logdrop-ntp-365 -j DROP -A logdrop-ntp-366 -m limit --limit 1/second -j LOG -A logdrop-ntp-366 -j DROP -A logdrop-ntp-367 -m limit --limit 1/second -j LOG -A logdrop-ntp-367 -j DROP -A logdrop-ntp-368 -m limit --limit 1/second -j LOG -A logdrop-ntp-368 -j DROP -A logdrop-ntp-369 -m limit --limit 1/second -j LOG -A logdrop-ntp-369 -j DROP -A logdrop-ntp-37 -m limit --limit 1/second -j LOG -A logdrop-ntp-37 -j DROP -A logdrop-ntp-370 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-370 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-370 -j DROP -A logdrop-ntp-371 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-371 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-371 -j DROP -A logdrop-ntp-372 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-372 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-372 -j DROP -A logdrop-ntp-373 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-373 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-373 -j DROP -A logdrop-ntp-374 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-374 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-374 -j DROP -A logdrop-ntp-375 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-375 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-375 -j DROP -A logdrop-ntp-376 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-376 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-376 -j DROP -A logdrop-ntp-377 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-377 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-377 -j DROP -A logdrop-ntp-378 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-378 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-378 -j DROP -A logdrop-ntp-379 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-379 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-379 -j DROP -A logdrop-ntp-38 -m limit --limit 1/second -j LOG -A logdrop-ntp-38 -j DROP -A logdrop-ntp-380 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-380 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-380 -j DROP -A logdrop-ntp-381 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-381 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-381 -j DROP -A logdrop-ntp-382 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-382 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-382 -j DROP -A logdrop-ntp-383 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-383 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-383 -j DROP -A logdrop-ntp-384 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-384 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-384 -j DROP -A logdrop-ntp-385 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-385 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-385 -j DROP -A logdrop-ntp-386 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-386 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-386 -j DROP -A logdrop-ntp-387 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-387 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-387 -j DROP -A logdrop-ntp-388 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-388 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-388 -j DROP -A logdrop-ntp-389 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-389 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-389 -j DROP -A logdrop-ntp-39 -m limit --limit 1/second -j LOG -A logdrop-ntp-39 -j DROP -A logdrop-ntp-390 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-390 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-390 -j DROP -A logdrop-ntp-391 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-391 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-391 -j DROP -A logdrop-ntp-392 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-392 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-392 -j DROP -A logdrop-ntp-393 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-393 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-393 -j DROP -A logdrop-ntp-394 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-394 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-394 -j DROP -A logdrop-ntp-395 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-395 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-395 -j DROP -A logdrop-ntp-396 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-396 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-396 -j DROP -A logdrop-ntp-397 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-397 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-397 -j DROP -A logdrop-ntp-398 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-398 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-398 -j DROP -A logdrop-ntp-399 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-399 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-399 -j DROP -A logdrop-ntp-4 -m limit --limit 1/second -j LOG -A logdrop-ntp-4 -j DROP -A logdrop-ntp-40 -m limit --limit 1/second -j LOG -A logdrop-ntp-40 -j DROP -A logdrop-ntp-400 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-400 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-400 -j DROP -A logdrop-ntp-401 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-401 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-401 -j DROP -A logdrop-ntp-402 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-402 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-402 -j DROP -A logdrop-ntp-403 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-403 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-403 -j DROP -A logdrop-ntp-404 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-404 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-404 -j DROP -A logdrop-ntp-405 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-405 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-405 -j DROP -A logdrop-ntp-406 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-406 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-406 -j DROP -A logdrop-ntp-407 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-407 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-407 -j DROP -A logdrop-ntp-408 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-408 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-408 -j DROP -A logdrop-ntp-409 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-409 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-409 -j DROP -A logdrop-ntp-41 -m limit --limit 1/second -j LOG -A logdrop-ntp-41 -j DROP -A logdrop-ntp-410 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-410 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-410 -j DROP -A logdrop-ntp-411 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-411 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-411 -j DROP -A logdrop-ntp-412 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-412 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-412 -j DROP -A logdrop-ntp-413 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-413 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-413 -j DROP -A logdrop-ntp-414 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-414 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-414 -j DROP -A logdrop-ntp-415 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-415 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-415 -j DROP -A logdrop-ntp-416 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-416 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-416 -j DROP -A logdrop-ntp-417 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-417 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-417 -j DROP -A logdrop-ntp-418 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-418 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-418 -j DROP -A logdrop-ntp-419 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-419 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-419 -j DROP -A logdrop-ntp-42 -m limit --limit 1/second -j LOG -A logdrop-ntp-42 -j DROP -A logdrop-ntp-420 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-420 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-420 -j DROP -A logdrop-ntp-421 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-421 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-421 -j DROP -A logdrop-ntp-422 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-422 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-422 -j DROP -A logdrop-ntp-423 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-423 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-423 -j DROP -A logdrop-ntp-424 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-424 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-424 -j DROP -A logdrop-ntp-425 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-425 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-425 -j DROP -A logdrop-ntp-426 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-426 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-426 -j DROP -A logdrop-ntp-427 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-427 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-427 -j DROP -A logdrop-ntp-428 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-428 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-428 -j DROP -A logdrop-ntp-429 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-429 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-429 -j DROP -A logdrop-ntp-43 -m limit --limit 1/second -j LOG -A logdrop-ntp-43 -j DROP -A logdrop-ntp-430 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-430 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-430 -j DROP -A logdrop-ntp-431 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-431 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-431 -j DROP -A logdrop-ntp-432 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-432 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-432 -j DROP -A logdrop-ntp-433 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-433 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-433 -j DROP -A logdrop-ntp-434 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-434 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-434 -j DROP -A logdrop-ntp-435 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-435 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-435 -j DROP -A logdrop-ntp-436 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-436 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-436 -j DROP -A logdrop-ntp-437 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-437 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-437 -j DROP -A logdrop-ntp-438 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-438 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-438 -j DROP -A logdrop-ntp-439 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-439 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-439 -j DROP -A logdrop-ntp-44 -m limit --limit 1/second -j LOG -A logdrop-ntp-44 -j DROP -A logdrop-ntp-440 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-440 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-440 -j DROP -A logdrop-ntp-441 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-441 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-441 -j DROP -A logdrop-ntp-442 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-442 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-442 -j DROP -A logdrop-ntp-443 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-443 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-443 -j DROP -A logdrop-ntp-444 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-444 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-444 -j DROP -A logdrop-ntp-445 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-445 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-445 -j DROP -A logdrop-ntp-446 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-446 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-446 -j DROP -A logdrop-ntp-447 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-447 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-447 -j DROP -A logdrop-ntp-448 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-448 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-448 -j DROP -A logdrop-ntp-449 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-449 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-449 -j DROP -A logdrop-ntp-45 -m limit --limit 1/second -j LOG -A logdrop-ntp-45 -j DROP -A logdrop-ntp-450 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-450 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-450 -j DROP -A logdrop-ntp-451 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-451 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-451 -j DROP -A logdrop-ntp-452 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-452 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-452 -j DROP -A logdrop-ntp-453 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-453 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-453 -j DROP -A logdrop-ntp-454 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-454 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-454 -j DROP -A logdrop-ntp-455 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-455 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-455 -j DROP -A logdrop-ntp-456 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-456 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-456 -j DROP -A logdrop-ntp-457 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-457 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-457 -j DROP -A logdrop-ntp-458 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-458 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-458 -j DROP -A logdrop-ntp-459 -j TEE --gateway 10.0.0.1 -A logdrop-ntp-459 -j TEE --gateway 10.0.0.2 -A logdrop-ntp-459 -j DROP -A logdrop-ntp-46 -m limit --limit 1/second -j LOG -A logdrop-ntp-46 -j DROP -A logdrop-ntp-460 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-460 -j DROP -A logdrop-ntp-461 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-461 -j DROP -A logdrop-ntp-462 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-462 -j DROP -A logdrop-ntp-463 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-463 -j DROP -A logdrop-ntp-464 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-464 -j DROP -A logdrop-ntp-465 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-465 -j DROP -A logdrop-ntp-466 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-466 -j DROP -A logdrop-ntp-467 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-467 -j DROP -A logdrop-ntp-468 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-468 -j DROP -A logdrop-ntp-469 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-469 -j DROP -A logdrop-ntp-47 -m limit --limit 1/second -j LOG -A logdrop-ntp-47 -j DROP -A logdrop-ntp-470 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-470 -j DROP -A logdrop-ntp-471 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-471 -j DROP -A logdrop-ntp-472 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-472 -j DROP -A logdrop-ntp-473 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-473 -j DROP -A logdrop-ntp-474 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-474 -j DROP -A logdrop-ntp-475 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-475 -j DROP -A logdrop-ntp-476 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-476 -j DROP -A logdrop-ntp-477 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-477 -j DROP -A logdrop-ntp-478 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-478 -j DROP -A logdrop-ntp-479 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-479 -j DROP -A logdrop-ntp-48 -m limit --limit 1/second -j LOG -A logdrop-ntp-48 -j DROP -A logdrop-ntp-480 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-480 -j DROP -A logdrop-ntp-481 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-481 -j DROP -A logdrop-ntp-482 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-482 -j DROP -A logdrop-ntp-483 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-483 -j DROP -A logdrop-ntp-484 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-484 -j DROP -A logdrop-ntp-485 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-485 -j DROP -A logdrop-ntp-486 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-486 -j DROP -A logdrop-ntp-487 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-487 -j DROP -A logdrop-ntp-488 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-488 -j DROP -A logdrop-ntp-489 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-489 -j DROP -A logdrop-ntp-49 -m limit --limit 1/second -j LOG -A logdrop-ntp-49 -j DROP -A logdrop-ntp-490 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-490 -j DROP -A logdrop-ntp-491 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-491 -j DROP -A logdrop-ntp-492 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-492 -j DROP -A logdrop-ntp-493 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-493 -j DROP -A logdrop-ntp-494 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-494 -j DROP -A logdrop-ntp-495 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-495 -j DROP -A logdrop-ntp-496 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-496 -j DROP -A logdrop-ntp-497 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-497 -j DROP -A logdrop-ntp-498 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-498 -j DROP -A logdrop-ntp-499 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-499 -j DROP -A logdrop-ntp-5 -m limit --limit 1/second -j LOG -A logdrop-ntp-5 -j DROP -A logdrop-ntp-50 -m limit --limit 1/second -j LOG -A logdrop-ntp-50 -j DROP -A logdrop-ntp-500 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-500 -j DROP -A logdrop-ntp-501 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-501 -j DROP -A logdrop-ntp-502 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-502 -j DROP -A logdrop-ntp-503 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-503 -j DROP -A logdrop-ntp-504 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-504 -j DROP -A logdrop-ntp-505 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-505 -j DROP -A logdrop-ntp-506 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-506 -j DROP -A logdrop-ntp-507 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-507 -j DROP -A logdrop-ntp-508 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-508 -j DROP -A logdrop-ntp-509 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-509 -j DROP -A logdrop-ntp-51 -m limit --limit 1/second -j LOG -A logdrop-ntp-51 -j DROP -A logdrop-ntp-510 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-510 -j DROP -A logdrop-ntp-511 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-511 -j DROP -A logdrop-ntp-512 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-512 -j DROP -A logdrop-ntp-513 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-513 -j DROP -A logdrop-ntp-514 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-514 -j DROP -A logdrop-ntp-515 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-515 -j DROP -A logdrop-ntp-516 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-516 -j DROP -A logdrop-ntp-517 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-517 -j DROP -A logdrop-ntp-518 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-518 -j DROP -A logdrop-ntp-519 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-519 -j DROP -A logdrop-ntp-52 -m limit --limit 1/second -j LOG -A logdrop-ntp-52 -j DROP -A logdrop-ntp-520 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-520 -j DROP -A logdrop-ntp-521 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-521 -j DROP -A logdrop-ntp-522 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-522 -j DROP -A logdrop-ntp-523 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-523 -j DROP -A logdrop-ntp-524 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-524 -j DROP -A logdrop-ntp-525 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-525 -j DROP -A logdrop-ntp-526 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-526 -j DROP -A logdrop-ntp-527 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-527 -j DROP -A logdrop-ntp-528 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-528 -j DROP -A logdrop-ntp-529 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-529 -j DROP -A logdrop-ntp-53 -m limit --limit 1/second -j LOG -A logdrop-ntp-53 -j DROP -A logdrop-ntp-530 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-530 -j DROP -A logdrop-ntp-531 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-531 -j DROP -A logdrop-ntp-532 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-532 -j DROP -A logdrop-ntp-533 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-533 -j DROP -A logdrop-ntp-534 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-534 -j DROP -A logdrop-ntp-535 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-535 -j DROP -A logdrop-ntp-536 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-536 -j DROP -A logdrop-ntp-537 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-537 -j DROP -A logdrop-ntp-538 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-538 -j DROP -A logdrop-ntp-539 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-539 -j DROP -A logdrop-ntp-54 -m limit --limit 1/second -j LOG -A logdrop-ntp-54 -j DROP -A logdrop-ntp-540 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-540 -j DROP -A logdrop-ntp-541 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-541 -j DROP -A logdrop-ntp-542 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-542 -j DROP -A logdrop-ntp-543 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-543 -j DROP -A logdrop-ntp-544 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-544 -j DROP -A logdrop-ntp-545 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-545 -j DROP -A logdrop-ntp-546 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-546 -j DROP -A logdrop-ntp-547 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-547 -j DROP -A logdrop-ntp-548 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-548 -j DROP -A logdrop-ntp-549 -m limit --limit 12/minute -j ULOG -A logdrop-ntp-549 -j DROP -A logdrop-ntp-55 -m limit --limit 1/second -j LOG -A logdrop-ntp-55 -j DROP -A logdrop-ntp-56 -m limit --limit 1/second -j LOG -A logdrop-ntp-56 -j DROP -A logdrop-ntp-57 -m limit --limit 1/second -j LOG -A logdrop-ntp-57 -j DROP -A logdrop-ntp-58 -m limit --limit 1/second -j LOG -A logdrop-ntp-58 -j DROP -A logdrop-ntp-59 -m limit --limit 1/second -j LOG -A logdrop-ntp-59 -j DROP -A logdrop-ntp-6 -m limit --limit 1/second -j LOG -A logdrop-ntp-6 -j DROP -A logdrop-ntp-60 -m limit --limit 1/second -j LOG -A logdrop-ntp-60 -j DROP -A logdrop-ntp-61 -m limit --limit 1/second -j LOG -A logdrop-ntp-61 -j DROP -A logdrop-ntp-62 -m limit --limit 1/second -j LOG -A logdrop-ntp-62 -j DROP -A logdrop-ntp-63 -m limit --limit 1/second -j LOG -A logdrop-ntp-63 -j DROP -A logdrop-ntp-64 -m limit --limit 1/second -j LOG -A logdrop-ntp-64 -j DROP -A logdrop-ntp-65 -m limit --limit 1/second -j LOG -A logdrop-ntp-65 -j DROP -A logdrop-ntp-66 -m limit --limit 1/second -j LOG -A logdrop-ntp-66 -j DROP -A logdrop-ntp-67 -m limit --limit 1/second -j LOG -A logdrop-ntp-67 -j DROP -A logdrop-ntp-68 -m limit --limit 1/second -j LOG -A logdrop-ntp-68 -j DROP -A logdrop-ntp-69 -m limit --limit 1/second -j LOG -A logdrop-ntp-69 -j DROP -A logdrop-ntp-7 -m limit --limit 1/second -j LOG -A logdrop-ntp-7 -j DROP -A logdrop-ntp-70 -m limit --limit 1/second -j LOG -A logdrop-ntp-70 -j DROP -A logdrop-ntp-71 -m limit --limit 1/second -j LOG -A logdrop-ntp-71 -j DROP -A logdrop-ntp-72 -m limit --limit 1/second -j LOG -A logdrop-ntp-72 -j DROP -A logdrop-ntp-73 -m limit --limit 1/second -j LOG -A logdrop-ntp-73 -j DROP -A logdrop-ntp-74 -m limit --limit 1/second -j LOG -A logdrop-ntp-74 -j DROP -A logdrop-ntp-75 -m limit --limit 1/second -j LOG -A logdrop-ntp-75 -j DROP -A logdrop-ntp-76 -m limit --limit 1/second -j LOG -A logdrop-ntp-76 -j DROP -A logdrop-ntp-77 -m limit --limit 1/second -j LOG -A logdrop-ntp-77 -j DROP -A logdrop-ntp-78 -m limit --limit 1/second -j LOG -A logdrop-ntp-78 -j DROP -A logdrop-ntp-79 -m limit --limit 1/second -j LOG -A logdrop-ntp-79 -j DROP -A logdrop-ntp-8 -m limit --limit 1/second -j LOG -A logdrop-ntp-8 -j DROP -A logdrop-ntp-80 -m limit --limit 1/second -j LOG -A logdrop-ntp-80 -j DROP -A logdrop-ntp-81 -m limit --limit 1/second -j LOG -A logdrop-ntp-81 -j DROP -A logdrop-ntp-82 -m limit --limit 1/second -j LOG -A logdrop-ntp-82 -j DROP -A logdrop-ntp-83 -m limit --limit 1/second -j LOG -A logdrop-ntp-83 -j DROP -A logdrop-ntp-84 -m limit --limit 1/second -j LOG -A logdrop-ntp-84 -j DROP -A logdrop-ntp-85 -m limit --limit 1/second -j LOG -A logdrop-ntp-85 -j DROP -A logdrop-ntp-86 -m limit --limit 1/second -j LOG -A logdrop-ntp-86 -j DROP -A logdrop-ntp-87 -m limit --limit 1/second -j LOG -A logdrop-ntp-87 -j DROP -A logdrop-ntp-88 -m limit --limit 1/second -j LOG -A logdrop-ntp-88 -j DROP -A logdrop-ntp-89 -m limit --limit 1/second -j LOG -A logdrop-ntp-89 -j DROP -A logdrop-ntp-9 -m limit --limit 1/second -j LOG -A logdrop-ntp-9 -j DROP -A logdrop-ntp-90 -m limit --limit 1/second -j LOG -A logdrop-ntp-90 -j DROP -A logdrop-ntp-91 -m limit --limit 1/second -j LOG -A logdrop-ntp-91 -j DROP -A logdrop-ntp-92 -m limit --limit 1/second -j LOG -A logdrop-ntp-92 -j DROP -A logdrop-ntp-93 -m limit --limit 1/second -j LOG -A logdrop-ntp-93 -j DROP -A logdrop-ntp-94 -m limit --limit 1/second -j LOG -A logdrop-ntp-94 -j DROP -A logdrop-ntp-95 -m limit --limit 1/second -j LOG -A logdrop-ntp-95 -j DROP -A logdrop-ntp-96 -m limit --limit 1/second -j LOG -A logdrop-ntp-96 -j DROP -A logdrop-ntp-97 -m limit --limit 1/second -j LOG -A logdrop-ntp-97 -j DROP -A logdrop-ntp-98 -m limit --limit 1/second -j LOG -A logdrop-ntp-98 -j DROP -A logdrop-ntp-99 -m limit --limit 1/second -j LOG -A logdrop-ntp-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -j LOG -A logpass-2 -j TEE --gateway 10.0.0.1 -A logpass-2 -j TEE --gateway 10.0.0.2 -A logpass-3 -m limit --limit 12/minute -j ULOG COMMIT *mangle :FORWARD ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :PREROUTING ACCEPT [0:0] -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth2 -d 10.1.0.0/12 -j MARK --set-mark 2 -A FORWARD -i eth1 -s 10.0.0.0/12 -o eth3 -d 10.1.0.0/12 -j MARK --set-mark 2 -A INPUT -j MARK --set-mark 3 -A OUTPUT -j MARK --set-mark 1 -A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MARK --set-mark 3 -A PREROUTING -i eth0 -j MARK --set-mark 1 COMMIT *nat :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :masquerade - [0:0] -A INPUT -j MASQUERADE -A OUTPUT -j REDIRECT -A POSTROUTING -o eth1 -d 10.0.0.0/12 -j MASQUERADE -A POSTROUTING -m set --match-set awall-masquerade src -j masquerade -A PREROUTING -i eth0 -j REDIRECT -A PREROUTING -i eth1 -s 10.0.0.0/12 -j REDIRECT -A masquerade -m set ! --match-set awall-masquerade dst -j MASQUERADE COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s 10.0.0.0/12 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack COMMIT # rules6-save generated by awall *filter :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT DROP [0:0] :icmp-routing - [0:0] :limit-0 - [0:0] :limit-1 - [0:0] :limit-10 - [0:0] :limit-100 - [0:0] :limit-1000 - [0:0] :limit-1001 - [0:0] :limit-1002 - [0:0] :limit-1003 - [0:0] :limit-1004 - [0:0] :limit-1005 - [0:0] :limit-1006 - [0:0] :limit-1008 - [0:0] :limit-1009 - [0:0] :limit-101 - [0:0] :limit-1010 - [0:0] :limit-1011 - [0:0] :limit-1012 - [0:0] :limit-1014 - [0:0] :limit-1015 - [0:0] :limit-1016 - [0:0] :limit-1017 - [0:0] :limit-1018 - [0:0] :limit-1019 - [0:0] :limit-102 - [0:0] :limit-1020 - [0:0] :limit-1021 - [0:0] :limit-1022 - [0:0] :limit-1023 - [0:0] :limit-1024 - [0:0] :limit-1025 - [0:0] :limit-1026 - [0:0] :limit-1028 - [0:0] :limit-1029 - [0:0] :limit-103 - [0:0] :limit-1030 - [0:0] :limit-1031 - [0:0] :limit-1032 - [0:0] :limit-1034 - [0:0] :limit-1035 - [0:0] :limit-1036 - [0:0] :limit-1037 - [0:0] :limit-1038 - [0:0] :limit-1039 - [0:0] :limit-104 - [0:0] :limit-1040 - [0:0] :limit-1041 - [0:0] :limit-1042 - [0:0] :limit-1043 - [0:0] :limit-1044 - [0:0] :limit-1045 - [0:0] :limit-1046 - [0:0] :limit-1048 - [0:0] :limit-1049 - [0:0] :limit-105 - [0:0] :limit-1050 - [0:0] :limit-1051 - [0:0] :limit-1052 - [0:0] :limit-1054 - [0:0] :limit-1055 - [0:0] :limit-1056 - [0:0] :limit-1057 - [0:0] :limit-1058 - [0:0] :limit-1059 - [0:0] :limit-106 - [0:0] :limit-1060 - [0:0] :limit-1061 - [0:0] :limit-1062 - [0:0] :limit-1063 - [0:0] :limit-1064 - [0:0] :limit-1065 - [0:0] :limit-1066 - [0:0] :limit-1068 - [0:0] :limit-1069 - [0:0] :limit-107 - [0:0] :limit-1070 - [0:0] :limit-1071 - [0:0] :limit-1072 - [0:0] :limit-1074 - [0:0] :limit-1075 - [0:0] :limit-1076 - [0:0] :limit-1077 - [0:0] :limit-1078 - [0:0] :limit-1079 - [0:0] :limit-108 - [0:0] :limit-1080 - [0:0] :limit-1081 - [0:0] :limit-1082 - [0:0] :limit-1083 - [0:0] :limit-1084 - [0:0] :limit-1085 - [0:0] :limit-1086 - [0:0] :limit-1087 - [0:0] :limit-1088 - [0:0] :limit-1089 - [0:0] :limit-109 - [0:0] :limit-1090 - [0:0] :limit-1091 - [0:0] :limit-1092 - [0:0] :limit-1093 - [0:0] :limit-1094 - [0:0] :limit-1095 - [0:0] :limit-1096 - [0:0] :limit-1098 - [0:0] :limit-1099 - [0:0] :limit-11 - [0:0] :limit-110 - [0:0] :limit-1100 - [0:0] :limit-1101 - [0:0] :limit-1102 - [0:0] :limit-1104 - [0:0] :limit-1105 - [0:0] :limit-1106 - [0:0] :limit-1107 - [0:0] :limit-1108 - [0:0] :limit-1109 - [0:0] :limit-111 - [0:0] :limit-1110 - [0:0] :limit-1111 - [0:0] :limit-1112 - [0:0] :limit-1113 - [0:0] :limit-1114 - [0:0] :limit-1115 - [0:0] :limit-1116 - [0:0] :limit-1118 - [0:0] :limit-1119 - [0:0] :limit-112 - [0:0] :limit-1120 - [0:0] :limit-1121 - [0:0] :limit-1122 - [0:0] :limit-1124 - [0:0] :limit-1125 - [0:0] :limit-1126 - [0:0] :limit-1127 - [0:0] :limit-1128 - [0:0] :limit-1129 - [0:0] :limit-113 - [0:0] :limit-1130 - [0:0] :limit-1131 - [0:0] :limit-1132 - [0:0] :limit-1133 - [0:0] :limit-1134 - [0:0] :limit-1135 - [0:0] :limit-1136 - [0:0] :limit-1138 - [0:0] :limit-1139 - [0:0] :limit-114 - [0:0] :limit-1140 - [0:0] :limit-1141 - [0:0] :limit-1142 - [0:0] :limit-1144 - [0:0] :limit-1145 - [0:0] :limit-1146 - [0:0] :limit-1147 - [0:0] :limit-1148 - [0:0] :limit-1149 - [0:0] :limit-115 - [0:0] :limit-1150 - [0:0] :limit-1151 - [0:0] :limit-1152 - [0:0] :limit-1153 - [0:0] :limit-1154 - [0:0] :limit-1155 - [0:0] :limit-1156 - [0:0] :limit-1158 - [0:0] :limit-1159 - [0:0] :limit-116 - [0:0] :limit-1160 - [0:0] :limit-1161 - [0:0] :limit-1162 - [0:0] :limit-1164 - [0:0] :limit-1165 - [0:0] :limit-1166 - [0:0] :limit-1167 - [0:0] :limit-1168 - [0:0] :limit-1169 - [0:0] :limit-117 - [0:0] :limit-1170 - [0:0] :limit-1171 - [0:0] :limit-1172 - [0:0] :limit-1173 - [0:0] :limit-1174 - [0:0] :limit-1175 - [0:0] :limit-1176 - [0:0] :limit-1177 - [0:0] :limit-1178 - [0:0] :limit-1179 - [0:0] :limit-118 - [0:0] :limit-1180 - [0:0] :limit-1181 - [0:0] :limit-1182 - [0:0] :limit-1183 - [0:0] :limit-1184 - [0:0] :limit-1185 - [0:0] :limit-1186 - [0:0] :limit-1188 - [0:0] :limit-1189 - [0:0] :limit-119 - [0:0] :limit-1190 - [0:0] :limit-1191 - [0:0] :limit-1192 - [0:0] :limit-1194 - [0:0] :limit-1195 - [0:0] :limit-1196 - [0:0] :limit-1197 - [0:0] :limit-1198 - [0:0] :limit-1199 - [0:0] :limit-12 - [0:0] :limit-120 - [0:0] :limit-1200 - [0:0] :limit-1201 - [0:0] :limit-1202 - [0:0] :limit-1203 - [0:0] :limit-1204 - [0:0] :limit-1205 - [0:0] :limit-1206 - [0:0] :limit-1208 - [0:0] :limit-1209 - [0:0] :limit-121 - [0:0] :limit-1210 - [0:0] :limit-1211 - [0:0] :limit-1212 - [0:0] :limit-1214 - [0:0] :limit-1215 - [0:0] :limit-1216 - [0:0] :limit-1217 - [0:0] :limit-1218 - [0:0] :limit-1219 - [0:0] :limit-122 - [0:0] :limit-1220 - [0:0] :limit-1221 - [0:0] :limit-1222 - [0:0] :limit-1223 - [0:0] :limit-1224 - [0:0] :limit-1225 - [0:0] :limit-1226 - [0:0] :limit-1228 - [0:0] :limit-1229 - [0:0] :limit-123 - [0:0] :limit-1230 - [0:0] :limit-1231 - [0:0] :limit-1232 - [0:0] :limit-1234 - [0:0] :limit-1235 - [0:0] :limit-1236 - [0:0] :limit-1237 - [0:0] :limit-1238 - [0:0] :limit-1239 - [0:0] :limit-124 - [0:0] :limit-1240 - [0:0] :limit-1241 - [0:0] :limit-1242 - [0:0] :limit-1243 - [0:0] :limit-1244 - [0:0] :limit-1245 - [0:0] :limit-1246 - [0:0] :limit-1248 - [0:0] :limit-1249 - [0:0] :limit-125 - [0:0] :limit-1250 - [0:0] :limit-1251 - [0:0] :limit-1252 - [0:0] :limit-1254 - [0:0] :limit-1255 - [0:0] :limit-1256 - [0:0] :limit-1257 - [0:0] :limit-1258 - [0:0] :limit-1259 - [0:0] :limit-126 - [0:0] :limit-1260 - [0:0] :limit-1261 - [0:0] :limit-1262 - [0:0] :limit-1263 - [0:0] :limit-1264 - [0:0] :limit-1265 - [0:0] :limit-1266 - [0:0] :limit-1267 - [0:0] :limit-1268 - [0:0] :limit-1269 - [0:0] :limit-127 - [0:0] :limit-1270 - [0:0] :limit-1271 - [0:0] :limit-1272 - [0:0] :limit-1273 - [0:0] :limit-1274 - [0:0] :limit-1275 - [0:0] :limit-1276 - [0:0] :limit-1278 - [0:0] :limit-1279 - [0:0] :limit-128 - [0:0] :limit-1280 - [0:0] :limit-1281 - [0:0] :limit-1282 - [0:0] :limit-1284 - [0:0] :limit-1285 - [0:0] :limit-1286 - [0:0] :limit-1287 - [0:0] :limit-1288 - [0:0] :limit-1289 - [0:0] :limit-129 - [0:0] :limit-1290 - [0:0] :limit-1291 - [0:0] :limit-1292 - [0:0] :limit-1293 - [0:0] :limit-1294 - [0:0] :limit-1295 - [0:0] :limit-1296 - [0:0] :limit-1298 - [0:0] :limit-1299 - [0:0] :limit-13 - [0:0] :limit-130 - [0:0] :limit-1300 - [0:0] :limit-1301 - [0:0] :limit-1302 - [0:0] :limit-1304 - [0:0] :limit-1305 - [0:0] :limit-1306 - [0:0] :limit-1307 - [0:0] :limit-1308 - [0:0] :limit-1309 - [0:0] :limit-131 - [0:0] :limit-1310 - [0:0] :limit-1311 - [0:0] :limit-1312 - [0:0] :limit-1313 - [0:0] :limit-1314 - [0:0] :limit-1315 - [0:0] :limit-1316 - [0:0] :limit-1318 - [0:0] :limit-1319 - [0:0] :limit-132 - [0:0] :limit-1320 - [0:0] :limit-1321 - [0:0] :limit-1322 - [0:0] :limit-1324 - [0:0] :limit-1325 - [0:0] :limit-1326 - [0:0] :limit-1327 - [0:0] :limit-1328 - [0:0] :limit-1329 - [0:0] :limit-133 - [0:0] :limit-1330 - [0:0] :limit-1331 - [0:0] :limit-1332 - [0:0] :limit-1333 - [0:0] :limit-1334 - [0:0] :limit-1335 - [0:0] :limit-1336 - [0:0] :limit-1338 - [0:0] :limit-1339 - [0:0] :limit-134 - [0:0] :limit-1340 - [0:0] :limit-1341 - [0:0] :limit-1342 - [0:0] :limit-1344 - [0:0] :limit-1345 - [0:0] :limit-1346 - [0:0] :limit-1347 - [0:0] :limit-1348 - [0:0] :limit-1349 - [0:0] :limit-135 - [0:0] :limit-1350 - [0:0] :limit-1351 - [0:0] :limit-1352 - [0:0] :limit-1353 - [0:0] :limit-1354 - [0:0] :limit-1355 - [0:0] :limit-1356 - [0:0] :limit-1357 - [0:0] :limit-1358 - [0:0] :limit-1359 - [0:0] :limit-136 - [0:0] :limit-1360 - [0:0] :limit-1361 - [0:0] :limit-1362 - [0:0] :limit-1363 - [0:0] :limit-1364 - [0:0] :limit-1365 - [0:0] :limit-1366 - [0:0] :limit-1368 - [0:0] :limit-1369 - [0:0] :limit-137 - [0:0] :limit-1370 - [0:0] :limit-1371 - [0:0] :limit-1372 - [0:0] :limit-1374 - [0:0] :limit-1375 - [0:0] :limit-1376 - [0:0] :limit-1377 - [0:0] :limit-1378 - [0:0] :limit-1379 - [0:0] :limit-138 - [0:0] :limit-1380 - [0:0] :limit-1381 - [0:0] :limit-1382 - [0:0] :limit-1383 - [0:0] :limit-1384 - [0:0] :limit-1385 - [0:0] :limit-1386 - [0:0] :limit-1388 - [0:0] :limit-1389 - [0:0] :limit-139 - [0:0] :limit-1390 - [0:0] :limit-1391 - [0:0] :limit-1392 - [0:0] :limit-1394 - [0:0] :limit-1395 - [0:0] :limit-1396 - [0:0] :limit-1397 - [0:0] :limit-1398 - [0:0] :limit-1399 - [0:0] :limit-14 - [0:0] :limit-140 - [0:0] :limit-1400 - [0:0] :limit-1401 - [0:0] :limit-1402 - [0:0] :limit-1403 - [0:0] :limit-1404 - [0:0] :limit-1405 - [0:0] :limit-1406 - [0:0] :limit-1408 - [0:0] :limit-1409 - [0:0] :limit-141 - [0:0] :limit-1410 - [0:0] :limit-1411 - [0:0] :limit-1412 - [0:0] :limit-1414 - [0:0] :limit-1415 - [0:0] :limit-1416 - [0:0] :limit-1417 - [0:0] :limit-1418 - [0:0] :limit-1419 - [0:0] :limit-142 - [0:0] :limit-1420 - [0:0] :limit-1421 - [0:0] :limit-1422 - [0:0] :limit-1423 - [0:0] :limit-1424 - [0:0] :limit-1425 - [0:0] :limit-1426 - [0:0] :limit-1428 - [0:0] :limit-1429 - [0:0] :limit-143 - [0:0] :limit-1430 - [0:0] :limit-1431 - [0:0] :limit-1432 - [0:0] :limit-1434 - [0:0] :limit-1435 - [0:0] :limit-1436 - [0:0] :limit-1437 - [0:0] :limit-1438 - [0:0] :limit-1439 - [0:0] :limit-144 - [0:0] :limit-1440 - [0:0] :limit-1441 - [0:0] :limit-1442 - [0:0] :limit-1443 - [0:0] :limit-1444 - [0:0] :limit-1445 - [0:0] :limit-1446 - [0:0] :limit-1447 - [0:0] :limit-1448 - [0:0] :limit-1449 - [0:0] :limit-145 - [0:0] :limit-1450 - [0:0] :limit-1451 - [0:0] :limit-1452 - [0:0] :limit-1453 - [0:0] :limit-1454 - [0:0] :limit-1455 - [0:0] :limit-1456 - [0:0] :limit-1458 - [0:0] :limit-1459 - [0:0] :limit-146 - [0:0] :limit-1460 - [0:0] :limit-1461 - [0:0] :limit-1462 - [0:0] :limit-1464 - [0:0] :limit-1465 - [0:0] :limit-1466 - [0:0] :limit-1467 - [0:0] :limit-1468 - [0:0] :limit-1469 - [0:0] :limit-147 - [0:0] :limit-1470 - [0:0] :limit-1471 - [0:0] :limit-1472 - [0:0] :limit-1473 - [0:0] :limit-1474 - [0:0] :limit-1475 - [0:0] :limit-1476 - [0:0] :limit-1478 - [0:0] :limit-1479 - [0:0] :limit-148 - [0:0] :limit-1480 - [0:0] :limit-1481 - [0:0] :limit-1482 - [0:0] :limit-1484 - [0:0] :limit-1485 - [0:0] :limit-1486 - [0:0] :limit-1487 - [0:0] :limit-1488 - [0:0] :limit-1489 - [0:0] :limit-149 - [0:0] :limit-1490 - [0:0] :limit-1491 - [0:0] :limit-1492 - [0:0] :limit-1493 - [0:0] :limit-1494 - [0:0] :limit-1495 - [0:0] :limit-1496 - [0:0] :limit-1498 - [0:0] :limit-1499 - [0:0] :limit-15 - [0:0] :limit-150 - [0:0] :limit-1500 - [0:0] :limit-1501 - [0:0] :limit-1502 - [0:0] :limit-1504 - [0:0] :limit-1505 - [0:0] :limit-1506 - [0:0] :limit-1507 - [0:0] :limit-1508 - [0:0] :limit-1509 - [0:0] :limit-151 - [0:0] :limit-1510 - [0:0] :limit-1511 - [0:0] :limit-1512 - [0:0] :limit-1513 - [0:0] :limit-1514 - [0:0] :limit-1515 - [0:0] :limit-1516 - [0:0] :limit-1518 - [0:0] :limit-1519 - [0:0] :limit-152 - [0:0] :limit-1520 - [0:0] :limit-1521 - [0:0] :limit-1522 - [0:0] :limit-1524 - [0:0] :limit-1525 - [0:0] :limit-1526 - [0:0] :limit-1527 - [0:0] :limit-1528 - [0:0] :limit-1529 - [0:0] :limit-153 - [0:0] :limit-1530 - [0:0] :limit-1531 - [0:0] :limit-1532 - [0:0] :limit-1533 - [0:0] :limit-1534 - [0:0] :limit-1535 - [0:0] :limit-1536 - [0:0] :limit-1537 - [0:0] :limit-1538 - [0:0] :limit-1539 - [0:0] :limit-154 - [0:0] :limit-1540 - [0:0] :limit-1541 - [0:0] :limit-1542 - [0:0] :limit-1543 - [0:0] :limit-1544 - [0:0] :limit-1545 - [0:0] :limit-1546 - [0:0] :limit-1548 - [0:0] :limit-1549 - [0:0] :limit-155 - [0:0] :limit-1550 - [0:0] :limit-1551 - [0:0] :limit-1552 - [0:0] :limit-1554 - [0:0] :limit-1555 - [0:0] :limit-1556 - [0:0] :limit-1557 - [0:0] :limit-1558 - [0:0] :limit-1559 - [0:0] :limit-156 - [0:0] :limit-1560 - [0:0] :limit-1561 - [0:0] :limit-1562 - [0:0] :limit-1563 - [0:0] :limit-1564 - [0:0] :limit-1565 - [0:0] :limit-1566 - [0:0] :limit-1568 - [0:0] :limit-1569 - [0:0] :limit-157 - [0:0] :limit-1570 - [0:0] :limit-1571 - [0:0] :limit-1572 - [0:0] :limit-1574 - [0:0] :limit-1575 - [0:0] :limit-1576 - [0:0] :limit-1577 - [0:0] :limit-1578 - [0:0] :limit-1579 - [0:0] :limit-158 - [0:0] :limit-1580 - [0:0] :limit-1581 - [0:0] :limit-1582 - [0:0] :limit-1583 - [0:0] :limit-1584 - [0:0] :limit-1585 - [0:0] :limit-1586 - [0:0] :limit-1588 - [0:0] :limit-1589 - [0:0] :limit-159 - [0:0] :limit-1590 - [0:0] :limit-1591 - [0:0] :limit-1592 - [0:0] :limit-1594 - [0:0] :limit-1595 - [0:0] :limit-1596 - [0:0] :limit-1597 - [0:0] :limit-1598 - [0:0] :limit-1599 - [0:0] :limit-16 - [0:0] :limit-160 - [0:0] :limit-1600 - [0:0] :limit-1601 - [0:0] :limit-1602 - [0:0] :limit-1603 - [0:0] :limit-1604 - [0:0] :limit-1605 - [0:0] :limit-1606 - [0:0] :limit-1608 - [0:0] :limit-1609 - [0:0] :limit-161 - [0:0] :limit-1610 - [0:0] :limit-1611 - [0:0] :limit-1612 - [0:0] :limit-1614 - [0:0] :limit-1615 - [0:0] :limit-1616 - [0:0] :limit-1617 - [0:0] :limit-1618 - [0:0] :limit-1619 - [0:0] :limit-162 - [0:0] :limit-1620 - [0:0] :limit-1621 - [0:0] :limit-1622 - [0:0] :limit-1623 - [0:0] :limit-1624 - [0:0] :limit-1625 - [0:0] :limit-1626 - [0:0] :limit-1627 - [0:0] :limit-1628 - [0:0] :limit-1629 - [0:0] :limit-163 - [0:0] :limit-1630 - [0:0] :limit-1631 - [0:0] :limit-1632 - [0:0] :limit-1633 - [0:0] :limit-1634 - [0:0] :limit-1635 - [0:0] :limit-1636 - [0:0] :limit-1638 - [0:0] :limit-1639 - [0:0] :limit-164 - [0:0] :limit-1640 - [0:0] :limit-1641 - [0:0] :limit-1642 - [0:0] :limit-1644 - [0:0] :limit-1645 - [0:0] :limit-1646 - [0:0] :limit-1647 - [0:0] :limit-1648 - [0:0] :limit-1649 - [0:0] :limit-165 - [0:0] :limit-1650 - [0:0] :limit-1651 - [0:0] :limit-1652 - [0:0] :limit-1653 - [0:0] :limit-1654 - [0:0] :limit-1655 - [0:0] :limit-1656 - [0:0] :limit-1658 - [0:0] :limit-1659 - [0:0] :limit-166 - [0:0] :limit-1660 - [0:0] :limit-1661 - [0:0] :limit-1662 - [0:0] :limit-1664 - [0:0] :limit-1665 - [0:0] :limit-1666 - [0:0] :limit-1667 - [0:0] :limit-1668 - [0:0] :limit-1669 - [0:0] :limit-167 - [0:0] :limit-1670 - [0:0] :limit-1671 - [0:0] :limit-1672 - [0:0] :limit-1673 - [0:0] :limit-1674 - [0:0] :limit-1675 - [0:0] :limit-1676 - [0:0] :limit-1678 - [0:0] :limit-1679 - [0:0] :limit-168 - [0:0] :limit-1680 - [0:0] :limit-1681 - [0:0] :limit-1682 - [0:0] :limit-1684 - [0:0] :limit-1685 - [0:0] :limit-1686 - [0:0] :limit-1687 - [0:0] :limit-1688 - [0:0] :limit-1689 - [0:0] :limit-169 - [0:0] :limit-1690 - [0:0] :limit-1691 - [0:0] :limit-1692 - [0:0] :limit-1693 - [0:0] :limit-1694 - [0:0] :limit-1695 - [0:0] :limit-1696 - [0:0] :limit-1698 - [0:0] :limit-1699 - [0:0] :limit-17 - [0:0] :limit-170 - [0:0] :limit-1700 - [0:0] :limit-1701 - [0:0] :limit-1702 - [0:0] :limit-1704 - [0:0] :limit-1705 - [0:0] :limit-1706 - [0:0] :limit-1707 - [0:0] :limit-1708 - [0:0] :limit-1709 - [0:0] :limit-171 - [0:0] :limit-1710 - [0:0] :limit-1711 - [0:0] :limit-1712 - [0:0] :limit-1713 - [0:0] :limit-1714 - [0:0] :limit-1715 - [0:0] :limit-1716 - [0:0] :limit-1717 - [0:0] :limit-1718 - [0:0] :limit-1719 - [0:0] :limit-172 - [0:0] :limit-1720 - [0:0] :limit-1721 - [0:0] :limit-1722 - [0:0] :limit-1723 - [0:0] :limit-1724 - [0:0] :limit-1725 - [0:0] :limit-1726 - [0:0] :limit-1728 - [0:0] :limit-1729 - [0:0] :limit-173 - [0:0] :limit-1730 - [0:0] :limit-1731 - [0:0] :limit-1732 - [0:0] :limit-1734 - [0:0] :limit-1735 - [0:0] :limit-1736 - [0:0] :limit-1737 - [0:0] :limit-1738 - [0:0] :limit-1739 - [0:0] :limit-174 - [0:0] :limit-1740 - [0:0] :limit-1741 - [0:0] :limit-1742 - [0:0] :limit-1743 - [0:0] :limit-1744 - [0:0] :limit-1745 - [0:0] :limit-1746 - [0:0] :limit-1748 - [0:0] :limit-1749 - [0:0] :limit-175 - [0:0] :limit-1750 - [0:0] :limit-1751 - [0:0] :limit-1752 - [0:0] :limit-1754 - [0:0] :limit-1755 - [0:0] :limit-1756 - [0:0] :limit-1757 - [0:0] :limit-1758 - [0:0] :limit-1759 - [0:0] :limit-176 - [0:0] :limit-1760 - [0:0] :limit-1761 - [0:0] :limit-1762 - [0:0] :limit-1763 - [0:0] :limit-1764 - [0:0] :limit-1765 - [0:0] :limit-1766 - [0:0] :limit-1768 - [0:0] :limit-1769 - [0:0] :limit-177 - [0:0] :limit-1770 - [0:0] :limit-1771 - [0:0] :limit-1772 - [0:0] :limit-1774 - [0:0] :limit-1775 - [0:0] :limit-1776 - [0:0] :limit-1777 - [0:0] :limit-1778 - [0:0] :limit-1779 - [0:0] :limit-178 - [0:0] :limit-1780 - [0:0] :limit-1781 - [0:0] :limit-1782 - [0:0] :limit-1783 - [0:0] :limit-1784 - [0:0] :limit-1785 - [0:0] :limit-1786 - [0:0] :limit-1788 - [0:0] :limit-1789 - [0:0] :limit-179 - [0:0] :limit-1790 - [0:0] :limit-1791 - [0:0] :limit-1792 - [0:0] :limit-1794 - [0:0] :limit-1795 - [0:0] :limit-1796 - [0:0] :limit-1797 - [0:0] :limit-1798 - [0:0] :limit-1799 - [0:0] :limit-18 - [0:0] :limit-180 - [0:0] :limit-1800 - [0:0] :limit-1801 - [0:0] :limit-1802 - [0:0] :limit-1803 - [0:0] :limit-1804 - [0:0] :limit-1805 - [0:0] :limit-1806 - [0:0] :limit-1807 - [0:0] :limit-1808 - [0:0] :limit-1809 - [0:0] :limit-181 - [0:0] :limit-1810 - [0:0] :limit-1811 - [0:0] :limit-1812 - [0:0] :limit-1813 - [0:0] :limit-1814 - [0:0] :limit-1815 - [0:0] :limit-1816 - [0:0] :limit-1818 - [0:0] :limit-1819 - [0:0] :limit-182 - [0:0] :limit-1820 - [0:0] :limit-1821 - [0:0] :limit-1822 - [0:0] :limit-1824 - [0:0] :limit-1825 - [0:0] :limit-1826 - [0:0] :limit-1827 - [0:0] :limit-1828 - [0:0] :limit-1829 - [0:0] :limit-183 - [0:0] :limit-1830 - [0:0] :limit-1831 - [0:0] :limit-1832 - [0:0] :limit-1833 - [0:0] :limit-1834 - [0:0] :limit-1835 - [0:0] :limit-1836 - [0:0] :limit-1838 - [0:0] :limit-1839 - [0:0] :limit-184 - [0:0] :limit-1840 - [0:0] :limit-1841 - [0:0] :limit-1842 - [0:0] :limit-1844 - [0:0] :limit-1845 - [0:0] :limit-1846 - [0:0] :limit-1847 - [0:0] :limit-1848 - [0:0] :limit-1849 - [0:0] :limit-185 - [0:0] :limit-1850 - [0:0] :limit-1851 - [0:0] :limit-1852 - [0:0] :limit-1853 - [0:0] :limit-1854 - [0:0] :limit-1855 - [0:0] :limit-1856 - [0:0] :limit-1858 - [0:0] :limit-1859 - [0:0] :limit-186 - [0:0] :limit-1860 - [0:0] :limit-1861 - [0:0] :limit-1862 - [0:0] :limit-1864 - [0:0] :limit-1865 - [0:0] :limit-1866 - [0:0] :limit-1867 - [0:0] :limit-1868 - [0:0] :limit-1869 - [0:0] :limit-187 - [0:0] :limit-1870 - [0:0] :limit-1871 - [0:0] :limit-1872 - [0:0] :limit-1873 - [0:0] :limit-1874 - [0:0] :limit-1875 - [0:0] :limit-1876 - [0:0] :limit-1878 - [0:0] :limit-1879 - [0:0] :limit-188 - [0:0] :limit-1880 - [0:0] :limit-1881 - [0:0] :limit-1882 - [0:0] :limit-1884 - [0:0] :limit-1885 - [0:0] :limit-1886 - [0:0] :limit-1887 - [0:0] :limit-1888 - [0:0] :limit-1889 - [0:0] :limit-189 - [0:0] :limit-1890 - [0:0] :limit-1891 - [0:0] :limit-1892 - [0:0] :limit-1893 - [0:0] :limit-1894 - [0:0] :limit-1895 - [0:0] :limit-1896 - [0:0] :limit-1897 - [0:0] :limit-1898 - [0:0] :limit-1899 - [0:0] :limit-19 - [0:0] :limit-190 - [0:0] :limit-1900 - [0:0] :limit-1901 - [0:0] :limit-1902 - [0:0] :limit-1903 - [0:0] :limit-1904 - [0:0] :limit-1905 - [0:0] :limit-1906 - [0:0] :limit-1907 - [0:0] :limit-1908 - [0:0] :limit-1909 - [0:0] :limit-191 - [0:0] :limit-1910 - [0:0] :limit-1911 - [0:0] :limit-1912 - [0:0] :limit-1913 - [0:0] :limit-1914 - [0:0] :limit-1915 - [0:0] :limit-1916 - [0:0] :limit-1917 - [0:0] :limit-1918 - [0:0] :limit-1919 - [0:0] :limit-192 - [0:0] :limit-1920 - [0:0] :limit-1921 - [0:0] :limit-1922 - [0:0] :limit-1923 - [0:0] :limit-1924 - [0:0] :limit-1925 - [0:0] :limit-1926 - [0:0] :limit-1927 - [0:0] :limit-1928 - [0:0] :limit-1929 - [0:0] :limit-193 - [0:0] :limit-1930 - [0:0] :limit-1931 - [0:0] :limit-1932 - [0:0] :limit-1933 - [0:0] :limit-1934 - [0:0] :limit-1935 - [0:0] :limit-1936 - [0:0] :limit-1937 - [0:0] :limit-1938 - [0:0] :limit-1939 - [0:0] :limit-194 - [0:0] :limit-1940 - [0:0] :limit-1941 - [0:0] :limit-1942 - [0:0] :limit-1943 - [0:0] :limit-1944 - [0:0] :limit-1945 - [0:0] :limit-1946 - [0:0] :limit-1947 - [0:0] :limit-1948 - [0:0] :limit-1949 - [0:0] :limit-195 - [0:0] :limit-1950 - [0:0] :limit-1951 - [0:0] :limit-1952 - [0:0] :limit-1953 - [0:0] :limit-1954 - [0:0] :limit-1955 - [0:0] :limit-1956 - [0:0] :limit-1957 - [0:0] :limit-1958 - [0:0] :limit-1959 - [0:0] :limit-196 - [0:0] :limit-1960 - [0:0] :limit-1961 - [0:0] :limit-1962 - [0:0] :limit-1963 - [0:0] :limit-1964 - [0:0] :limit-1965 - [0:0] :limit-1966 - [0:0] :limit-1967 - [0:0] :limit-1968 - [0:0] :limit-1969 - [0:0] :limit-197 - [0:0] :limit-1970 - [0:0] :limit-1971 - [0:0] :limit-1972 - [0:0] :limit-1973 - [0:0] :limit-1974 - [0:0] :limit-1975 - [0:0] :limit-1976 - [0:0] :limit-1977 - [0:0] :limit-1978 - [0:0] :limit-1979 - [0:0] :limit-198 - [0:0] :limit-1980 - [0:0] :limit-1981 - [0:0] :limit-1982 - [0:0] :limit-1983 - [0:0] :limit-1984 - [0:0] :limit-1985 - [0:0] :limit-1986 - [0:0] :limit-1987 - [0:0] :limit-1988 - [0:0] :limit-1989 - [0:0] :limit-199 - [0:0] :limit-1990 - [0:0] :limit-1991 - [0:0] :limit-1992 - [0:0] :limit-1993 - [0:0] :limit-1994 - [0:0] :limit-1995 - [0:0] :limit-1996 - [0:0] :limit-1997 - [0:0] :limit-1998 - [0:0] :limit-1999 - [0:0] :limit-2 - [0:0] :limit-20 - [0:0] :limit-200 - [0:0] :limit-2000 - [0:0] :limit-2001 - [0:0] :limit-2002 - [0:0] :limit-2003 - [0:0] :limit-2004 - [0:0] :limit-2005 - [0:0] :limit-2006 - [0:0] :limit-2007 - [0:0] :limit-2008 - [0:0] :limit-2009 - [0:0] :limit-201 - [0:0] :limit-2010 - [0:0] :limit-2011 - [0:0] :limit-2012 - [0:0] :limit-2013 - [0:0] :limit-2014 - [0:0] :limit-2015 - [0:0] :limit-2016 - [0:0] :limit-2017 - [0:0] :limit-2018 - [0:0] :limit-2019 - [0:0] :limit-202 - [0:0] :limit-2020 - [0:0] :limit-2021 - [0:0] :limit-2022 - [0:0] :limit-2023 - [0:0] :limit-2024 - [0:0] :limit-2025 - [0:0] :limit-2026 - [0:0] :limit-2027 - [0:0] :limit-2028 - [0:0] :limit-2029 - [0:0] :limit-203 - [0:0] :limit-2030 - [0:0] :limit-2031 - [0:0] :limit-2032 - [0:0] :limit-2033 - [0:0] :limit-2034 - [0:0] :limit-2035 - [0:0] :limit-2036 - [0:0] :limit-2037 - [0:0] :limit-2038 - [0:0] :limit-2039 - [0:0] :limit-204 - [0:0] :limit-2040 - [0:0] :limit-2041 - [0:0] :limit-2042 - [0:0] :limit-2043 - [0:0] :limit-2044 - [0:0] :limit-2045 - [0:0] :limit-2046 - [0:0] :limit-2047 - [0:0] :limit-2048 - [0:0] :limit-2049 - [0:0] :limit-205 - [0:0] :limit-2050 - [0:0] :limit-2051 - [0:0] :limit-2052 - [0:0] :limit-2053 - [0:0] :limit-2054 - [0:0] :limit-2055 - [0:0] :limit-2056 - [0:0] :limit-2057 - [0:0] :limit-2058 - [0:0] :limit-2059 - [0:0] :limit-206 - [0:0] :limit-2060 - [0:0] :limit-2061 - [0:0] :limit-2062 - [0:0] :limit-2063 - [0:0] :limit-2064 - [0:0] :limit-2065 - [0:0] :limit-2066 - [0:0] :limit-2067 - [0:0] :limit-2068 - [0:0] :limit-2069 - [0:0] :limit-207 - [0:0] :limit-2070 - [0:0] :limit-2071 - [0:0] :limit-2072 - [0:0] :limit-2073 - [0:0] :limit-2074 - [0:0] :limit-2075 - [0:0] :limit-2076 - [0:0] :limit-2077 - [0:0] :limit-2078 - [0:0] :limit-2079 - [0:0] :limit-208 - [0:0] :limit-2080 - [0:0] :limit-2081 - [0:0] :limit-2082 - [0:0] :limit-2083 - [0:0] :limit-2084 - [0:0] :limit-2085 - [0:0] :limit-2086 - [0:0] :limit-2087 - [0:0] :limit-2088 - [0:0] :limit-2089 - [0:0] :limit-209 - [0:0] :limit-2090 - [0:0] :limit-2091 - [0:0] :limit-2092 - [0:0] :limit-2093 - [0:0] :limit-2094 - [0:0] :limit-2095 - [0:0] :limit-2096 - [0:0] :limit-2097 - [0:0] :limit-2098 - [0:0] :limit-2099 - [0:0] :limit-21 - [0:0] :limit-210 - [0:0] :limit-2100 - [0:0] :limit-2101 - [0:0] :limit-2102 - [0:0] :limit-2103 - [0:0] :limit-2104 - [0:0] :limit-2105 - [0:0] :limit-2106 - [0:0] :limit-2107 - [0:0] :limit-2108 - [0:0] :limit-2109 - [0:0] :limit-211 - [0:0] :limit-2110 - [0:0] :limit-2111 - [0:0] :limit-2112 - [0:0] :limit-2113 - [0:0] :limit-2114 - [0:0] :limit-2115 - [0:0] :limit-2116 - [0:0] :limit-2117 - [0:0] :limit-2118 - [0:0] :limit-2119 - [0:0] :limit-212 - [0:0] :limit-2120 - [0:0] :limit-2121 - [0:0] :limit-2122 - [0:0] :limit-2123 - [0:0] :limit-2124 - [0:0] :limit-2125 - [0:0] :limit-2126 - [0:0] :limit-2127 - [0:0] :limit-2128 - [0:0] :limit-2129 - [0:0] :limit-213 - [0:0] :limit-2130 - [0:0] :limit-2131 - [0:0] :limit-2132 - [0:0] :limit-2133 - [0:0] :limit-2134 - [0:0] :limit-2135 - [0:0] :limit-2136 - [0:0] :limit-2137 - [0:0] :limit-2138 - [0:0] :limit-2139 - [0:0] :limit-214 - [0:0] :limit-2140 - [0:0] :limit-2141 - [0:0] :limit-2142 - [0:0] :limit-2143 - [0:0] :limit-2144 - [0:0] :limit-2145 - [0:0] :limit-2146 - [0:0] :limit-2147 - [0:0] :limit-2148 - [0:0] :limit-2149 - [0:0] :limit-215 - [0:0] :limit-2150 - [0:0] :limit-2151 - [0:0] :limit-2152 - [0:0] :limit-2153 - [0:0] :limit-2154 - [0:0] :limit-2155 - [0:0] :limit-2156 - [0:0] :limit-2157 - [0:0] :limit-2158 - [0:0] :limit-2159 - [0:0] :limit-216 - [0:0] :limit-2160 - [0:0] :limit-2161 - [0:0] :limit-2162 - [0:0] :limit-2163 - [0:0] :limit-2164 - [0:0] :limit-2165 - [0:0] :limit-2166 - [0:0] :limit-2167 - [0:0] :limit-2168 - [0:0] :limit-2169 - [0:0] :limit-217 - [0:0] :limit-2170 - [0:0] :limit-2171 - [0:0] :limit-2172 - [0:0] :limit-2173 - [0:0] :limit-2174 - [0:0] :limit-2175 - [0:0] :limit-2176 - [0:0] :limit-2177 - [0:0] :limit-2178 - [0:0] :limit-2179 - [0:0] :limit-218 - [0:0] :limit-2180 - [0:0] :limit-2181 - [0:0] :limit-2182 - [0:0] :limit-2183 - [0:0] :limit-2184 - [0:0] :limit-2185 - [0:0] :limit-2186 - [0:0] :limit-2187 - [0:0] :limit-2188 - [0:0] :limit-2189 - [0:0] :limit-219 - [0:0] :limit-2190 - [0:0] :limit-2191 - [0:0] :limit-2192 - [0:0] :limit-2193 - [0:0] :limit-2194 - [0:0] :limit-2195 - [0:0] :limit-2196 - [0:0] :limit-2197 - [0:0] :limit-2198 - [0:0] :limit-2199 - [0:0] :limit-22 - [0:0] :limit-220 - [0:0] :limit-2200 - [0:0] :limit-2201 - [0:0] :limit-2202 - [0:0] :limit-2203 - [0:0] :limit-2204 - [0:0] :limit-2205 - [0:0] :limit-2206 - [0:0] :limit-2207 - [0:0] :limit-2208 - [0:0] :limit-2209 - [0:0] :limit-221 - [0:0] :limit-2210 - [0:0] :limit-2211 - [0:0] :limit-2212 - [0:0] :limit-2213 - [0:0] :limit-2214 - [0:0] :limit-2215 - [0:0] :limit-2216 - [0:0] :limit-2217 - [0:0] :limit-2218 - [0:0] :limit-2219 - [0:0] :limit-222 - [0:0] :limit-2220 - [0:0] :limit-2221 - [0:0] :limit-2222 - [0:0] :limit-2223 - [0:0] :limit-2224 - [0:0] :limit-2225 - [0:0] :limit-2226 - [0:0] :limit-2227 - [0:0] :limit-2228 - [0:0] :limit-2229 - [0:0] :limit-223 - [0:0] :limit-2230 - [0:0] :limit-2231 - [0:0] :limit-2232 - [0:0] :limit-2233 - [0:0] :limit-2234 - [0:0] :limit-2235 - [0:0] :limit-2236 - [0:0] :limit-2237 - [0:0] :limit-2238 - [0:0] :limit-2239 - [0:0] :limit-224 - [0:0] :limit-2240 - [0:0] :limit-2241 - [0:0] :limit-2242 - [0:0] :limit-2243 - [0:0] :limit-2244 - [0:0] :limit-2245 - [0:0] :limit-2246 - [0:0] :limit-2247 - [0:0] :limit-2248 - [0:0] :limit-2249 - [0:0] :limit-225 - [0:0] :limit-2250 - [0:0] :limit-2251 - [0:0] :limit-2252 - [0:0] :limit-2253 - [0:0] :limit-2254 - [0:0] :limit-2255 - [0:0] :limit-2256 - [0:0] :limit-2257 - [0:0] :limit-2258 - [0:0] :limit-2259 - [0:0] :limit-226 - [0:0] :limit-2260 - [0:0] :limit-2261 - [0:0] :limit-2262 - [0:0] :limit-2263 - [0:0] :limit-2264 - [0:0] :limit-2265 - [0:0] :limit-2266 - [0:0] :limit-2267 - [0:0] :limit-2268 - [0:0] :limit-2269 - [0:0] :limit-227 - [0:0] :limit-2270 - [0:0] :limit-2271 - [0:0] :limit-2272 - [0:0] :limit-2273 - [0:0] :limit-2274 - [0:0] :limit-2275 - [0:0] :limit-2276 - [0:0] :limit-2277 - [0:0] :limit-2278 - [0:0] :limit-2279 - [0:0] :limit-228 - [0:0] :limit-2280 - [0:0] :limit-2281 - [0:0] :limit-2282 - [0:0] :limit-2283 - [0:0] :limit-2284 - [0:0] :limit-2285 - [0:0] :limit-2286 - [0:0] :limit-2287 - [0:0] :limit-2288 - [0:0] :limit-2289 - [0:0] :limit-229 - [0:0] :limit-2290 - [0:0] :limit-2291 - [0:0] :limit-2292 - [0:0] :limit-2293 - [0:0] :limit-2294 - [0:0] :limit-2295 - [0:0] :limit-2296 - [0:0] :limit-2297 - [0:0] :limit-2298 - [0:0] :limit-2299 - [0:0] :limit-23 - [0:0] :limit-230 - [0:0] :limit-2300 - [0:0] :limit-2301 - [0:0] :limit-2302 - [0:0] :limit-2303 - [0:0] :limit-2304 - [0:0] :limit-2305 - [0:0] :limit-2306 - [0:0] :limit-2307 - [0:0] :limit-2308 - [0:0] :limit-2309 - [0:0] :limit-231 - [0:0] :limit-2310 - [0:0] :limit-2311 - [0:0] :limit-2312 - [0:0] :limit-2313 - [0:0] :limit-2314 - [0:0] :limit-2315 - [0:0] :limit-2316 - [0:0] :limit-2317 - [0:0] :limit-2318 - [0:0] :limit-2319 - [0:0] :limit-232 - [0:0] :limit-2320 - [0:0] :limit-2321 - [0:0] :limit-2322 - [0:0] :limit-2323 - [0:0] :limit-2324 - [0:0] :limit-2325 - [0:0] :limit-2326 - [0:0] :limit-2327 - [0:0] :limit-2328 - [0:0] :limit-2329 - [0:0] :limit-233 - [0:0] :limit-2330 - [0:0] :limit-2331 - [0:0] :limit-2332 - [0:0] :limit-2333 - [0:0] :limit-2334 - [0:0] :limit-2335 - [0:0] :limit-2336 - [0:0] :limit-2337 - [0:0] :limit-2338 - [0:0] :limit-2339 - [0:0] :limit-234 - [0:0] :limit-2340 - [0:0] :limit-2341 - [0:0] :limit-2342 - [0:0] :limit-2343 - [0:0] :limit-2344 - [0:0] :limit-2345 - [0:0] :limit-2346 - [0:0] :limit-2347 - [0:0] :limit-2348 - [0:0] :limit-2349 - [0:0] :limit-235 - [0:0] :limit-2350 - [0:0] :limit-2351 - [0:0] :limit-2352 - [0:0] :limit-2353 - [0:0] :limit-2354 - [0:0] :limit-2355 - [0:0] :limit-2356 - [0:0] :limit-2357 - [0:0] :limit-2358 - [0:0] :limit-2359 - [0:0] :limit-236 - [0:0] :limit-2360 - [0:0] :limit-2361 - [0:0] :limit-2362 - [0:0] :limit-2363 - [0:0] :limit-2364 - [0:0] :limit-2365 - [0:0] :limit-2366 - [0:0] :limit-2367 - [0:0] :limit-2368 - [0:0] :limit-2369 - [0:0] :limit-237 - [0:0] :limit-2370 - [0:0] :limit-2371 - [0:0] :limit-2372 - [0:0] :limit-2373 - [0:0] :limit-2374 - [0:0] :limit-2375 - [0:0] :limit-2376 - [0:0] :limit-2377 - [0:0] :limit-2378 - [0:0] :limit-2379 - [0:0] :limit-238 - [0:0] :limit-2380 - [0:0] :limit-2381 - [0:0] :limit-2382 - [0:0] :limit-2383 - [0:0] :limit-2384 - [0:0] :limit-2385 - [0:0] :limit-2386 - [0:0] :limit-2387 - [0:0] :limit-2388 - [0:0] :limit-2389 - [0:0] :limit-239 - [0:0] :limit-2390 - [0:0] :limit-2391 - [0:0] :limit-2392 - [0:0] :limit-2393 - [0:0] :limit-2394 - [0:0] :limit-2395 - [0:0] :limit-2396 - [0:0] :limit-2397 - [0:0] :limit-2398 - [0:0] :limit-2399 - [0:0] :limit-24 - [0:0] :limit-240 - [0:0] :limit-2400 - [0:0] :limit-2401 - [0:0] :limit-2402 - [0:0] :limit-2403 - [0:0] :limit-2404 - [0:0] :limit-2405 - [0:0] :limit-2406 - [0:0] :limit-2407 - [0:0] :limit-2408 - [0:0] :limit-2409 - [0:0] :limit-241 - [0:0] :limit-2410 - [0:0] :limit-2411 - [0:0] :limit-2412 - [0:0] :limit-2413 - [0:0] :limit-2414 - [0:0] :limit-2415 - [0:0] :limit-2416 - [0:0] :limit-2417 - [0:0] :limit-2418 - [0:0] :limit-2419 - [0:0] :limit-242 - [0:0] :limit-2420 - [0:0] :limit-2421 - [0:0] :limit-2422 - [0:0] :limit-2423 - [0:0] :limit-2424 - [0:0] :limit-2425 - [0:0] :limit-2426 - [0:0] :limit-2427 - [0:0] :limit-2428 - [0:0] :limit-2429 - [0:0] :limit-243 - [0:0] :limit-2430 - [0:0] :limit-2431 - [0:0] :limit-2432 - [0:0] :limit-2433 - [0:0] :limit-2434 - [0:0] :limit-2435 - [0:0] :limit-2436 - [0:0] :limit-2437 - [0:0] :limit-2438 - [0:0] :limit-2439 - [0:0] :limit-244 - [0:0] :limit-2440 - [0:0] :limit-2441 - [0:0] :limit-2442 - [0:0] :limit-2443 - [0:0] :limit-2444 - [0:0] :limit-2445 - [0:0] :limit-2446 - [0:0] :limit-2447 - [0:0] :limit-2448 - [0:0] :limit-2449 - [0:0] :limit-245 - [0:0] :limit-2450 - [0:0] :limit-2451 - [0:0] :limit-2452 - [0:0] :limit-2453 - [0:0] :limit-2454 - [0:0] :limit-2455 - [0:0] :limit-2456 - [0:0] :limit-2457 - [0:0] :limit-2458 - [0:0] :limit-2459 - [0:0] :limit-246 - [0:0] :limit-2460 - [0:0] :limit-2461 - [0:0] :limit-2462 - [0:0] :limit-2463 - [0:0] :limit-2464 - [0:0] :limit-2465 - [0:0] :limit-2466 - [0:0] :limit-2467 - [0:0] :limit-2468 - [0:0] :limit-2469 - [0:0] :limit-247 - [0:0] :limit-2470 - [0:0] :limit-2471 - [0:0] :limit-2472 - [0:0] :limit-2473 - [0:0] :limit-2474 - [0:0] :limit-2475 - [0:0] :limit-2476 - [0:0] :limit-2477 - [0:0] :limit-2478 - [0:0] :limit-2479 - [0:0] :limit-248 - [0:0] :limit-2480 - [0:0] :limit-2481 - [0:0] :limit-2482 - [0:0] :limit-2483 - [0:0] :limit-2484 - [0:0] :limit-2485 - [0:0] :limit-2486 - [0:0] :limit-2487 - [0:0] :limit-2488 - [0:0] :limit-2489 - [0:0] :limit-249 - [0:0] :limit-2490 - [0:0] :limit-2491 - [0:0] :limit-2492 - [0:0] :limit-2493 - [0:0] :limit-2494 - [0:0] :limit-2495 - [0:0] :limit-2496 - [0:0] :limit-2497 - [0:0] :limit-2498 - [0:0] :limit-2499 - [0:0] :limit-25 - [0:0] :limit-250 - [0:0] :limit-2500 - [0:0] :limit-2501 - [0:0] :limit-2502 - [0:0] :limit-2503 - [0:0] :limit-2504 - [0:0] :limit-2505 - [0:0] :limit-2506 - [0:0] :limit-2507 - [0:0] :limit-2508 - [0:0] :limit-2509 - [0:0] :limit-251 - [0:0] :limit-2510 - [0:0] :limit-2511 - [0:0] :limit-2512 - [0:0] :limit-2513 - [0:0] :limit-2514 - [0:0] :limit-2515 - [0:0] :limit-2516 - [0:0] :limit-2517 - [0:0] :limit-2518 - [0:0] :limit-2519 - [0:0] :limit-252 - [0:0] :limit-2520 - [0:0] :limit-2521 - [0:0] :limit-2522 - [0:0] :limit-2523 - [0:0] :limit-2524 - [0:0] :limit-2525 - [0:0] :limit-2526 - [0:0] :limit-2527 - [0:0] :limit-2528 - [0:0] :limit-2529 - [0:0] :limit-253 - [0:0] :limit-2530 - [0:0] :limit-2531 - [0:0] :limit-2532 - [0:0] :limit-2533 - [0:0] :limit-2534 - [0:0] :limit-2535 - [0:0] :limit-2536 - [0:0] :limit-2537 - [0:0] :limit-2538 - [0:0] :limit-2539 - [0:0] :limit-254 - [0:0] :limit-2540 - [0:0] :limit-2541 - [0:0] :limit-2542 - [0:0] :limit-2543 - [0:0] :limit-2544 - [0:0] :limit-2545 - [0:0] :limit-2546 - [0:0] :limit-2547 - [0:0] :limit-2548 - [0:0] :limit-2549 - [0:0] :limit-255 - [0:0] :limit-2550 - [0:0] :limit-2551 - [0:0] :limit-2552 - [0:0] :limit-2553 - [0:0] :limit-2554 - [0:0] :limit-2555 - [0:0] :limit-2556 - [0:0] :limit-2557 - [0:0] :limit-2558 - [0:0] :limit-2559 - [0:0] :limit-256 - [0:0] :limit-2560 - [0:0] :limit-2561 - [0:0] :limit-2562 - [0:0] :limit-2563 - [0:0] :limit-2564 - [0:0] :limit-2565 - [0:0] :limit-2566 - [0:0] :limit-2567 - [0:0] :limit-2568 - [0:0] :limit-2569 - [0:0] :limit-257 - [0:0] :limit-2570 - [0:0] :limit-2571 - [0:0] :limit-2572 - [0:0] :limit-2573 - [0:0] :limit-2574 - [0:0] :limit-2575 - [0:0] :limit-2576 - [0:0] :limit-2577 - [0:0] :limit-2578 - [0:0] :limit-2579 - [0:0] :limit-258 - [0:0] :limit-2580 - [0:0] :limit-2581 - [0:0] :limit-2582 - [0:0] :limit-2583 - [0:0] :limit-2584 - [0:0] :limit-2585 - [0:0] :limit-2586 - [0:0] :limit-2587 - [0:0] :limit-2588 - [0:0] :limit-2589 - [0:0] :limit-259 - [0:0] :limit-2590 - [0:0] :limit-2591 - [0:0] :limit-2592 - [0:0] :limit-2593 - [0:0] :limit-2594 - [0:0] :limit-2595 - [0:0] :limit-2596 - [0:0] :limit-2597 - [0:0] :limit-2598 - [0:0] :limit-2599 - [0:0] :limit-26 - [0:0] :limit-260 - [0:0] :limit-2600 - [0:0] :limit-2601 - [0:0] :limit-2602 - [0:0] :limit-2603 - [0:0] :limit-2604 - [0:0] :limit-2605 - [0:0] :limit-2606 - [0:0] :limit-2607 - [0:0] :limit-2608 - [0:0] :limit-2609 - [0:0] :limit-261 - [0:0] :limit-2610 - [0:0] :limit-2611 - [0:0] :limit-2612 - [0:0] :limit-2613 - [0:0] :limit-2614 - [0:0] :limit-2615 - [0:0] :limit-2616 - [0:0] :limit-2617 - [0:0] :limit-2618 - [0:0] :limit-2619 - [0:0] :limit-262 - [0:0] :limit-2620 - [0:0] :limit-2621 - [0:0] :limit-2622 - [0:0] :limit-2623 - [0:0] :limit-2624 - [0:0] :limit-2625 - [0:0] :limit-2626 - [0:0] :limit-2627 - [0:0] :limit-2628 - [0:0] :limit-2629 - [0:0] :limit-263 - [0:0] :limit-2630 - [0:0] :limit-2631 - [0:0] :limit-2632 - [0:0] :limit-2633 - [0:0] :limit-2634 - [0:0] :limit-2635 - [0:0] :limit-2636 - [0:0] :limit-2637 - [0:0] :limit-2638 - [0:0] :limit-2639 - [0:0] :limit-264 - [0:0] :limit-2640 - [0:0] :limit-2641 - [0:0] :limit-2642 - [0:0] :limit-2643 - [0:0] :limit-2644 - [0:0] :limit-2645 - [0:0] :limit-2646 - [0:0] :limit-2647 - [0:0] :limit-2648 - [0:0] :limit-2649 - [0:0] :limit-265 - [0:0] :limit-2650 - [0:0] :limit-2651 - [0:0] :limit-2652 - [0:0] :limit-2653 - [0:0] :limit-2654 - [0:0] :limit-2655 - [0:0] :limit-2656 - [0:0] :limit-2657 - [0:0] :limit-2658 - [0:0] :limit-2659 - [0:0] :limit-266 - [0:0] :limit-2660 - [0:0] :limit-2661 - [0:0] :limit-2662 - [0:0] :limit-2663 - [0:0] :limit-2664 - [0:0] :limit-2665 - [0:0] :limit-2666 - [0:0] :limit-2667 - [0:0] :limit-2668 - [0:0] :limit-2669 - [0:0] :limit-267 - [0:0] :limit-2670 - [0:0] :limit-2671 - [0:0] :limit-2672 - [0:0] :limit-2673 - [0:0] :limit-2674 - [0:0] :limit-2675 - [0:0] :limit-2676 - [0:0] :limit-2677 - [0:0] :limit-2678 - [0:0] :limit-2679 - [0:0] :limit-268 - [0:0] :limit-2680 - [0:0] :limit-2681 - [0:0] :limit-2682 - [0:0] :limit-2683 - [0:0] :limit-2684 - [0:0] :limit-2685 - [0:0] :limit-2686 - [0:0] :limit-2687 - [0:0] :limit-2688 - [0:0] :limit-2689 - [0:0] :limit-269 - [0:0] :limit-2690 - [0:0] :limit-2691 - [0:0] :limit-2692 - [0:0] :limit-2693 - [0:0] :limit-2694 - [0:0] :limit-2695 - [0:0] :limit-2696 - [0:0] :limit-2697 - [0:0] :limit-2698 - [0:0] :limit-2699 - [0:0] :limit-27 - [0:0] :limit-270 - [0:0] :limit-2700 - [0:0] :limit-2701 - [0:0] :limit-2702 - [0:0] :limit-2703 - [0:0] :limit-2704 - [0:0] :limit-2705 - [0:0] :limit-2706 - [0:0] :limit-2707 - [0:0] :limit-2708 - [0:0] :limit-2709 - [0:0] :limit-271 - [0:0] :limit-2710 - [0:0] :limit-2711 - [0:0] :limit-2712 - [0:0] :limit-2713 - [0:0] :limit-2714 - [0:0] :limit-2715 - [0:0] :limit-2716 - [0:0] :limit-2717 - [0:0] :limit-2718 - [0:0] :limit-2719 - [0:0] :limit-272 - [0:0] :limit-2720 - [0:0] :limit-2721 - [0:0] :limit-2722 - [0:0] :limit-2723 - [0:0] :limit-2724 - [0:0] :limit-2725 - [0:0] :limit-2726 - [0:0] :limit-2727 - [0:0] :limit-2728 - [0:0] :limit-2729 - [0:0] :limit-273 - [0:0] :limit-2730 - [0:0] :limit-2731 - [0:0] :limit-2732 - [0:0] :limit-2733 - [0:0] :limit-2734 - [0:0] :limit-2735 - [0:0] :limit-2736 - [0:0] :limit-2737 - [0:0] :limit-2738 - [0:0] :limit-2739 - [0:0] :limit-274 - [0:0] :limit-2740 - [0:0] :limit-2741 - [0:0] :limit-2742 - [0:0] :limit-2743 - [0:0] :limit-2744 - [0:0] :limit-2745 - [0:0] :limit-2746 - [0:0] :limit-2747 - [0:0] :limit-2748 - [0:0] :limit-2749 - [0:0] :limit-275 - [0:0] :limit-2750 - [0:0] :limit-2751 - [0:0] :limit-2752 - [0:0] :limit-2753 - [0:0] :limit-2754 - [0:0] :limit-2755 - [0:0] :limit-2756 - [0:0] :limit-2757 - [0:0] :limit-2758 - [0:0] :limit-2759 - [0:0] :limit-276 - [0:0] :limit-2760 - [0:0] :limit-2761 - [0:0] :limit-2762 - [0:0] :limit-2763 - [0:0] :limit-2764 - [0:0] :limit-2765 - [0:0] :limit-2766 - [0:0] :limit-2767 - [0:0] :limit-2768 - [0:0] :limit-2769 - [0:0] :limit-277 - [0:0] :limit-2770 - [0:0] :limit-2771 - [0:0] :limit-2772 - [0:0] :limit-2773 - [0:0] :limit-2774 - [0:0] :limit-2775 - [0:0] :limit-2776 - [0:0] :limit-2777 - [0:0] :limit-2778 - [0:0] :limit-2779 - [0:0] :limit-278 - [0:0] :limit-2780 - [0:0] :limit-2781 - [0:0] :limit-2782 - [0:0] :limit-2783 - [0:0] :limit-2784 - [0:0] :limit-2785 - [0:0] :limit-2786 - [0:0] :limit-2787 - [0:0] :limit-2788 - [0:0] :limit-2789 - [0:0] :limit-279 - [0:0] :limit-2790 - [0:0] :limit-2791 - [0:0] :limit-2792 - [0:0] :limit-2793 - [0:0] :limit-2794 - [0:0] :limit-2795 - [0:0] :limit-2796 - [0:0] :limit-2797 - [0:0] :limit-2798 - [0:0] :limit-2799 - [0:0] :limit-28 - [0:0] :limit-280 - [0:0] :limit-2800 - [0:0] :limit-2801 - [0:0] :limit-2802 - [0:0] :limit-2803 - [0:0] :limit-2804 - [0:0] :limit-2805 - [0:0] :limit-2806 - [0:0] :limit-2807 - [0:0] :limit-2808 - [0:0] :limit-2809 - [0:0] :limit-281 - [0:0] :limit-2810 - [0:0] :limit-2811 - [0:0] :limit-2812 - [0:0] :limit-2813 - [0:0] :limit-2814 - [0:0] :limit-2815 - [0:0] :limit-2816 - [0:0] :limit-2817 - [0:0] :limit-2818 - [0:0] :limit-2819 - [0:0] :limit-282 - [0:0] :limit-2820 - [0:0] :limit-2821 - [0:0] :limit-2822 - [0:0] :limit-2823 - [0:0] :limit-2824 - [0:0] :limit-2825 - [0:0] :limit-2826 - [0:0] :limit-2827 - [0:0] :limit-2828 - [0:0] :limit-2829 - [0:0] :limit-283 - [0:0] :limit-2830 - [0:0] :limit-2831 - [0:0] :limit-2832 - [0:0] :limit-2833 - [0:0] :limit-2834 - [0:0] :limit-2835 - [0:0] :limit-2836 - [0:0] :limit-2837 - [0:0] :limit-2838 - [0:0] :limit-2839 - [0:0] :limit-284 - [0:0] :limit-2840 - [0:0] :limit-2841 - [0:0] :limit-2842 - [0:0] :limit-2843 - [0:0] :limit-2844 - [0:0] :limit-2845 - [0:0] :limit-2846 - [0:0] :limit-2847 - [0:0] :limit-2848 - [0:0] :limit-2849 - [0:0] :limit-285 - [0:0] :limit-2850 - [0:0] :limit-2851 - [0:0] :limit-2852 - [0:0] :limit-2853 - [0:0] :limit-2854 - [0:0] :limit-2855 - [0:0] :limit-2856 - [0:0] :limit-2857 - [0:0] :limit-2858 - [0:0] :limit-2859 - [0:0] :limit-286 - [0:0] :limit-2860 - [0:0] :limit-2861 - [0:0] :limit-2862 - [0:0] :limit-2863 - [0:0] :limit-2864 - [0:0] :limit-2865 - [0:0] :limit-2866 - [0:0] :limit-2867 - [0:0] :limit-2868 - [0:0] :limit-2869 - [0:0] :limit-287 - [0:0] :limit-2870 - [0:0] :limit-2871 - [0:0] :limit-2872 - [0:0] :limit-2873 - [0:0] :limit-2874 - [0:0] :limit-2875 - [0:0] :limit-2876 - [0:0] :limit-2877 - [0:0] :limit-2878 - [0:0] :limit-2879 - [0:0] :limit-288 - [0:0] :limit-2880 - [0:0] :limit-2881 - [0:0] :limit-2882 - [0:0] :limit-2883 - [0:0] :limit-2884 - [0:0] :limit-2885 - [0:0] :limit-2886 - [0:0] :limit-2887 - [0:0] :limit-2888 - [0:0] :limit-2889 - [0:0] :limit-289 - [0:0] :limit-2890 - [0:0] :limit-2891 - [0:0] :limit-2892 - [0:0] :limit-2893 - [0:0] :limit-2894 - [0:0] :limit-2895 - [0:0] :limit-2896 - [0:0] :limit-2897 - [0:0] :limit-2898 - [0:0] :limit-2899 - [0:0] :limit-29 - [0:0] :limit-290 - [0:0] :limit-2900 - [0:0] :limit-2901 - [0:0] :limit-2902 - [0:0] :limit-2903 - [0:0] :limit-2904 - [0:0] :limit-2905 - [0:0] :limit-2906 - [0:0] :limit-2907 - [0:0] :limit-2908 - [0:0] :limit-2909 - [0:0] :limit-291 - [0:0] :limit-2910 - [0:0] :limit-2911 - [0:0] :limit-2912 - [0:0] :limit-2913 - [0:0] :limit-2914 - [0:0] :limit-2915 - [0:0] :limit-2916 - [0:0] :limit-2917 - [0:0] :limit-2918 - [0:0] :limit-2919 - [0:0] :limit-292 - [0:0] :limit-2920 - [0:0] :limit-2921 - [0:0] :limit-2922 - [0:0] :limit-2923 - [0:0] :limit-2924 - [0:0] :limit-2925 - [0:0] :limit-2926 - [0:0] :limit-2927 - [0:0] :limit-293 - [0:0] :limit-294 - [0:0] :limit-295 - [0:0] :limit-296 - [0:0] :limit-297 - [0:0] :limit-298 - [0:0] :limit-299 - [0:0] :limit-3 - [0:0] :limit-30 - [0:0] :limit-300 - [0:0] :limit-301 - [0:0] :limit-302 - [0:0] :limit-303 - [0:0] :limit-304 - [0:0] :limit-305 - [0:0] :limit-306 - [0:0] :limit-307 - [0:0] :limit-308 - [0:0] :limit-309 - [0:0] :limit-31 - [0:0] :limit-310 - [0:0] :limit-311 - [0:0] :limit-312 - [0:0] :limit-313 - [0:0] :limit-314 - [0:0] :limit-315 - [0:0] :limit-316 - [0:0] :limit-317 - [0:0] :limit-318 - [0:0] :limit-319 - [0:0] :limit-32 - [0:0] :limit-320 - [0:0] :limit-321 - [0:0] :limit-322 - [0:0] :limit-323 - [0:0] :limit-324 - [0:0] :limit-325 - [0:0] :limit-326 - [0:0] :limit-327 - [0:0] :limit-328 - [0:0] :limit-329 - [0:0] :limit-33 - [0:0] :limit-330 - [0:0] :limit-331 - [0:0] :limit-332 - [0:0] :limit-333 - [0:0] :limit-334 - [0:0] :limit-335 - [0:0] :limit-336 - [0:0] :limit-337 - [0:0] :limit-338 - [0:0] :limit-339 - [0:0] :limit-34 - [0:0] :limit-340 - [0:0] :limit-341 - [0:0] :limit-342 - [0:0] :limit-343 - [0:0] :limit-344 - [0:0] :limit-345 - [0:0] :limit-346 - [0:0] :limit-347 - [0:0] :limit-348 - [0:0] :limit-349 - [0:0] :limit-35 - [0:0] :limit-350 - [0:0] :limit-351 - [0:0] :limit-352 - [0:0] :limit-353 - [0:0] :limit-354 - [0:0] :limit-355 - [0:0] :limit-356 - [0:0] :limit-357 - [0:0] :limit-358 - [0:0] :limit-359 - [0:0] :limit-36 - [0:0] :limit-360 - [0:0] :limit-361 - [0:0] :limit-362 - [0:0] :limit-363 - [0:0] :limit-364 - [0:0] :limit-365 - [0:0] :limit-366 - [0:0] :limit-367 - [0:0] :limit-368 - [0:0] :limit-369 - [0:0] :limit-37 - [0:0] :limit-370 - [0:0] :limit-371 - [0:0] :limit-372 - [0:0] :limit-373 - [0:0] :limit-374 - [0:0] :limit-375 - [0:0] :limit-376 - [0:0] :limit-377 - [0:0] :limit-378 - [0:0] :limit-379 - [0:0] :limit-38 - [0:0] :limit-380 - [0:0] :limit-381 - [0:0] :limit-382 - [0:0] :limit-383 - [0:0] :limit-384 - [0:0] :limit-385 - [0:0] :limit-386 - [0:0] :limit-387 - [0:0] :limit-388 - [0:0] :limit-389 - [0:0] :limit-39 - [0:0] :limit-390 - [0:0] :limit-391 - [0:0] :limit-392 - [0:0] :limit-393 - [0:0] :limit-394 - [0:0] :limit-395 - [0:0] :limit-396 - [0:0] :limit-397 - [0:0] :limit-398 - [0:0] :limit-399 - [0:0] :limit-4 - [0:0] :limit-40 - [0:0] :limit-400 - [0:0] :limit-401 - [0:0] :limit-402 - [0:0] :limit-403 - [0:0] :limit-404 - [0:0] :limit-405 - [0:0] :limit-406 - [0:0] :limit-407 - [0:0] :limit-408 - [0:0] :limit-409 - [0:0] :limit-41 - [0:0] :limit-410 - [0:0] :limit-411 - [0:0] :limit-412 - [0:0] :limit-413 - [0:0] :limit-414 - [0:0] :limit-415 - [0:0] :limit-416 - [0:0] :limit-417 - [0:0] :limit-418 - [0:0] :limit-419 - [0:0] :limit-42 - [0:0] :limit-420 - [0:0] :limit-421 - [0:0] :limit-422 - [0:0] :limit-423 - [0:0] :limit-424 - [0:0] :limit-425 - [0:0] :limit-426 - [0:0] :limit-427 - [0:0] :limit-428 - [0:0] :limit-429 - [0:0] :limit-43 - [0:0] :limit-430 - [0:0] :limit-431 - [0:0] :limit-432 - [0:0] :limit-433 - [0:0] :limit-434 - [0:0] :limit-435 - [0:0] :limit-436 - [0:0] :limit-437 - [0:0] :limit-438 - [0:0] :limit-439 - [0:0] :limit-44 - [0:0] :limit-440 - [0:0] :limit-441 - [0:0] :limit-442 - [0:0] :limit-443 - [0:0] :limit-444 - [0:0] :limit-445 - [0:0] :limit-446 - [0:0] :limit-447 - [0:0] :limit-448 - [0:0] :limit-449 - [0:0] :limit-45 - [0:0] :limit-450 - [0:0] :limit-451 - [0:0] :limit-452 - [0:0] :limit-453 - [0:0] :limit-454 - [0:0] :limit-455 - [0:0] :limit-456 - [0:0] :limit-457 - [0:0] :limit-458 - [0:0] :limit-459 - [0:0] :limit-46 - [0:0] :limit-460 - [0:0] :limit-461 - [0:0] :limit-462 - [0:0] :limit-463 - [0:0] :limit-464 - [0:0] :limit-465 - [0:0] :limit-466 - [0:0] :limit-467 - [0:0] :limit-468 - [0:0] :limit-469 - [0:0] :limit-47 - [0:0] :limit-470 - [0:0] :limit-471 - [0:0] :limit-472 - [0:0] :limit-473 - [0:0] :limit-474 - [0:0] :limit-475 - [0:0] :limit-476 - [0:0] :limit-477 - [0:0] :limit-478 - [0:0] :limit-479 - [0:0] :limit-48 - [0:0] :limit-480 - [0:0] :limit-481 - [0:0] :limit-482 - [0:0] :limit-483 - [0:0] :limit-484 - [0:0] :limit-485 - [0:0] :limit-486 - [0:0] :limit-487 - [0:0] :limit-488 - [0:0] :limit-489 - [0:0] :limit-49 - [0:0] :limit-490 - [0:0] :limit-491 - [0:0] :limit-492 - [0:0] :limit-493 - [0:0] :limit-494 - [0:0] :limit-495 - [0:0] :limit-496 - [0:0] :limit-497 - [0:0] :limit-498 - [0:0] :limit-499 - [0:0] :limit-5 - [0:0] :limit-50 - [0:0] :limit-500 - [0:0] :limit-501 - [0:0] :limit-502 - [0:0] :limit-503 - [0:0] :limit-504 - [0:0] :limit-505 - [0:0] :limit-506 - [0:0] :limit-507 - [0:0] :limit-508 - [0:0] :limit-509 - [0:0] :limit-51 - [0:0] :limit-510 - [0:0] :limit-511 - [0:0] :limit-512 - [0:0] :limit-513 - [0:0] :limit-514 - [0:0] :limit-515 - [0:0] :limit-516 - [0:0] :limit-517 - [0:0] :limit-518 - [0:0] :limit-519 - [0:0] :limit-52 - [0:0] :limit-520 - [0:0] :limit-521 - [0:0] :limit-522 - [0:0] :limit-523 - [0:0] :limit-524 - [0:0] :limit-525 - [0:0] :limit-526 - [0:0] :limit-527 - [0:0] :limit-528 - [0:0] :limit-529 - [0:0] :limit-53 - [0:0] :limit-530 - [0:0] :limit-531 - [0:0] :limit-532 - [0:0] :limit-533 - [0:0] :limit-534 - [0:0] :limit-535 - [0:0] :limit-536 - [0:0] :limit-537 - [0:0] :limit-538 - [0:0] :limit-539 - [0:0] :limit-54 - [0:0] :limit-540 - [0:0] :limit-541 - [0:0] :limit-542 - [0:0] :limit-543 - [0:0] :limit-544 - [0:0] :limit-545 - [0:0] :limit-546 - [0:0] :limit-547 - [0:0] :limit-548 - [0:0] :limit-549 - [0:0] :limit-55 - [0:0] :limit-550 - [0:0] :limit-551 - [0:0] :limit-552 - [0:0] :limit-553 - [0:0] :limit-554 - [0:0] :limit-555 - [0:0] :limit-556 - [0:0] :limit-557 - [0:0] :limit-558 - [0:0] :limit-559 - [0:0] :limit-56 - [0:0] :limit-560 - [0:0] :limit-561 - [0:0] :limit-562 - [0:0] :limit-563 - [0:0] :limit-564 - [0:0] :limit-565 - [0:0] :limit-566 - [0:0] :limit-567 - [0:0] :limit-568 - [0:0] :limit-569 - [0:0] :limit-57 - [0:0] :limit-570 - [0:0] :limit-571 - [0:0] :limit-572 - [0:0] :limit-573 - [0:0] :limit-574 - [0:0] :limit-575 - [0:0] :limit-576 - [0:0] :limit-577 - [0:0] :limit-578 - [0:0] :limit-579 - [0:0] :limit-58 - [0:0] :limit-580 - [0:0] :limit-581 - [0:0] :limit-582 - [0:0] :limit-583 - [0:0] :limit-584 - [0:0] :limit-585 - [0:0] :limit-586 - [0:0] :limit-587 - [0:0] :limit-588 - [0:0] :limit-589 - [0:0] :limit-59 - [0:0] :limit-590 - [0:0] :limit-591 - [0:0] :limit-592 - [0:0] :limit-593 - [0:0] :limit-594 - [0:0] :limit-595 - [0:0] :limit-596 - [0:0] :limit-597 - [0:0] :limit-598 - [0:0] :limit-599 - [0:0] :limit-6 - [0:0] :limit-60 - [0:0] :limit-600 - [0:0] :limit-601 - [0:0] :limit-602 - [0:0] :limit-603 - [0:0] :limit-604 - [0:0] :limit-605 - [0:0] :limit-606 - [0:0] :limit-607 - [0:0] :limit-608 - [0:0] :limit-609 - [0:0] :limit-61 - [0:0] :limit-610 - [0:0] :limit-611 - [0:0] :limit-612 - [0:0] :limit-613 - [0:0] :limit-614 - [0:0] :limit-615 - [0:0] :limit-616 - [0:0] :limit-617 - [0:0] :limit-618 - [0:0] :limit-619 - [0:0] :limit-62 - [0:0] :limit-620 - [0:0] :limit-621 - [0:0] :limit-622 - [0:0] :limit-623 - [0:0] :limit-624 - [0:0] :limit-625 - [0:0] :limit-626 - [0:0] :limit-627 - [0:0] :limit-628 - [0:0] :limit-629 - [0:0] :limit-63 - [0:0] :limit-630 - [0:0] :limit-631 - [0:0] :limit-632 - [0:0] :limit-633 - [0:0] :limit-634 - [0:0] :limit-635 - [0:0] :limit-636 - [0:0] :limit-637 - [0:0] :limit-638 - [0:0] :limit-639 - [0:0] :limit-64 - [0:0] :limit-640 - [0:0] :limit-641 - [0:0] :limit-642 - [0:0] :limit-643 - [0:0] :limit-644 - [0:0] :limit-645 - [0:0] :limit-646 - [0:0] :limit-647 - [0:0] :limit-648 - [0:0] :limit-649 - [0:0] :limit-65 - [0:0] :limit-650 - [0:0] :limit-651 - [0:0] :limit-652 - [0:0] :limit-653 - [0:0] :limit-654 - [0:0] :limit-655 - [0:0] :limit-656 - [0:0] :limit-657 - [0:0] :limit-658 - [0:0] :limit-659 - [0:0] :limit-66 - [0:0] :limit-660 - [0:0] :limit-661 - [0:0] :limit-662 - [0:0] :limit-663 - [0:0] :limit-664 - [0:0] :limit-665 - [0:0] :limit-666 - [0:0] :limit-667 - [0:0] :limit-668 - [0:0] :limit-669 - [0:0] :limit-67 - [0:0] :limit-670 - [0:0] :limit-671 - [0:0] :limit-672 - [0:0] :limit-673 - [0:0] :limit-674 - [0:0] :limit-675 - [0:0] :limit-676 - [0:0] :limit-677 - [0:0] :limit-678 - [0:0] :limit-679 - [0:0] :limit-68 - [0:0] :limit-680 - [0:0] :limit-681 - [0:0] :limit-682 - [0:0] :limit-683 - [0:0] :limit-684 - [0:0] :limit-685 - [0:0] :limit-686 - [0:0] :limit-687 - [0:0] :limit-688 - [0:0] :limit-689 - [0:0] :limit-69 - [0:0] :limit-690 - [0:0] :limit-691 - [0:0] :limit-692 - [0:0] :limit-693 - [0:0] :limit-694 - [0:0] :limit-695 - [0:0] :limit-696 - [0:0] :limit-697 - [0:0] :limit-698 - [0:0] :limit-699 - [0:0] :limit-7 - [0:0] :limit-70 - [0:0] :limit-700 - [0:0] :limit-701 - [0:0] :limit-702 - [0:0] :limit-703 - [0:0] :limit-704 - [0:0] :limit-705 - [0:0] :limit-706 - [0:0] :limit-707 - [0:0] :limit-708 - [0:0] :limit-709 - [0:0] :limit-71 - [0:0] :limit-710 - [0:0] :limit-711 - [0:0] :limit-712 - [0:0] :limit-713 - [0:0] :limit-714 - [0:0] :limit-715 - [0:0] :limit-716 - [0:0] :limit-717 - [0:0] :limit-718 - [0:0] :limit-719 - [0:0] :limit-72 - [0:0] :limit-720 - [0:0] :limit-721 - [0:0] :limit-722 - [0:0] :limit-723 - [0:0] :limit-724 - [0:0] :limit-725 - [0:0] :limit-726 - [0:0] :limit-727 - [0:0] :limit-728 - [0:0] :limit-729 - [0:0] :limit-73 - [0:0] :limit-730 - [0:0] :limit-731 - [0:0] :limit-732 - [0:0] :limit-733 - [0:0] :limit-734 - [0:0] :limit-735 - [0:0] :limit-736 - [0:0] :limit-737 - [0:0] :limit-738 - [0:0] :limit-739 - [0:0] :limit-74 - [0:0] :limit-740 - [0:0] :limit-741 - [0:0] :limit-742 - [0:0] :limit-743 - [0:0] :limit-744 - [0:0] :limit-745 - [0:0] :limit-746 - [0:0] :limit-747 - [0:0] :limit-748 - [0:0] :limit-749 - [0:0] :limit-75 - [0:0] :limit-750 - [0:0] :limit-751 - [0:0] :limit-752 - [0:0] :limit-753 - [0:0] :limit-754 - [0:0] :limit-755 - [0:0] :limit-756 - [0:0] :limit-757 - [0:0] :limit-758 - [0:0] :limit-759 - [0:0] :limit-76 - [0:0] :limit-760 - [0:0] :limit-761 - [0:0] :limit-762 - [0:0] :limit-763 - [0:0] :limit-764 - [0:0] :limit-765 - [0:0] :limit-766 - [0:0] :limit-767 - [0:0] :limit-768 - [0:0] :limit-769 - [0:0] :limit-77 - [0:0] :limit-770 - [0:0] :limit-771 - [0:0] :limit-772 - [0:0] :limit-773 - [0:0] :limit-774 - [0:0] :limit-775 - [0:0] :limit-776 - [0:0] :limit-777 - [0:0] :limit-778 - [0:0] :limit-779 - [0:0] :limit-78 - [0:0] :limit-780 - [0:0] :limit-781 - [0:0] :limit-782 - [0:0] :limit-783 - [0:0] :limit-784 - [0:0] :limit-785 - [0:0] :limit-786 - [0:0] :limit-787 - [0:0] :limit-788 - [0:0] :limit-789 - [0:0] :limit-79 - [0:0] :limit-790 - [0:0] :limit-791 - [0:0] :limit-792 - [0:0] :limit-793 - [0:0] :limit-794 - [0:0] :limit-795 - [0:0] :limit-796 - [0:0] :limit-797 - [0:0] :limit-798 - [0:0] :limit-799 - [0:0] :limit-8 - [0:0] :limit-80 - [0:0] :limit-800 - [0:0] :limit-801 - [0:0] :limit-802 - [0:0] :limit-803 - [0:0] :limit-804 - [0:0] :limit-805 - [0:0] :limit-806 - [0:0] :limit-807 - [0:0] :limit-808 - [0:0] :limit-809 - [0:0] :limit-81 - [0:0] :limit-810 - [0:0] :limit-811 - [0:0] :limit-812 - [0:0] :limit-813 - [0:0] :limit-814 - [0:0] :limit-815 - [0:0] :limit-816 - [0:0] :limit-817 - [0:0] :limit-818 - [0:0] :limit-819 - [0:0] :limit-82 - [0:0] :limit-820 - [0:0] :limit-821 - [0:0] :limit-822 - [0:0] :limit-823 - [0:0] :limit-824 - [0:0] :limit-825 - [0:0] :limit-826 - [0:0] :limit-827 - [0:0] :limit-828 - [0:0] :limit-829 - [0:0] :limit-83 - [0:0] :limit-830 - [0:0] :limit-831 - [0:0] :limit-832 - [0:0] :limit-833 - [0:0] :limit-834 - [0:0] :limit-835 - [0:0] :limit-836 - [0:0] :limit-837 - [0:0] :limit-838 - [0:0] :limit-839 - [0:0] :limit-84 - [0:0] :limit-840 - [0:0] :limit-841 - [0:0] :limit-842 - [0:0] :limit-843 - [0:0] :limit-844 - [0:0] :limit-845 - [0:0] :limit-846 - [0:0] :limit-847 - [0:0] :limit-848 - [0:0] :limit-849 - [0:0] :limit-85 - [0:0] :limit-850 - [0:0] :limit-851 - [0:0] :limit-852 - [0:0] :limit-853 - [0:0] :limit-854 - [0:0] :limit-855 - [0:0] :limit-856 - [0:0] :limit-857 - [0:0] :limit-858 - [0:0] :limit-859 - [0:0] :limit-86 - [0:0] :limit-860 - [0:0] :limit-861 - [0:0] :limit-862 - [0:0] :limit-863 - [0:0] :limit-864 - [0:0] :limit-865 - [0:0] :limit-866 - [0:0] :limit-867 - [0:0] :limit-868 - [0:0] :limit-869 - [0:0] :limit-87 - [0:0] :limit-870 - [0:0] :limit-871 - [0:0] :limit-872 - [0:0] :limit-873 - [0:0] :limit-874 - [0:0] :limit-875 - [0:0] :limit-876 - [0:0] :limit-877 - [0:0] :limit-878 - [0:0] :limit-879 - [0:0] :limit-88 - [0:0] :limit-880 - [0:0] :limit-881 - [0:0] :limit-882 - [0:0] :limit-883 - [0:0] :limit-884 - [0:0] :limit-885 - [0:0] :limit-886 - [0:0] :limit-887 - [0:0] :limit-888 - [0:0] :limit-889 - [0:0] :limit-89 - [0:0] :limit-890 - [0:0] :limit-891 - [0:0] :limit-892 - [0:0] :limit-893 - [0:0] :limit-894 - [0:0] :limit-895 - [0:0] :limit-896 - [0:0] :limit-897 - [0:0] :limit-898 - [0:0] :limit-899 - [0:0] :limit-9 - [0:0] :limit-90 - [0:0] :limit-900 - [0:0] :limit-901 - [0:0] :limit-902 - [0:0] :limit-903 - [0:0] :limit-904 - [0:0] :limit-905 - [0:0] :limit-906 - [0:0] :limit-907 - [0:0] :limit-908 - [0:0] :limit-909 - [0:0] :limit-91 - [0:0] :limit-910 - [0:0] :limit-911 - [0:0] :limit-912 - [0:0] :limit-913 - [0:0] :limit-914 - [0:0] :limit-915 - [0:0] :limit-916 - [0:0] :limit-917 - [0:0] :limit-918 - [0:0] :limit-919 - [0:0] :limit-92 - [0:0] :limit-920 - [0:0] :limit-921 - [0:0] :limit-922 - [0:0] :limit-923 - [0:0] :limit-924 - [0:0] :limit-925 - [0:0] :limit-926 - [0:0] :limit-927 - [0:0] :limit-928 - [0:0] :limit-929 - [0:0] :limit-93 - [0:0] :limit-930 - [0:0] :limit-931 - [0:0] :limit-932 - [0:0] :limit-933 - [0:0] :limit-934 - [0:0] :limit-935 - [0:0] :limit-936 - [0:0] :limit-937 - [0:0] :limit-938 - [0:0] :limit-939 - [0:0] :limit-94 - [0:0] :limit-940 - [0:0] :limit-941 - [0:0] :limit-942 - [0:0] :limit-943 - [0:0] :limit-944 - [0:0] :limit-945 - [0:0] :limit-946 - [0:0] :limit-947 - [0:0] :limit-948 - [0:0] :limit-949 - [0:0] :limit-95 - [0:0] :limit-950 - [0:0] :limit-951 - [0:0] :limit-952 - [0:0] :limit-953 - [0:0] :limit-954 - [0:0] :limit-955 - [0:0] :limit-956 - [0:0] :limit-957 - [0:0] :limit-958 - [0:0] :limit-959 - [0:0] :limit-96 - [0:0] :limit-960 - [0:0] :limit-961 - [0:0] :limit-962 - [0:0] :limit-963 - [0:0] :limit-964 - [0:0] :limit-965 - [0:0] :limit-966 - [0:0] :limit-967 - [0:0] :limit-968 - [0:0] :limit-969 - [0:0] :limit-97 - [0:0] :limit-970 - [0:0] :limit-971 - [0:0] :limit-972 - [0:0] :limit-973 - [0:0] :limit-974 - [0:0] :limit-975 - [0:0] :limit-976 - [0:0] :limit-977 - [0:0] :limit-978 - [0:0] :limit-979 - [0:0] :limit-98 - [0:0] :limit-980 - [0:0] :limit-981 - [0:0] :limit-982 - [0:0] :limit-983 - [0:0] :limit-984 - [0:0] :limit-985 - [0:0] :limit-986 - [0:0] :limit-987 - [0:0] :limit-988 - [0:0] :limit-989 - [0:0] :limit-99 - [0:0] :limit-990 - [0:0] :limit-991 - [0:0] :limit-992 - [0:0] :limit-993 - [0:0] :limit-994 - [0:0] :limit-995 - [0:0] :limit-996 - [0:0] :limit-997 - [0:0] :limit-998 - [0:0] :limit-999 - [0:0] :limit-ntp-0 - [0:0] :limit-ntp-1 - [0:0] :limit-ntp-10 - [0:0] :limit-ntp-100 - [0:0] :limit-ntp-101 - [0:0] :limit-ntp-102 - [0:0] :limit-ntp-103 - [0:0] :limit-ntp-104 - [0:0] :limit-ntp-105 - [0:0] :limit-ntp-106 - [0:0] :limit-ntp-107 - [0:0] :limit-ntp-108 - [0:0] :limit-ntp-109 - [0:0] :limit-ntp-11 - [0:0] :limit-ntp-110 - [0:0] :limit-ntp-111 - [0:0] :limit-ntp-112 - [0:0] :limit-ntp-113 - [0:0] :limit-ntp-114 - [0:0] :limit-ntp-115 - [0:0] :limit-ntp-116 - [0:0] :limit-ntp-117 - [0:0] :limit-ntp-118 - [0:0] :limit-ntp-119 - [0:0] :limit-ntp-12 - [0:0] :limit-ntp-120 - [0:0] :limit-ntp-122 - [0:0] :limit-ntp-123 - [0:0] :limit-ntp-124 - [0:0] :limit-ntp-125 - [0:0] :limit-ntp-126 - [0:0] :limit-ntp-128 - [0:0] :limit-ntp-129 - [0:0] :limit-ntp-13 - [0:0] :limit-ntp-130 - [0:0] :limit-ntp-131 - [0:0] :limit-ntp-132 - [0:0] :limit-ntp-133 - [0:0] :limit-ntp-134 - [0:0] :limit-ntp-135 - [0:0] :limit-ntp-136 - [0:0] :limit-ntp-137 - [0:0] :limit-ntp-138 - [0:0] :limit-ntp-139 - [0:0] :limit-ntp-14 - [0:0] :limit-ntp-140 - [0:0] :limit-ntp-142 - [0:0] :limit-ntp-143 - [0:0] :limit-ntp-144 - [0:0] :limit-ntp-145 - [0:0] :limit-ntp-146 - [0:0] :limit-ntp-148 - [0:0] :limit-ntp-149 - [0:0] :limit-ntp-15 - [0:0] :limit-ntp-150 - [0:0] :limit-ntp-151 - [0:0] :limit-ntp-152 - [0:0] :limit-ntp-153 - [0:0] :limit-ntp-154 - [0:0] :limit-ntp-155 - [0:0] :limit-ntp-156 - [0:0] :limit-ntp-157 - [0:0] :limit-ntp-158 - [0:0] :limit-ntp-159 - [0:0] :limit-ntp-16 - [0:0] :limit-ntp-160 - [0:0] :limit-ntp-162 - [0:0] :limit-ntp-163 - [0:0] :limit-ntp-164 - [0:0] :limit-ntp-165 - [0:0] :limit-ntp-166 - [0:0] :limit-ntp-168 - [0:0] :limit-ntp-169 - [0:0] :limit-ntp-17 - [0:0] :limit-ntp-170 - [0:0] :limit-ntp-171 - [0:0] :limit-ntp-172 - [0:0] :limit-ntp-173 - [0:0] :limit-ntp-174 - [0:0] :limit-ntp-175 - [0:0] :limit-ntp-176 - [0:0] :limit-ntp-177 - [0:0] :limit-ntp-178 - [0:0] :limit-ntp-179 - [0:0] :limit-ntp-18 - [0:0] :limit-ntp-180 - [0:0] :limit-ntp-182 - [0:0] :limit-ntp-183 - [0:0] :limit-ntp-184 - [0:0] :limit-ntp-185 - [0:0] :limit-ntp-186 - [0:0] :limit-ntp-188 - [0:0] :limit-ntp-189 - [0:0] :limit-ntp-19 - [0:0] :limit-ntp-190 - [0:0] :limit-ntp-191 - [0:0] :limit-ntp-192 - [0:0] :limit-ntp-193 - [0:0] :limit-ntp-194 - [0:0] :limit-ntp-195 - [0:0] :limit-ntp-196 - [0:0] :limit-ntp-197 - [0:0] :limit-ntp-198 - [0:0] :limit-ntp-199 - [0:0] :limit-ntp-2 - [0:0] :limit-ntp-20 - [0:0] :limit-ntp-200 - [0:0] :limit-ntp-201 - [0:0] :limit-ntp-202 - [0:0] :limit-ntp-203 - [0:0] :limit-ntp-204 - [0:0] :limit-ntp-205 - [0:0] :limit-ntp-206 - [0:0] :limit-ntp-207 - [0:0] :limit-ntp-208 - [0:0] :limit-ntp-209 - [0:0] :limit-ntp-21 - [0:0] :limit-ntp-210 - [0:0] :limit-ntp-212 - [0:0] :limit-ntp-213 - [0:0] :limit-ntp-214 - [0:0] :limit-ntp-215 - [0:0] :limit-ntp-216 - [0:0] :limit-ntp-218 - [0:0] :limit-ntp-219 - [0:0] :limit-ntp-22 - [0:0] :limit-ntp-220 - [0:0] :limit-ntp-221 - [0:0] :limit-ntp-222 - [0:0] :limit-ntp-223 - [0:0] :limit-ntp-224 - [0:0] :limit-ntp-225 - [0:0] :limit-ntp-226 - [0:0] :limit-ntp-227 - [0:0] :limit-ntp-228 - [0:0] :limit-ntp-229 - [0:0] :limit-ntp-23 - [0:0] :limit-ntp-230 - [0:0] :limit-ntp-232 - [0:0] :limit-ntp-233 - [0:0] :limit-ntp-234 - [0:0] :limit-ntp-235 - [0:0] :limit-ntp-236 - [0:0] :limit-ntp-238 - [0:0] :limit-ntp-239 - [0:0] :limit-ntp-24 - [0:0] :limit-ntp-240 - [0:0] :limit-ntp-241 - [0:0] :limit-ntp-242 - [0:0] :limit-ntp-243 - [0:0] :limit-ntp-244 - [0:0] :limit-ntp-245 - [0:0] :limit-ntp-246 - [0:0] :limit-ntp-247 - [0:0] :limit-ntp-248 - [0:0] :limit-ntp-249 - [0:0] :limit-ntp-25 - [0:0] :limit-ntp-250 - [0:0] :limit-ntp-252 - [0:0] :limit-ntp-253 - [0:0] :limit-ntp-254 - [0:0] :limit-ntp-255 - [0:0] :limit-ntp-256 - [0:0] :limit-ntp-258 - [0:0] :limit-ntp-259 - [0:0] :limit-ntp-26 - [0:0] :limit-ntp-260 - [0:0] :limit-ntp-261 - [0:0] :limit-ntp-262 - [0:0] :limit-ntp-263 - [0:0] :limit-ntp-264 - [0:0] :limit-ntp-265 - [0:0] :limit-ntp-266 - [0:0] :limit-ntp-267 - [0:0] :limit-ntp-268 - [0:0] :limit-ntp-269 - [0:0] :limit-ntp-27 - [0:0] :limit-ntp-270 - [0:0] :limit-ntp-272 - [0:0] :limit-ntp-273 - [0:0] :limit-ntp-274 - [0:0] :limit-ntp-275 - [0:0] :limit-ntp-276 - [0:0] :limit-ntp-278 - [0:0] :limit-ntp-279 - [0:0] :limit-ntp-28 - [0:0] :limit-ntp-280 - [0:0] :limit-ntp-281 - [0:0] :limit-ntp-282 - [0:0] :limit-ntp-283 - [0:0] :limit-ntp-284 - [0:0] :limit-ntp-285 - [0:0] :limit-ntp-286 - [0:0] :limit-ntp-287 - [0:0] :limit-ntp-288 - [0:0] :limit-ntp-289 - [0:0] :limit-ntp-29 - [0:0] :limit-ntp-290 - [0:0] :limit-ntp-291 - [0:0] :limit-ntp-292 - [0:0] :limit-ntp-293 - [0:0] :limit-ntp-294 - [0:0] :limit-ntp-295 - [0:0] :limit-ntp-296 - [0:0] :limit-ntp-297 - [0:0] :limit-ntp-298 - [0:0] :limit-ntp-299 - [0:0] :limit-ntp-3 - [0:0] :limit-ntp-30 - [0:0] :limit-ntp-300 - [0:0] :limit-ntp-302 - [0:0] :limit-ntp-303 - [0:0] :limit-ntp-304 - [0:0] :limit-ntp-305 - [0:0] :limit-ntp-306 - [0:0] :limit-ntp-308 - [0:0] :limit-ntp-309 - [0:0] :limit-ntp-310 - [0:0] :limit-ntp-311 - [0:0] :limit-ntp-312 - [0:0] :limit-ntp-313 - [0:0] :limit-ntp-314 - [0:0] :limit-ntp-315 - [0:0] :limit-ntp-316 - [0:0] :limit-ntp-317 - [0:0] :limit-ntp-318 - [0:0] :limit-ntp-319 - [0:0] :limit-ntp-32 - [0:0] :limit-ntp-320 - [0:0] :limit-ntp-322 - [0:0] :limit-ntp-323 - [0:0] :limit-ntp-324 - [0:0] :limit-ntp-325 - [0:0] :limit-ntp-326 - [0:0] :limit-ntp-328 - [0:0] :limit-ntp-329 - [0:0] :limit-ntp-33 - [0:0] :limit-ntp-330 - [0:0] :limit-ntp-331 - [0:0] :limit-ntp-332 - [0:0] :limit-ntp-333 - [0:0] :limit-ntp-334 - [0:0] :limit-ntp-335 - [0:0] :limit-ntp-336 - [0:0] :limit-ntp-337 - [0:0] :limit-ntp-338 - [0:0] :limit-ntp-339 - [0:0] :limit-ntp-34 - [0:0] :limit-ntp-340 - [0:0] :limit-ntp-342 - [0:0] :limit-ntp-343 - [0:0] :limit-ntp-344 - [0:0] :limit-ntp-345 - [0:0] :limit-ntp-346 - [0:0] :limit-ntp-348 - [0:0] :limit-ntp-349 - [0:0] :limit-ntp-35 - [0:0] :limit-ntp-350 - [0:0] :limit-ntp-351 - [0:0] :limit-ntp-352 - [0:0] :limit-ntp-353 - [0:0] :limit-ntp-354 - [0:0] :limit-ntp-355 - [0:0] :limit-ntp-356 - [0:0] :limit-ntp-357 - [0:0] :limit-ntp-358 - [0:0] :limit-ntp-359 - [0:0] :limit-ntp-36 - [0:0] :limit-ntp-360 - [0:0] :limit-ntp-362 - [0:0] :limit-ntp-363 - [0:0] :limit-ntp-364 - [0:0] :limit-ntp-365 - [0:0] :limit-ntp-366 - [0:0] :limit-ntp-368 - [0:0] :limit-ntp-369 - [0:0] :limit-ntp-370 - [0:0] :limit-ntp-371 - [0:0] :limit-ntp-372 - [0:0] :limit-ntp-373 - [0:0] :limit-ntp-374 - [0:0] :limit-ntp-375 - [0:0] :limit-ntp-376 - [0:0] :limit-ntp-377 - [0:0] :limit-ntp-378 - [0:0] :limit-ntp-379 - [0:0] :limit-ntp-38 - [0:0] :limit-ntp-380 - [0:0] :limit-ntp-381 - [0:0] :limit-ntp-382 - [0:0] :limit-ntp-383 - [0:0] :limit-ntp-384 - [0:0] :limit-ntp-385 - [0:0] :limit-ntp-386 - [0:0] :limit-ntp-387 - [0:0] :limit-ntp-388 - [0:0] :limit-ntp-389 - [0:0] :limit-ntp-39 - [0:0] :limit-ntp-390 - [0:0] :limit-ntp-392 - [0:0] :limit-ntp-393 - [0:0] :limit-ntp-394 - [0:0] :limit-ntp-395 - [0:0] :limit-ntp-396 - [0:0] :limit-ntp-398 - [0:0] :limit-ntp-399 - [0:0] :limit-ntp-4 - [0:0] :limit-ntp-40 - [0:0] :limit-ntp-400 - [0:0] :limit-ntp-401 - [0:0] :limit-ntp-402 - [0:0] :limit-ntp-403 - [0:0] :limit-ntp-404 - [0:0] :limit-ntp-405 - [0:0] :limit-ntp-406 - [0:0] :limit-ntp-407 - [0:0] :limit-ntp-408 - [0:0] :limit-ntp-409 - [0:0] :limit-ntp-41 - [0:0] :limit-ntp-410 - [0:0] :limit-ntp-412 - [0:0] :limit-ntp-413 - [0:0] :limit-ntp-414 - [0:0] :limit-ntp-415 - [0:0] :limit-ntp-416 - [0:0] :limit-ntp-418 - [0:0] :limit-ntp-419 - [0:0] :limit-ntp-42 - [0:0] :limit-ntp-420 - [0:0] :limit-ntp-421 - [0:0] :limit-ntp-422 - [0:0] :limit-ntp-423 - [0:0] :limit-ntp-424 - [0:0] :limit-ntp-425 - [0:0] :limit-ntp-426 - [0:0] :limit-ntp-427 - [0:0] :limit-ntp-428 - [0:0] :limit-ntp-429 - [0:0] :limit-ntp-43 - [0:0] :limit-ntp-430 - [0:0] :limit-ntp-432 - [0:0] :limit-ntp-433 - [0:0] :limit-ntp-434 - [0:0] :limit-ntp-435 - [0:0] :limit-ntp-436 - [0:0] :limit-ntp-438 - [0:0] :limit-ntp-439 - [0:0] :limit-ntp-44 - [0:0] :limit-ntp-440 - [0:0] :limit-ntp-441 - [0:0] :limit-ntp-442 - [0:0] :limit-ntp-443 - [0:0] :limit-ntp-444 - [0:0] :limit-ntp-445 - [0:0] :limit-ntp-446 - [0:0] :limit-ntp-447 - [0:0] :limit-ntp-448 - [0:0] :limit-ntp-449 - [0:0] :limit-ntp-45 - [0:0] :limit-ntp-450 - [0:0] :limit-ntp-452 - [0:0] :limit-ntp-453 - [0:0] :limit-ntp-454 - [0:0] :limit-ntp-455 - [0:0] :limit-ntp-456 - [0:0] :limit-ntp-458 - [0:0] :limit-ntp-459 - [0:0] :limit-ntp-46 - [0:0] :limit-ntp-460 - [0:0] :limit-ntp-461 - [0:0] :limit-ntp-462 - [0:0] :limit-ntp-463 - [0:0] :limit-ntp-464 - [0:0] :limit-ntp-465 - [0:0] :limit-ntp-466 - [0:0] :limit-ntp-467 - [0:0] :limit-ntp-468 - [0:0] :limit-ntp-469 - [0:0] :limit-ntp-47 - [0:0] :limit-ntp-470 - [0:0] :limit-ntp-471 - [0:0] :limit-ntp-472 - [0:0] :limit-ntp-473 - [0:0] :limit-ntp-474 - [0:0] :limit-ntp-475 - [0:0] :limit-ntp-476 - [0:0] :limit-ntp-477 - [0:0] :limit-ntp-478 - [0:0] :limit-ntp-479 - [0:0] :limit-ntp-48 - [0:0] :limit-ntp-480 - [0:0] :limit-ntp-482 - [0:0] :limit-ntp-483 - [0:0] :limit-ntp-484 - [0:0] :limit-ntp-485 - [0:0] :limit-ntp-486 - [0:0] :limit-ntp-488 - [0:0] :limit-ntp-489 - [0:0] :limit-ntp-49 - [0:0] :limit-ntp-490 - [0:0] :limit-ntp-491 - [0:0] :limit-ntp-492 - [0:0] :limit-ntp-493 - [0:0] :limit-ntp-494 - [0:0] :limit-ntp-495 - [0:0] :limit-ntp-496 - [0:0] :limit-ntp-497 - [0:0] :limit-ntp-498 - [0:0] :limit-ntp-499 - [0:0] :limit-ntp-5 - [0:0] :limit-ntp-50 - [0:0] :limit-ntp-500 - [0:0] :limit-ntp-502 - [0:0] :limit-ntp-503 - [0:0] :limit-ntp-504 - [0:0] :limit-ntp-505 - [0:0] :limit-ntp-506 - [0:0] :limit-ntp-508 - [0:0] :limit-ntp-509 - [0:0] :limit-ntp-510 - [0:0] :limit-ntp-511 - [0:0] :limit-ntp-512 - [0:0] :limit-ntp-513 - [0:0] :limit-ntp-514 - [0:0] :limit-ntp-515 - [0:0] :limit-ntp-516 - [0:0] :limit-ntp-517 - [0:0] :limit-ntp-518 - [0:0] :limit-ntp-519 - [0:0] :limit-ntp-52 - [0:0] :limit-ntp-520 - [0:0] :limit-ntp-522 - [0:0] :limit-ntp-523 - [0:0] :limit-ntp-524 - [0:0] :limit-ntp-525 - [0:0] :limit-ntp-526 - [0:0] :limit-ntp-528 - [0:0] :limit-ntp-529 - [0:0] :limit-ntp-53 - [0:0] :limit-ntp-530 - [0:0] :limit-ntp-531 - [0:0] :limit-ntp-532 - [0:0] :limit-ntp-533 - [0:0] :limit-ntp-534 - [0:0] :limit-ntp-535 - [0:0] :limit-ntp-536 - [0:0] :limit-ntp-537 - [0:0] :limit-ntp-538 - [0:0] :limit-ntp-539 - [0:0] :limit-ntp-54 - [0:0] :limit-ntp-540 - [0:0] :limit-ntp-542 - [0:0] :limit-ntp-543 - [0:0] :limit-ntp-544 - [0:0] :limit-ntp-545 - [0:0] :limit-ntp-546 - [0:0] :limit-ntp-548 - [0:0] :limit-ntp-549 - [0:0] :limit-ntp-55 - [0:0] :limit-ntp-550 - [0:0] :limit-ntp-551 - [0:0] :limit-ntp-552 - [0:0] :limit-ntp-553 - [0:0] :limit-ntp-554 - [0:0] :limit-ntp-555 - [0:0] :limit-ntp-556 - [0:0] :limit-ntp-557 - [0:0] :limit-ntp-558 - [0:0] :limit-ntp-559 - [0:0] :limit-ntp-56 - [0:0] :limit-ntp-560 - [0:0] :limit-ntp-561 - [0:0] :limit-ntp-562 - [0:0] :limit-ntp-563 - [0:0] :limit-ntp-564 - [0:0] :limit-ntp-565 - [0:0] :limit-ntp-566 - [0:0] :limit-ntp-567 - [0:0] :limit-ntp-568 - [0:0] :limit-ntp-569 - [0:0] :limit-ntp-570 - [0:0] :limit-ntp-572 - [0:0] :limit-ntp-573 - [0:0] :limit-ntp-574 - [0:0] :limit-ntp-575 - [0:0] :limit-ntp-576 - [0:0] :limit-ntp-578 - [0:0] :limit-ntp-579 - [0:0] :limit-ntp-58 - [0:0] :limit-ntp-580 - [0:0] :limit-ntp-581 - [0:0] :limit-ntp-582 - [0:0] :limit-ntp-583 - [0:0] :limit-ntp-584 - [0:0] :limit-ntp-585 - [0:0] :limit-ntp-586 - [0:0] :limit-ntp-587 - [0:0] :limit-ntp-588 - [0:0] :limit-ntp-589 - [0:0] :limit-ntp-59 - [0:0] :limit-ntp-590 - [0:0] :limit-ntp-592 - [0:0] :limit-ntp-593 - [0:0] :limit-ntp-594 - [0:0] :limit-ntp-595 - [0:0] :limit-ntp-596 - [0:0] :limit-ntp-598 - [0:0] :limit-ntp-599 - [0:0] :limit-ntp-6 - [0:0] :limit-ntp-60 - [0:0] :limit-ntp-600 - [0:0] :limit-ntp-601 - [0:0] :limit-ntp-602 - [0:0] :limit-ntp-603 - [0:0] :limit-ntp-604 - [0:0] :limit-ntp-605 - [0:0] :limit-ntp-606 - [0:0] :limit-ntp-607 - [0:0] :limit-ntp-608 - [0:0] :limit-ntp-609 - [0:0] :limit-ntp-61 - [0:0] :limit-ntp-610 - [0:0] :limit-ntp-612 - [0:0] :limit-ntp-613 - [0:0] :limit-ntp-614 - [0:0] :limit-ntp-615 - [0:0] :limit-ntp-616 - [0:0] :limit-ntp-618 - [0:0] :limit-ntp-619 - [0:0] :limit-ntp-62 - [0:0] :limit-ntp-620 - [0:0] :limit-ntp-621 - [0:0] :limit-ntp-622 - [0:0] :limit-ntp-623 - [0:0] :limit-ntp-624 - [0:0] :limit-ntp-625 - [0:0] :limit-ntp-626 - [0:0] :limit-ntp-627 - [0:0] :limit-ntp-628 - [0:0] :limit-ntp-629 - [0:0] :limit-ntp-63 - [0:0] :limit-ntp-630 - [0:0] :limit-ntp-632 - [0:0] :limit-ntp-633 - [0:0] :limit-ntp-634 - [0:0] :limit-ntp-635 - [0:0] :limit-ntp-636 - [0:0] :limit-ntp-638 - [0:0] :limit-ntp-639 - [0:0] :limit-ntp-64 - [0:0] :limit-ntp-640 - [0:0] :limit-ntp-641 - [0:0] :limit-ntp-642 - [0:0] :limit-ntp-643 - [0:0] :limit-ntp-644 - [0:0] :limit-ntp-645 - [0:0] :limit-ntp-646 - [0:0] :limit-ntp-647 - [0:0] :limit-ntp-648 - [0:0] :limit-ntp-649 - [0:0] :limit-ntp-65 - [0:0] :limit-ntp-650 - [0:0] :limit-ntp-651 - [0:0] :limit-ntp-652 - [0:0] :limit-ntp-653 - [0:0] :limit-ntp-654 - [0:0] :limit-ntp-655 - [0:0] :limit-ntp-656 - [0:0] :limit-ntp-657 - [0:0] :limit-ntp-658 - [0:0] :limit-ntp-659 - [0:0] :limit-ntp-66 - [0:0] :limit-ntp-660 - [0:0] :limit-ntp-662 - [0:0] :limit-ntp-663 - [0:0] :limit-ntp-664 - [0:0] :limit-ntp-665 - [0:0] :limit-ntp-666 - [0:0] :limit-ntp-668 - [0:0] :limit-ntp-669 - [0:0] :limit-ntp-67 - [0:0] :limit-ntp-670 - [0:0] :limit-ntp-671 - [0:0] :limit-ntp-672 - [0:0] :limit-ntp-673 - [0:0] :limit-ntp-674 - [0:0] :limit-ntp-675 - [0:0] :limit-ntp-676 - [0:0] :limit-ntp-677 - [0:0] :limit-ntp-678 - [0:0] :limit-ntp-679 - [0:0] :limit-ntp-68 - [0:0] :limit-ntp-680 - [0:0] :limit-ntp-682 - [0:0] :limit-ntp-683 - [0:0] :limit-ntp-684 - [0:0] :limit-ntp-685 - [0:0] :limit-ntp-686 - [0:0] :limit-ntp-688 - [0:0] :limit-ntp-689 - [0:0] :limit-ntp-69 - [0:0] :limit-ntp-690 - [0:0] :limit-ntp-691 - [0:0] :limit-ntp-692 - [0:0] :limit-ntp-693 - [0:0] :limit-ntp-694 - [0:0] :limit-ntp-695 - [0:0] :limit-ntp-696 - [0:0] :limit-ntp-697 - [0:0] :limit-ntp-698 - [0:0] :limit-ntp-699 - [0:0] :limit-ntp-7 - [0:0] :limit-ntp-70 - [0:0] :limit-ntp-700 - [0:0] :limit-ntp-702 - [0:0] :limit-ntp-703 - [0:0] :limit-ntp-704 - [0:0] :limit-ntp-705 - [0:0] :limit-ntp-706 - [0:0] :limit-ntp-708 - [0:0] :limit-ntp-709 - [0:0] :limit-ntp-710 - [0:0] :limit-ntp-711 - [0:0] :limit-ntp-712 - [0:0] :limit-ntp-713 - [0:0] :limit-ntp-714 - [0:0] :limit-ntp-715 - [0:0] :limit-ntp-716 - [0:0] :limit-ntp-717 - [0:0] :limit-ntp-718 - [0:0] :limit-ntp-719 - [0:0] :limit-ntp-72 - [0:0] :limit-ntp-720 - [0:0] :limit-ntp-722 - [0:0] :limit-ntp-723 - [0:0] :limit-ntp-724 - [0:0] :limit-ntp-725 - [0:0] :limit-ntp-726 - [0:0] :limit-ntp-728 - [0:0] :limit-ntp-729 - [0:0] :limit-ntp-73 - [0:0] :limit-ntp-730 - [0:0] :limit-ntp-731 - [0:0] :limit-ntp-732 - [0:0] :limit-ntp-733 - [0:0] :limit-ntp-734 - [0:0] :limit-ntp-735 - [0:0] :limit-ntp-736 - [0:0] :limit-ntp-737 - [0:0] :limit-ntp-738 - [0:0] :limit-ntp-739 - [0:0] :limit-ntp-74 - [0:0] :limit-ntp-740 - [0:0] :limit-ntp-741 - [0:0] :limit-ntp-742 - [0:0] :limit-ntp-743 - [0:0] :limit-ntp-744 - [0:0] :limit-ntp-745 - [0:0] :limit-ntp-746 - [0:0] :limit-ntp-747 - [0:0] :limit-ntp-748 - [0:0] :limit-ntp-749 - [0:0] :limit-ntp-75 - [0:0] :limit-ntp-750 - [0:0] :limit-ntp-752 - [0:0] :limit-ntp-753 - [0:0] :limit-ntp-754 - [0:0] :limit-ntp-755 - [0:0] :limit-ntp-756 - [0:0] :limit-ntp-758 - [0:0] :limit-ntp-759 - [0:0] :limit-ntp-76 - [0:0] :limit-ntp-760 - [0:0] :limit-ntp-761 - [0:0] :limit-ntp-762 - [0:0] :limit-ntp-763 - [0:0] :limit-ntp-764 - [0:0] :limit-ntp-765 - [0:0] :limit-ntp-766 - [0:0] :limit-ntp-767 - [0:0] :limit-ntp-768 - [0:0] :limit-ntp-769 - [0:0] :limit-ntp-770 - [0:0] :limit-ntp-772 - [0:0] :limit-ntp-773 - [0:0] :limit-ntp-774 - [0:0] :limit-ntp-775 - [0:0] :limit-ntp-776 - [0:0] :limit-ntp-778 - [0:0] :limit-ntp-779 - [0:0] :limit-ntp-78 - [0:0] :limit-ntp-780 - [0:0] :limit-ntp-781 - [0:0] :limit-ntp-782 - [0:0] :limit-ntp-783 - [0:0] :limit-ntp-784 - [0:0] :limit-ntp-785 - [0:0] :limit-ntp-786 - [0:0] :limit-ntp-787 - [0:0] :limit-ntp-788 - [0:0] :limit-ntp-789 - [0:0] :limit-ntp-79 - [0:0] :limit-ntp-790 - [0:0] :limit-ntp-792 - [0:0] :limit-ntp-793 - [0:0] :limit-ntp-794 - [0:0] :limit-ntp-795 - [0:0] :limit-ntp-796 - [0:0] :limit-ntp-798 - [0:0] :limit-ntp-799 - [0:0] :limit-ntp-8 - [0:0] :limit-ntp-80 - [0:0] :limit-ntp-800 - [0:0] :limit-ntp-801 - [0:0] :limit-ntp-802 - [0:0] :limit-ntp-803 - [0:0] :limit-ntp-804 - [0:0] :limit-ntp-805 - [0:0] :limit-ntp-806 - [0:0] :limit-ntp-807 - [0:0] :limit-ntp-808 - [0:0] :limit-ntp-809 - [0:0] :limit-ntp-81 - [0:0] :limit-ntp-810 - [0:0] :limit-ntp-812 - [0:0] :limit-ntp-813 - [0:0] :limit-ntp-814 - [0:0] :limit-ntp-815 - [0:0] :limit-ntp-816 - [0:0] :limit-ntp-818 - [0:0] :limit-ntp-819 - [0:0] :limit-ntp-82 - [0:0] :limit-ntp-820 - [0:0] :limit-ntp-821 - [0:0] :limit-ntp-822 - [0:0] :limit-ntp-823 - [0:0] :limit-ntp-824 - [0:0] :limit-ntp-825 - [0:0] :limit-ntp-826 - [0:0] :limit-ntp-827 - [0:0] :limit-ntp-828 - [0:0] :limit-ntp-829 - [0:0] :limit-ntp-83 - [0:0] :limit-ntp-830 - [0:0] :limit-ntp-831 - [0:0] :limit-ntp-832 - [0:0] :limit-ntp-833 - [0:0] :limit-ntp-834 - [0:0] :limit-ntp-835 - [0:0] :limit-ntp-836 - [0:0] :limit-ntp-837 - [0:0] :limit-ntp-838 - [0:0] :limit-ntp-839 - [0:0] :limit-ntp-84 - [0:0] :limit-ntp-840 - [0:0] :limit-ntp-842 - [0:0] :limit-ntp-843 - [0:0] :limit-ntp-844 - [0:0] :limit-ntp-845 - [0:0] :limit-ntp-846 - [0:0] :limit-ntp-848 - [0:0] :limit-ntp-849 - [0:0] :limit-ntp-85 - [0:0] :limit-ntp-850 - [0:0] :limit-ntp-851 - [0:0] :limit-ntp-852 - [0:0] :limit-ntp-853 - [0:0] :limit-ntp-854 - [0:0] :limit-ntp-855 - [0:0] :limit-ntp-856 - [0:0] :limit-ntp-857 - [0:0] :limit-ntp-858 - [0:0] :limit-ntp-859 - [0:0] :limit-ntp-86 - [0:0] :limit-ntp-860 - [0:0] :limit-ntp-862 - [0:0] :limit-ntp-863 - [0:0] :limit-ntp-864 - [0:0] :limit-ntp-865 - [0:0] :limit-ntp-866 - [0:0] :limit-ntp-868 - [0:0] :limit-ntp-869 - [0:0] :limit-ntp-87 - [0:0] :limit-ntp-870 - [0:0] :limit-ntp-871 - [0:0] :limit-ntp-872 - [0:0] :limit-ntp-873 - [0:0] :limit-ntp-874 - [0:0] :limit-ntp-875 - [0:0] :limit-ntp-876 - [0:0] :limit-ntp-877 - [0:0] :limit-ntp-878 - [0:0] :limit-ntp-879 - [0:0] :limit-ntp-88 - [0:0] :limit-ntp-880 - [0:0] :limit-ntp-882 - [0:0] :limit-ntp-883 - [0:0] :limit-ntp-884 - [0:0] :limit-ntp-885 - [0:0] :limit-ntp-886 - [0:0] :limit-ntp-888 - [0:0] :limit-ntp-889 - [0:0] :limit-ntp-89 - [0:0] :limit-ntp-890 - [0:0] :limit-ntp-891 - [0:0] :limit-ntp-892 - [0:0] :limit-ntp-893 - [0:0] :limit-ntp-894 - [0:0] :limit-ntp-895 - [0:0] :limit-ntp-896 - [0:0] :limit-ntp-897 - [0:0] :limit-ntp-898 - [0:0] :limit-ntp-899 - [0:0] :limit-ntp-9 - [0:0] :limit-ntp-90 - [0:0] :limit-ntp-900 - [0:0] :limit-ntp-902 - [0:0] :limit-ntp-903 - [0:0] :limit-ntp-904 - [0:0] :limit-ntp-905 - [0:0] :limit-ntp-906 - [0:0] :limit-ntp-908 - [0:0] :limit-ntp-909 - [0:0] :limit-ntp-910 - [0:0] :limit-ntp-911 - [0:0] :limit-ntp-912 - [0:0] :limit-ntp-913 - [0:0] :limit-ntp-914 - [0:0] :limit-ntp-915 - [0:0] :limit-ntp-916 - [0:0] :limit-ntp-917 - [0:0] :limit-ntp-918 - [0:0] :limit-ntp-919 - [0:0] :limit-ntp-92 - [0:0] :limit-ntp-920 - [0:0] :limit-ntp-921 - [0:0] :limit-ntp-922 - [0:0] :limit-ntp-923 - [0:0] :limit-ntp-924 - [0:0] :limit-ntp-925 - [0:0] :limit-ntp-926 - [0:0] :limit-ntp-927 - [0:0] :limit-ntp-928 - [0:0] :limit-ntp-929 - [0:0] :limit-ntp-93 - [0:0] :limit-ntp-930 - [0:0] :limit-ntp-931 - [0:0] :limit-ntp-932 - [0:0] :limit-ntp-933 - [0:0] :limit-ntp-934 - [0:0] :limit-ntp-935 - [0:0] :limit-ntp-936 - [0:0] :limit-ntp-937 - [0:0] :limit-ntp-938 - [0:0] :limit-ntp-939 - [0:0] :limit-ntp-94 - [0:0] :limit-ntp-940 - [0:0] :limit-ntp-941 - [0:0] :limit-ntp-942 - [0:0] :limit-ntp-943 - [0:0] :limit-ntp-944 - [0:0] :limit-ntp-945 - [0:0] :limit-ntp-946 - [0:0] :limit-ntp-947 - [0:0] :limit-ntp-948 - [0:0] :limit-ntp-949 - [0:0] :limit-ntp-95 - [0:0] :limit-ntp-950 - [0:0] :limit-ntp-951 - [0:0] :limit-ntp-952 - [0:0] :limit-ntp-953 - [0:0] :limit-ntp-954 - [0:0] :limit-ntp-955 - [0:0] :limit-ntp-956 - [0:0] :limit-ntp-957 - [0:0] :limit-ntp-958 - [0:0] :limit-ntp-959 - [0:0] :limit-ntp-96 - [0:0] :limit-ntp-960 - [0:0] :limit-ntp-961 - [0:0] :limit-ntp-962 - [0:0] :limit-ntp-963 - [0:0] :limit-ntp-964 - [0:0] :limit-ntp-965 - [0:0] :limit-ntp-966 - [0:0] :limit-ntp-967 - [0:0] :limit-ntp-968 - [0:0] :limit-ntp-969 - [0:0] :limit-ntp-970 - [0:0] :limit-ntp-971 - [0:0] :limit-ntp-972 - [0:0] :limit-ntp-973 - [0:0] :limit-ntp-974 - [0:0] :limit-ntp-975 - [0:0] :limit-ntp-98 - [0:0] :limit-ntp-99 - [0:0] :logaccept-0 - [0:0] :logaccept-1 - [0:0] :logaccept-10 - [0:0] :logaccept-11 - [0:0] :logaccept-12 - [0:0] :logaccept-13 - [0:0] :logaccept-14 - [0:0] :logaccept-15 - [0:0] :logaccept-16 - [0:0] :logaccept-17 - [0:0] :logaccept-18 - [0:0] :logaccept-19 - [0:0] :logaccept-2 - [0:0] :logaccept-20 - [0:0] :logaccept-21 - [0:0] :logaccept-22 - [0:0] :logaccept-23 - [0:0] :logaccept-24 - [0:0] :logaccept-25 - [0:0] :logaccept-26 - [0:0] :logaccept-27 - [0:0] :logaccept-28 - [0:0] :logaccept-29 - [0:0] :logaccept-3 - [0:0] :logaccept-30 - [0:0] :logaccept-31 - [0:0] :logaccept-32 - [0:0] :logaccept-33 - [0:0] :logaccept-34 - [0:0] :logaccept-35 - [0:0] :logaccept-36 - [0:0] :logaccept-37 - [0:0] :logaccept-38 - [0:0] :logaccept-39 - [0:0] :logaccept-4 - [0:0] :logaccept-40 - [0:0] :logaccept-41 - [0:0] :logaccept-42 - [0:0] :logaccept-43 - [0:0] :logaccept-44 - [0:0] :logaccept-45 - [0:0] :logaccept-46 - [0:0] :logaccept-47 - [0:0] :logaccept-48 - [0:0] :logaccept-49 - [0:0] :logaccept-5 - [0:0] :logaccept-50 - [0:0] :logaccept-51 - [0:0] :logaccept-52 - [0:0] :logaccept-53 - [0:0] :logaccept-54 - [0:0] :logaccept-55 - [0:0] :logaccept-56 - [0:0] :logaccept-57 - [0:0] :logaccept-58 - [0:0] :logaccept-59 - [0:0] :logaccept-6 - [0:0] :logaccept-60 - [0:0] :logaccept-61 - [0:0] :logaccept-62 - [0:0] :logaccept-63 - [0:0] :logaccept-64 - [0:0] :logaccept-65 - [0:0] :logaccept-66 - [0:0] :logaccept-67 - [0:0] :logaccept-68 - [0:0] :logaccept-69 - [0:0] :logaccept-7 - [0:0] :logaccept-8 - [0:0] :logaccept-9 - [0:0] :logaccept-final-0 - [0:0] :logaccept-final-1 - [0:0] :logaccept-final-10 - [0:0] :logaccept-final-100 - [0:0] :logaccept-final-101 - [0:0] :logaccept-final-102 - [0:0] :logaccept-final-103 - [0:0] :logaccept-final-104 - [0:0] :logaccept-final-105 - [0:0] :logaccept-final-106 - [0:0] :logaccept-final-107 - [0:0] :logaccept-final-108 - [0:0] :logaccept-final-109 - [0:0] :logaccept-final-11 - [0:0] :logaccept-final-110 - [0:0] :logaccept-final-111 - [0:0] :logaccept-final-112 - [0:0] :logaccept-final-113 - [0:0] :logaccept-final-114 - [0:0] :logaccept-final-115 - [0:0] :logaccept-final-116 - [0:0] :logaccept-final-117 - [0:0] :logaccept-final-118 - [0:0] :logaccept-final-119 - [0:0] :logaccept-final-12 - [0:0] :logaccept-final-120 - [0:0] :logaccept-final-121 - [0:0] :logaccept-final-122 - [0:0] :logaccept-final-123 - [0:0] :logaccept-final-124 - [0:0] :logaccept-final-125 - [0:0] :logaccept-final-126 - [0:0] :logaccept-final-127 - [0:0] :logaccept-final-128 - [0:0] :logaccept-final-129 - [0:0] :logaccept-final-13 - [0:0] :logaccept-final-130 - [0:0] :logaccept-final-131 - [0:0] :logaccept-final-132 - [0:0] :logaccept-final-133 - [0:0] :logaccept-final-134 - [0:0] :logaccept-final-135 - [0:0] :logaccept-final-136 - [0:0] :logaccept-final-137 - [0:0] :logaccept-final-138 - [0:0] :logaccept-final-139 - [0:0] :logaccept-final-14 - [0:0] :logaccept-final-140 - [0:0] :logaccept-final-141 - [0:0] :logaccept-final-142 - [0:0] :logaccept-final-143 - [0:0] :logaccept-final-144 - [0:0] :logaccept-final-145 - [0:0] :logaccept-final-146 - [0:0] :logaccept-final-147 - [0:0] :logaccept-final-148 - [0:0] :logaccept-final-149 - [0:0] :logaccept-final-15 - [0:0] :logaccept-final-150 - [0:0] :logaccept-final-151 - [0:0] :logaccept-final-152 - [0:0] :logaccept-final-153 - [0:0] :logaccept-final-154 - [0:0] :logaccept-final-155 - [0:0] :logaccept-final-156 - [0:0] :logaccept-final-157 - [0:0] :logaccept-final-158 - [0:0] :logaccept-final-159 - [0:0] :logaccept-final-16 - [0:0] :logaccept-final-160 - [0:0] :logaccept-final-161 - [0:0] :logaccept-final-162 - [0:0] :logaccept-final-163 - [0:0] :logaccept-final-164 - [0:0] :logaccept-final-165 - [0:0] :logaccept-final-166 - [0:0] :logaccept-final-167 - [0:0] :logaccept-final-168 - [0:0] :logaccept-final-169 - [0:0] :logaccept-final-17 - [0:0] :logaccept-final-170 - [0:0] :logaccept-final-171 - [0:0] :logaccept-final-172 - [0:0] :logaccept-final-173 - [0:0] :logaccept-final-174 - [0:0] :logaccept-final-175 - [0:0] :logaccept-final-176 - [0:0] :logaccept-final-177 - [0:0] :logaccept-final-178 - [0:0] :logaccept-final-179 - [0:0] :logaccept-final-18 - [0:0] :logaccept-final-180 - [0:0] :logaccept-final-181 - [0:0] :logaccept-final-182 - [0:0] :logaccept-final-183 - [0:0] :logaccept-final-184 - [0:0] :logaccept-final-185 - [0:0] :logaccept-final-186 - [0:0] :logaccept-final-187 - [0:0] :logaccept-final-188 - [0:0] :logaccept-final-189 - [0:0] :logaccept-final-19 - [0:0] :logaccept-final-190 - [0:0] :logaccept-final-191 - [0:0] :logaccept-final-192 - [0:0] :logaccept-final-193 - [0:0] :logaccept-final-194 - [0:0] :logaccept-final-195 - [0:0] :logaccept-final-196 - [0:0] :logaccept-final-197 - [0:0] :logaccept-final-198 - [0:0] :logaccept-final-199 - [0:0] :logaccept-final-2 - [0:0] :logaccept-final-20 - [0:0] :logaccept-final-200 - [0:0] :logaccept-final-201 - [0:0] :logaccept-final-202 - [0:0] :logaccept-final-203 - [0:0] :logaccept-final-204 - [0:0] :logaccept-final-205 - [0:0] :logaccept-final-206 - [0:0] :logaccept-final-207 - [0:0] :logaccept-final-208 - [0:0] :logaccept-final-209 - [0:0] :logaccept-final-21 - [0:0] :logaccept-final-210 - [0:0] :logaccept-final-211 - [0:0] :logaccept-final-212 - [0:0] :logaccept-final-213 - [0:0] :logaccept-final-214 - [0:0] :logaccept-final-215 - [0:0] :logaccept-final-216 - [0:0] :logaccept-final-217 - [0:0] :logaccept-final-218 - [0:0] :logaccept-final-219 - [0:0] :logaccept-final-22 - [0:0] :logaccept-final-220 - [0:0] :logaccept-final-221 - [0:0] :logaccept-final-222 - [0:0] :logaccept-final-223 - [0:0] :logaccept-final-224 - [0:0] :logaccept-final-225 - [0:0] :logaccept-final-226 - [0:0] :logaccept-final-227 - [0:0] :logaccept-final-228 - [0:0] :logaccept-final-229 - [0:0] :logaccept-final-23 - [0:0] :logaccept-final-230 - [0:0] :logaccept-final-231 - [0:0] :logaccept-final-232 - [0:0] :logaccept-final-233 - [0:0] :logaccept-final-234 - [0:0] :logaccept-final-235 - [0:0] :logaccept-final-236 - [0:0] :logaccept-final-237 - [0:0] :logaccept-final-238 - [0:0] :logaccept-final-239 - [0:0] :logaccept-final-24 - [0:0] :logaccept-final-240 - [0:0] :logaccept-final-241 - [0:0] :logaccept-final-242 - [0:0] :logaccept-final-243 - [0:0] :logaccept-final-244 - [0:0] :logaccept-final-245 - [0:0] :logaccept-final-246 - [0:0] :logaccept-final-247 - [0:0] :logaccept-final-248 - [0:0] :logaccept-final-249 - [0:0] :logaccept-final-25 - [0:0] :logaccept-final-250 - [0:0] :logaccept-final-251 - [0:0] :logaccept-final-252 - [0:0] :logaccept-final-253 - [0:0] :logaccept-final-254 - [0:0] :logaccept-final-255 - [0:0] :logaccept-final-256 - [0:0] :logaccept-final-257 - [0:0] :logaccept-final-258 - [0:0] :logaccept-final-259 - [0:0] :logaccept-final-26 - [0:0] :logaccept-final-260 - [0:0] :logaccept-final-261 - [0:0] :logaccept-final-262 - [0:0] :logaccept-final-263 - [0:0] :logaccept-final-264 - [0:0] :logaccept-final-265 - [0:0] :logaccept-final-266 - [0:0] :logaccept-final-267 - [0:0] :logaccept-final-268 - [0:0] :logaccept-final-269 - [0:0] :logaccept-final-27 - [0:0] :logaccept-final-270 - [0:0] :logaccept-final-271 - [0:0] :logaccept-final-272 - [0:0] :logaccept-final-273 - [0:0] :logaccept-final-274 - [0:0] :logaccept-final-275 - [0:0] :logaccept-final-276 - [0:0] :logaccept-final-277 - [0:0] :logaccept-final-278 - [0:0] :logaccept-final-279 - [0:0] :logaccept-final-28 - [0:0] :logaccept-final-280 - [0:0] :logaccept-final-281 - [0:0] :logaccept-final-282 - [0:0] :logaccept-final-283 - [0:0] :logaccept-final-284 - [0:0] :logaccept-final-285 - [0:0] :logaccept-final-286 - [0:0] :logaccept-final-287 - [0:0] :logaccept-final-288 - [0:0] :logaccept-final-289 - [0:0] :logaccept-final-29 - [0:0] :logaccept-final-290 - [0:0] :logaccept-final-291 - [0:0] :logaccept-final-292 - [0:0] :logaccept-final-293 - [0:0] :logaccept-final-294 - [0:0] :logaccept-final-295 - [0:0] :logaccept-final-296 - [0:0] :logaccept-final-297 - [0:0] :logaccept-final-298 - [0:0] :logaccept-final-299 - [0:0] :logaccept-final-3 - [0:0] :logaccept-final-30 - [0:0] :logaccept-final-300 - [0:0] :logaccept-final-301 - [0:0] :logaccept-final-302 - [0:0] :logaccept-final-303 - [0:0] :logaccept-final-304 - [0:0] :logaccept-final-305 - [0:0] :logaccept-final-31 - [0:0] :logaccept-final-32 - [0:0] :logaccept-final-33 - [0:0] :logaccept-final-34 - [0:0] :logaccept-final-35 - [0:0] :logaccept-final-36 - [0:0] :logaccept-final-37 - [0:0] :logaccept-final-38 - [0:0] :logaccept-final-39 - [0:0] :logaccept-final-4 - [0:0] :logaccept-final-40 - [0:0] :logaccept-final-41 - [0:0] :logaccept-final-42 - [0:0] :logaccept-final-43 - [0:0] :logaccept-final-44 - [0:0] :logaccept-final-45 - [0:0] :logaccept-final-46 - [0:0] :logaccept-final-47 - [0:0] :logaccept-final-48 - [0:0] :logaccept-final-49 - [0:0] :logaccept-final-5 - [0:0] :logaccept-final-50 - [0:0] :logaccept-final-51 - [0:0] :logaccept-final-52 - [0:0] :logaccept-final-53 - [0:0] :logaccept-final-54 - [0:0] :logaccept-final-55 - [0:0] :logaccept-final-56 - [0:0] :logaccept-final-57 - [0:0] :logaccept-final-58 - [0:0] :logaccept-final-59 - [0:0] :logaccept-final-6 - [0:0] :logaccept-final-60 - [0:0] :logaccept-final-61 - [0:0] :logaccept-final-62 - [0:0] :logaccept-final-63 - [0:0] :logaccept-final-64 - [0:0] :logaccept-final-65 - [0:0] :logaccept-final-66 - [0:0] :logaccept-final-67 - [0:0] :logaccept-final-68 - [0:0] :logaccept-final-69 - [0:0] :logaccept-final-7 - [0:0] :logaccept-final-70 - [0:0] :logaccept-final-71 - [0:0] :logaccept-final-72 - [0:0] :logaccept-final-73 - [0:0] :logaccept-final-74 - [0:0] :logaccept-final-75 - [0:0] :logaccept-final-76 - [0:0] :logaccept-final-77 - [0:0] :logaccept-final-78 - [0:0] :logaccept-final-79 - [0:0] :logaccept-final-8 - [0:0] :logaccept-final-80 - [0:0] :logaccept-final-81 - [0:0] :logaccept-final-82 - [0:0] :logaccept-final-83 - [0:0] :logaccept-final-84 - [0:0] :logaccept-final-85 - [0:0] :logaccept-final-86 - [0:0] :logaccept-final-87 - [0:0] :logaccept-final-88 - [0:0] :logaccept-final-89 - [0:0] :logaccept-final-9 - [0:0] :logaccept-final-90 - [0:0] :logaccept-final-91 - [0:0] :logaccept-final-92 - [0:0] :logaccept-final-93 - [0:0] :logaccept-final-94 - [0:0] :logaccept-final-95 - [0:0] :logaccept-final-96 - [0:0] :logaccept-final-97 - [0:0] :logaccept-final-98 - [0:0] :logaccept-final-99 - [0:0] :logaccept-ntp-0 - [0:0] :logaccept-ntp-1 - [0:0] :logaccept-ntp-10 - [0:0] :logaccept-ntp-11 - [0:0] :logaccept-ntp-12 - [0:0] :logaccept-ntp-13 - [0:0] :logaccept-ntp-14 - [0:0] :logaccept-ntp-15 - [0:0] :logaccept-ntp-16 - [0:0] :logaccept-ntp-17 - [0:0] :logaccept-ntp-18 - [0:0] :logaccept-ntp-19 - [0:0] :logaccept-ntp-2 - [0:0] :logaccept-ntp-20 - [0:0] :logaccept-ntp-21 - [0:0] :logaccept-ntp-22 - [0:0] :logaccept-ntp-23 - [0:0] :logaccept-ntp-24 - [0:0] :logaccept-ntp-25 - [0:0] :logaccept-ntp-26 - [0:0] :logaccept-ntp-27 - [0:0] :logaccept-ntp-28 - [0:0] :logaccept-ntp-29 - [0:0] :logaccept-ntp-3 - [0:0] :logaccept-ntp-30 - [0:0] :logaccept-ntp-31 - [0:0] :logaccept-ntp-32 - [0:0] :logaccept-ntp-4 - [0:0] :logaccept-ntp-5 - [0:0] :logaccept-ntp-6 - [0:0] :logaccept-ntp-7 - [0:0] :logaccept-ntp-8 - [0:0] :logaccept-ntp-9 - [0:0] :logdrop-0 - [0:0] :logdrop-1 - [0:0] :logdrop-10 - [0:0] :logdrop-100 - [0:0] :logdrop-1000 - [0:0] :logdrop-1001 - [0:0] :logdrop-1002 - [0:0] :logdrop-1003 - [0:0] :logdrop-1004 - [0:0] :logdrop-1005 - [0:0] :logdrop-1006 - [0:0] :logdrop-1007 - [0:0] :logdrop-1008 - [0:0] :logdrop-1009 - [0:0] :logdrop-101 - [0:0] :logdrop-1010 - [0:0] :logdrop-1011 - [0:0] :logdrop-1012 - [0:0] :logdrop-1013 - [0:0] :logdrop-1014 - [0:0] :logdrop-1015 - [0:0] :logdrop-1016 - [0:0] :logdrop-1017 - [0:0] :logdrop-1018 - [0:0] :logdrop-1019 - [0:0] :logdrop-102 - [0:0] :logdrop-1020 - [0:0] :logdrop-1021 - [0:0] :logdrop-1022 - [0:0] :logdrop-1023 - [0:0] :logdrop-1024 - [0:0] :logdrop-1025 - [0:0] :logdrop-1026 - [0:0] :logdrop-1027 - [0:0] :logdrop-1028 - [0:0] :logdrop-1029 - [0:0] :logdrop-103 - [0:0] :logdrop-1030 - [0:0] :logdrop-1031 - [0:0] :logdrop-1032 - [0:0] :logdrop-1033 - [0:0] :logdrop-1034 - [0:0] :logdrop-1035 - [0:0] :logdrop-1036 - [0:0] :logdrop-1037 - [0:0] :logdrop-1038 - [0:0] :logdrop-1039 - [0:0] :logdrop-104 - [0:0] :logdrop-1040 - [0:0] :logdrop-1041 - [0:0] :logdrop-1042 - [0:0] :logdrop-1043 - [0:0] :logdrop-1044 - [0:0] :logdrop-1045 - [0:0] :logdrop-1046 - [0:0] :logdrop-1047 - [0:0] :logdrop-1048 - [0:0] :logdrop-1049 - [0:0] :logdrop-105 - [0:0] :logdrop-1050 - [0:0] :logdrop-1051 - [0:0] :logdrop-1052 - [0:0] :logdrop-1053 - [0:0] :logdrop-1054 - [0:0] :logdrop-1055 - [0:0] :logdrop-1056 - [0:0] :logdrop-1057 - [0:0] :logdrop-1058 - [0:0] :logdrop-1059 - [0:0] :logdrop-106 - [0:0] :logdrop-1060 - [0:0] :logdrop-1061 - [0:0] :logdrop-1062 - [0:0] :logdrop-1063 - [0:0] :logdrop-1064 - [0:0] :logdrop-1065 - [0:0] :logdrop-1066 - [0:0] :logdrop-1067 - [0:0] :logdrop-1068 - [0:0] :logdrop-1069 - [0:0] :logdrop-107 - [0:0] :logdrop-1070 - [0:0] :logdrop-1071 - [0:0] :logdrop-1072 - [0:0] :logdrop-1073 - [0:0] :logdrop-1074 - [0:0] :logdrop-1075 - [0:0] :logdrop-1076 - [0:0] :logdrop-1077 - [0:0] :logdrop-1078 - [0:0] :logdrop-1079 - [0:0] :logdrop-108 - [0:0] :logdrop-1080 - [0:0] :logdrop-1081 - [0:0] :logdrop-1082 - [0:0] :logdrop-1083 - [0:0] :logdrop-1084 - [0:0] :logdrop-1085 - [0:0] :logdrop-1086 - [0:0] :logdrop-1087 - [0:0] :logdrop-1088 - [0:0] :logdrop-1089 - [0:0] :logdrop-109 - [0:0] :logdrop-1090 - [0:0] :logdrop-1091 - [0:0] :logdrop-1092 - [0:0] :logdrop-1093 - [0:0] :logdrop-1094 - [0:0] :logdrop-1095 - [0:0] :logdrop-1096 - [0:0] :logdrop-1097 - [0:0] :logdrop-1098 - [0:0] :logdrop-1099 - [0:0] :logdrop-11 - [0:0] :logdrop-110 - [0:0] :logdrop-1100 - [0:0] :logdrop-1101 - [0:0] :logdrop-1102 - [0:0] :logdrop-1103 - [0:0] :logdrop-1104 - [0:0] :logdrop-1105 - [0:0] :logdrop-1106 - [0:0] :logdrop-1107 - [0:0] :logdrop-1108 - [0:0] :logdrop-1109 - [0:0] :logdrop-111 - [0:0] :logdrop-1110 - [0:0] :logdrop-1111 - [0:0] :logdrop-1112 - [0:0] :logdrop-1113 - [0:0] :logdrop-1114 - [0:0] :logdrop-1115 - [0:0] :logdrop-1116 - [0:0] :logdrop-1117 - [0:0] :logdrop-1118 - [0:0] :logdrop-1119 - [0:0] :logdrop-112 - [0:0] :logdrop-1120 - [0:0] :logdrop-1121 - [0:0] :logdrop-1122 - [0:0] :logdrop-1123 - [0:0] :logdrop-1124 - [0:0] :logdrop-1125 - [0:0] :logdrop-1126 - [0:0] :logdrop-1127 - [0:0] :logdrop-1128 - [0:0] :logdrop-1129 - [0:0] :logdrop-113 - [0:0] :logdrop-1130 - [0:0] :logdrop-1131 - [0:0] :logdrop-1132 - [0:0] :logdrop-1133 - [0:0] :logdrop-1134 - [0:0] :logdrop-1135 - [0:0] :logdrop-1136 - [0:0] :logdrop-1137 - [0:0] :logdrop-1138 - [0:0] :logdrop-1139 - [0:0] :logdrop-114 - [0:0] :logdrop-1140 - [0:0] :logdrop-1141 - [0:0] :logdrop-1142 - [0:0] :logdrop-1143 - [0:0] :logdrop-1144 - [0:0] :logdrop-1145 - [0:0] :logdrop-1146 - [0:0] :logdrop-1147 - [0:0] :logdrop-1148 - [0:0] :logdrop-1149 - [0:0] :logdrop-115 - [0:0] :logdrop-1150 - [0:0] :logdrop-1151 - [0:0] :logdrop-1152 - [0:0] :logdrop-1153 - [0:0] :logdrop-1154 - [0:0] :logdrop-1155 - [0:0] :logdrop-1156 - [0:0] :logdrop-1157 - [0:0] :logdrop-1158 - [0:0] :logdrop-1159 - [0:0] :logdrop-116 - [0:0] :logdrop-1160 - [0:0] :logdrop-1161 - [0:0] :logdrop-1162 - [0:0] :logdrop-1163 - [0:0] :logdrop-1164 - [0:0] :logdrop-1165 - [0:0] :logdrop-1166 - [0:0] :logdrop-1167 - [0:0] :logdrop-1168 - [0:0] :logdrop-1169 - [0:0] :logdrop-117 - [0:0] :logdrop-1170 - [0:0] :logdrop-1171 - [0:0] :logdrop-1172 - [0:0] :logdrop-1173 - [0:0] :logdrop-1174 - [0:0] :logdrop-1175 - [0:0] :logdrop-1176 - [0:0] :logdrop-1177 - [0:0] :logdrop-1178 - [0:0] :logdrop-1179 - [0:0] :logdrop-118 - [0:0] :logdrop-1180 - [0:0] :logdrop-1181 - [0:0] :logdrop-1182 - [0:0] :logdrop-1183 - [0:0] :logdrop-1184 - [0:0] :logdrop-1185 - [0:0] :logdrop-1186 - [0:0] :logdrop-1187 - [0:0] :logdrop-1188 - [0:0] :logdrop-1189 - [0:0] :logdrop-119 - [0:0] :logdrop-1190 - [0:0] :logdrop-1191 - [0:0] :logdrop-1192 - [0:0] :logdrop-1193 - [0:0] :logdrop-1194 - [0:0] :logdrop-1195 - [0:0] :logdrop-1196 - [0:0] :logdrop-1197 - [0:0] :logdrop-1198 - [0:0] :logdrop-1199 - [0:0] :logdrop-12 - [0:0] :logdrop-120 - [0:0] :logdrop-1200 - [0:0] :logdrop-1201 - [0:0] :logdrop-1202 - [0:0] :logdrop-1203 - [0:0] :logdrop-1204 - [0:0] :logdrop-1205 - [0:0] :logdrop-1206 - [0:0] :logdrop-1207 - [0:0] :logdrop-1208 - [0:0] :logdrop-1209 - [0:0] :logdrop-121 - [0:0] :logdrop-1210 - [0:0] :logdrop-1211 - [0:0] :logdrop-1212 - [0:0] :logdrop-1213 - [0:0] :logdrop-1214 - [0:0] :logdrop-1215 - [0:0] :logdrop-1216 - [0:0] :logdrop-1217 - [0:0] :logdrop-1218 - [0:0] :logdrop-1219 - [0:0] :logdrop-122 - [0:0] :logdrop-1220 - [0:0] :logdrop-1221 - [0:0] :logdrop-1222 - [0:0] :logdrop-1223 - [0:0] :logdrop-1224 - [0:0] :logdrop-1225 - [0:0] :logdrop-1226 - [0:0] :logdrop-1227 - [0:0] :logdrop-1228 - [0:0] :logdrop-1229 - [0:0] :logdrop-123 - [0:0] :logdrop-1230 - [0:0] :logdrop-1231 - [0:0] :logdrop-1232 - [0:0] :logdrop-1233 - [0:0] :logdrop-1234 - [0:0] :logdrop-1235 - [0:0] :logdrop-1236 - [0:0] :logdrop-1237 - [0:0] :logdrop-1238 - [0:0] :logdrop-1239 - [0:0] :logdrop-124 - [0:0] :logdrop-1240 - [0:0] :logdrop-1241 - [0:0] :logdrop-1242 - [0:0] :logdrop-1243 - [0:0] :logdrop-1244 - [0:0] :logdrop-1245 - [0:0] :logdrop-1246 - [0:0] :logdrop-1247 - [0:0] :logdrop-1248 - [0:0] :logdrop-1249 - [0:0] :logdrop-125 - [0:0] :logdrop-1250 - [0:0] :logdrop-1251 - [0:0] :logdrop-1252 - [0:0] :logdrop-1253 - [0:0] :logdrop-1254 - [0:0] :logdrop-1255 - [0:0] :logdrop-1256 - [0:0] :logdrop-1257 - [0:0] :logdrop-1258 - [0:0] :logdrop-1259 - [0:0] :logdrop-126 - [0:0] :logdrop-1260 - [0:0] :logdrop-1261 - [0:0] :logdrop-1262 - [0:0] :logdrop-1263 - [0:0] :logdrop-1264 - [0:0] :logdrop-1265 - [0:0] :logdrop-1266 - [0:0] :logdrop-1267 - [0:0] :logdrop-1268 - [0:0] :logdrop-1269 - [0:0] :logdrop-127 - [0:0] :logdrop-1270 - [0:0] :logdrop-1271 - [0:0] :logdrop-1272 - [0:0] :logdrop-1273 - [0:0] :logdrop-1274 - [0:0] :logdrop-1275 - [0:0] :logdrop-1276 - [0:0] :logdrop-1277 - [0:0] :logdrop-1278 - [0:0] :logdrop-1279 - [0:0] :logdrop-128 - [0:0] :logdrop-1280 - [0:0] :logdrop-1281 - [0:0] :logdrop-1282 - [0:0] :logdrop-1283 - [0:0] :logdrop-1284 - [0:0] :logdrop-1285 - [0:0] :logdrop-1286 - [0:0] :logdrop-1287 - [0:0] :logdrop-1288 - [0:0] :logdrop-1289 - [0:0] :logdrop-129 - [0:0] :logdrop-1290 - [0:0] :logdrop-1291 - [0:0] :logdrop-1292 - [0:0] :logdrop-1293 - [0:0] :logdrop-1294 - [0:0] :logdrop-1295 - [0:0] :logdrop-1296 - [0:0] :logdrop-1297 - [0:0] :logdrop-1298 - [0:0] :logdrop-1299 - [0:0] :logdrop-13 - [0:0] :logdrop-130 - [0:0] :logdrop-1300 - [0:0] :logdrop-1301 - [0:0] :logdrop-1302 - [0:0] :logdrop-1303 - [0:0] :logdrop-1304 - [0:0] :logdrop-1305 - [0:0] :logdrop-1306 - [0:0] :logdrop-1307 - [0:0] :logdrop-1308 - [0:0] :logdrop-1309 - [0:0] :logdrop-131 - [0:0] :logdrop-1310 - [0:0] :logdrop-1311 - [0:0] :logdrop-1312 - [0:0] :logdrop-1313 - [0:0] :logdrop-1314 - [0:0] :logdrop-1315 - [0:0] :logdrop-1316 - [0:0] :logdrop-1317 - [0:0] :logdrop-1318 - [0:0] :logdrop-1319 - [0:0] :logdrop-132 - [0:0] :logdrop-1320 - [0:0] :logdrop-1321 - [0:0] :logdrop-1322 - [0:0] :logdrop-1323 - [0:0] :logdrop-1324 - [0:0] :logdrop-1325 - [0:0] :logdrop-1326 - [0:0] :logdrop-1327 - [0:0] :logdrop-1328 - [0:0] :logdrop-1329 - [0:0] :logdrop-133 - [0:0] :logdrop-1330 - [0:0] :logdrop-1331 - [0:0] :logdrop-1332 - [0:0] :logdrop-1333 - [0:0] :logdrop-1334 - [0:0] :logdrop-1335 - [0:0] :logdrop-1336 - [0:0] :logdrop-1337 - [0:0] :logdrop-1338 - [0:0] :logdrop-1339 - [0:0] :logdrop-134 - [0:0] :logdrop-1340 - [0:0] :logdrop-1341 - [0:0] :logdrop-1342 - [0:0] :logdrop-1343 - [0:0] :logdrop-1344 - [0:0] :logdrop-1345 - [0:0] :logdrop-1346 - [0:0] :logdrop-1347 - [0:0] :logdrop-1348 - [0:0] :logdrop-1349 - [0:0] :logdrop-135 - [0:0] :logdrop-1350 - [0:0] :logdrop-1351 - [0:0] :logdrop-1352 - [0:0] :logdrop-1353 - [0:0] :logdrop-1354 - [0:0] :logdrop-1355 - [0:0] :logdrop-1356 - [0:0] :logdrop-1357 - [0:0] :logdrop-1358 - [0:0] :logdrop-1359 - [0:0] :logdrop-136 - [0:0] :logdrop-1360 - [0:0] :logdrop-1361 - [0:0] :logdrop-1362 - [0:0] :logdrop-1363 - [0:0] :logdrop-1364 - [0:0] :logdrop-1365 - [0:0] :logdrop-1366 - [0:0] :logdrop-1367 - [0:0] :logdrop-1368 - [0:0] :logdrop-1369 - [0:0] :logdrop-137 - [0:0] :logdrop-1370 - [0:0] :logdrop-1371 - [0:0] :logdrop-1372 - [0:0] :logdrop-1373 - [0:0] :logdrop-1374 - [0:0] :logdrop-1375 - [0:0] :logdrop-1376 - [0:0] :logdrop-1377 - [0:0] :logdrop-1378 - [0:0] :logdrop-1379 - [0:0] :logdrop-138 - [0:0] :logdrop-1380 - [0:0] :logdrop-1381 - [0:0] :logdrop-1382 - [0:0] :logdrop-1383 - [0:0] :logdrop-1384 - [0:0] :logdrop-1385 - [0:0] :logdrop-1386 - [0:0] :logdrop-1387 - [0:0] :logdrop-1388 - [0:0] :logdrop-1389 - [0:0] :logdrop-139 - [0:0] :logdrop-1390 - [0:0] :logdrop-1391 - [0:0] :logdrop-1392 - [0:0] :logdrop-1393 - [0:0] :logdrop-1394 - [0:0] :logdrop-1395 - [0:0] :logdrop-1396 - [0:0] :logdrop-1397 - [0:0] :logdrop-1398 - [0:0] :logdrop-1399 - [0:0] :logdrop-14 - [0:0] :logdrop-140 - [0:0] :logdrop-1400 - [0:0] :logdrop-1401 - [0:0] :logdrop-1402 - [0:0] :logdrop-1403 - [0:0] :logdrop-1404 - [0:0] :logdrop-1405 - [0:0] :logdrop-1406 - [0:0] :logdrop-1407 - [0:0] :logdrop-1408 - [0:0] :logdrop-1409 - [0:0] :logdrop-141 - [0:0] :logdrop-1410 - [0:0] :logdrop-1411 - [0:0] :logdrop-1412 - [0:0] :logdrop-1413 - [0:0] :logdrop-1414 - [0:0] :logdrop-1415 - [0:0] :logdrop-1416 - [0:0] :logdrop-1417 - [0:0] :logdrop-1418 - [0:0] :logdrop-1419 - [0:0] :logdrop-142 - [0:0] :logdrop-1420 - [0:0] :logdrop-1421 - [0:0] :logdrop-1422 - [0:0] :logdrop-1423 - [0:0] :logdrop-1424 - [0:0] :logdrop-1425 - [0:0] :logdrop-1426 - [0:0] :logdrop-1427 - [0:0] :logdrop-1428 - [0:0] :logdrop-1429 - [0:0] :logdrop-143 - [0:0] :logdrop-1430 - [0:0] :logdrop-1431 - [0:0] :logdrop-1432 - [0:0] :logdrop-1433 - [0:0] :logdrop-1434 - [0:0] :logdrop-1435 - [0:0] :logdrop-1436 - [0:0] :logdrop-1437 - [0:0] :logdrop-1438 - [0:0] :logdrop-1439 - [0:0] :logdrop-144 - [0:0] :logdrop-1440 - [0:0] :logdrop-1441 - [0:0] :logdrop-1442 - [0:0] :logdrop-1443 - [0:0] :logdrop-1444 - [0:0] :logdrop-1445 - [0:0] :logdrop-1446 - [0:0] :logdrop-1447 - [0:0] :logdrop-1448 - [0:0] :logdrop-1449 - [0:0] :logdrop-145 - [0:0] :logdrop-1450 - [0:0] :logdrop-1451 - [0:0] :logdrop-1452 - [0:0] :logdrop-1453 - [0:0] :logdrop-1454 - [0:0] :logdrop-1455 - [0:0] :logdrop-1456 - [0:0] :logdrop-1457 - [0:0] :logdrop-1458 - [0:0] :logdrop-1459 - [0:0] :logdrop-146 - [0:0] :logdrop-1460 - [0:0] :logdrop-1461 - [0:0] :logdrop-1462 - [0:0] :logdrop-1463 - [0:0] :logdrop-1464 - [0:0] :logdrop-1465 - [0:0] :logdrop-1466 - [0:0] :logdrop-1467 - [0:0] :logdrop-1468 - [0:0] :logdrop-1469 - [0:0] :logdrop-147 - [0:0] :logdrop-1470 - [0:0] :logdrop-1471 - [0:0] :logdrop-1472 - [0:0] :logdrop-1473 - [0:0] :logdrop-1474 - [0:0] :logdrop-1475 - [0:0] :logdrop-1476 - [0:0] :logdrop-1477 - [0:0] :logdrop-1478 - [0:0] :logdrop-1479 - [0:0] :logdrop-148 - [0:0] :logdrop-1480 - [0:0] :logdrop-1481 - [0:0] :logdrop-1482 - [0:0] :logdrop-1483 - [0:0] :logdrop-1484 - [0:0] :logdrop-1485 - [0:0] :logdrop-1486 - [0:0] :logdrop-1487 - [0:0] :logdrop-1488 - [0:0] :logdrop-1489 - [0:0] :logdrop-149 - [0:0] :logdrop-1490 - [0:0] :logdrop-1491 - [0:0] :logdrop-1492 - [0:0] :logdrop-1493 - [0:0] :logdrop-1494 - [0:0] :logdrop-1495 - [0:0] :logdrop-1496 - [0:0] :logdrop-1497 - [0:0] :logdrop-1498 - [0:0] :logdrop-1499 - [0:0] :logdrop-15 - [0:0] :logdrop-150 - [0:0] :logdrop-1500 - [0:0] :logdrop-1501 - [0:0] :logdrop-1502 - [0:0] :logdrop-1503 - [0:0] :logdrop-1504 - [0:0] :logdrop-1505 - [0:0] :logdrop-1506 - [0:0] :logdrop-1507 - [0:0] :logdrop-1508 - [0:0] :logdrop-1509 - [0:0] :logdrop-151 - [0:0] :logdrop-1510 - [0:0] :logdrop-1511 - [0:0] :logdrop-1512 - [0:0] :logdrop-1513 - [0:0] :logdrop-1514 - [0:0] :logdrop-1515 - [0:0] :logdrop-1516 - [0:0] :logdrop-1517 - [0:0] :logdrop-1518 - [0:0] :logdrop-1519 - [0:0] :logdrop-152 - [0:0] :logdrop-1520 - [0:0] :logdrop-1521 - [0:0] :logdrop-1522 - [0:0] :logdrop-1523 - [0:0] :logdrop-1524 - [0:0] :logdrop-1525 - [0:0] :logdrop-1526 - [0:0] :logdrop-1527 - [0:0] :logdrop-1528 - [0:0] :logdrop-1529 - [0:0] :logdrop-153 - [0:0] :logdrop-1530 - [0:0] :logdrop-1531 - [0:0] :logdrop-1532 - [0:0] :logdrop-1533 - [0:0] :logdrop-1534 - [0:0] :logdrop-1535 - [0:0] :logdrop-1536 - [0:0] :logdrop-1537 - [0:0] :logdrop-1538 - [0:0] :logdrop-1539 - [0:0] :logdrop-154 - [0:0] :logdrop-1540 - [0:0] :logdrop-1541 - [0:0] :logdrop-1542 - [0:0] :logdrop-1543 - [0:0] :logdrop-1544 - [0:0] :logdrop-1545 - [0:0] :logdrop-1546 - [0:0] :logdrop-1547 - [0:0] :logdrop-1548 - [0:0] :logdrop-1549 - [0:0] :logdrop-155 - [0:0] :logdrop-1550 - [0:0] :logdrop-1551 - [0:0] :logdrop-1552 - [0:0] :logdrop-1553 - [0:0] :logdrop-1554 - [0:0] :logdrop-1555 - [0:0] :logdrop-1556 - [0:0] :logdrop-1557 - [0:0] :logdrop-1558 - [0:0] :logdrop-1559 - [0:0] :logdrop-156 - [0:0] :logdrop-1560 - [0:0] :logdrop-1561 - [0:0] :logdrop-1562 - [0:0] :logdrop-1563 - [0:0] :logdrop-1564 - [0:0] :logdrop-1565 - [0:0] :logdrop-1566 - [0:0] :logdrop-1567 - [0:0] :logdrop-1568 - [0:0] :logdrop-1569 - [0:0] :logdrop-157 - [0:0] :logdrop-1570 - [0:0] :logdrop-1571 - [0:0] :logdrop-1572 - [0:0] :logdrop-1573 - [0:0] :logdrop-1574 - [0:0] :logdrop-1575 - [0:0] :logdrop-1576 - [0:0] :logdrop-1577 - [0:0] :logdrop-1578 - [0:0] :logdrop-1579 - [0:0] :logdrop-158 - [0:0] :logdrop-1580 - [0:0] :logdrop-1581 - [0:0] :logdrop-1582 - [0:0] :logdrop-1583 - [0:0] :logdrop-1584 - [0:0] :logdrop-1585 - [0:0] :logdrop-1586 - [0:0] :logdrop-1587 - [0:0] :logdrop-1588 - [0:0] :logdrop-1589 - [0:0] :logdrop-159 - [0:0] :logdrop-1590 - [0:0] :logdrop-1591 - [0:0] :logdrop-1592 - [0:0] :logdrop-1593 - [0:0] :logdrop-1594 - [0:0] :logdrop-1595 - [0:0] :logdrop-1596 - [0:0] :logdrop-1597 - [0:0] :logdrop-1598 - [0:0] :logdrop-1599 - [0:0] :logdrop-16 - [0:0] :logdrop-160 - [0:0] :logdrop-1600 - [0:0] :logdrop-1601 - [0:0] :logdrop-1602 - [0:0] :logdrop-1603 - [0:0] :logdrop-1604 - [0:0] :logdrop-1605 - [0:0] :logdrop-1606 - [0:0] :logdrop-1607 - [0:0] :logdrop-1608 - [0:0] :logdrop-1609 - [0:0] :logdrop-161 - [0:0] :logdrop-1610 - [0:0] :logdrop-1611 - [0:0] :logdrop-1612 - [0:0] :logdrop-1613 - [0:0] :logdrop-1614 - [0:0] :logdrop-1615 - [0:0] :logdrop-1616 - [0:0] :logdrop-1617 - [0:0] :logdrop-1618 - [0:0] :logdrop-1619 - [0:0] :logdrop-162 - [0:0] :logdrop-1620 - [0:0] :logdrop-1621 - [0:0] :logdrop-1622 - [0:0] :logdrop-1623 - [0:0] :logdrop-1624 - [0:0] :logdrop-1625 - [0:0] :logdrop-1626 - [0:0] :logdrop-1627 - [0:0] :logdrop-1628 - [0:0] :logdrop-1629 - [0:0] :logdrop-163 - [0:0] :logdrop-1630 - [0:0] :logdrop-1631 - [0:0] :logdrop-1632 - [0:0] :logdrop-1633 - [0:0] :logdrop-1634 - [0:0] :logdrop-1635 - [0:0] :logdrop-1636 - [0:0] :logdrop-1637 - [0:0] :logdrop-1638 - [0:0] :logdrop-1639 - [0:0] :logdrop-164 - [0:0] :logdrop-1640 - [0:0] :logdrop-1641 - [0:0] :logdrop-1642 - [0:0] :logdrop-1643 - [0:0] :logdrop-1644 - [0:0] :logdrop-1645 - [0:0] :logdrop-1646 - [0:0] :logdrop-1647 - [0:0] :logdrop-1648 - [0:0] :logdrop-1649 - [0:0] :logdrop-165 - [0:0] :logdrop-1650 - [0:0] :logdrop-1651 - [0:0] :logdrop-1652 - [0:0] :logdrop-1653 - [0:0] :logdrop-1654 - [0:0] :logdrop-166 - [0:0] :logdrop-167 - [0:0] :logdrop-168 - [0:0] :logdrop-169 - [0:0] :logdrop-17 - [0:0] :logdrop-170 - [0:0] :logdrop-171 - [0:0] :logdrop-172 - [0:0] :logdrop-173 - [0:0] :logdrop-174 - [0:0] :logdrop-175 - [0:0] :logdrop-176 - [0:0] :logdrop-177 - [0:0] :logdrop-178 - [0:0] :logdrop-179 - [0:0] :logdrop-18 - [0:0] :logdrop-180 - [0:0] :logdrop-181 - [0:0] :logdrop-182 - [0:0] :logdrop-183 - [0:0] :logdrop-184 - [0:0] :logdrop-185 - [0:0] :logdrop-186 - [0:0] :logdrop-187 - [0:0] :logdrop-188 - [0:0] :logdrop-189 - [0:0] :logdrop-19 - [0:0] :logdrop-190 - [0:0] :logdrop-191 - [0:0] :logdrop-192 - [0:0] :logdrop-193 - [0:0] :logdrop-194 - [0:0] :logdrop-195 - [0:0] :logdrop-196 - [0:0] :logdrop-197 - [0:0] :logdrop-198 - [0:0] :logdrop-199 - [0:0] :logdrop-2 - [0:0] :logdrop-20 - [0:0] :logdrop-200 - [0:0] :logdrop-201 - [0:0] :logdrop-202 - [0:0] :logdrop-203 - [0:0] :logdrop-204 - [0:0] :logdrop-205 - [0:0] :logdrop-206 - [0:0] :logdrop-207 - [0:0] :logdrop-208 - [0:0] :logdrop-209 - [0:0] :logdrop-21 - [0:0] :logdrop-210 - [0:0] :logdrop-211 - [0:0] :logdrop-212 - [0:0] :logdrop-213 - [0:0] :logdrop-214 - [0:0] :logdrop-215 - [0:0] :logdrop-216 - [0:0] :logdrop-217 - [0:0] :logdrop-218 - [0:0] :logdrop-219 - [0:0] :logdrop-22 - [0:0] :logdrop-220 - [0:0] :logdrop-221 - [0:0] :logdrop-222 - [0:0] :logdrop-223 - [0:0] :logdrop-224 - [0:0] :logdrop-225 - [0:0] :logdrop-226 - [0:0] :logdrop-227 - [0:0] :logdrop-228 - [0:0] :logdrop-229 - [0:0] :logdrop-23 - [0:0] :logdrop-230 - [0:0] :logdrop-231 - [0:0] :logdrop-232 - [0:0] :logdrop-233 - [0:0] :logdrop-234 - [0:0] :logdrop-235 - [0:0] :logdrop-236 - [0:0] :logdrop-237 - [0:0] :logdrop-238 - [0:0] :logdrop-239 - [0:0] :logdrop-24 - [0:0] :logdrop-240 - [0:0] :logdrop-241 - [0:0] :logdrop-242 - [0:0] :logdrop-243 - [0:0] :logdrop-244 - [0:0] :logdrop-245 - [0:0] :logdrop-246 - [0:0] :logdrop-247 - [0:0] :logdrop-248 - [0:0] :logdrop-249 - [0:0] :logdrop-25 - [0:0] :logdrop-250 - [0:0] :logdrop-251 - [0:0] :logdrop-252 - [0:0] :logdrop-253 - [0:0] :logdrop-254 - [0:0] :logdrop-255 - [0:0] :logdrop-256 - [0:0] :logdrop-257 - [0:0] :logdrop-258 - [0:0] :logdrop-259 - [0:0] :logdrop-26 - [0:0] :logdrop-260 - [0:0] :logdrop-261 - [0:0] :logdrop-262 - [0:0] :logdrop-263 - [0:0] :logdrop-264 - [0:0] :logdrop-265 - [0:0] :logdrop-266 - [0:0] :logdrop-267 - [0:0] :logdrop-268 - [0:0] :logdrop-269 - [0:0] :logdrop-27 - [0:0] :logdrop-270 - [0:0] :logdrop-271 - [0:0] :logdrop-272 - [0:0] :logdrop-273 - [0:0] :logdrop-274 - [0:0] :logdrop-275 - [0:0] :logdrop-276 - [0:0] :logdrop-277 - [0:0] :logdrop-278 - [0:0] :logdrop-279 - [0:0] :logdrop-28 - [0:0] :logdrop-280 - [0:0] :logdrop-281 - [0:0] :logdrop-282 - [0:0] :logdrop-283 - [0:0] :logdrop-284 - [0:0] :logdrop-285 - [0:0] :logdrop-286 - [0:0] :logdrop-287 - [0:0] :logdrop-288 - [0:0] :logdrop-289 - [0:0] :logdrop-29 - [0:0] :logdrop-290 - [0:0] :logdrop-291 - [0:0] :logdrop-292 - [0:0] :logdrop-293 - [0:0] :logdrop-294 - [0:0] :logdrop-295 - [0:0] :logdrop-296 - [0:0] :logdrop-297 - [0:0] :logdrop-298 - [0:0] :logdrop-299 - [0:0] :logdrop-3 - [0:0] :logdrop-30 - [0:0] :logdrop-300 - [0:0] :logdrop-301 - [0:0] :logdrop-302 - [0:0] :logdrop-303 - [0:0] :logdrop-304 - [0:0] :logdrop-305 - [0:0] :logdrop-306 - [0:0] :logdrop-307 - [0:0] :logdrop-308 - [0:0] :logdrop-309 - [0:0] :logdrop-31 - [0:0] :logdrop-310 - [0:0] :logdrop-311 - [0:0] :logdrop-312 - [0:0] :logdrop-313 - [0:0] :logdrop-314 - [0:0] :logdrop-315 - [0:0] :logdrop-316 - [0:0] :logdrop-317 - [0:0] :logdrop-318 - [0:0] :logdrop-319 - [0:0] :logdrop-32 - [0:0] :logdrop-320 - [0:0] :logdrop-321 - [0:0] :logdrop-322 - [0:0] :logdrop-323 - [0:0] :logdrop-324 - [0:0] :logdrop-325 - [0:0] :logdrop-326 - [0:0] :logdrop-327 - [0:0] :logdrop-328 - [0:0] :logdrop-329 - [0:0] :logdrop-33 - [0:0] :logdrop-330 - [0:0] :logdrop-331 - [0:0] :logdrop-332 - [0:0] :logdrop-333 - [0:0] :logdrop-334 - [0:0] :logdrop-335 - [0:0] :logdrop-336 - [0:0] :logdrop-337 - [0:0] :logdrop-338 - [0:0] :logdrop-339 - [0:0] :logdrop-34 - [0:0] :logdrop-340 - [0:0] :logdrop-341 - [0:0] :logdrop-342 - [0:0] :logdrop-343 - [0:0] :logdrop-344 - [0:0] :logdrop-345 - [0:0] :logdrop-346 - [0:0] :logdrop-347 - [0:0] :logdrop-348 - [0:0] :logdrop-349 - [0:0] :logdrop-35 - [0:0] :logdrop-350 - [0:0] :logdrop-351 - [0:0] :logdrop-352 - [0:0] :logdrop-353 - [0:0] :logdrop-354 - [0:0] :logdrop-355 - [0:0] :logdrop-356 - [0:0] :logdrop-357 - [0:0] :logdrop-358 - [0:0] :logdrop-359 - [0:0] :logdrop-36 - [0:0] :logdrop-360 - [0:0] :logdrop-361 - [0:0] :logdrop-362 - [0:0] :logdrop-363 - [0:0] :logdrop-364 - [0:0] :logdrop-365 - [0:0] :logdrop-366 - [0:0] :logdrop-367 - [0:0] :logdrop-368 - [0:0] :logdrop-369 - [0:0] :logdrop-37 - [0:0] :logdrop-370 - [0:0] :logdrop-371 - [0:0] :logdrop-372 - [0:0] :logdrop-373 - [0:0] :logdrop-374 - [0:0] :logdrop-375 - [0:0] :logdrop-376 - [0:0] :logdrop-377 - [0:0] :logdrop-378 - [0:0] :logdrop-379 - [0:0] :logdrop-38 - [0:0] :logdrop-380 - [0:0] :logdrop-381 - [0:0] :logdrop-382 - [0:0] :logdrop-383 - [0:0] :logdrop-384 - [0:0] :logdrop-385 - [0:0] :logdrop-386 - [0:0] :logdrop-387 - [0:0] :logdrop-388 - [0:0] :logdrop-389 - [0:0] :logdrop-39 - [0:0] :logdrop-390 - [0:0] :logdrop-391 - [0:0] :logdrop-392 - [0:0] :logdrop-393 - [0:0] :logdrop-394 - [0:0] :logdrop-395 - [0:0] :logdrop-396 - [0:0] :logdrop-397 - [0:0] :logdrop-398 - [0:0] :logdrop-399 - [0:0] :logdrop-4 - [0:0] :logdrop-40 - [0:0] :logdrop-400 - [0:0] :logdrop-401 - [0:0] :logdrop-402 - [0:0] :logdrop-403 - [0:0] :logdrop-404 - [0:0] :logdrop-405 - [0:0] :logdrop-406 - [0:0] :logdrop-407 - [0:0] :logdrop-408 - [0:0] :logdrop-409 - [0:0] :logdrop-41 - [0:0] :logdrop-410 - [0:0] :logdrop-411 - [0:0] :logdrop-412 - [0:0] :logdrop-413 - [0:0] :logdrop-414 - [0:0] :logdrop-415 - [0:0] :logdrop-416 - [0:0] :logdrop-417 - [0:0] :logdrop-418 - [0:0] :logdrop-419 - [0:0] :logdrop-42 - [0:0] :logdrop-420 - [0:0] :logdrop-421 - [0:0] :logdrop-422 - [0:0] :logdrop-423 - [0:0] :logdrop-424 - [0:0] :logdrop-425 - [0:0] :logdrop-426 - [0:0] :logdrop-427 - [0:0] :logdrop-428 - [0:0] :logdrop-429 - [0:0] :logdrop-43 - [0:0] :logdrop-430 - [0:0] :logdrop-431 - [0:0] :logdrop-432 - [0:0] :logdrop-433 - [0:0] :logdrop-434 - [0:0] :logdrop-435 - [0:0] :logdrop-436 - [0:0] :logdrop-437 - [0:0] :logdrop-438 - [0:0] :logdrop-439 - [0:0] :logdrop-44 - [0:0] :logdrop-440 - [0:0] :logdrop-441 - [0:0] :logdrop-442 - [0:0] :logdrop-443 - [0:0] :logdrop-444 - [0:0] :logdrop-445 - [0:0] :logdrop-446 - [0:0] :logdrop-447 - [0:0] :logdrop-448 - [0:0] :logdrop-449 - [0:0] :logdrop-45 - [0:0] :logdrop-450 - [0:0] :logdrop-451 - [0:0] :logdrop-452 - [0:0] :logdrop-453 - [0:0] :logdrop-454 - [0:0] :logdrop-455 - [0:0] :logdrop-456 - [0:0] :logdrop-457 - [0:0] :logdrop-458 - [0:0] :logdrop-459 - [0:0] :logdrop-46 - [0:0] :logdrop-460 - [0:0] :logdrop-461 - [0:0] :logdrop-462 - [0:0] :logdrop-463 - [0:0] :logdrop-464 - [0:0] :logdrop-465 - [0:0] :logdrop-466 - [0:0] :logdrop-467 - [0:0] :logdrop-468 - [0:0] :logdrop-469 - [0:0] :logdrop-47 - [0:0] :logdrop-470 - [0:0] :logdrop-471 - [0:0] :logdrop-472 - [0:0] :logdrop-473 - [0:0] :logdrop-474 - [0:0] :logdrop-475 - [0:0] :logdrop-476 - [0:0] :logdrop-477 - [0:0] :logdrop-478 - [0:0] :logdrop-479 - [0:0] :logdrop-48 - [0:0] :logdrop-480 - [0:0] :logdrop-481 - [0:0] :logdrop-482 - [0:0] :logdrop-483 - [0:0] :logdrop-484 - [0:0] :logdrop-485 - [0:0] :logdrop-486 - [0:0] :logdrop-487 - [0:0] :logdrop-488 - [0:0] :logdrop-489 - [0:0] :logdrop-49 - [0:0] :logdrop-490 - [0:0] :logdrop-491 - [0:0] :logdrop-492 - [0:0] :logdrop-493 - [0:0] :logdrop-494 - [0:0] :logdrop-495 - [0:0] :logdrop-496 - [0:0] :logdrop-497 - [0:0] :logdrop-498 - [0:0] :logdrop-499 - [0:0] :logdrop-5 - [0:0] :logdrop-50 - [0:0] :logdrop-500 - [0:0] :logdrop-501 - [0:0] :logdrop-502 - [0:0] :logdrop-503 - [0:0] :logdrop-504 - [0:0] :logdrop-505 - [0:0] :logdrop-506 - [0:0] :logdrop-507 - [0:0] :logdrop-508 - [0:0] :logdrop-509 - [0:0] :logdrop-51 - [0:0] :logdrop-510 - [0:0] :logdrop-511 - [0:0] :logdrop-512 - [0:0] :logdrop-513 - [0:0] :logdrop-514 - [0:0] :logdrop-515 - [0:0] :logdrop-516 - [0:0] :logdrop-517 - [0:0] :logdrop-518 - [0:0] :logdrop-519 - [0:0] :logdrop-52 - [0:0] :logdrop-520 - [0:0] :logdrop-521 - [0:0] :logdrop-522 - [0:0] :logdrop-523 - [0:0] :logdrop-524 - [0:0] :logdrop-525 - [0:0] :logdrop-526 - [0:0] :logdrop-527 - [0:0] :logdrop-528 - [0:0] :logdrop-529 - [0:0] :logdrop-53 - [0:0] :logdrop-530 - [0:0] :logdrop-531 - [0:0] :logdrop-532 - [0:0] :logdrop-533 - [0:0] :logdrop-534 - [0:0] :logdrop-535 - [0:0] :logdrop-536 - [0:0] :logdrop-537 - [0:0] :logdrop-538 - [0:0] :logdrop-539 - [0:0] :logdrop-54 - [0:0] :logdrop-540 - [0:0] :logdrop-541 - [0:0] :logdrop-542 - [0:0] :logdrop-543 - [0:0] :logdrop-544 - [0:0] :logdrop-545 - [0:0] :logdrop-546 - [0:0] :logdrop-547 - [0:0] :logdrop-548 - [0:0] :logdrop-549 - [0:0] :logdrop-55 - [0:0] :logdrop-550 - [0:0] :logdrop-551 - [0:0] :logdrop-552 - [0:0] :logdrop-553 - [0:0] :logdrop-554 - [0:0] :logdrop-555 - [0:0] :logdrop-556 - [0:0] :logdrop-557 - [0:0] :logdrop-558 - [0:0] :logdrop-559 - [0:0] :logdrop-56 - [0:0] :logdrop-560 - [0:0] :logdrop-561 - [0:0] :logdrop-562 - [0:0] :logdrop-563 - [0:0] :logdrop-564 - [0:0] :logdrop-565 - [0:0] :logdrop-566 - [0:0] :logdrop-567 - [0:0] :logdrop-568 - [0:0] :logdrop-569 - [0:0] :logdrop-57 - [0:0] :logdrop-570 - [0:0] :logdrop-571 - [0:0] :logdrop-572 - [0:0] :logdrop-573 - [0:0] :logdrop-574 - [0:0] :logdrop-575 - [0:0] :logdrop-576 - [0:0] :logdrop-577 - [0:0] :logdrop-578 - [0:0] :logdrop-579 - [0:0] :logdrop-58 - [0:0] :logdrop-580 - [0:0] :logdrop-581 - [0:0] :logdrop-582 - [0:0] :logdrop-583 - [0:0] :logdrop-584 - [0:0] :logdrop-585 - [0:0] :logdrop-586 - [0:0] :logdrop-587 - [0:0] :logdrop-588 - [0:0] :logdrop-589 - [0:0] :logdrop-59 - [0:0] :logdrop-590 - [0:0] :logdrop-591 - [0:0] :logdrop-592 - [0:0] :logdrop-593 - [0:0] :logdrop-594 - [0:0] :logdrop-595 - [0:0] :logdrop-596 - [0:0] :logdrop-597 - [0:0] :logdrop-598 - [0:0] :logdrop-599 - [0:0] :logdrop-6 - [0:0] :logdrop-60 - [0:0] :logdrop-600 - [0:0] :logdrop-601 - [0:0] :logdrop-602 - [0:0] :logdrop-603 - [0:0] :logdrop-604 - [0:0] :logdrop-605 - [0:0] :logdrop-606 - [0:0] :logdrop-607 - [0:0] :logdrop-608 - [0:0] :logdrop-609 - [0:0] :logdrop-61 - [0:0] :logdrop-610 - [0:0] :logdrop-611 - [0:0] :logdrop-612 - [0:0] :logdrop-613 - [0:0] :logdrop-614 - [0:0] :logdrop-615 - [0:0] :logdrop-616 - [0:0] :logdrop-617 - [0:0] :logdrop-618 - [0:0] :logdrop-619 - [0:0] :logdrop-62 - [0:0] :logdrop-620 - [0:0] :logdrop-621 - [0:0] :logdrop-622 - [0:0] :logdrop-623 - [0:0] :logdrop-624 - [0:0] :logdrop-625 - [0:0] :logdrop-626 - [0:0] :logdrop-627 - [0:0] :logdrop-628 - [0:0] :logdrop-629 - [0:0] :logdrop-63 - [0:0] :logdrop-630 - [0:0] :logdrop-631 - [0:0] :logdrop-632 - [0:0] :logdrop-633 - [0:0] :logdrop-634 - [0:0] :logdrop-635 - [0:0] :logdrop-636 - [0:0] :logdrop-637 - [0:0] :logdrop-638 - [0:0] :logdrop-639 - [0:0] :logdrop-64 - [0:0] :logdrop-640 - [0:0] :logdrop-641 - [0:0] :logdrop-642 - [0:0] :logdrop-643 - [0:0] :logdrop-644 - [0:0] :logdrop-645 - [0:0] :logdrop-646 - [0:0] :logdrop-647 - [0:0] :logdrop-648 - [0:0] :logdrop-649 - [0:0] :logdrop-65 - [0:0] :logdrop-650 - [0:0] :logdrop-651 - [0:0] :logdrop-652 - [0:0] :logdrop-653 - [0:0] :logdrop-654 - [0:0] :logdrop-655 - [0:0] :logdrop-656 - [0:0] :logdrop-657 - [0:0] :logdrop-658 - [0:0] :logdrop-659 - [0:0] :logdrop-66 - [0:0] :logdrop-660 - [0:0] :logdrop-661 - [0:0] :logdrop-662 - [0:0] :logdrop-663 - [0:0] :logdrop-664 - [0:0] :logdrop-665 - [0:0] :logdrop-666 - [0:0] :logdrop-667 - [0:0] :logdrop-668 - [0:0] :logdrop-669 - [0:0] :logdrop-67 - [0:0] :logdrop-670 - [0:0] :logdrop-671 - [0:0] :logdrop-672 - [0:0] :logdrop-673 - [0:0] :logdrop-674 - [0:0] :logdrop-675 - [0:0] :logdrop-676 - [0:0] :logdrop-677 - [0:0] :logdrop-678 - [0:0] :logdrop-679 - [0:0] :logdrop-68 - [0:0] :logdrop-680 - [0:0] :logdrop-681 - [0:0] :logdrop-682 - [0:0] :logdrop-683 - [0:0] :logdrop-684 - [0:0] :logdrop-685 - [0:0] :logdrop-686 - [0:0] :logdrop-687 - [0:0] :logdrop-688 - [0:0] :logdrop-689 - [0:0] :logdrop-69 - [0:0] :logdrop-690 - [0:0] :logdrop-691 - [0:0] :logdrop-692 - [0:0] :logdrop-693 - [0:0] :logdrop-694 - [0:0] :logdrop-695 - [0:0] :logdrop-696 - [0:0] :logdrop-697 - [0:0] :logdrop-698 - [0:0] :logdrop-699 - [0:0] :logdrop-7 - [0:0] :logdrop-70 - [0:0] :logdrop-700 - [0:0] :logdrop-701 - [0:0] :logdrop-702 - [0:0] :logdrop-703 - [0:0] :logdrop-704 - [0:0] :logdrop-705 - [0:0] :logdrop-706 - [0:0] :logdrop-707 - [0:0] :logdrop-708 - [0:0] :logdrop-709 - [0:0] :logdrop-71 - [0:0] :logdrop-710 - [0:0] :logdrop-711 - [0:0] :logdrop-712 - [0:0] :logdrop-713 - [0:0] :logdrop-714 - [0:0] :logdrop-715 - [0:0] :logdrop-716 - [0:0] :logdrop-717 - [0:0] :logdrop-718 - [0:0] :logdrop-719 - [0:0] :logdrop-72 - [0:0] :logdrop-720 - [0:0] :logdrop-721 - [0:0] :logdrop-722 - [0:0] :logdrop-723 - [0:0] :logdrop-724 - [0:0] :logdrop-725 - [0:0] :logdrop-726 - [0:0] :logdrop-727 - [0:0] :logdrop-728 - [0:0] :logdrop-729 - [0:0] :logdrop-73 - [0:0] :logdrop-730 - [0:0] :logdrop-731 - [0:0] :logdrop-732 - [0:0] :logdrop-733 - [0:0] :logdrop-734 - [0:0] :logdrop-735 - [0:0] :logdrop-736 - [0:0] :logdrop-737 - [0:0] :logdrop-738 - [0:0] :logdrop-739 - [0:0] :logdrop-74 - [0:0] :logdrop-740 - [0:0] :logdrop-741 - [0:0] :logdrop-742 - [0:0] :logdrop-743 - [0:0] :logdrop-744 - [0:0] :logdrop-745 - [0:0] :logdrop-746 - [0:0] :logdrop-747 - [0:0] :logdrop-748 - [0:0] :logdrop-749 - [0:0] :logdrop-75 - [0:0] :logdrop-750 - [0:0] :logdrop-751 - [0:0] :logdrop-752 - [0:0] :logdrop-753 - [0:0] :logdrop-754 - [0:0] :logdrop-755 - [0:0] :logdrop-756 - [0:0] :logdrop-757 - [0:0] :logdrop-758 - [0:0] :logdrop-759 - [0:0] :logdrop-76 - [0:0] :logdrop-760 - [0:0] :logdrop-761 - [0:0] :logdrop-762 - [0:0] :logdrop-763 - [0:0] :logdrop-764 - [0:0] :logdrop-765 - [0:0] :logdrop-766 - [0:0] :logdrop-767 - [0:0] :logdrop-768 - [0:0] :logdrop-769 - [0:0] :logdrop-77 - [0:0] :logdrop-770 - [0:0] :logdrop-771 - [0:0] :logdrop-772 - [0:0] :logdrop-773 - [0:0] :logdrop-774 - [0:0] :logdrop-775 - [0:0] :logdrop-776 - [0:0] :logdrop-777 - [0:0] :logdrop-778 - [0:0] :logdrop-779 - [0:0] :logdrop-78 - [0:0] :logdrop-780 - [0:0] :logdrop-781 - [0:0] :logdrop-782 - [0:0] :logdrop-783 - [0:0] :logdrop-784 - [0:0] :logdrop-785 - [0:0] :logdrop-786 - [0:0] :logdrop-787 - [0:0] :logdrop-788 - [0:0] :logdrop-789 - [0:0] :logdrop-79 - [0:0] :logdrop-790 - [0:0] :logdrop-791 - [0:0] :logdrop-792 - [0:0] :logdrop-793 - [0:0] :logdrop-794 - [0:0] :logdrop-795 - [0:0] :logdrop-796 - [0:0] :logdrop-797 - [0:0] :logdrop-798 - [0:0] :logdrop-799 - [0:0] :logdrop-8 - [0:0] :logdrop-80 - [0:0] :logdrop-800 - [0:0] :logdrop-801 - [0:0] :logdrop-802 - [0:0] :logdrop-803 - [0:0] :logdrop-804 - [0:0] :logdrop-805 - [0:0] :logdrop-806 - [0:0] :logdrop-807 - [0:0] :logdrop-808 - [0:0] :logdrop-809 - [0:0] :logdrop-81 - [0:0] :logdrop-810 - [0:0] :logdrop-811 - [0:0] :logdrop-812 - [0:0] :logdrop-813 - [0:0] :logdrop-814 - [0:0] :logdrop-815 - [0:0] :logdrop-816 - [0:0] :logdrop-817 - [0:0] :logdrop-818 - [0:0] :logdrop-819 - [0:0] :logdrop-82 - [0:0] :logdrop-820 - [0:0] :logdrop-821 - [0:0] :logdrop-822 - [0:0] :logdrop-823 - [0:0] :logdrop-824 - [0:0] :logdrop-825 - [0:0] :logdrop-826 - [0:0] :logdrop-827 - [0:0] :logdrop-828 - [0:0] :logdrop-829 - [0:0] :logdrop-83 - [0:0] :logdrop-830 - [0:0] :logdrop-831 - [0:0] :logdrop-832 - [0:0] :logdrop-833 - [0:0] :logdrop-834 - [0:0] :logdrop-835 - [0:0] :logdrop-836 - [0:0] :logdrop-837 - [0:0] :logdrop-838 - [0:0] :logdrop-839 - [0:0] :logdrop-84 - [0:0] :logdrop-840 - [0:0] :logdrop-841 - [0:0] :logdrop-842 - [0:0] :logdrop-843 - [0:0] :logdrop-844 - [0:0] :logdrop-845 - [0:0] :logdrop-846 - [0:0] :logdrop-847 - [0:0] :logdrop-848 - [0:0] :logdrop-849 - [0:0] :logdrop-85 - [0:0] :logdrop-850 - [0:0] :logdrop-851 - [0:0] :logdrop-852 - [0:0] :logdrop-853 - [0:0] :logdrop-854 - [0:0] :logdrop-855 - [0:0] :logdrop-856 - [0:0] :logdrop-857 - [0:0] :logdrop-858 - [0:0] :logdrop-859 - [0:0] :logdrop-86 - [0:0] :logdrop-860 - [0:0] :logdrop-861 - [0:0] :logdrop-862 - [0:0] :logdrop-863 - [0:0] :logdrop-864 - [0:0] :logdrop-865 - [0:0] :logdrop-866 - [0:0] :logdrop-867 - [0:0] :logdrop-868 - [0:0] :logdrop-869 - [0:0] :logdrop-87 - [0:0] :logdrop-870 - [0:0] :logdrop-871 - [0:0] :logdrop-872 - [0:0] :logdrop-873 - [0:0] :logdrop-874 - [0:0] :logdrop-875 - [0:0] :logdrop-876 - [0:0] :logdrop-877 - [0:0] :logdrop-878 - [0:0] :logdrop-879 - [0:0] :logdrop-88 - [0:0] :logdrop-880 - [0:0] :logdrop-881 - [0:0] :logdrop-882 - [0:0] :logdrop-883 - [0:0] :logdrop-884 - [0:0] :logdrop-885 - [0:0] :logdrop-886 - [0:0] :logdrop-887 - [0:0] :logdrop-888 - [0:0] :logdrop-889 - [0:0] :logdrop-89 - [0:0] :logdrop-890 - [0:0] :logdrop-891 - [0:0] :logdrop-892 - [0:0] :logdrop-893 - [0:0] :logdrop-894 - [0:0] :logdrop-895 - [0:0] :logdrop-896 - [0:0] :logdrop-897 - [0:0] :logdrop-898 - [0:0] :logdrop-899 - [0:0] :logdrop-9 - [0:0] :logdrop-90 - [0:0] :logdrop-900 - [0:0] :logdrop-901 - [0:0] :logdrop-902 - [0:0] :logdrop-903 - [0:0] :logdrop-904 - [0:0] :logdrop-905 - [0:0] :logdrop-906 - [0:0] :logdrop-907 - [0:0] :logdrop-908 - [0:0] :logdrop-909 - [0:0] :logdrop-91 - [0:0] :logdrop-910 - [0:0] :logdrop-911 - [0:0] :logdrop-912 - [0:0] :logdrop-913 - [0:0] :logdrop-914 - [0:0] :logdrop-915 - [0:0] :logdrop-916 - [0:0] :logdrop-917 - [0:0] :logdrop-918 - [0:0] :logdrop-919 - [0:0] :logdrop-92 - [0:0] :logdrop-920 - [0:0] :logdrop-921 - [0:0] :logdrop-922 - [0:0] :logdrop-923 - [0:0] :logdrop-924 - [0:0] :logdrop-925 - [0:0] :logdrop-926 - [0:0] :logdrop-927 - [0:0] :logdrop-928 - [0:0] :logdrop-929 - [0:0] :logdrop-93 - [0:0] :logdrop-930 - [0:0] :logdrop-931 - [0:0] :logdrop-932 - [0:0] :logdrop-933 - [0:0] :logdrop-934 - [0:0] :logdrop-935 - [0:0] :logdrop-936 - [0:0] :logdrop-937 - [0:0] :logdrop-938 - [0:0] :logdrop-939 - [0:0] :logdrop-94 - [0:0] :logdrop-940 - [0:0] :logdrop-941 - [0:0] :logdrop-942 - [0:0] :logdrop-943 - [0:0] :logdrop-944 - [0:0] :logdrop-945 - [0:0] :logdrop-946 - [0:0] :logdrop-947 - [0:0] :logdrop-948 - [0:0] :logdrop-949 - [0:0] :logdrop-95 - [0:0] :logdrop-950 - [0:0] :logdrop-951 - [0:0] :logdrop-952 - [0:0] :logdrop-953 - [0:0] :logdrop-954 - [0:0] :logdrop-955 - [0:0] :logdrop-956 - [0:0] :logdrop-957 - [0:0] :logdrop-958 - [0:0] :logdrop-959 - [0:0] :logdrop-96 - [0:0] :logdrop-960 - [0:0] :logdrop-961 - [0:0] :logdrop-962 - [0:0] :logdrop-963 - [0:0] :logdrop-964 - [0:0] :logdrop-965 - [0:0] :logdrop-966 - [0:0] :logdrop-967 - [0:0] :logdrop-968 - [0:0] :logdrop-969 - [0:0] :logdrop-97 - [0:0] :logdrop-970 - [0:0] :logdrop-971 - [0:0] :logdrop-972 - [0:0] :logdrop-973 - [0:0] :logdrop-974 - [0:0] :logdrop-975 - [0:0] :logdrop-976 - [0:0] :logdrop-977 - [0:0] :logdrop-978 - [0:0] :logdrop-979 - [0:0] :logdrop-98 - [0:0] :logdrop-980 - [0:0] :logdrop-981 - [0:0] :logdrop-982 - [0:0] :logdrop-983 - [0:0] :logdrop-984 - [0:0] :logdrop-985 - [0:0] :logdrop-986 - [0:0] :logdrop-987 - [0:0] :logdrop-988 - [0:0] :logdrop-989 - [0:0] :logdrop-99 - [0:0] :logdrop-990 - [0:0] :logdrop-991 - [0:0] :logdrop-992 - [0:0] :logdrop-993 - [0:0] :logdrop-994 - [0:0] :logdrop-995 - [0:0] :logdrop-996 - [0:0] :logdrop-997 - [0:0] :logdrop-998 - [0:0] :logdrop-999 - [0:0] :logdrop-ntp-0 - [0:0] :logdrop-ntp-1 - [0:0] :logdrop-ntp-10 - [0:0] :logdrop-ntp-100 - [0:0] :logdrop-ntp-101 - [0:0] :logdrop-ntp-102 - [0:0] :logdrop-ntp-103 - [0:0] :logdrop-ntp-104 - [0:0] :logdrop-ntp-105 - [0:0] :logdrop-ntp-106 - [0:0] :logdrop-ntp-107 - [0:0] :logdrop-ntp-108 - [0:0] :logdrop-ntp-109 - [0:0] :logdrop-ntp-11 - [0:0] :logdrop-ntp-110 - [0:0] :logdrop-ntp-111 - [0:0] :logdrop-ntp-112 - [0:0] :logdrop-ntp-113 - [0:0] :logdrop-ntp-114 - [0:0] :logdrop-ntp-115 - [0:0] :logdrop-ntp-116 - [0:0] :logdrop-ntp-117 - [0:0] :logdrop-ntp-118 - [0:0] :logdrop-ntp-119 - [0:0] :logdrop-ntp-12 - [0:0] :logdrop-ntp-120 - [0:0] :logdrop-ntp-121 - [0:0] :logdrop-ntp-122 - [0:0] :logdrop-ntp-123 - [0:0] :logdrop-ntp-124 - [0:0] :logdrop-ntp-125 - [0:0] :logdrop-ntp-126 - [0:0] :logdrop-ntp-127 - [0:0] :logdrop-ntp-128 - [0:0] :logdrop-ntp-129 - [0:0] :logdrop-ntp-13 - [0:0] :logdrop-ntp-130 - [0:0] :logdrop-ntp-131 - [0:0] :logdrop-ntp-132 - [0:0] :logdrop-ntp-133 - [0:0] :logdrop-ntp-134 - [0:0] :logdrop-ntp-135 - [0:0] :logdrop-ntp-136 - [0:0] :logdrop-ntp-137 - [0:0] :logdrop-ntp-138 - [0:0] :logdrop-ntp-139 - [0:0] :logdrop-ntp-14 - [0:0] :logdrop-ntp-140 - [0:0] :logdrop-ntp-141 - [0:0] :logdrop-ntp-142 - [0:0] :logdrop-ntp-143 - [0:0] :logdrop-ntp-144 - [0:0] :logdrop-ntp-145 - [0:0] :logdrop-ntp-146 - [0:0] :logdrop-ntp-147 - [0:0] :logdrop-ntp-148 - [0:0] :logdrop-ntp-149 - [0:0] :logdrop-ntp-15 - [0:0] :logdrop-ntp-150 - [0:0] :logdrop-ntp-151 - [0:0] :logdrop-ntp-152 - [0:0] :logdrop-ntp-153 - [0:0] :logdrop-ntp-154 - [0:0] :logdrop-ntp-155 - [0:0] :logdrop-ntp-156 - [0:0] :logdrop-ntp-157 - [0:0] :logdrop-ntp-158 - [0:0] :logdrop-ntp-159 - [0:0] :logdrop-ntp-16 - [0:0] :logdrop-ntp-160 - [0:0] :logdrop-ntp-161 - [0:0] :logdrop-ntp-162 - [0:0] :logdrop-ntp-163 - [0:0] :logdrop-ntp-164 - [0:0] :logdrop-ntp-165 - [0:0] :logdrop-ntp-166 - [0:0] :logdrop-ntp-167 - [0:0] :logdrop-ntp-168 - [0:0] :logdrop-ntp-169 - [0:0] :logdrop-ntp-17 - [0:0] :logdrop-ntp-170 - [0:0] :logdrop-ntp-171 - [0:0] :logdrop-ntp-172 - [0:0] :logdrop-ntp-173 - [0:0] :logdrop-ntp-174 - [0:0] :logdrop-ntp-175 - [0:0] :logdrop-ntp-176 - [0:0] :logdrop-ntp-177 - [0:0] :logdrop-ntp-178 - [0:0] :logdrop-ntp-179 - [0:0] :logdrop-ntp-18 - [0:0] :logdrop-ntp-180 - [0:0] :logdrop-ntp-181 - [0:0] :logdrop-ntp-182 - [0:0] :logdrop-ntp-183 - [0:0] :logdrop-ntp-184 - [0:0] :logdrop-ntp-185 - [0:0] :logdrop-ntp-186 - [0:0] :logdrop-ntp-187 - [0:0] :logdrop-ntp-188 - [0:0] :logdrop-ntp-189 - [0:0] :logdrop-ntp-19 - [0:0] :logdrop-ntp-190 - [0:0] :logdrop-ntp-191 - [0:0] :logdrop-ntp-192 - [0:0] :logdrop-ntp-193 - [0:0] :logdrop-ntp-194 - [0:0] :logdrop-ntp-195 - [0:0] :logdrop-ntp-196 - [0:0] :logdrop-ntp-197 - [0:0] :logdrop-ntp-198 - [0:0] :logdrop-ntp-199 - [0:0] :logdrop-ntp-2 - [0:0] :logdrop-ntp-20 - [0:0] :logdrop-ntp-200 - [0:0] :logdrop-ntp-201 - [0:0] :logdrop-ntp-202 - [0:0] :logdrop-ntp-203 - [0:0] :logdrop-ntp-204 - [0:0] :logdrop-ntp-205 - [0:0] :logdrop-ntp-206 - [0:0] :logdrop-ntp-207 - [0:0] :logdrop-ntp-208 - [0:0] :logdrop-ntp-209 - [0:0] :logdrop-ntp-21 - [0:0] :logdrop-ntp-210 - [0:0] :logdrop-ntp-211 - [0:0] :logdrop-ntp-212 - [0:0] :logdrop-ntp-213 - [0:0] :logdrop-ntp-214 - [0:0] :logdrop-ntp-215 - [0:0] :logdrop-ntp-216 - [0:0] :logdrop-ntp-217 - [0:0] :logdrop-ntp-218 - [0:0] :logdrop-ntp-219 - [0:0] :logdrop-ntp-22 - [0:0] :logdrop-ntp-220 - [0:0] :logdrop-ntp-221 - [0:0] :logdrop-ntp-222 - [0:0] :logdrop-ntp-223 - [0:0] :logdrop-ntp-224 - [0:0] :logdrop-ntp-225 - [0:0] :logdrop-ntp-226 - [0:0] :logdrop-ntp-227 - [0:0] :logdrop-ntp-228 - [0:0] :logdrop-ntp-229 - [0:0] :logdrop-ntp-23 - [0:0] :logdrop-ntp-230 - [0:0] :logdrop-ntp-231 - [0:0] :logdrop-ntp-232 - [0:0] :logdrop-ntp-233 - [0:0] :logdrop-ntp-234 - [0:0] :logdrop-ntp-235 - [0:0] :logdrop-ntp-236 - [0:0] :logdrop-ntp-237 - [0:0] :logdrop-ntp-238 - [0:0] :logdrop-ntp-239 - [0:0] :logdrop-ntp-24 - [0:0] :logdrop-ntp-240 - [0:0] :logdrop-ntp-241 - [0:0] :logdrop-ntp-242 - [0:0] :logdrop-ntp-243 - [0:0] :logdrop-ntp-244 - [0:0] :logdrop-ntp-245 - [0:0] :logdrop-ntp-246 - [0:0] :logdrop-ntp-247 - [0:0] :logdrop-ntp-248 - [0:0] :logdrop-ntp-249 - [0:0] :logdrop-ntp-25 - [0:0] :logdrop-ntp-250 - [0:0] :logdrop-ntp-251 - [0:0] :logdrop-ntp-252 - [0:0] :logdrop-ntp-253 - [0:0] :logdrop-ntp-254 - [0:0] :logdrop-ntp-255 - [0:0] :logdrop-ntp-256 - [0:0] :logdrop-ntp-257 - [0:0] :logdrop-ntp-258 - [0:0] :logdrop-ntp-259 - [0:0] :logdrop-ntp-26 - [0:0] :logdrop-ntp-260 - [0:0] :logdrop-ntp-261 - [0:0] :logdrop-ntp-262 - [0:0] :logdrop-ntp-263 - [0:0] :logdrop-ntp-264 - [0:0] :logdrop-ntp-265 - [0:0] :logdrop-ntp-266 - [0:0] :logdrop-ntp-267 - [0:0] :logdrop-ntp-268 - [0:0] :logdrop-ntp-269 - [0:0] :logdrop-ntp-27 - [0:0] :logdrop-ntp-270 - [0:0] :logdrop-ntp-271 - [0:0] :logdrop-ntp-272 - [0:0] :logdrop-ntp-273 - [0:0] :logdrop-ntp-274 - [0:0] :logdrop-ntp-275 - [0:0] :logdrop-ntp-276 - [0:0] :logdrop-ntp-277 - [0:0] :logdrop-ntp-278 - [0:0] :logdrop-ntp-279 - [0:0] :logdrop-ntp-28 - [0:0] :logdrop-ntp-280 - [0:0] :logdrop-ntp-281 - [0:0] :logdrop-ntp-282 - [0:0] :logdrop-ntp-283 - [0:0] :logdrop-ntp-284 - [0:0] :logdrop-ntp-285 - [0:0] :logdrop-ntp-286 - [0:0] :logdrop-ntp-287 - [0:0] :logdrop-ntp-288 - [0:0] :logdrop-ntp-289 - [0:0] :logdrop-ntp-29 - [0:0] :logdrop-ntp-290 - [0:0] :logdrop-ntp-291 - [0:0] :logdrop-ntp-292 - [0:0] :logdrop-ntp-293 - [0:0] :logdrop-ntp-294 - [0:0] :logdrop-ntp-295 - [0:0] :logdrop-ntp-296 - [0:0] :logdrop-ntp-297 - [0:0] :logdrop-ntp-298 - [0:0] :logdrop-ntp-299 - [0:0] :logdrop-ntp-3 - [0:0] :logdrop-ntp-30 - [0:0] :logdrop-ntp-300 - [0:0] :logdrop-ntp-301 - [0:0] :logdrop-ntp-302 - [0:0] :logdrop-ntp-303 - [0:0] :logdrop-ntp-304 - [0:0] :logdrop-ntp-305 - [0:0] :logdrop-ntp-306 - [0:0] :logdrop-ntp-307 - [0:0] :logdrop-ntp-308 - [0:0] :logdrop-ntp-309 - [0:0] :logdrop-ntp-31 - [0:0] :logdrop-ntp-310 - [0:0] :logdrop-ntp-311 - [0:0] :logdrop-ntp-312 - [0:0] :logdrop-ntp-313 - [0:0] :logdrop-ntp-314 - [0:0] :logdrop-ntp-315 - [0:0] :logdrop-ntp-316 - [0:0] :logdrop-ntp-317 - [0:0] :logdrop-ntp-318 - [0:0] :logdrop-ntp-319 - [0:0] :logdrop-ntp-32 - [0:0] :logdrop-ntp-320 - [0:0] :logdrop-ntp-321 - [0:0] :logdrop-ntp-322 - [0:0] :logdrop-ntp-323 - [0:0] :logdrop-ntp-324 - [0:0] :logdrop-ntp-325 - [0:0] :logdrop-ntp-326 - [0:0] :logdrop-ntp-327 - [0:0] :logdrop-ntp-328 - [0:0] :logdrop-ntp-329 - [0:0] :logdrop-ntp-33 - [0:0] :logdrop-ntp-330 - [0:0] :logdrop-ntp-331 - [0:0] :logdrop-ntp-332 - [0:0] :logdrop-ntp-333 - [0:0] :logdrop-ntp-334 - [0:0] :logdrop-ntp-335 - [0:0] :logdrop-ntp-336 - [0:0] :logdrop-ntp-337 - [0:0] :logdrop-ntp-338 - [0:0] :logdrop-ntp-339 - [0:0] :logdrop-ntp-34 - [0:0] :logdrop-ntp-340 - [0:0] :logdrop-ntp-341 - [0:0] :logdrop-ntp-342 - [0:0] :logdrop-ntp-343 - [0:0] :logdrop-ntp-344 - [0:0] :logdrop-ntp-345 - [0:0] :logdrop-ntp-346 - [0:0] :logdrop-ntp-347 - [0:0] :logdrop-ntp-348 - [0:0] :logdrop-ntp-349 - [0:0] :logdrop-ntp-35 - [0:0] :logdrop-ntp-350 - [0:0] :logdrop-ntp-351 - [0:0] :logdrop-ntp-352 - [0:0] :logdrop-ntp-353 - [0:0] :logdrop-ntp-354 - [0:0] :logdrop-ntp-355 - [0:0] :logdrop-ntp-356 - [0:0] :logdrop-ntp-357 - [0:0] :logdrop-ntp-358 - [0:0] :logdrop-ntp-359 - [0:0] :logdrop-ntp-36 - [0:0] :logdrop-ntp-360 - [0:0] :logdrop-ntp-361 - [0:0] :logdrop-ntp-362 - [0:0] :logdrop-ntp-363 - [0:0] :logdrop-ntp-364 - [0:0] :logdrop-ntp-365 - [0:0] :logdrop-ntp-366 - [0:0] :logdrop-ntp-367 - [0:0] :logdrop-ntp-368 - [0:0] :logdrop-ntp-369 - [0:0] :logdrop-ntp-37 - [0:0] :logdrop-ntp-370 - [0:0] :logdrop-ntp-371 - [0:0] :logdrop-ntp-372 - [0:0] :logdrop-ntp-373 - [0:0] :logdrop-ntp-374 - [0:0] :logdrop-ntp-375 - [0:0] :logdrop-ntp-376 - [0:0] :logdrop-ntp-377 - [0:0] :logdrop-ntp-378 - [0:0] :logdrop-ntp-379 - [0:0] :logdrop-ntp-38 - [0:0] :logdrop-ntp-380 - [0:0] :logdrop-ntp-381 - [0:0] :logdrop-ntp-382 - [0:0] :logdrop-ntp-383 - [0:0] :logdrop-ntp-384 - [0:0] :logdrop-ntp-385 - [0:0] :logdrop-ntp-386 - [0:0] :logdrop-ntp-387 - [0:0] :logdrop-ntp-388 - [0:0] :logdrop-ntp-389 - [0:0] :logdrop-ntp-39 - [0:0] :logdrop-ntp-390 - [0:0] :logdrop-ntp-391 - [0:0] :logdrop-ntp-392 - [0:0] :logdrop-ntp-393 - [0:0] :logdrop-ntp-394 - [0:0] :logdrop-ntp-395 - [0:0] :logdrop-ntp-396 - [0:0] :logdrop-ntp-397 - [0:0] :logdrop-ntp-398 - [0:0] :logdrop-ntp-399 - [0:0] :logdrop-ntp-4 - [0:0] :logdrop-ntp-40 - [0:0] :logdrop-ntp-400 - [0:0] :logdrop-ntp-401 - [0:0] :logdrop-ntp-402 - [0:0] :logdrop-ntp-403 - [0:0] :logdrop-ntp-404 - [0:0] :logdrop-ntp-405 - [0:0] :logdrop-ntp-406 - [0:0] :logdrop-ntp-407 - [0:0] :logdrop-ntp-408 - [0:0] :logdrop-ntp-409 - [0:0] :logdrop-ntp-41 - [0:0] :logdrop-ntp-410 - [0:0] :logdrop-ntp-411 - [0:0] :logdrop-ntp-412 - [0:0] :logdrop-ntp-413 - [0:0] :logdrop-ntp-414 - [0:0] :logdrop-ntp-415 - [0:0] :logdrop-ntp-416 - [0:0] :logdrop-ntp-417 - [0:0] :logdrop-ntp-418 - [0:0] :logdrop-ntp-419 - [0:0] :logdrop-ntp-42 - [0:0] :logdrop-ntp-420 - [0:0] :logdrop-ntp-421 - [0:0] :logdrop-ntp-422 - [0:0] :logdrop-ntp-423 - [0:0] :logdrop-ntp-424 - [0:0] :logdrop-ntp-425 - [0:0] :logdrop-ntp-426 - [0:0] :logdrop-ntp-427 - [0:0] :logdrop-ntp-428 - [0:0] :logdrop-ntp-429 - [0:0] :logdrop-ntp-43 - [0:0] :logdrop-ntp-430 - [0:0] :logdrop-ntp-431 - [0:0] :logdrop-ntp-432 - [0:0] :logdrop-ntp-433 - [0:0] :logdrop-ntp-434 - [0:0] :logdrop-ntp-435 - [0:0] :logdrop-ntp-436 - [0:0] :logdrop-ntp-437 - [0:0] :logdrop-ntp-438 - [0:0] :logdrop-ntp-439 - [0:0] :logdrop-ntp-44 - [0:0] :logdrop-ntp-440 - [0:0] :logdrop-ntp-441 - [0:0] :logdrop-ntp-442 - [0:0] :logdrop-ntp-443 - [0:0] :logdrop-ntp-444 - [0:0] :logdrop-ntp-445 - [0:0] :logdrop-ntp-446 - [0:0] :logdrop-ntp-447 - [0:0] :logdrop-ntp-448 - [0:0] :logdrop-ntp-449 - [0:0] :logdrop-ntp-45 - [0:0] :logdrop-ntp-450 - [0:0] :logdrop-ntp-451 - [0:0] :logdrop-ntp-452 - [0:0] :logdrop-ntp-453 - [0:0] :logdrop-ntp-454 - [0:0] :logdrop-ntp-455 - [0:0] :logdrop-ntp-456 - [0:0] :logdrop-ntp-457 - [0:0] :logdrop-ntp-458 - [0:0] :logdrop-ntp-459 - [0:0] :logdrop-ntp-46 - [0:0] :logdrop-ntp-460 - [0:0] :logdrop-ntp-461 - [0:0] :logdrop-ntp-462 - [0:0] :logdrop-ntp-463 - [0:0] :logdrop-ntp-464 - [0:0] :logdrop-ntp-465 - [0:0] :logdrop-ntp-466 - [0:0] :logdrop-ntp-467 - [0:0] :logdrop-ntp-468 - [0:0] :logdrop-ntp-469 - [0:0] :logdrop-ntp-47 - [0:0] :logdrop-ntp-470 - [0:0] :logdrop-ntp-471 - [0:0] :logdrop-ntp-472 - [0:0] :logdrop-ntp-473 - [0:0] :logdrop-ntp-474 - [0:0] :logdrop-ntp-475 - [0:0] :logdrop-ntp-476 - [0:0] :logdrop-ntp-477 - [0:0] :logdrop-ntp-478 - [0:0] :logdrop-ntp-479 - [0:0] :logdrop-ntp-48 - [0:0] :logdrop-ntp-480 - [0:0] :logdrop-ntp-481 - [0:0] :logdrop-ntp-482 - [0:0] :logdrop-ntp-483 - [0:0] :logdrop-ntp-484 - [0:0] :logdrop-ntp-485 - [0:0] :logdrop-ntp-486 - [0:0] :logdrop-ntp-487 - [0:0] :logdrop-ntp-488 - [0:0] :logdrop-ntp-489 - [0:0] :logdrop-ntp-49 - [0:0] :logdrop-ntp-490 - [0:0] :logdrop-ntp-491 - [0:0] :logdrop-ntp-492 - [0:0] :logdrop-ntp-493 - [0:0] :logdrop-ntp-494 - [0:0] :logdrop-ntp-495 - [0:0] :logdrop-ntp-496 - [0:0] :logdrop-ntp-497 - [0:0] :logdrop-ntp-498 - [0:0] :logdrop-ntp-499 - [0:0] :logdrop-ntp-5 - [0:0] :logdrop-ntp-50 - [0:0] :logdrop-ntp-500 - [0:0] :logdrop-ntp-501 - [0:0] :logdrop-ntp-502 - [0:0] :logdrop-ntp-503 - [0:0] :logdrop-ntp-504 - [0:0] :logdrop-ntp-505 - [0:0] :logdrop-ntp-506 - [0:0] :logdrop-ntp-507 - [0:0] :logdrop-ntp-508 - [0:0] :logdrop-ntp-509 - [0:0] :logdrop-ntp-51 - [0:0] :logdrop-ntp-510 - [0:0] :logdrop-ntp-511 - [0:0] :logdrop-ntp-512 - [0:0] :logdrop-ntp-513 - [0:0] :logdrop-ntp-514 - [0:0] :logdrop-ntp-515 - [0:0] :logdrop-ntp-516 - [0:0] :logdrop-ntp-517 - [0:0] :logdrop-ntp-518 - [0:0] :logdrop-ntp-519 - [0:0] :logdrop-ntp-52 - [0:0] :logdrop-ntp-520 - [0:0] :logdrop-ntp-521 - [0:0] :logdrop-ntp-522 - [0:0] :logdrop-ntp-523 - [0:0] :logdrop-ntp-524 - [0:0] :logdrop-ntp-525 - [0:0] :logdrop-ntp-526 - [0:0] :logdrop-ntp-527 - [0:0] :logdrop-ntp-528 - [0:0] :logdrop-ntp-529 - [0:0] :logdrop-ntp-53 - [0:0] :logdrop-ntp-530 - [0:0] :logdrop-ntp-531 - [0:0] :logdrop-ntp-532 - [0:0] :logdrop-ntp-533 - [0:0] :logdrop-ntp-534 - [0:0] :logdrop-ntp-535 - [0:0] :logdrop-ntp-536 - [0:0] :logdrop-ntp-537 - [0:0] :logdrop-ntp-538 - [0:0] :logdrop-ntp-539 - [0:0] :logdrop-ntp-54 - [0:0] :logdrop-ntp-540 - [0:0] :logdrop-ntp-541 - [0:0] :logdrop-ntp-542 - [0:0] :logdrop-ntp-543 - [0:0] :logdrop-ntp-544 - [0:0] :logdrop-ntp-545 - [0:0] :logdrop-ntp-546 - [0:0] :logdrop-ntp-547 - [0:0] :logdrop-ntp-548 - [0:0] :logdrop-ntp-549 - [0:0] :logdrop-ntp-55 - [0:0] :logdrop-ntp-56 - [0:0] :logdrop-ntp-57 - [0:0] :logdrop-ntp-58 - [0:0] :logdrop-ntp-59 - [0:0] :logdrop-ntp-6 - [0:0] :logdrop-ntp-60 - [0:0] :logdrop-ntp-61 - [0:0] :logdrop-ntp-62 - [0:0] :logdrop-ntp-63 - [0:0] :logdrop-ntp-64 - [0:0] :logdrop-ntp-65 - [0:0] :logdrop-ntp-66 - [0:0] :logdrop-ntp-67 - [0:0] :logdrop-ntp-68 - [0:0] :logdrop-ntp-69 - [0:0] :logdrop-ntp-7 - [0:0] :logdrop-ntp-70 - [0:0] :logdrop-ntp-71 - [0:0] :logdrop-ntp-72 - [0:0] :logdrop-ntp-73 - [0:0] :logdrop-ntp-74 - [0:0] :logdrop-ntp-75 - [0:0] :logdrop-ntp-76 - [0:0] :logdrop-ntp-77 - [0:0] :logdrop-ntp-78 - [0:0] :logdrop-ntp-79 - [0:0] :logdrop-ntp-8 - [0:0] :logdrop-ntp-80 - [0:0] :logdrop-ntp-81 - [0:0] :logdrop-ntp-82 - [0:0] :logdrop-ntp-83 - [0:0] :logdrop-ntp-84 - [0:0] :logdrop-ntp-85 - [0:0] :logdrop-ntp-86 - [0:0] :logdrop-ntp-87 - [0:0] :logdrop-ntp-88 - [0:0] :logdrop-ntp-89 - [0:0] :logdrop-ntp-9 - [0:0] :logdrop-ntp-90 - [0:0] :logdrop-ntp-91 - [0:0] :logdrop-ntp-92 - [0:0] :logdrop-ntp-93 - [0:0] :logdrop-ntp-94 - [0:0] :logdrop-ntp-95 - [0:0] :logdrop-ntp-96 - [0:0] :logdrop-ntp-97 - [0:0] :logdrop-ntp-98 - [0:0] :logdrop-ntp-99 - [0:0] :logpass-0 - [0:0] :logpass-1 - [0:0] :logpass-2 - [0:0] -A FORWARD -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j limit-2927 -A FORWARD -j limit-2926 -A FORWARD -j limit-2925 -A FORWARD -j limit-2924 -A FORWARD -j limit-2923 -A FORWARD -j limit-2922 -A FORWARD -j limit-2921 -A FORWARD -j limit-2920 -A FORWARD -j limit-2919 -A FORWARD -j limit-2918 -A FORWARD -j limit-2917 -A FORWARD -j limit-2916 -A FORWARD -j limit-2915 -A FORWARD -j limit-2914 -A FORWARD -j limit-2913 -A FORWARD -j limit-2912 -A FORWARD -j limit-2911 -A FORWARD -j limit-2910 -A FORWARD -j limit-2909 -A FORWARD -j limit-2908 -A FORWARD -j limit-2907 -A FORWARD -j limit-2906 -A FORWARD -j limit-2905 -A FORWARD -j limit-2904 -A FORWARD -j limit-2903 -A FORWARD -j limit-2902 -A FORWARD -j limit-2901 -A FORWARD -j limit-2900 -A FORWARD -j limit-2899 -A FORWARD -j limit-2898 -A FORWARD -j limit-2897 -A FORWARD -j limit-2896 -A FORWARD -j limit-2895 -A FORWARD -j limit-2894 -A FORWARD -j limit-2893 -A FORWARD -j limit-2892 -A FORWARD -j limit-2891 -A FORWARD -j limit-2890 -A FORWARD -j limit-2889 -A FORWARD -j limit-2888 -A FORWARD -j limit-2887 -A FORWARD -j limit-2886 -A FORWARD -j limit-2885 -A FORWARD -j limit-2884 -A FORWARD -j limit-2883 -A FORWARD -j limit-2882 -A FORWARD -j limit-2881 -A FORWARD -j limit-2880 -A FORWARD -j limit-2879 -A FORWARD -j limit-2878 -A FORWARD -j limit-2877 -A FORWARD -j limit-2876 -A FORWARD -j limit-2875 -A FORWARD -j limit-2874 -A FORWARD -j limit-2873 -A FORWARD -j limit-2872 -A FORWARD -j limit-2871 -A FORWARD -j limit-2870 -A FORWARD -j limit-2869 -A FORWARD -j limit-2868 -A FORWARD -j limit-2867 -A FORWARD -j limit-2866 -A FORWARD -j limit-2865 -A FORWARD -j limit-2864 -A FORWARD -j limit-2863 -A FORWARD -j limit-2862 -A FORWARD -j limit-2861 -A FORWARD -j limit-2860 -A FORWARD -j limit-2859 -A FORWARD -j limit-2858 -A FORWARD -j limit-2857 -A FORWARD -j limit-2856 -A FORWARD -j limit-2855 -A FORWARD -j limit-2854 -A FORWARD -j limit-2853 -A FORWARD -j limit-2852 -A FORWARD -j limit-2851 -A FORWARD -j limit-2850 -A FORWARD -j limit-2849 -A FORWARD -j limit-2848 -A FORWARD -j limit-2847 -A FORWARD -j limit-2846 -A FORWARD -j limit-2845 -A FORWARD -j limit-2844 -A FORWARD -j limit-2843 -A FORWARD -j limit-2842 -A FORWARD -j limit-2841 -A FORWARD -j limit-2840 -A FORWARD -j limit-2839 -A FORWARD -j limit-2838 -A FORWARD -j limit-2837 -A FORWARD -j limit-2836 -A FORWARD -j limit-2835 -A FORWARD -j limit-2834 -A FORWARD -j limit-2833 -A FORWARD -j limit-2832 -A FORWARD -j limit-2831 -A FORWARD -j limit-2830 -A FORWARD -j limit-2829 -A FORWARD -j limit-2828 -A FORWARD -j limit-2827 -A FORWARD -j limit-2826 -A FORWARD -j limit-2825 -A FORWARD -j limit-2824 -A FORWARD -j limit-2823 -A FORWARD -j limit-2822 -A FORWARD -j limit-2821 -A FORWARD -j limit-2820 -A FORWARD -j limit-2819 -A FORWARD -j limit-2818 -A FORWARD -j limit-2817 -A FORWARD -j limit-2816 -A FORWARD -j limit-2815 -A FORWARD -j limit-2814 -A FORWARD -j limit-2813 -A FORWARD -j limit-2812 -A FORWARD -j limit-2811 -A FORWARD -j limit-2810 -A FORWARD -j limit-2809 -A FORWARD -j limit-2808 -A FORWARD -j limit-2807 -A FORWARD -j limit-2806 -A FORWARD -j limit-2805 -A FORWARD -j limit-2804 -A FORWARD -j limit-2803 -A FORWARD -j limit-2802 -A FORWARD -j limit-2801 -A FORWARD -j limit-2800 -A FORWARD -j limit-2799 -A FORWARD -j limit-2798 -A FORWARD -j limit-2797 -A FORWARD -j limit-2796 -A FORWARD -j limit-2795 -A FORWARD -j limit-2794 -A FORWARD -j limit-2793 -A FORWARD -j limit-2792 -A FORWARD -j limit-2791 -A FORWARD -j limit-2790 -A FORWARD -j limit-2789 -A FORWARD -j limit-2788 -A FORWARD -j limit-2787 -A FORWARD -j limit-2786 -A FORWARD -j limit-2785 -A FORWARD -j limit-2784 -A FORWARD -j limit-2783 -A FORWARD -j limit-2782 -A FORWARD -j limit-2781 -A FORWARD -j limit-2780 -A FORWARD -j limit-2779 -A FORWARD -j limit-2778 -A FORWARD -j limit-2777 -A FORWARD -j limit-2776 -A FORWARD -j limit-2775 -A FORWARD -j limit-2774 -A FORWARD -j limit-2773 -A FORWARD -j limit-2772 -A FORWARD -j limit-2771 -A FORWARD -j limit-2770 -A FORWARD -j limit-2769 -A FORWARD -j limit-2768 -A FORWARD -j limit-2767 -A FORWARD -j limit-2766 -A FORWARD -j limit-2765 -A FORWARD -j limit-2764 -A FORWARD -j limit-2763 -A FORWARD -j limit-2762 -A FORWARD -j limit-2761 -A FORWARD -j limit-2760 -A FORWARD -j limit-2759 -A FORWARD -j limit-2758 -A FORWARD -j limit-2757 -A FORWARD -j limit-2756 -A FORWARD -j limit-2755 -A FORWARD -j limit-2754 -A FORWARD -j limit-2753 -A FORWARD -j limit-2752 -A FORWARD -j limit-2751 -A FORWARD -j limit-2750 -A FORWARD -j limit-2749 -A FORWARD -j limit-2748 -A FORWARD -j limit-2747 -A FORWARD -j limit-2746 -A FORWARD -j limit-2745 -A FORWARD -j limit-2744 -A FORWARD -j limit-2743 -A FORWARD -j limit-2742 -A FORWARD -j limit-2741 -A FORWARD -j limit-2740 -A FORWARD -j limit-2739 -A FORWARD -j limit-2738 -A FORWARD -j limit-2737 -A FORWARD -j limit-2736 -A FORWARD -j limit-2735 -A FORWARD -j limit-2734 -A FORWARD -j limit-2733 -A FORWARD -j limit-2732 -A FORWARD -j limit-2731 -A FORWARD -j limit-2730 -A FORWARD -j limit-2729 -A FORWARD -j limit-2728 -A FORWARD -j limit-2727 -A FORWARD -j limit-2726 -A FORWARD -j limit-2725 -A FORWARD -j limit-2724 -A FORWARD -j limit-2723 -A FORWARD -j limit-2722 -A FORWARD -j limit-2721 -A FORWARD -j limit-2720 -A FORWARD -j limit-2719 -A FORWARD -j limit-2718 -A FORWARD -j limit-2717 -A FORWARD -j limit-2716 -A FORWARD -j limit-2715 -A FORWARD -j limit-2714 -A FORWARD -j limit-2713 -A FORWARD -j limit-2712 -A FORWARD -j limit-2711 -A FORWARD -j limit-2710 -A FORWARD -j limit-2709 -A FORWARD -j limit-2708 -A FORWARD -j limit-2707 -A FORWARD -j limit-2706 -A FORWARD -j limit-2705 -A FORWARD -j limit-2704 -A FORWARD -j limit-2703 -A FORWARD -j limit-2702 -A FORWARD -j limit-2701 -A FORWARD -j limit-2700 -A FORWARD -j limit-2699 -A FORWARD -j limit-2698 -A FORWARD -j limit-2697 -A FORWARD -j limit-2696 -A FORWARD -j limit-2695 -A FORWARD -j limit-2694 -A FORWARD -j limit-2693 -A FORWARD -j limit-2692 -A FORWARD -j limit-2691 -A FORWARD -j limit-2690 -A FORWARD -j limit-2689 -A FORWARD -j limit-2688 -A FORWARD -j limit-2687 -A FORWARD -j limit-2686 -A FORWARD -j limit-2685 -A FORWARD -j limit-2684 -A FORWARD -j limit-2683 -A FORWARD -j limit-2682 -A FORWARD -j limit-2681 -A FORWARD -j limit-2680 -A FORWARD -j limit-2679 -A FORWARD -j limit-2678 -A FORWARD -j limit-2677 -A FORWARD -j limit-2676 -A FORWARD -j limit-2675 -A FORWARD -j limit-2674 -A FORWARD -j limit-2673 -A FORWARD -j limit-2672 -A FORWARD -j limit-2671 -A FORWARD -j limit-2670 -A FORWARD -j limit-2669 -A FORWARD -j limit-2668 -A FORWARD -j limit-2667 -A FORWARD -j limit-2666 -A FORWARD -j limit-2665 -A FORWARD -j limit-2664 -A FORWARD -j limit-2663 -A FORWARD -j limit-2662 -A FORWARD -j limit-2661 -A FORWARD -j limit-2660 -A FORWARD -j limit-2659 -A FORWARD -j limit-2658 -A FORWARD -j limit-2657 -A FORWARD -j limit-2656 -A FORWARD -j limit-2655 -A FORWARD -j limit-2654 -A FORWARD -j limit-2653 -A FORWARD -j limit-2652 -A FORWARD -j limit-2651 -A FORWARD -j limit-2650 -A FORWARD -j limit-2649 -A FORWARD -j limit-2648 -A FORWARD -j limit-2647 -A FORWARD -j limit-2646 -A FORWARD -j limit-2645 -A FORWARD -j limit-2644 -A FORWARD -j limit-2643 -A FORWARD -j limit-2642 -A FORWARD -j limit-2641 -A FORWARD -j limit-2640 -A FORWARD -j limit-2639 -A FORWARD -j limit-2638 -A FORWARD -j limit-2637 -A FORWARD -j limit-2636 -A FORWARD -j limit-2635 -A FORWARD -j limit-2634 -A FORWARD -j limit-2633 -A FORWARD -j limit-2632 -A FORWARD -j limit-2631 -A FORWARD -j limit-2630 -A FORWARD -j limit-2629 -A FORWARD -j limit-2628 -A FORWARD -j limit-2627 -A FORWARD -j limit-2626 -A FORWARD -j limit-2625 -A FORWARD -j limit-2624 -A FORWARD -j limit-2623 -A FORWARD -j limit-2622 -A FORWARD -j limit-2621 -A FORWARD -j limit-2620 -A FORWARD -j limit-2619 -A FORWARD -j limit-2618 -A FORWARD -j limit-2617 -A FORWARD -j limit-2616 -A FORWARD -j limit-2615 -A FORWARD -j limit-2614 -A FORWARD -j limit-2613 -A FORWARD -j limit-2612 -A FORWARD -j limit-2611 -A FORWARD -j limit-2610 -A FORWARD -j limit-2609 -A FORWARD -j limit-2608 -A FORWARD -j limit-2607 -A FORWARD -j limit-2606 -A FORWARD -j limit-2605 -A FORWARD -j limit-2604 -A FORWARD -j limit-2603 -A FORWARD -j limit-2602 -A FORWARD -j limit-2601 -A FORWARD -j limit-2600 -A FORWARD -j limit-2599 -A FORWARD -j limit-2598 -A FORWARD -j limit-2597 -A FORWARD -j limit-2596 -A FORWARD -j limit-2595 -A FORWARD -j limit-2594 -A FORWARD -j limit-2593 -A FORWARD -j limit-2592 -A FORWARD -j limit-2591 -A FORWARD -j limit-2590 -A FORWARD -j limit-2589 -A FORWARD -j limit-2588 -A FORWARD -j limit-2587 -A FORWARD -j limit-2586 -A FORWARD -j limit-2585 -A FORWARD -j limit-2584 -A FORWARD -j limit-2583 -A FORWARD -j limit-2582 -A FORWARD -j limit-2581 -A FORWARD -j limit-2580 -A FORWARD -j limit-2579 -A FORWARD -j limit-2578 -A FORWARD -j limit-2577 -A FORWARD -j limit-2576 -A FORWARD -j limit-2575 -A FORWARD -j limit-2574 -A FORWARD -j limit-2573 -A FORWARD -j limit-2572 -A FORWARD -j limit-2571 -A FORWARD -j limit-2570 -A FORWARD -j limit-2569 -A FORWARD -j limit-2568 -A FORWARD -j limit-2567 -A FORWARD -j limit-2566 -A FORWARD -j limit-2565 -A FORWARD -j limit-2564 -A FORWARD -j limit-2563 -A FORWARD -j limit-2562 -A FORWARD -j limit-2561 -A FORWARD -j limit-2560 -A FORWARD -j limit-2559 -A FORWARD -j limit-2558 -A FORWARD -j limit-2557 -A FORWARD -j limit-2556 -A FORWARD -j limit-2555 -A FORWARD -j limit-2554 -A FORWARD -j limit-2553 -A FORWARD -j limit-2552 -A FORWARD -j limit-2551 -A FORWARD -j limit-2550 -A FORWARD -j limit-2549 -A FORWARD -j limit-2548 -A FORWARD -j limit-2547 -A FORWARD -j limit-2546 -A FORWARD -j limit-2545 -A FORWARD -j limit-2544 -A FORWARD -j limit-2543 -A FORWARD -j limit-2542 -A FORWARD -j limit-2541 -A FORWARD -j limit-2540 -A FORWARD -j limit-2539 -A FORWARD -j limit-2538 -A FORWARD -j limit-2537 -A FORWARD -j limit-2536 -A FORWARD -j limit-2535 -A FORWARD -j limit-2534 -A FORWARD -j limit-2533 -A FORWARD -j limit-2532 -A FORWARD -j limit-2531 -A FORWARD -j limit-2530 -A FORWARD -j limit-2529 -A FORWARD -j limit-2528 -A FORWARD -j limit-2527 -A FORWARD -j limit-2526 -A FORWARD -j limit-2525 -A FORWARD -j limit-2524 -A FORWARD -j limit-2523 -A FORWARD -j limit-2522 -A FORWARD -j limit-2521 -A FORWARD -j limit-2520 -A FORWARD -j limit-2519 -A FORWARD -j limit-2518 -A FORWARD -j limit-2517 -A FORWARD -j limit-2516 -A FORWARD -j limit-2515 -A FORWARD -j limit-2514 -A FORWARD -j limit-2513 -A FORWARD -j limit-2512 -A FORWARD -j limit-2511 -A FORWARD -j limit-2510 -A FORWARD -j limit-2509 -A FORWARD -j limit-2508 -A FORWARD -j limit-2507 -A FORWARD -j limit-2506 -A FORWARD -j limit-2505 -A FORWARD -j limit-2504 -A FORWARD -j limit-2503 -A FORWARD -j limit-2502 -A FORWARD -j limit-2501 -A FORWARD -j limit-2500 -A FORWARD -j limit-2499 -A FORWARD -j limit-2498 -A FORWARD -j limit-2497 -A FORWARD -j limit-2496 -A FORWARD -j limit-2495 -A FORWARD -j limit-2494 -A FORWARD -j limit-2493 -A FORWARD -j limit-2492 -A FORWARD -j limit-2491 -A FORWARD -j limit-2490 -A FORWARD -j limit-2489 -A FORWARD -j limit-2488 -A FORWARD -j limit-2487 -A FORWARD -j limit-2486 -A FORWARD -j limit-2485 -A FORWARD -j limit-2484 -A FORWARD -j limit-2483 -A FORWARD -j limit-2482 -A FORWARD -j limit-2481 -A FORWARD -j limit-2480 -A FORWARD -j limit-2479 -A FORWARD -j limit-2478 -A FORWARD -j limit-2477 -A FORWARD -j limit-2476 -A FORWARD -j limit-2475 -A FORWARD -j limit-2474 -A FORWARD -j limit-2473 -A FORWARD -j limit-2472 -A FORWARD -j limit-2471 -A FORWARD -j limit-2470 -A FORWARD -j limit-2469 -A FORWARD -j limit-2468 -A FORWARD -j limit-2467 -A FORWARD -j limit-2466 -A FORWARD -j limit-2465 -A FORWARD -j limit-2464 -A FORWARD -j limit-2463 -A FORWARD -j limit-2462 -A FORWARD -j limit-2461 -A FORWARD -j limit-2460 -A FORWARD -j limit-2459 -A FORWARD -j limit-2458 -A FORWARD -j limit-2457 -A FORWARD -j limit-2456 -A FORWARD -j limit-2455 -A FORWARD -j limit-2454 -A FORWARD -j limit-2453 -A FORWARD -j limit-2452 -A FORWARD -j limit-2451 -A FORWARD -j limit-2450 -A FORWARD -j limit-2449 -A FORWARD -j limit-2448 -A FORWARD -j limit-2447 -A FORWARD -j limit-2446 -A FORWARD -j limit-2445 -A FORWARD -j limit-2444 -A FORWARD -j limit-2443 -A FORWARD -j limit-2442 -A FORWARD -j limit-2441 -A FORWARD -j limit-2440 -A FORWARD -j limit-2439 -A FORWARD -j limit-2438 -A FORWARD -j limit-2437 -A FORWARD -j limit-2436 -A FORWARD -j limit-2435 -A FORWARD -j limit-2434 -A FORWARD -j limit-2433 -A FORWARD -j limit-2432 -A FORWARD -j limit-2431 -A FORWARD -j limit-2430 -A FORWARD -j limit-2429 -A FORWARD -j limit-2428 -A FORWARD -j limit-2427 -A FORWARD -j limit-2426 -A FORWARD -j limit-2425 -A FORWARD -j limit-2424 -A FORWARD -j limit-2423 -A FORWARD -j limit-2422 -A FORWARD -j limit-2421 -A FORWARD -j limit-2420 -A FORWARD -j limit-2419 -A FORWARD -j limit-2418 -A FORWARD -j limit-2417 -A FORWARD -j limit-2416 -A FORWARD -j limit-2415 -A FORWARD -j limit-2414 -A FORWARD -j limit-2413 -A FORWARD -j limit-2412 -A FORWARD -j limit-2411 -A FORWARD -j limit-2410 -A FORWARD -j limit-2409 -A FORWARD -j limit-2408 -A FORWARD -j limit-2407 -A FORWARD -j limit-2406 -A FORWARD -j limit-2405 -A FORWARD -j limit-2404 -A FORWARD -j limit-2403 -A FORWARD -j limit-2402 -A FORWARD -j limit-2401 -A FORWARD -j limit-2400 -A FORWARD -j limit-2399 -A FORWARD -j limit-2398 -A FORWARD -j limit-2397 -A FORWARD -j limit-2396 -A FORWARD -j limit-2395 -A FORWARD -j limit-2394 -A FORWARD -j limit-2393 -A FORWARD -j limit-2392 -A FORWARD -j limit-2391 -A FORWARD -j limit-2390 -A FORWARD -j limit-2389 -A FORWARD -j limit-2388 -A FORWARD -j limit-2387 -A FORWARD -j limit-2386 -A FORWARD -j limit-2385 -A FORWARD -j limit-2384 -A FORWARD -j limit-2383 -A FORWARD -j limit-2382 -A FORWARD -j limit-2381 -A FORWARD -j limit-2380 -A FORWARD -j limit-2379 -A FORWARD -j limit-2378 -A FORWARD -j limit-2377 -A FORWARD -j limit-2376 -A FORWARD -j limit-2375 -A FORWARD -j limit-2374 -A FORWARD -j limit-2373 -A FORWARD -j limit-2372 -A FORWARD -j limit-2371 -A FORWARD -j limit-2370 -A FORWARD -j limit-2369 -A FORWARD -j limit-2368 -A FORWARD -j limit-2367 -A FORWARD -j limit-2366 -A FORWARD -j limit-2365 -A FORWARD -j limit-2364 -A FORWARD -j limit-2363 -A FORWARD -j limit-2362 -A FORWARD -j limit-2361 -A FORWARD -j limit-2360 -A FORWARD -j limit-2359 -A FORWARD -j limit-2358 -A FORWARD -j limit-2357 -A FORWARD -j limit-2356 -A FORWARD -j limit-2355 -A FORWARD -j limit-2354 -A FORWARD -j limit-2353 -A FORWARD -j limit-2352 -A FORWARD -j limit-2351 -A FORWARD -j limit-2350 -A FORWARD -j limit-2349 -A FORWARD -j limit-2348 -A FORWARD -j limit-2347 -A FORWARD -j limit-2346 -A FORWARD -j limit-2345 -A FORWARD -j limit-2344 -A FORWARD -j limit-2343 -A FORWARD -j limit-2342 -A FORWARD -j limit-2341 -A FORWARD -j limit-2340 -A FORWARD -j limit-2339 -A FORWARD -j limit-2338 -A FORWARD -j limit-2337 -A FORWARD -j limit-2336 -A FORWARD -j limit-2335 -A FORWARD -j limit-2334 -A FORWARD -j limit-2333 -A FORWARD -j limit-2332 -A FORWARD -j limit-2331 -A FORWARD -j limit-2330 -A FORWARD -j limit-2329 -A FORWARD -j limit-2328 -A FORWARD -j limit-2327 -A FORWARD -j limit-2326 -A FORWARD -j limit-2325 -A FORWARD -j limit-2324 -A FORWARD -j limit-2323 -A FORWARD -j limit-2322 -A FORWARD -j limit-2321 -A FORWARD -j limit-2320 -A FORWARD -j limit-2319 -A FORWARD -j limit-2318 -A FORWARD -j limit-2317 -A FORWARD -j limit-2316 -A FORWARD -j limit-2315 -A FORWARD -j limit-2314 -A FORWARD -j limit-2313 -A FORWARD -j limit-2312 -A FORWARD -j limit-2311 -A FORWARD -j limit-2310 -A FORWARD -j limit-2309 -A FORWARD -j limit-2308 -A FORWARD -j limit-2307 -A FORWARD -j limit-2306 -A FORWARD -j limit-2305 -A FORWARD -j limit-2304 -A FORWARD -j limit-2303 -A FORWARD -j limit-2302 -A FORWARD -j limit-2301 -A FORWARD -j limit-2300 -A FORWARD -j limit-2299 -A FORWARD -j limit-2298 -A FORWARD -j limit-2297 -A FORWARD -j limit-2296 -A FORWARD -j limit-2295 -A FORWARD -j limit-2294 -A FORWARD -j limit-2293 -A FORWARD -j limit-2292 -A FORWARD -j limit-2291 -A FORWARD -j limit-2290 -A FORWARD -j limit-2289 -A FORWARD -j limit-2288 -A FORWARD -j limit-2287 -A FORWARD -j limit-2286 -A FORWARD -j limit-2285 -A FORWARD -j limit-2284 -A FORWARD -j limit-2283 -A FORWARD -j limit-2282 -A FORWARD -j limit-2281 -A FORWARD -j limit-2280 -A FORWARD -j limit-2279 -A FORWARD -j limit-2278 -A FORWARD -j limit-2277 -A FORWARD -j limit-2276 -A FORWARD -j limit-2275 -A FORWARD -j limit-2274 -A FORWARD -j limit-2273 -A FORWARD -j limit-2272 -A FORWARD -j limit-2271 -A FORWARD -j limit-2270 -A FORWARD -j limit-2269 -A FORWARD -j limit-2268 -A FORWARD -j limit-2267 -A FORWARD -j limit-2266 -A FORWARD -j limit-2265 -A FORWARD -j limit-2264 -A FORWARD -j limit-2263 -A FORWARD -j limit-2262 -A FORWARD -j limit-2261 -A FORWARD -j limit-2260 -A FORWARD -j limit-2259 -A FORWARD -j limit-2258 -A FORWARD -j limit-2257 -A FORWARD -j limit-2256 -A FORWARD -j limit-2255 -A FORWARD -j limit-2254 -A FORWARD -j limit-2253 -A FORWARD -j limit-2252 -A FORWARD -j limit-2251 -A FORWARD -j limit-2250 -A FORWARD -j limit-2249 -A FORWARD -j limit-2248 -A FORWARD -j limit-2247 -A FORWARD -j limit-2246 -A FORWARD -j limit-2245 -A FORWARD -j limit-2244 -A FORWARD -j limit-2243 -A FORWARD -j limit-2242 -A FORWARD -j limit-2241 -A FORWARD -j limit-2240 -A FORWARD -j limit-2239 -A FORWARD -j limit-2238 -A FORWARD -j limit-2237 -A FORWARD -j limit-2236 -A FORWARD -j limit-2235 -A FORWARD -j limit-2234 -A FORWARD -j limit-2233 -A FORWARD -j limit-2232 -A FORWARD -j limit-2231 -A FORWARD -j limit-2230 -A FORWARD -j limit-2229 -A FORWARD -j limit-2228 -A FORWARD -j limit-2227 -A FORWARD -j limit-2226 -A FORWARD -j limit-2225 -A FORWARD -j limit-2224 -A FORWARD -j limit-2223 -A FORWARD -j limit-2222 -A FORWARD -j limit-2221 -A FORWARD -j limit-2220 -A FORWARD -j limit-2219 -A FORWARD -j limit-2218 -A FORWARD -j limit-2217 -A FORWARD -j limit-2216 -A FORWARD -j limit-2215 -A FORWARD -j limit-2214 -A FORWARD -j limit-2213 -A FORWARD -j limit-2212 -A FORWARD -j limit-2211 -A FORWARD -j limit-2210 -A FORWARD -j limit-2209 -A FORWARD -j limit-2208 -A FORWARD -j limit-2207 -A FORWARD -j limit-2206 -A FORWARD -j limit-2205 -A FORWARD -j limit-2204 -A FORWARD -j limit-2203 -A FORWARD -j limit-2202 -A FORWARD -j limit-2201 -A FORWARD -j limit-2200 -A FORWARD -j limit-2199 -A FORWARD -j limit-2198 -A FORWARD -j limit-2197 -A FORWARD -j limit-2196 -A FORWARD -j limit-2195 -A FORWARD -j limit-2194 -A FORWARD -j limit-2193 -A FORWARD -j limit-2192 -A FORWARD -j limit-2191 -A FORWARD -j limit-2190 -A FORWARD -j limit-2189 -A FORWARD -j limit-2188 -A FORWARD -j limit-2187 -A FORWARD -j limit-2186 -A FORWARD -j limit-2185 -A FORWARD -j limit-2184 -A FORWARD -j limit-2183 -A FORWARD -j limit-2182 -A FORWARD -j limit-2181 -A FORWARD -j limit-2180 -A FORWARD -j limit-2179 -A FORWARD -j limit-2178 -A FORWARD -j limit-2177 -A FORWARD -j limit-2176 -A FORWARD -j limit-2175 -A FORWARD -j limit-2174 -A FORWARD -j limit-2173 -A FORWARD -j limit-2172 -A FORWARD -j limit-2171 -A FORWARD -j limit-2170 -A FORWARD -j limit-2169 -A FORWARD -j limit-2168 -A FORWARD -j limit-2167 -A FORWARD -j limit-2166 -A FORWARD -j limit-2165 -A FORWARD -j limit-2164 -A FORWARD -j limit-2163 -A FORWARD -j limit-2162 -A FORWARD -j limit-2161 -A FORWARD -j limit-2160 -A FORWARD -j limit-2159 -A FORWARD -j limit-2158 -A FORWARD -j limit-2157 -A FORWARD -j limit-2156 -A FORWARD -j limit-2155 -A FORWARD -j limit-2154 -A FORWARD -j limit-2153 -A FORWARD -j limit-2152 -A FORWARD -j limit-2151 -A FORWARD -j limit-2150 -A FORWARD -j limit-2149 -A FORWARD -j limit-2148 -A FORWARD -j limit-2147 -A FORWARD -j limit-2146 -A FORWARD -j limit-2145 -A FORWARD -j limit-2144 -A FORWARD -j limit-2143 -A FORWARD -j limit-2142 -A FORWARD -j limit-2141 -A FORWARD -j limit-2140 -A FORWARD -j limit-2139 -A FORWARD -j limit-2138 -A FORWARD -j limit-2137 -A FORWARD -j limit-2136 -A FORWARD -j limit-2135 -A FORWARD -j limit-2134 -A FORWARD -j limit-2133 -A FORWARD -j limit-2132 -A FORWARD -j limit-2131 -A FORWARD -j limit-2130 -A FORWARD -j limit-2129 -A FORWARD -j limit-2128 -A FORWARD -j limit-2127 -A FORWARD -j limit-2126 -A FORWARD -j limit-2125 -A FORWARD -j limit-2124 -A FORWARD -j limit-2123 -A FORWARD -j limit-2122 -A FORWARD -j limit-2121 -A FORWARD -j limit-2120 -A FORWARD -j limit-2119 -A FORWARD -j limit-2118 -A FORWARD -j limit-2117 -A FORWARD -j limit-2116 -A FORWARD -j limit-2115 -A FORWARD -j limit-2114 -A FORWARD -j limit-2113 -A FORWARD -j limit-2112 -A FORWARD -j limit-2111 -A FORWARD -j limit-2110 -A FORWARD -j limit-2109 -A FORWARD -j limit-2108 -A FORWARD -j limit-2107 -A FORWARD -j limit-2106 -A FORWARD -j limit-2105 -A FORWARD -j limit-2104 -A FORWARD -j limit-2103 -A FORWARD -j limit-2102 -A FORWARD -j limit-2101 -A FORWARD -j limit-2100 -A FORWARD -j limit-2099 -A FORWARD -j limit-2098 -A FORWARD -j limit-2097 -A FORWARD -j limit-2096 -A FORWARD -j limit-2095 -A FORWARD -j limit-2094 -A FORWARD -j limit-2093 -A FORWARD -j limit-2092 -A FORWARD -j limit-2091 -A FORWARD -j limit-2090 -A FORWARD -j limit-2089 -A FORWARD -j limit-2088 -A FORWARD -j limit-2087 -A FORWARD -j limit-2086 -A FORWARD -j limit-2085 -A FORWARD -j limit-2084 -A FORWARD -j limit-2083 -A FORWARD -j limit-2082 -A FORWARD -j limit-2081 -A FORWARD -j limit-2080 -A FORWARD -j limit-2079 -A FORWARD -j limit-2078 -A FORWARD -j limit-2077 -A FORWARD -j limit-2076 -A FORWARD -j limit-2075 -A FORWARD -j limit-2074 -A FORWARD -j limit-2073 -A FORWARD -j limit-2072 -A FORWARD -j limit-2071 -A FORWARD -j limit-2070 -A FORWARD -j limit-2069 -A FORWARD -j limit-2068 -A FORWARD -j limit-2067 -A FORWARD -j limit-2066 -A FORWARD -j limit-2065 -A FORWARD -j limit-2064 -A FORWARD -j limit-2063 -A FORWARD -j limit-2062 -A FORWARD -j limit-2061 -A FORWARD -j limit-2060 -A FORWARD -j limit-2059 -A FORWARD -j limit-2058 -A FORWARD -j limit-2057 -A FORWARD -j limit-2056 -A FORWARD -j limit-2055 -A FORWARD -j limit-2054 -A FORWARD -j limit-2053 -A FORWARD -j limit-2052 -A FORWARD -j limit-2051 -A FORWARD -j limit-2050 -A FORWARD -j limit-2049 -A FORWARD -j limit-2048 -A FORWARD -j limit-2047 -A FORWARD -j limit-2046 -A FORWARD -j limit-2045 -A FORWARD -j limit-2044 -A FORWARD -j limit-2043 -A FORWARD -j limit-2042 -A FORWARD -j limit-2041 -A FORWARD -j limit-2040 -A FORWARD -j limit-2039 -A FORWARD -j limit-2038 -A FORWARD -j limit-2037 -A FORWARD -j limit-2036 -A FORWARD -j limit-2035 -A FORWARD -j limit-2034 -A FORWARD -j limit-2033 -A FORWARD -j limit-2032 -A FORWARD -j limit-2031 -A FORWARD -j limit-2030 -A FORWARD -j limit-2029 -A FORWARD -j limit-2028 -A FORWARD -j limit-2027 -A FORWARD -j limit-2026 -A FORWARD -j limit-2025 -A FORWARD -j limit-2024 -A FORWARD -j limit-2023 -A FORWARD -j limit-2022 -A FORWARD -j limit-2021 -A FORWARD -j limit-2020 -A FORWARD -j limit-2019 -A FORWARD -j limit-2018 -A FORWARD -j limit-2017 -A FORWARD -j limit-2016 -A FORWARD -j limit-2015 -A FORWARD -j limit-2014 -A FORWARD -j limit-2013 -A FORWARD -j limit-2012 -A FORWARD -j limit-2011 -A FORWARD -j limit-2010 -A FORWARD -j limit-2009 -A FORWARD -j limit-2008 -A FORWARD -j limit-2007 -A FORWARD -j limit-2006 -A FORWARD -j limit-2005 -A FORWARD -j limit-2004 -A FORWARD -j limit-2003 -A FORWARD -j limit-2002 -A FORWARD -j limit-2001 -A FORWARD -j limit-2000 -A FORWARD -j limit-1999 -A FORWARD -j limit-1998 -A FORWARD -j limit-1997 -A FORWARD -j limit-1996 -A FORWARD -j limit-1995 -A FORWARD -j limit-1994 -A FORWARD -j limit-1993 -A FORWARD -j limit-1992 -A FORWARD -j limit-1991 -A FORWARD -j limit-1990 -A FORWARD -j limit-1989 -A FORWARD -j limit-1988 -A FORWARD -j limit-1987 -A FORWARD -j limit-1986 -A FORWARD -j limit-1985 -A FORWARD -j limit-1984 -A FORWARD -j limit-1983 -A FORWARD -j limit-1982 -A FORWARD -j limit-1981 -A FORWARD -j limit-1980 -A FORWARD -j limit-1979 -A FORWARD -j limit-1978 -A FORWARD -j limit-1977 -A FORWARD -j limit-1976 -A FORWARD -j limit-1975 -A FORWARD -j limit-1974 -A FORWARD -j limit-1973 -A FORWARD -j limit-1972 -A FORWARD -j limit-1971 -A FORWARD -j limit-1970 -A FORWARD -j limit-1969 -A FORWARD -j limit-1968 -A FORWARD -j limit-1967 -A FORWARD -j limit-1966 -A FORWARD -j limit-1965 -A FORWARD -j limit-1964 -A FORWARD -j limit-1963 -A FORWARD -j limit-1962 -A FORWARD -j limit-1961 -A FORWARD -j limit-1960 -A FORWARD -j limit-1959 -A FORWARD -j limit-1958 -A FORWARD -j limit-1957 -A FORWARD -j limit-1956 -A FORWARD -j limit-1955 -A FORWARD -j limit-1954 -A FORWARD -j limit-1953 -A FORWARD -j limit-1952 -A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j limit-0 -A FORWARD -o eth1 -d fc00::/7 -j limit-1 -A FORWARD -o eth1 -d fc00::/7 -j limit-2 -A FORWARD -o eth1 -d fc00::/7 -j limit-3 -A FORWARD -o eth1 -d fc00::/7 -j limit-4 -A FORWARD -o eth1 -d fc00::/7 -j limit-5 -A FORWARD -o eth1 -d fc00::/7 -j limit-6 -A FORWARD -o eth1 -d fc00::/7 -j limit-7 -A FORWARD -o eth1 -d fc00::/7 -j limit-8 -A FORWARD -o eth1 -d fc00::/7 -j limit-9 -A FORWARD -o eth1 -d fc00::/7 -j limit-10 -A FORWARD -o eth1 -d fc00::/7 -j limit-11 -A FORWARD -o eth1 -d fc00::/7 -j limit-12 -A FORWARD -o eth1 -d fc00::/7 -j limit-13 -A FORWARD -o eth1 -d fc00::/7 -j limit-14 -A FORWARD -o eth1 -d fc00::/7 -j limit-15 -A FORWARD -o eth1 -d fc00::/7 -j limit-16 -A FORWARD -o eth1 -d fc00::/7 -j limit-17 -A FORWARD -o eth1 -d fc00::/7 -j limit-18 -A FORWARD -o eth1 -d fc00::/7 -j limit-19 -A FORWARD -o eth1 -d fc00::/7 -j limit-20 -A FORWARD -o eth1 -d fc00::/7 -j limit-21 -A FORWARD -o eth1 -d fc00::/7 -j limit-22 -A FORWARD -o eth1 -d fc00::/7 -j limit-23 -A FORWARD -o eth1 -d fc00::/7 -j limit-24 -A FORWARD -o eth1 -d fc00::/7 -j limit-25 -A FORWARD -o eth1 -d fc00::/7 -j limit-26 -A FORWARD -o eth1 -d fc00::/7 -j limit-27 -A FORWARD -o eth1 -d fc00::/7 -j limit-28 -A FORWARD -o eth1 -d fc00::/7 -j limit-29 -A FORWARD -o eth1 -d fc00::/7 -j limit-30 -A FORWARD -o eth1 -d fc00::/7 -j limit-31 -A FORWARD -o eth1 -d fc00::/7 -j limit-32 -A FORWARD -o eth1 -d fc00::/7 -j limit-33 -A FORWARD -o eth1 -d fc00::/7 -j limit-34 -A FORWARD -o eth1 -d fc00::/7 -j limit-35 -A FORWARD -o eth1 -d fc00::/7 -j limit-36 -A FORWARD -o eth1 -d fc00::/7 -j limit-37 -A FORWARD -o eth1 -d fc00::/7 -j limit-38 -A FORWARD -o eth1 -d fc00::/7 -j limit-39 -A FORWARD -o eth1 -d fc00::/7 -j limit-40 -A FORWARD -o eth1 -d fc00::/7 -j limit-41 -A FORWARD -o eth1 -d fc00::/7 -j limit-42 -A FORWARD -o eth1 -d fc00::/7 -j limit-43 -A FORWARD -o eth1 -d fc00::/7 -j limit-44 -A FORWARD -o eth1 -d fc00::/7 -j limit-45 -A FORWARD -o eth1 -d fc00::/7 -j limit-46 -A FORWARD -o eth1 -d fc00::/7 -j limit-47 -A FORWARD -o eth1 -d fc00::/7 -j limit-48 -A FORWARD -o eth1 -d fc00::/7 -j limit-49 -A FORWARD -o eth1 -d fc00::/7 -j limit-50 -A FORWARD -o eth1 -d fc00::/7 -j limit-51 -A FORWARD -o eth1 -d fc00::/7 -j limit-52 -A FORWARD -o eth1 -d fc00::/7 -j limit-53 -A FORWARD -o eth1 -d fc00::/7 -j limit-54 -A FORWARD -o eth1 -d fc00::/7 -j limit-55 -A FORWARD -o eth1 -d fc00::/7 -j limit-56 -A FORWARD -o eth1 -d fc00::/7 -j limit-57 -A FORWARD -o eth1 -d fc00::/7 -j limit-58 -A FORWARD -o eth1 -d fc00::/7 -j limit-59 -A FORWARD -o eth1 -d fc00::/7 -j limit-60 -A FORWARD -o eth1 -d fc00::/7 -j limit-61 -A FORWARD -o eth1 -d fc00::/7 -j limit-62 -A FORWARD -o eth1 -d fc00::/7 -j limit-63 -A FORWARD -o eth1 -d fc00::/7 -j limit-64 -A FORWARD -o eth1 -d fc00::/7 -j limit-65 -A FORWARD -o eth1 -d fc00::/7 -j limit-66 -A FORWARD -o eth1 -d fc00::/7 -j limit-67 -A FORWARD -o eth1 -d fc00::/7 -j limit-68 -A FORWARD -o eth1 -d fc00::/7 -j limit-69 -A FORWARD -o eth1 -d fc00::/7 -j limit-70 -A FORWARD -o eth1 -d fc00::/7 -j limit-71 -A FORWARD -o eth1 -d fc00::/7 -j limit-72 -A FORWARD -o eth1 -d fc00::/7 -j limit-73 -A FORWARD -o eth1 -d fc00::/7 -j limit-74 -A FORWARD -o eth1 -d fc00::/7 -j limit-75 -A FORWARD -o eth1 -d fc00::/7 -j limit-76 -A FORWARD -o eth1 -d fc00::/7 -j limit-77 -A FORWARD -o eth1 -d fc00::/7 -j limit-78 -A FORWARD -o eth1 -d fc00::/7 -j limit-79 -A FORWARD -o eth1 -d fc00::/7 -j limit-80 -A FORWARD -o eth1 -d fc00::/7 -j limit-81 -A FORWARD -o eth1 -d fc00::/7 -j limit-82 -A FORWARD -o eth1 -d fc00::/7 -j limit-83 -A FORWARD -o eth1 -d fc00::/7 -j limit-84 -A FORWARD -o eth1 -d fc00::/7 -j limit-85 -A FORWARD -o eth1 -d fc00::/7 -j limit-86 -A FORWARD -o eth1 -d fc00::/7 -j limit-87 -A FORWARD -o eth1 -d fc00::/7 -j limit-88 -A FORWARD -o eth1 -d fc00::/7 -j limit-89 -A FORWARD -o eth1 -d fc00::/7 -j limit-90 -A FORWARD -o eth1 -d fc00::/7 -j limit-91 -A FORWARD -o eth1 -d fc00::/7 -j limit-92 -A FORWARD -o eth1 -d fc00::/7 -j limit-93 -A FORWARD -o eth1 -d fc00::/7 -j limit-94 -A FORWARD -o eth1 -d fc00::/7 -j limit-95 -A FORWARD -o eth1 -d fc00::/7 -j limit-96 -A FORWARD -o eth1 -d fc00::/7 -j limit-97 -A FORWARD -o eth1 -d fc00::/7 -j limit-98 -A FORWARD -o eth1 -d fc00::/7 -j limit-99 -A FORWARD -o eth1 -d fc00::/7 -j limit-100 -A FORWARD -o eth1 -d fc00::/7 -j limit-101 -A FORWARD -o eth1 -d fc00::/7 -j limit-102 -A FORWARD -o eth1 -d fc00::/7 -j limit-103 -A FORWARD -o eth1 -d fc00::/7 -j limit-104 -A FORWARD -o eth1 -d fc00::/7 -j limit-105 -A FORWARD -o eth1 -d fc00::/7 -j limit-106 -A FORWARD -o eth1 -d fc00::/7 -j limit-107 -A FORWARD -o eth1 -d fc00::/7 -j limit-108 -A FORWARD -o eth1 -d fc00::/7 -j limit-109 -A FORWARD -o eth1 -d fc00::/7 -j limit-110 -A FORWARD -o eth1 -d fc00::/7 -j limit-111 -A FORWARD -o eth1 -d fc00::/7 -j limit-112 -A FORWARD -o eth1 -d fc00::/7 -j limit-113 -A FORWARD -o eth1 -d fc00::/7 -j limit-114 -A FORWARD -o eth1 -d fc00::/7 -j limit-115 -A FORWARD -o eth1 -d fc00::/7 -j limit-116 -A FORWARD -o eth1 -d fc00::/7 -j limit-117 -A FORWARD -o eth1 -d fc00::/7 -j limit-118 -A FORWARD -o eth1 -d fc00::/7 -j limit-119 -A FORWARD -o eth1 -d fc00::/7 -j limit-120 -A FORWARD -o eth1 -d fc00::/7 -j limit-121 -A FORWARD -o eth1 -d fc00::/7 -j limit-122 -A FORWARD -o eth1 -d fc00::/7 -j limit-123 -A FORWARD -o eth1 -d fc00::/7 -j limit-124 -A FORWARD -o eth1 -d fc00::/7 -j limit-125 -A FORWARD -o eth1 -d fc00::/7 -j limit-126 -A FORWARD -o eth1 -d fc00::/7 -j limit-127 -A FORWARD -o eth1 -d fc00::/7 -j limit-128 -A FORWARD -o eth1 -d fc00::/7 -j limit-129 -A FORWARD -o eth1 -d fc00::/7 -j limit-130 -A FORWARD -o eth1 -d fc00::/7 -j limit-131 -A FORWARD -o eth1 -d fc00::/7 -j limit-132 -A FORWARD -o eth1 -d fc00::/7 -j limit-133 -A FORWARD -o eth1 -d fc00::/7 -j limit-134 -A FORWARD -o eth1 -d fc00::/7 -j limit-135 -A FORWARD -o eth1 -d fc00::/7 -j limit-136 -A FORWARD -o eth1 -d fc00::/7 -j limit-137 -A FORWARD -o eth1 -d fc00::/7 -j limit-138 -A FORWARD -o eth1 -d fc00::/7 -j limit-139 -A FORWARD -o eth1 -d fc00::/7 -j limit-140 -A FORWARD -o eth1 -d fc00::/7 -j limit-141 -A FORWARD -o eth1 -d fc00::/7 -j limit-142 -A FORWARD -o eth1 -d fc00::/7 -j limit-143 -A FORWARD -o eth1 -d fc00::/7 -j limit-144 -A FORWARD -o eth1 -d fc00::/7 -j limit-145 -A FORWARD -o eth1 -d fc00::/7 -j limit-146 -A FORWARD -o eth1 -d fc00::/7 -j limit-147 -A FORWARD -o eth1 -d fc00::/7 -j limit-148 -A FORWARD -o eth1 -d fc00::/7 -j limit-149 -A FORWARD -o eth1 -d fc00::/7 -j limit-150 -A FORWARD -o eth1 -d fc00::/7 -j limit-151 -A FORWARD -o eth1 -d fc00::/7 -j limit-152 -A FORWARD -o eth1 -d fc00::/7 -j limit-153 -A FORWARD -o eth1 -d fc00::/7 -j limit-154 -A FORWARD -o eth1 -d fc00::/7 -j limit-155 -A FORWARD -o eth1 -d fc00::/7 -j limit-156 -A FORWARD -o eth1 -d fc00::/7 -j limit-157 -A FORWARD -o eth1 -d fc00::/7 -j limit-158 -A FORWARD -o eth1 -d fc00::/7 -j limit-159 -A FORWARD -o eth1 -d fc00::/7 -j limit-160 -A FORWARD -o eth1 -d fc00::/7 -j limit-161 -A FORWARD -o eth1 -d fc00::/7 -j limit-162 -A FORWARD -o eth1 -d fc00::/7 -j limit-163 -A FORWARD -o eth1 -d fc00::/7 -j limit-164 -A FORWARD -o eth1 -d fc00::/7 -j limit-165 -A FORWARD -o eth1 -d fc00::/7 -j limit-166 -A FORWARD -o eth1 -d fc00::/7 -j limit-167 -A FORWARD -o eth1 -d fc00::/7 -j limit-168 -A FORWARD -o eth1 -d fc00::/7 -j limit-169 -A FORWARD -o eth1 -d fc00::/7 -j limit-170 -A FORWARD -o eth1 -d fc00::/7 -j limit-171 -A FORWARD -o eth1 -d fc00::/7 -j limit-172 -A FORWARD -o eth1 -d fc00::/7 -j limit-173 -A FORWARD -o eth1 -d fc00::/7 -j limit-174 -A FORWARD -o eth1 -d fc00::/7 -j limit-175 -A FORWARD -o eth1 -d fc00::/7 -j limit-176 -A FORWARD -o eth1 -d fc00::/7 -j limit-177 -A FORWARD -o eth1 -d fc00::/7 -j limit-178 -A FORWARD -o eth1 -d fc00::/7 -j limit-179 -A FORWARD -o eth1 -d fc00::/7 -j limit-180 -A FORWARD -o eth1 -d fc00::/7 -j limit-181 -A FORWARD -o eth1 -d fc00::/7 -j limit-182 -A FORWARD -o eth1 -d fc00::/7 -j limit-183 -A FORWARD -o eth1 -d fc00::/7 -j limit-184 -A FORWARD -o eth1 -d fc00::/7 -j limit-185 -A FORWARD -o eth1 -d fc00::/7 -j limit-186 -A FORWARD -o eth1 -d fc00::/7 -j limit-187 -A FORWARD -o eth1 -d fc00::/7 -j limit-188 -A FORWARD -o eth1 -d fc00::/7 -j limit-189 -A FORWARD -o eth1 -d fc00::/7 -j limit-190 -A FORWARD -o eth1 -d fc00::/7 -j limit-191 -A FORWARD -o eth1 -d fc00::/7 -j limit-192 -A FORWARD -o eth1 -d fc00::/7 -j limit-193 -A FORWARD -o eth1 -d fc00::/7 -j limit-194 -A FORWARD -o eth1 -d fc00::/7 -j limit-195 -A FORWARD -o eth1 -d fc00::/7 -j limit-196 -A FORWARD -o eth1 -d fc00::/7 -j limit-197 -A FORWARD -o eth1 -d fc00::/7 -j limit-198 -A FORWARD -o eth1 -d fc00::/7 -j limit-199 -A FORWARD -o eth1 -d fc00::/7 -j limit-200 -A FORWARD -o eth1 -d fc00::/7 -j limit-201 -A FORWARD -o eth1 -d fc00::/7 -j limit-202 -A FORWARD -o eth1 -d fc00::/7 -j limit-203 -A FORWARD -o eth1 -d fc00::/7 -j limit-204 -A FORWARD -o eth1 -d fc00::/7 -j limit-205 -A FORWARD -o eth1 -d fc00::/7 -j limit-206 -A FORWARD -o eth1 -d fc00::/7 -j limit-207 -A FORWARD -o eth1 -d fc00::/7 -j limit-208 -A FORWARD -o eth1 -d fc00::/7 -j limit-209 -A FORWARD -o eth1 -d fc00::/7 -j limit-210 -A FORWARD -o eth1 -d fc00::/7 -j limit-211 -A FORWARD -o eth1 -d fc00::/7 -j limit-212 -A FORWARD -o eth1 -d fc00::/7 -j limit-213 -A FORWARD -o eth1 -d fc00::/7 -j limit-214 -A FORWARD -o eth1 -d fc00::/7 -j limit-215 -A FORWARD -o eth1 -d fc00::/7 -j limit-216 -A FORWARD -o eth1 -d fc00::/7 -j limit-217 -A FORWARD -o eth1 -d fc00::/7 -j limit-218 -A FORWARD -o eth1 -d fc00::/7 -j limit-219 -A FORWARD -o eth1 -d fc00::/7 -j limit-220 -A FORWARD -o eth1 -d fc00::/7 -j limit-221 -A FORWARD -o eth1 -d fc00::/7 -j limit-222 -A FORWARD -o eth1 -d fc00::/7 -j limit-223 -A FORWARD -o eth1 -d fc00::/7 -j limit-224 -A FORWARD -o eth1 -d fc00::/7 -j limit-225 -A FORWARD -o eth1 -d fc00::/7 -j limit-226 -A FORWARD -o eth1 -d fc00::/7 -j limit-227 -A FORWARD -o eth1 -d fc00::/7 -j limit-228 -A FORWARD -o eth1 -d fc00::/7 -j limit-229 -A FORWARD -o eth1 -d fc00::/7 -j limit-230 -A FORWARD -o eth1 -d fc00::/7 -j limit-231 -A FORWARD -o eth1 -d fc00::/7 -j limit-232 -A FORWARD -o eth1 -d fc00::/7 -j limit-233 -A FORWARD -o eth1 -d fc00::/7 -j limit-234 -A FORWARD -o eth1 -d fc00::/7 -j limit-235 -A FORWARD -o eth1 -d fc00::/7 -j limit-236 -A FORWARD -o eth1 -d fc00::/7 -j limit-237 -A FORWARD -o eth1 -d fc00::/7 -j limit-238 -A FORWARD -o eth1 -d fc00::/7 -j limit-239 -A FORWARD -o eth1 -d fc00::/7 -j limit-240 -A FORWARD -o eth1 -d fc00::/7 -j limit-241 -A FORWARD -o eth1 -d fc00::/7 -j limit-242 -A FORWARD -o eth1 -d fc00::/7 -j limit-243 -A FORWARD -o eth1 -d fc00::/7 -j limit-244 -A FORWARD -o eth1 -d fc00::/7 -j limit-245 -A FORWARD -o eth1 -d fc00::/7 -j limit-246 -A FORWARD -o eth1 -d fc00::/7 -j limit-247 -A FORWARD -o eth1 -d fc00::/7 -j limit-248 -A FORWARD -o eth1 -d fc00::/7 -j limit-249 -A FORWARD -o eth1 -d fc00::/7 -j limit-250 -A FORWARD -o eth1 -d fc00::/7 -j limit-251 -A FORWARD -o eth1 -d fc00::/7 -j limit-252 -A FORWARD -o eth1 -d fc00::/7 -j limit-253 -A FORWARD -o eth1 -d fc00::/7 -j limit-254 -A FORWARD -o eth1 -d fc00::/7 -j limit-255 -A FORWARD -o eth1 -d fc00::/7 -j limit-256 -A FORWARD -o eth1 -d fc00::/7 -j limit-257 -A FORWARD -o eth1 -d fc00::/7 -j limit-258 -A FORWARD -o eth1 -d fc00::/7 -j limit-259 -A FORWARD -o eth1 -d fc00::/7 -j limit-260 -A FORWARD -o eth1 -d fc00::/7 -j limit-261 -A FORWARD -o eth1 -d fc00::/7 -j limit-262 -A FORWARD -o eth1 -d fc00::/7 -j limit-263 -A FORWARD -o eth1 -d fc00::/7 -j limit-264 -A FORWARD -o eth1 -d fc00::/7 -j limit-265 -A FORWARD -o eth1 -d fc00::/7 -j limit-266 -A FORWARD -o eth1 -d fc00::/7 -j limit-267 -A FORWARD -o eth1 -d fc00::/7 -j limit-268 -A FORWARD -o eth1 -d fc00::/7 -j limit-269 -A FORWARD -o eth1 -d fc00::/7 -j limit-270 -A FORWARD -o eth1 -d fc00::/7 -j limit-271 -A FORWARD -o eth1 -d fc00::/7 -j limit-272 -A FORWARD -o eth1 -d fc00::/7 -j limit-273 -A FORWARD -o eth1 -d fc00::/7 -j limit-274 -A FORWARD -o eth1 -d fc00::/7 -j limit-275 -A FORWARD -o eth1 -d fc00::/7 -j limit-276 -A FORWARD -o eth1 -d fc00::/7 -j limit-277 -A FORWARD -o eth1 -d fc00::/7 -j limit-278 -A FORWARD -o eth1 -d fc00::/7 -j limit-279 -A FORWARD -o eth1 -d fc00::/7 -j limit-280 -A FORWARD -o eth1 -d fc00::/7 -j limit-281 -A FORWARD -o eth1 -d fc00::/7 -j limit-282 -A FORWARD -o eth1 -d fc00::/7 -j limit-283 -A FORWARD -o eth1 -d fc00::/7 -j limit-284 -A FORWARD -o eth1 -d fc00::/7 -j limit-285 -A FORWARD -o eth1 -d fc00::/7 -j limit-286 -A FORWARD -o eth1 -d fc00::/7 -j limit-287 -A FORWARD -o eth1 -d fc00::/7 -j limit-288 -A FORWARD -o eth1 -d fc00::/7 -j limit-289 -A FORWARD -o eth1 -d fc00::/7 -j limit-290 -A FORWARD -o eth1 -d fc00::/7 -j limit-291 -A FORWARD -o eth1 -d fc00::/7 -j limit-292 -A FORWARD -o eth1 -d fc00::/7 -j limit-293 -A FORWARD -o eth1 -d fc00::/7 -j limit-294 -A FORWARD -o eth1 -d fc00::/7 -j limit-295 -A FORWARD -o eth1 -d fc00::/7 -j limit-296 -A FORWARD -o eth1 -d fc00::/7 -j limit-297 -A FORWARD -o eth1 -d fc00::/7 -j limit-298 -A FORWARD -o eth1 -d fc00::/7 -j limit-299 -A FORWARD -o eth1 -d fc00::/7 -j limit-300 -A FORWARD -o eth1 -d fc00::/7 -j limit-301 -A FORWARD -o eth1 -d fc00::/7 -j limit-302 -A FORWARD -o eth1 -d fc00::/7 -j limit-303 -A FORWARD -o eth1 -d fc00::/7 -j limit-304 -A FORWARD -o eth1 -d fc00::/7 -j limit-305 -A FORWARD -o eth1 -d fc00::/7 -j limit-306 -A FORWARD -o eth1 -d fc00::/7 -j limit-307 -A FORWARD -o eth1 -d fc00::/7 -j limit-308 -A FORWARD -o eth1 -d fc00::/7 -j limit-309 -A FORWARD -o eth1 -d fc00::/7 -j limit-310 -A FORWARD -o eth1 -d fc00::/7 -j limit-311 -A FORWARD -o eth1 -d fc00::/7 -j limit-312 -A FORWARD -o eth1 -d fc00::/7 -j limit-313 -A FORWARD -o eth1 -d fc00::/7 -j limit-314 -A FORWARD -o eth1 -d fc00::/7 -j limit-315 -A FORWARD -o eth1 -d fc00::/7 -j limit-316 -A FORWARD -o eth1 -d fc00::/7 -j limit-317 -A FORWARD -o eth1 -d fc00::/7 -j limit-318 -A FORWARD -o eth1 -d fc00::/7 -j limit-319 -A FORWARD -o eth1 -d fc00::/7 -j limit-320 -A FORWARD -o eth1 -d fc00::/7 -j limit-321 -A FORWARD -o eth1 -d fc00::/7 -j limit-322 -A FORWARD -o eth1 -d fc00::/7 -j limit-323 -A FORWARD -o eth1 -d fc00::/7 -j limit-324 -A FORWARD -o eth1 -d fc00::/7 -j limit-325 -A FORWARD -o eth1 -d fc00::/7 -j limit-326 -A FORWARD -o eth1 -d fc00::/7 -j limit-327 -A FORWARD -o eth1 -d fc00::/7 -j limit-328 -A FORWARD -o eth1 -d fc00::/7 -j limit-329 -A FORWARD -o eth1 -d fc00::/7 -j limit-330 -A FORWARD -o eth1 -d fc00::/7 -j limit-331 -A FORWARD -o eth1 -d fc00::/7 -j limit-332 -A FORWARD -o eth1 -d fc00::/7 -j limit-333 -A FORWARD -o eth1 -d fc00::/7 -j limit-334 -A FORWARD -o eth1 -d fc00::/7 -j limit-335 -A FORWARD -o eth1 -d fc00::/7 -j limit-336 -A FORWARD -o eth1 -d fc00::/7 -j limit-337 -A FORWARD -o eth1 -d fc00::/7 -j limit-338 -A FORWARD -o eth1 -d fc00::/7 -j limit-339 -A FORWARD -o eth1 -d fc00::/7 -j limit-340 -A FORWARD -o eth1 -d fc00::/7 -j limit-341 -A FORWARD -o eth1 -d fc00::/7 -j limit-342 -A FORWARD -o eth1 -d fc00::/7 -j limit-343 -A FORWARD -o eth1 -d fc00::/7 -j limit-344 -A FORWARD -o eth1 -d fc00::/7 -j limit-345 -A FORWARD -o eth1 -d fc00::/7 -j limit-346 -A FORWARD -o eth1 -d fc00::/7 -j limit-347 -A FORWARD -o eth1 -d fc00::/7 -j limit-348 -A FORWARD -o eth1 -d fc00::/7 -j limit-349 -A FORWARD -o eth1 -d fc00::/7 -j limit-350 -A FORWARD -o eth1 -d fc00::/7 -j limit-351 -A FORWARD -o eth1 -d fc00::/7 -j limit-352 -A FORWARD -o eth1 -d fc00::/7 -j limit-353 -A FORWARD -o eth1 -d fc00::/7 -j limit-354 -A FORWARD -o eth1 -d fc00::/7 -j limit-355 -A FORWARD -o eth1 -d fc00::/7 -j limit-356 -A FORWARD -o eth1 -d fc00::/7 -j limit-357 -A FORWARD -o eth1 -d fc00::/7 -j limit-358 -A FORWARD -o eth1 -d fc00::/7 -j limit-359 -A FORWARD -o eth1 -d fc00::/7 -j limit-360 -A FORWARD -o eth1 -d fc00::/7 -j limit-361 -A FORWARD -o eth1 -d fc00::/7 -j limit-362 -A FORWARD -o eth1 -d fc00::/7 -j limit-363 -A FORWARD -o eth1 -d fc00::/7 -j limit-364 -A FORWARD -o eth1 -d fc00::/7 -j limit-365 -A FORWARD -o eth1 -d fc00::/7 -j limit-366 -A FORWARD -o eth1 -d fc00::/7 -j limit-367 -A FORWARD -o eth1 -d fc00::/7 -j limit-368 -A FORWARD -o eth1 -d fc00::/7 -j limit-369 -A FORWARD -o eth1 -d fc00::/7 -j limit-370 -A FORWARD -o eth1 -d fc00::/7 -j limit-371 -A FORWARD -o eth1 -d fc00::/7 -j limit-372 -A FORWARD -o eth1 -d fc00::/7 -j limit-373 -A FORWARD -o eth1 -d fc00::/7 -j limit-374 -A FORWARD -o eth1 -d fc00::/7 -j limit-375 -A FORWARD -o eth1 -d fc00::/7 -j limit-376 -A FORWARD -o eth1 -d fc00::/7 -j limit-377 -A FORWARD -o eth1 -d fc00::/7 -j limit-378 -A FORWARD -o eth1 -d fc00::/7 -j limit-379 -A FORWARD -o eth1 -d fc00::/7 -j limit-380 -A FORWARD -o eth1 -d fc00::/7 -j limit-381 -A FORWARD -o eth1 -d fc00::/7 -j limit-382 -A FORWARD -o eth1 -d fc00::/7 -j limit-383 -A FORWARD -o eth1 -d fc00::/7 -j limit-384 -A FORWARD -o eth1 -d fc00::/7 -j limit-385 -A FORWARD -o eth1 -d fc00::/7 -j limit-386 -A FORWARD -o eth1 -d fc00::/7 -j limit-387 -A FORWARD -o eth1 -d fc00::/7 -j limit-388 -A FORWARD -o eth1 -d fc00::/7 -j limit-389 -A FORWARD -o eth1 -d fc00::/7 -j limit-390 -A FORWARD -o eth1 -d fc00::/7 -j limit-391 -A FORWARD -o eth1 -d fc00::/7 -j limit-392 -A FORWARD -o eth1 -d fc00::/7 -j limit-393 -A FORWARD -o eth1 -d fc00::/7 -j limit-394 -A FORWARD -o eth1 -d fc00::/7 -j limit-395 -A FORWARD -o eth1 -d fc00::/7 -j limit-396 -A FORWARD -o eth1 -d fc00::/7 -j limit-397 -A FORWARD -o eth1 -d fc00::/7 -j limit-398 -A FORWARD -o eth1 -d fc00::/7 -j limit-399 -A FORWARD -o eth1 -d fc00::/7 -j limit-400 -A FORWARD -o eth1 -d fc00::/7 -j limit-401 -A FORWARD -o eth1 -d fc00::/7 -j limit-402 -A FORWARD -o eth1 -d fc00::/7 -j limit-403 -A FORWARD -o eth1 -d fc00::/7 -j limit-404 -A FORWARD -o eth1 -d fc00::/7 -j limit-405 -A FORWARD -o eth1 -d fc00::/7 -j limit-406 -A FORWARD -o eth1 -d fc00::/7 -j limit-407 -A FORWARD -o eth1 -d fc00::/7 -j limit-408 -A FORWARD -o eth1 -d fc00::/7 -j limit-409 -A FORWARD -o eth1 -d fc00::/7 -j limit-410 -A FORWARD -o eth1 -d fc00::/7 -j limit-411 -A FORWARD -o eth1 -d fc00::/7 -j limit-412 -A FORWARD -o eth1 -d fc00::/7 -j limit-413 -A FORWARD -o eth1 -d fc00::/7 -j limit-414 -A FORWARD -o eth1 -d fc00::/7 -j limit-415 -A FORWARD -o eth1 -d fc00::/7 -j limit-416 -A FORWARD -o eth1 -d fc00::/7 -j limit-417 -A FORWARD -o eth1 -d fc00::/7 -j limit-418 -A FORWARD -o eth1 -d fc00::/7 -j limit-419 -A FORWARD -o eth1 -d fc00::/7 -j limit-420 -A FORWARD -o eth1 -d fc00::/7 -j limit-421 -A FORWARD -o eth1 -d fc00::/7 -j limit-422 -A FORWARD -o eth1 -d fc00::/7 -j limit-423 -A FORWARD -o eth1 -d fc00::/7 -j limit-424 -A FORWARD -o eth1 -d fc00::/7 -j limit-425 -A FORWARD -o eth1 -d fc00::/7 -j limit-426 -A FORWARD -o eth1 -d fc00::/7 -j limit-427 -A FORWARD -o eth1 -d fc00::/7 -j limit-428 -A FORWARD -o eth1 -d fc00::/7 -j limit-429 -A FORWARD -o eth1 -d fc00::/7 -j limit-430 -A FORWARD -o eth1 -d fc00::/7 -j limit-431 -A FORWARD -o eth1 -d fc00::/7 -j limit-432 -A FORWARD -o eth1 -d fc00::/7 -j limit-433 -A FORWARD -o eth1 -d fc00::/7 -j limit-434 -A FORWARD -o eth1 -d fc00::/7 -j limit-435 -A FORWARD -o eth1 -d fc00::/7 -j limit-436 -A FORWARD -o eth1 -d fc00::/7 -j limit-437 -A FORWARD -o eth1 -d fc00::/7 -j limit-438 -A FORWARD -o eth1 -d fc00::/7 -j limit-439 -A FORWARD -o eth1 -d fc00::/7 -j limit-440 -A FORWARD -o eth1 -d fc00::/7 -j limit-441 -A FORWARD -o eth1 -d fc00::/7 -j limit-442 -A FORWARD -o eth1 -d fc00::/7 -j limit-443 -A FORWARD -o eth1 -d fc00::/7 -j limit-444 -A FORWARD -o eth1 -d fc00::/7 -j limit-445 -A FORWARD -o eth1 -d fc00::/7 -j limit-446 -A FORWARD -o eth1 -d fc00::/7 -j limit-447 -A FORWARD -o eth1 -d fc00::/7 -j limit-448 -A FORWARD -o eth1 -d fc00::/7 -j limit-449 -A FORWARD -o eth1 -d fc00::/7 -j limit-450 -A FORWARD -o eth1 -d fc00::/7 -j limit-451 -A FORWARD -o eth1 -d fc00::/7 -j limit-452 -A FORWARD -o eth1 -d fc00::/7 -j limit-453 -A FORWARD -o eth1 -d fc00::/7 -j limit-454 -A FORWARD -o eth1 -d fc00::/7 -j limit-455 -A FORWARD -o eth1 -d fc00::/7 -j limit-456 -A FORWARD -o eth1 -d fc00::/7 -j limit-457 -A FORWARD -o eth1 -d fc00::/7 -j limit-458 -A FORWARD -o eth1 -d fc00::/7 -j limit-459 -A FORWARD -o eth1 -d fc00::/7 -j limit-460 -A FORWARD -o eth1 -d fc00::/7 -j limit-461 -A FORWARD -o eth1 -d fc00::/7 -j limit-462 -A FORWARD -o eth1 -d fc00::/7 -j limit-463 -A FORWARD -o eth1 -d fc00::/7 -j limit-464 -A FORWARD -o eth1 -d fc00::/7 -j limit-465 -A FORWARD -o eth1 -d fc00::/7 -j limit-466 -A FORWARD -o eth1 -d fc00::/7 -j limit-467 -A FORWARD -o eth1 -d fc00::/7 -j limit-468 -A FORWARD -o eth1 -d fc00::/7 -j limit-469 -A FORWARD -o eth1 -d fc00::/7 -j limit-470 -A FORWARD -o eth1 -d fc00::/7 -j limit-471 -A FORWARD -o eth1 -d fc00::/7 -j limit-472 -A FORWARD -o eth1 -d fc00::/7 -j limit-473 -A FORWARD -o eth1 -d fc00::/7 -j limit-474 -A FORWARD -o eth1 -d fc00::/7 -j limit-475 -A FORWARD -o eth1 -d fc00::/7 -j limit-476 -A FORWARD -o eth1 -d fc00::/7 -j limit-477 -A FORWARD -o eth1 -d fc00::/7 -j limit-478 -A FORWARD -o eth1 -d fc00::/7 -j limit-479 -A FORWARD -o eth1 -d fc00::/7 -j limit-480 -A FORWARD -o eth1 -d fc00::/7 -j limit-481 -A FORWARD -o eth1 -d fc00::/7 -j limit-482 -A FORWARD -o eth1 -d fc00::/7 -j limit-483 -A FORWARD -o eth1 -d fc00::/7 -j limit-484 -A FORWARD -o eth1 -d fc00::/7 -j limit-485 -A FORWARD -o eth1 -d fc00::/7 -j limit-486 -A FORWARD -o eth1 -d fc00::/7 -j limit-487 -A FORWARD -o eth1 -d fc00::/7 -j limit-488 -A FORWARD -o eth1 -d fc00::/7 -j limit-489 -A FORWARD -o eth1 -d fc00::/7 -j limit-490 -A FORWARD -o eth1 -d fc00::/7 -j limit-491 -A FORWARD -o eth1 -d fc00::/7 -j limit-492 -A FORWARD -o eth1 -d fc00::/7 -j limit-493 -A FORWARD -o eth1 -d fc00::/7 -j limit-494 -A FORWARD -o eth1 -d fc00::/7 -j limit-495 -A FORWARD -o eth1 -d fc00::/7 -j limit-496 -A FORWARD -o eth1 -d fc00::/7 -j limit-497 -A FORWARD -o eth1 -d fc00::/7 -j limit-498 -A FORWARD -o eth1 -d fc00::/7 -j limit-499 -A FORWARD -o eth1 -d fc00::/7 -j limit-500 -A FORWARD -o eth1 -d fc00::/7 -j limit-501 -A FORWARD -o eth1 -d fc00::/7 -j limit-502 -A FORWARD -o eth1 -d fc00::/7 -j limit-503 -A FORWARD -o eth1 -d fc00::/7 -j limit-504 -A FORWARD -o eth1 -d fc00::/7 -j limit-505 -A FORWARD -o eth1 -d fc00::/7 -j limit-506 -A FORWARD -o eth1 -d fc00::/7 -j limit-507 -A FORWARD -o eth1 -d fc00::/7 -j limit-508 -A FORWARD -o eth1 -d fc00::/7 -j limit-509 -A FORWARD -o eth1 -d fc00::/7 -j limit-510 -A FORWARD -o eth1 -d fc00::/7 -j limit-511 -A FORWARD -o eth1 -d fc00::/7 -j limit-512 -A FORWARD -o eth1 -d fc00::/7 -j limit-513 -A FORWARD -o eth1 -d fc00::/7 -j limit-514 -A FORWARD -o eth1 -d fc00::/7 -j limit-515 -A FORWARD -o eth1 -d fc00::/7 -j limit-516 -A FORWARD -o eth1 -d fc00::/7 -j limit-517 -A FORWARD -o eth1 -d fc00::/7 -j limit-518 -A FORWARD -o eth1 -d fc00::/7 -j limit-519 -A FORWARD -o eth1 -d fc00::/7 -j limit-520 -A FORWARD -o eth1 -d fc00::/7 -j limit-521 -A FORWARD -o eth1 -d fc00::/7 -j limit-522 -A FORWARD -o eth1 -d fc00::/7 -j limit-523 -A FORWARD -o eth1 -d fc00::/7 -j limit-524 -A FORWARD -o eth1 -d fc00::/7 -j limit-525 -A FORWARD -o eth1 -d fc00::/7 -j limit-526 -A FORWARD -o eth1 -d fc00::/7 -j limit-527 -A FORWARD -o eth1 -d fc00::/7 -j limit-528 -A FORWARD -o eth1 -d fc00::/7 -j limit-529 -A FORWARD -o eth1 -d fc00::/7 -j limit-530 -A FORWARD -o eth1 -d fc00::/7 -j limit-531 -A FORWARD -o eth1 -d fc00::/7 -j limit-532 -A FORWARD -o eth1 -d fc00::/7 -j limit-533 -A FORWARD -o eth1 -d fc00::/7 -j limit-534 -A FORWARD -o eth1 -d fc00::/7 -j limit-535 -A FORWARD -o eth1 -d fc00::/7 -j limit-536 -A FORWARD -o eth1 -d fc00::/7 -j limit-537 -A FORWARD -o eth1 -d fc00::/7 -j limit-538 -A FORWARD -o eth1 -d fc00::/7 -j limit-539 -A FORWARD -o eth1 -d fc00::/7 -j limit-540 -A FORWARD -o eth1 -d fc00::/7 -j limit-541 -A FORWARD -o eth1 -d fc00::/7 -j limit-542 -A FORWARD -o eth1 -d fc00::/7 -j limit-543 -A FORWARD -o eth1 -d fc00::/7 -j limit-544 -A FORWARD -o eth1 -d fc00::/7 -j limit-545 -A FORWARD -o eth1 -d fc00::/7 -j limit-546 -A FORWARD -o eth1 -d fc00::/7 -j limit-547 -A FORWARD -o eth1 -d fc00::/7 -j limit-548 -A FORWARD -o eth1 -d fc00::/7 -j limit-549 -A FORWARD -o eth1 -d fc00::/7 -j limit-550 -A FORWARD -o eth1 -d fc00::/7 -j limit-551 -A FORWARD -o eth1 -d fc00::/7 -j limit-552 -A FORWARD -o eth1 -d fc00::/7 -j limit-553 -A FORWARD -o eth1 -d fc00::/7 -j limit-554 -A FORWARD -o eth1 -d fc00::/7 -j limit-555 -A FORWARD -o eth1 -d fc00::/7 -j limit-556 -A FORWARD -o eth1 -d fc00::/7 -j limit-557 -A FORWARD -o eth1 -d fc00::/7 -j limit-558 -A FORWARD -o eth1 -d fc00::/7 -j limit-559 -A FORWARD -o eth1 -d fc00::/7 -j limit-560 -A FORWARD -o eth1 -d fc00::/7 -j limit-561 -A FORWARD -o eth1 -d fc00::/7 -j limit-562 -A FORWARD -o eth1 -d fc00::/7 -j limit-563 -A FORWARD -o eth1 -d fc00::/7 -j limit-564 -A FORWARD -o eth1 -d fc00::/7 -j limit-565 -A FORWARD -o eth1 -d fc00::/7 -j limit-566 -A FORWARD -o eth1 -d fc00::/7 -j limit-567 -A FORWARD -o eth1 -d fc00::/7 -j limit-568 -A FORWARD -o eth1 -d fc00::/7 -j limit-569 -A FORWARD -o eth1 -d fc00::/7 -j limit-570 -A FORWARD -o eth1 -d fc00::/7 -j limit-571 -A FORWARD -o eth1 -d fc00::/7 -j limit-572 -A FORWARD -o eth1 -d fc00::/7 -j limit-573 -A FORWARD -o eth1 -d fc00::/7 -j limit-574 -A FORWARD -o eth1 -d fc00::/7 -j limit-575 -A FORWARD -o eth1 -d fc00::/7 -j limit-576 -A FORWARD -o eth1 -d fc00::/7 -j limit-577 -A FORWARD -o eth1 -d fc00::/7 -j limit-578 -A FORWARD -o eth1 -d fc00::/7 -j limit-579 -A FORWARD -o eth1 -d fc00::/7 -j limit-580 -A FORWARD -o eth1 -d fc00::/7 -j limit-581 -A FORWARD -o eth1 -d fc00::/7 -j limit-582 -A FORWARD -o eth1 -d fc00::/7 -j limit-583 -A FORWARD -o eth1 -d fc00::/7 -j limit-584 -A FORWARD -o eth1 -d fc00::/7 -j limit-585 -A FORWARD -o eth1 -d fc00::/7 -j limit-586 -A FORWARD -o eth1 -d fc00::/7 -j limit-587 -A FORWARD -o eth1 -d fc00::/7 -j limit-588 -A FORWARD -o eth1 -d fc00::/7 -j limit-589 -A FORWARD -o eth1 -d fc00::/7 -j limit-590 -A FORWARD -o eth1 -d fc00::/7 -j limit-591 -A FORWARD -o eth1 -d fc00::/7 -j limit-592 -A FORWARD -o eth1 -d fc00::/7 -j limit-593 -A FORWARD -o eth1 -d fc00::/7 -j limit-594 -A FORWARD -o eth1 -d fc00::/7 -j limit-595 -A FORWARD -o eth1 -d fc00::/7 -j limit-596 -A FORWARD -o eth1 -d fc00::/7 -j limit-597 -A FORWARD -o eth1 -d fc00::/7 -j limit-598 -A FORWARD -o eth1 -d fc00::/7 -j limit-599 -A FORWARD -o eth1 -d fc00::/7 -j limit-600 -A FORWARD -o eth1 -d fc00::/7 -j limit-601 -A FORWARD -o eth1 -d fc00::/7 -j limit-602 -A FORWARD -o eth1 -d fc00::/7 -j limit-603 -A FORWARD -o eth1 -d fc00::/7 -j limit-604 -A FORWARD -o eth1 -d fc00::/7 -j limit-605 -A FORWARD -o eth1 -d fc00::/7 -j limit-606 -A FORWARD -o eth1 -d fc00::/7 -j limit-607 -A FORWARD -o eth1 -d fc00::/7 -j limit-608 -A FORWARD -o eth1 -d fc00::/7 -j limit-609 -A FORWARD -o eth1 -d fc00::/7 -j limit-610 -A FORWARD -o eth1 -d fc00::/7 -j limit-611 -A FORWARD -o eth1 -d fc00::/7 -j limit-612 -A FORWARD -o eth1 -d fc00::/7 -j limit-613 -A FORWARD -o eth1 -d fc00::/7 -j limit-614 -A FORWARD -o eth1 -d fc00::/7 -j limit-615 -A FORWARD -o eth1 -d fc00::/7 -j limit-616 -A FORWARD -o eth1 -d fc00::/7 -j limit-617 -A FORWARD -o eth1 -d fc00::/7 -j limit-618 -A FORWARD -o eth1 -d fc00::/7 -j limit-619 -A FORWARD -o eth1 -d fc00::/7 -j limit-620 -A FORWARD -o eth1 -d fc00::/7 -j limit-621 -A FORWARD -o eth1 -d fc00::/7 -j limit-622 -A FORWARD -o eth1 -d fc00::/7 -j limit-623 -A FORWARD -o eth1 -d fc00::/7 -j limit-624 -A FORWARD -o eth1 -d fc00::/7 -j limit-625 -A FORWARD -o eth1 -d fc00::/7 -j limit-626 -A FORWARD -o eth1 -d fc00::/7 -j limit-627 -A FORWARD -o eth1 -d fc00::/7 -j limit-628 -A FORWARD -o eth1 -d fc00::/7 -j limit-629 -A FORWARD -o eth1 -d fc00::/7 -j limit-630 -A FORWARD -o eth1 -d fc00::/7 -j limit-631 -A FORWARD -o eth1 -d fc00::/7 -j limit-632 -A FORWARD -o eth1 -d fc00::/7 -j limit-633 -A FORWARD -o eth1 -d fc00::/7 -j limit-634 -A FORWARD -o eth1 -d fc00::/7 -j limit-635 -A FORWARD -o eth1 -d fc00::/7 -j limit-636 -A FORWARD -o eth1 -d fc00::/7 -j limit-637 -A FORWARD -o eth1 -d fc00::/7 -j limit-638 -A FORWARD -o eth1 -d fc00::/7 -j limit-639 -A FORWARD -o eth1 -d fc00::/7 -j limit-640 -A FORWARD -o eth1 -d fc00::/7 -j limit-641 -A FORWARD -o eth1 -d fc00::/7 -j limit-642 -A FORWARD -o eth1 -d fc00::/7 -j limit-643 -A FORWARD -o eth1 -d fc00::/7 -j limit-644 -A FORWARD -o eth1 -d fc00::/7 -j limit-645 -A FORWARD -o eth1 -d fc00::/7 -j limit-646 -A FORWARD -o eth1 -d fc00::/7 -j limit-647 -A FORWARD -o eth1 -d fc00::/7 -j limit-648 -A FORWARD -o eth1 -d fc00::/7 -j limit-649 -A FORWARD -o eth1 -d fc00::/7 -j limit-650 -A FORWARD -o eth1 -d fc00::/7 -j limit-651 -A FORWARD -o eth1 -d fc00::/7 -j limit-652 -A FORWARD -o eth1 -d fc00::/7 -j limit-653 -A FORWARD -o eth1 -d fc00::/7 -j limit-654 -A FORWARD -o eth1 -d fc00::/7 -j limit-655 -A FORWARD -o eth1 -d fc00::/7 -j limit-656 -A FORWARD -o eth1 -d fc00::/7 -j limit-657 -A FORWARD -o eth1 -d fc00::/7 -j limit-658 -A FORWARD -o eth1 -d fc00::/7 -j limit-659 -A FORWARD -o eth1 -d fc00::/7 -j limit-660 -A FORWARD -o eth1 -d fc00::/7 -j limit-661 -A FORWARD -o eth1 -d fc00::/7 -j limit-662 -A FORWARD -o eth1 -d fc00::/7 -j limit-663 -A FORWARD -o eth1 -d fc00::/7 -j limit-664 -A FORWARD -o eth1 -d fc00::/7 -j limit-665 -A FORWARD -o eth1 -d fc00::/7 -j limit-666 -A FORWARD -o eth1 -d fc00::/7 -j limit-667 -A FORWARD -o eth1 -d fc00::/7 -j limit-668 -A FORWARD -o eth1 -d fc00::/7 -j limit-669 -A FORWARD -o eth1 -d fc00::/7 -j limit-670 -A FORWARD -o eth1 -d fc00::/7 -j limit-671 -A FORWARD -o eth1 -d fc00::/7 -j limit-672 -A FORWARD -o eth1 -d fc00::/7 -j limit-673 -A FORWARD -o eth1 -d fc00::/7 -j limit-674 -A FORWARD -o eth1 -d fc00::/7 -j limit-675 -A FORWARD -o eth1 -d fc00::/7 -j limit-676 -A FORWARD -o eth1 -d fc00::/7 -j limit-677 -A FORWARD -o eth1 -d fc00::/7 -j limit-678 -A FORWARD -o eth1 -d fc00::/7 -j limit-679 -A FORWARD -o eth1 -d fc00::/7 -j limit-680 -A FORWARD -o eth1 -d fc00::/7 -j limit-681 -A FORWARD -o eth1 -d fc00::/7 -j limit-682 -A FORWARD -o eth1 -d fc00::/7 -j limit-683 -A FORWARD -o eth1 -d fc00::/7 -j limit-684 -A FORWARD -o eth1 -d fc00::/7 -j limit-685 -A FORWARD -o eth1 -d fc00::/7 -j limit-686 -A FORWARD -o eth1 -d fc00::/7 -j limit-687 -A FORWARD -o eth1 -d fc00::/7 -j limit-688 -A FORWARD -o eth1 -d fc00::/7 -j limit-689 -A FORWARD -o eth1 -d fc00::/7 -j limit-690 -A FORWARD -o eth1 -d fc00::/7 -j limit-691 -A FORWARD -o eth1 -d fc00::/7 -j limit-692 -A FORWARD -o eth1 -d fc00::/7 -j limit-693 -A FORWARD -o eth1 -d fc00::/7 -j limit-694 -A FORWARD -o eth1 -d fc00::/7 -j limit-695 -A FORWARD -o eth1 -d fc00::/7 -j limit-696 -A FORWARD -o eth1 -d fc00::/7 -j limit-697 -A FORWARD -o eth1 -d fc00::/7 -j limit-698 -A FORWARD -o eth1 -d fc00::/7 -j limit-699 -A FORWARD -o eth1 -d fc00::/7 -j limit-700 -A FORWARD -o eth1 -d fc00::/7 -j limit-701 -A FORWARD -o eth1 -d fc00::/7 -j limit-702 -A FORWARD -o eth1 -d fc00::/7 -j limit-703 -A FORWARD -o eth1 -d fc00::/7 -j limit-704 -A FORWARD -o eth1 -d fc00::/7 -j limit-705 -A FORWARD -o eth1 -d fc00::/7 -j limit-706 -A FORWARD -o eth1 -d fc00::/7 -j limit-707 -A FORWARD -o eth1 -d fc00::/7 -j limit-708 -A FORWARD -o eth1 -d fc00::/7 -j limit-709 -A FORWARD -o eth1 -d fc00::/7 -j limit-710 -A FORWARD -o eth1 -d fc00::/7 -j limit-711 -A FORWARD -o eth1 -d fc00::/7 -j limit-712 -A FORWARD -o eth1 -d fc00::/7 -j limit-713 -A FORWARD -o eth1 -d fc00::/7 -j limit-714 -A FORWARD -o eth1 -d fc00::/7 -j limit-715 -A FORWARD -o eth1 -d fc00::/7 -j limit-716 -A FORWARD -o eth1 -d fc00::/7 -j limit-717 -A FORWARD -o eth1 -d fc00::/7 -j limit-718 -A FORWARD -o eth1 -d fc00::/7 -j limit-719 -A FORWARD -o eth1 -d fc00::/7 -j limit-720 -A FORWARD -o eth1 -d fc00::/7 -j limit-721 -A FORWARD -o eth1 -d fc00::/7 -j limit-722 -A FORWARD -o eth1 -d fc00::/7 -j limit-723 -A FORWARD -o eth1 -d fc00::/7 -j limit-724 -A FORWARD -o eth1 -d fc00::/7 -j limit-725 -A FORWARD -o eth1 -d fc00::/7 -j limit-726 -A FORWARD -o eth1 -d fc00::/7 -j limit-727 -A FORWARD -o eth1 -d fc00::/7 -j limit-728 -A FORWARD -o eth1 -d fc00::/7 -j limit-729 -A FORWARD -o eth1 -d fc00::/7 -j limit-730 -A FORWARD -o eth1 -d fc00::/7 -j limit-731 -A FORWARD -o eth1 -d fc00::/7 -j limit-732 -A FORWARD -o eth1 -d fc00::/7 -j limit-733 -A FORWARD -o eth1 -d fc00::/7 -j limit-734 -A FORWARD -o eth1 -d fc00::/7 -j limit-735 -A FORWARD -o eth1 -d fc00::/7 -j limit-736 -A FORWARD -o eth1 -d fc00::/7 -j limit-737 -A FORWARD -o eth1 -d fc00::/7 -j limit-738 -A FORWARD -o eth1 -d fc00::/7 -j limit-739 -A FORWARD -o eth1 -d fc00::/7 -j limit-740 -A FORWARD -o eth1 -d fc00::/7 -j limit-741 -A FORWARD -o eth1 -d fc00::/7 -j limit-742 -A FORWARD -o eth1 -d fc00::/7 -j limit-743 -A FORWARD -o eth1 -d fc00::/7 -j limit-744 -A FORWARD -o eth1 -d fc00::/7 -j limit-745 -A FORWARD -o eth1 -d fc00::/7 -j limit-746 -A FORWARD -o eth1 -d fc00::/7 -j limit-747 -A FORWARD -o eth1 -d fc00::/7 -j limit-748 -A FORWARD -o eth1 -d fc00::/7 -j limit-749 -A FORWARD -o eth1 -d fc00::/7 -j limit-750 -A FORWARD -o eth1 -d fc00::/7 -j limit-751 -A FORWARD -o eth1 -d fc00::/7 -j limit-752 -A FORWARD -o eth1 -d fc00::/7 -j limit-753 -A FORWARD -o eth1 -d fc00::/7 -j limit-754 -A FORWARD -o eth1 -d fc00::/7 -j limit-755 -A FORWARD -o eth1 -d fc00::/7 -j limit-756 -A FORWARD -o eth1 -d fc00::/7 -j limit-757 -A FORWARD -o eth1 -d fc00::/7 -j limit-758 -A FORWARD -o eth1 -d fc00::/7 -j limit-759 -A FORWARD -o eth1 -d fc00::/7 -j limit-760 -A FORWARD -o eth1 -d fc00::/7 -j limit-761 -A FORWARD -o eth1 -d fc00::/7 -j limit-762 -A FORWARD -o eth1 -d fc00::/7 -j limit-763 -A FORWARD -o eth1 -d fc00::/7 -j limit-764 -A FORWARD -o eth1 -d fc00::/7 -j limit-765 -A FORWARD -o eth1 -d fc00::/7 -j limit-766 -A FORWARD -o eth1 -d fc00::/7 -j limit-767 -A FORWARD -o eth1 -d fc00::/7 -j limit-768 -A FORWARD -o eth1 -d fc00::/7 -j limit-769 -A FORWARD -o eth1 -d fc00::/7 -j limit-770 -A FORWARD -o eth1 -d fc00::/7 -j limit-771 -A FORWARD -o eth1 -d fc00::/7 -j limit-772 -A FORWARD -o eth1 -d fc00::/7 -j limit-773 -A FORWARD -o eth1 -d fc00::/7 -j limit-774 -A FORWARD -o eth1 -d fc00::/7 -j limit-775 -A FORWARD -o eth1 -d fc00::/7 -j limit-776 -A FORWARD -o eth1 -d fc00::/7 -j limit-777 -A FORWARD -o eth1 -d fc00::/7 -j limit-778 -A FORWARD -o eth1 -d fc00::/7 -j limit-779 -A FORWARD -o eth1 -d fc00::/7 -j limit-780 -A FORWARD -o eth1 -d fc00::/7 -j limit-781 -A FORWARD -o eth1 -d fc00::/7 -j limit-782 -A FORWARD -o eth1 -d fc00::/7 -j limit-783 -A FORWARD -o eth1 -d fc00::/7 -j limit-784 -A FORWARD -o eth1 -d fc00::/7 -j limit-785 -A FORWARD -o eth1 -d fc00::/7 -j limit-786 -A FORWARD -o eth1 -d fc00::/7 -j limit-787 -A FORWARD -o eth1 -d fc00::/7 -j limit-788 -A FORWARD -o eth1 -d fc00::/7 -j limit-789 -A FORWARD -o eth1 -d fc00::/7 -j limit-790 -A FORWARD -o eth1 -d fc00::/7 -j limit-791 -A FORWARD -o eth1 -d fc00::/7 -j limit-792 -A FORWARD -o eth1 -d fc00::/7 -j limit-793 -A FORWARD -o eth1 -d fc00::/7 -j limit-794 -A FORWARD -o eth1 -d fc00::/7 -j limit-795 -A FORWARD -o eth1 -d fc00::/7 -j limit-796 -A FORWARD -o eth1 -d fc00::/7 -j limit-797 -A FORWARD -o eth1 -d fc00::/7 -j limit-798 -A FORWARD -o eth1 -d fc00::/7 -j limit-799 -A FORWARD -o eth1 -d fc00::/7 -j limit-800 -A FORWARD -o eth1 -d fc00::/7 -j limit-801 -A FORWARD -o eth1 -d fc00::/7 -j limit-802 -A FORWARD -o eth1 -d fc00::/7 -j limit-803 -A FORWARD -o eth1 -d fc00::/7 -j limit-804 -A FORWARD -o eth1 -d fc00::/7 -j limit-805 -A FORWARD -o eth1 -d fc00::/7 -j limit-806 -A FORWARD -o eth1 -d fc00::/7 -j limit-807 -A FORWARD -o eth1 -d fc00::/7 -j limit-808 -A FORWARD -o eth1 -d fc00::/7 -j limit-809 -A FORWARD -o eth1 -d fc00::/7 -j limit-810 -A FORWARD -o eth1 -d fc00::/7 -j limit-811 -A FORWARD -o eth1 -d fc00::/7 -j limit-812 -A FORWARD -o eth1 -d fc00::/7 -j limit-813 -A FORWARD -o eth1 -d fc00::/7 -j limit-814 -A FORWARD -o eth1 -d fc00::/7 -j limit-815 -A FORWARD -o eth1 -d fc00::/7 -j limit-816 -A FORWARD -o eth1 -d fc00::/7 -j limit-817 -A FORWARD -o eth1 -d fc00::/7 -j limit-818 -A FORWARD -o eth1 -d fc00::/7 -j limit-819 -A FORWARD -o eth1 -d fc00::/7 -j limit-820 -A FORWARD -o eth1 -d fc00::/7 -j limit-821 -A FORWARD -o eth1 -d fc00::/7 -j limit-822 -A FORWARD -o eth1 -d fc00::/7 -j limit-823 -A FORWARD -o eth1 -d fc00::/7 -j limit-824 -A FORWARD -o eth1 -d fc00::/7 -j limit-825 -A FORWARD -o eth1 -d fc00::/7 -j limit-826 -A FORWARD -o eth1 -d fc00::/7 -j limit-827 -A FORWARD -o eth1 -d fc00::/7 -j limit-828 -A FORWARD -o eth1 -d fc00::/7 -j limit-829 -A FORWARD -o eth1 -d fc00::/7 -j limit-830 -A FORWARD -o eth1 -d fc00::/7 -j limit-831 -A FORWARD -o eth1 -d fc00::/7 -j limit-832 -A FORWARD -o eth1 -d fc00::/7 -j limit-833 -A FORWARD -o eth1 -d fc00::/7 -j limit-834 -A FORWARD -o eth1 -d fc00::/7 -j limit-835 -A FORWARD -o eth1 -d fc00::/7 -j limit-836 -A FORWARD -o eth1 -d fc00::/7 -j limit-837 -A FORWARD -o eth1 -d fc00::/7 -j limit-838 -A FORWARD -o eth1 -d fc00::/7 -j limit-839 -A FORWARD -o eth1 -d fc00::/7 -j limit-840 -A FORWARD -o eth1 -d fc00::/7 -j limit-841 -A FORWARD -o eth1 -d fc00::/7 -j limit-842 -A FORWARD -o eth1 -d fc00::/7 -j limit-843 -A FORWARD -o eth1 -d fc00::/7 -j limit-844 -A FORWARD -o eth1 -d fc00::/7 -j limit-845 -A FORWARD -o eth1 -d fc00::/7 -j limit-846 -A FORWARD -o eth1 -d fc00::/7 -j limit-847 -A FORWARD -o eth1 -d fc00::/7 -j limit-848 -A FORWARD -o eth1 -d fc00::/7 -j limit-849 -A FORWARD -o eth1 -d fc00::/7 -j limit-850 -A FORWARD -o eth1 -d fc00::/7 -j limit-851 -A FORWARD -o eth1 -d fc00::/7 -j limit-852 -A FORWARD -o eth1 -d fc00::/7 -j limit-853 -A FORWARD -o eth1 -d fc00::/7 -j limit-854 -A FORWARD -o eth1 -d fc00::/7 -j limit-855 -A FORWARD -o eth1 -d fc00::/7 -j limit-856 -A FORWARD -o eth1 -d fc00::/7 -j limit-857 -A FORWARD -o eth1 -d fc00::/7 -j limit-858 -A FORWARD -o eth1 -d fc00::/7 -j limit-859 -A FORWARD -o eth1 -d fc00::/7 -j limit-860 -A FORWARD -o eth1 -d fc00::/7 -j limit-861 -A FORWARD -o eth1 -d fc00::/7 -j limit-862 -A FORWARD -o eth1 -d fc00::/7 -j limit-863 -A FORWARD -o eth1 -d fc00::/7 -j limit-864 -A FORWARD -o eth1 -d fc00::/7 -j limit-865 -A FORWARD -o eth1 -d fc00::/7 -j limit-866 -A FORWARD -o eth1 -d fc00::/7 -j limit-867 -A FORWARD -o eth1 -d fc00::/7 -j limit-868 -A FORWARD -o eth1 -d fc00::/7 -j limit-869 -A FORWARD -o eth1 -d fc00::/7 -j limit-870 -A FORWARD -o eth1 -d fc00::/7 -j limit-871 -A FORWARD -o eth1 -d fc00::/7 -j limit-872 -A FORWARD -o eth1 -d fc00::/7 -j limit-873 -A FORWARD -o eth1 -d fc00::/7 -j limit-874 -A FORWARD -o eth1 -d fc00::/7 -j limit-875 -A FORWARD -o eth1 -d fc00::/7 -j limit-876 -A FORWARD -o eth1 -d fc00::/7 -j limit-877 -A FORWARD -o eth1 -d fc00::/7 -j limit-878 -A FORWARD -o eth1 -d fc00::/7 -j limit-879 -A FORWARD -o eth1 -d fc00::/7 -j limit-880 -A FORWARD -o eth1 -d fc00::/7 -j limit-881 -A FORWARD -o eth1 -d fc00::/7 -j limit-882 -A FORWARD -o eth1 -d fc00::/7 -j limit-883 -A FORWARD -o eth1 -d fc00::/7 -j limit-884 -A FORWARD -o eth1 -d fc00::/7 -j limit-885 -A FORWARD -o eth1 -d fc00::/7 -j limit-886 -A FORWARD -o eth1 -d fc00::/7 -j limit-887 -A FORWARD -o eth1 -d fc00::/7 -j limit-888 -A FORWARD -o eth1 -d fc00::/7 -j limit-889 -A FORWARD -o eth1 -d fc00::/7 -j limit-890 -A FORWARD -o eth1 -d fc00::/7 -j limit-891 -A FORWARD -o eth1 -d fc00::/7 -j limit-892 -A FORWARD -o eth1 -d fc00::/7 -j limit-893 -A FORWARD -o eth1 -d fc00::/7 -j limit-894 -A FORWARD -o eth1 -d fc00::/7 -j limit-895 -A FORWARD -o eth1 -d fc00::/7 -j limit-896 -A FORWARD -o eth1 -d fc00::/7 -j limit-897 -A FORWARD -o eth1 -d fc00::/7 -j limit-898 -A FORWARD -o eth1 -d fc00::/7 -j limit-899 -A FORWARD -o eth1 -d fc00::/7 -j limit-900 -A FORWARD -o eth1 -d fc00::/7 -j limit-901 -A FORWARD -o eth1 -d fc00::/7 -j limit-902 -A FORWARD -o eth1 -d fc00::/7 -j limit-903 -A FORWARD -o eth1 -d fc00::/7 -j limit-904 -A FORWARD -o eth1 -d fc00::/7 -j limit-905 -A FORWARD -o eth1 -d fc00::/7 -j limit-906 -A FORWARD -o eth1 -d fc00::/7 -j limit-907 -A FORWARD -o eth1 -d fc00::/7 -j limit-908 -A FORWARD -o eth1 -d fc00::/7 -j limit-909 -A FORWARD -o eth1 -d fc00::/7 -j limit-910 -A FORWARD -o eth1 -d fc00::/7 -j limit-911 -A FORWARD -o eth1 -d fc00::/7 -j limit-912 -A FORWARD -o eth1 -d fc00::/7 -j limit-913 -A FORWARD -o eth1 -d fc00::/7 -j limit-914 -A FORWARD -o eth1 -d fc00::/7 -j limit-915 -A FORWARD -o eth1 -d fc00::/7 -j limit-916 -A FORWARD -o eth1 -d fc00::/7 -j limit-917 -A FORWARD -o eth1 -d fc00::/7 -j limit-918 -A FORWARD -o eth1 -d fc00::/7 -j limit-919 -A FORWARD -o eth1 -d fc00::/7 -j limit-920 -A FORWARD -o eth1 -d fc00::/7 -j limit-921 -A FORWARD -o eth1 -d fc00::/7 -j limit-922 -A FORWARD -o eth1 -d fc00::/7 -j limit-923 -A FORWARD -o eth1 -d fc00::/7 -j limit-924 -A FORWARD -o eth1 -d fc00::/7 -j limit-925 -A FORWARD -o eth1 -d fc00::/7 -j limit-926 -A FORWARD -o eth1 -d fc00::/7 -j limit-927 -A FORWARD -o eth1 -d fc00::/7 -j limit-928 -A FORWARD -o eth1 -d fc00::/7 -j limit-929 -A FORWARD -o eth1 -d fc00::/7 -j limit-930 -A FORWARD -o eth1 -d fc00::/7 -j limit-931 -A FORWARD -o eth1 -d fc00::/7 -j limit-932 -A FORWARD -o eth1 -d fc00::/7 -j limit-933 -A FORWARD -o eth1 -d fc00::/7 -j limit-934 -A FORWARD -o eth1 -d fc00::/7 -j limit-935 -A FORWARD -o eth1 -d fc00::/7 -j limit-936 -A FORWARD -o eth1 -d fc00::/7 -j limit-937 -A FORWARD -o eth1 -d fc00::/7 -j limit-938 -A FORWARD -o eth1 -d fc00::/7 -j limit-939 -A FORWARD -o eth1 -d fc00::/7 -j limit-940 -A FORWARD -o eth1 -d fc00::/7 -j limit-941 -A FORWARD -o eth1 -d fc00::/7 -j limit-942 -A FORWARD -o eth1 -d fc00::/7 -j limit-943 -A FORWARD -o eth1 -d fc00::/7 -j limit-944 -A FORWARD -o eth1 -d fc00::/7 -j limit-945 -A FORWARD -o eth1 -d fc00::/7 -j limit-946 -A FORWARD -o eth1 -d fc00::/7 -j limit-947 -A FORWARD -o eth1 -d fc00::/7 -j limit-948 -A FORWARD -o eth1 -d fc00::/7 -j limit-949 -A FORWARD -o eth1 -d fc00::/7 -j limit-950 -A FORWARD -o eth1 -d fc00::/7 -j limit-951 -A FORWARD -o eth1 -d fc00::/7 -j limit-952 -A FORWARD -o eth1 -d fc00::/7 -j limit-953 -A FORWARD -o eth1 -d fc00::/7 -j limit-954 -A FORWARD -o eth1 -d fc00::/7 -j limit-955 -A FORWARD -o eth1 -d fc00::/7 -j limit-956 -A FORWARD -o eth1 -d fc00::/7 -j limit-957 -A FORWARD -o eth1 -d fc00::/7 -j limit-958 -A FORWARD -o eth1 -d fc00::/7 -j limit-959 -A FORWARD -o eth1 -d fc00::/7 -j limit-960 -A FORWARD -o eth1 -d fc00::/7 -j limit-961 -A FORWARD -o eth1 -d fc00::/7 -j limit-962 -A FORWARD -o eth1 -d fc00::/7 -j limit-963 -A FORWARD -o eth1 -d fc00::/7 -j limit-964 -A FORWARD -o eth1 -d fc00::/7 -j limit-965 -A FORWARD -o eth1 -d fc00::/7 -j limit-966 -A FORWARD -o eth1 -d fc00::/7 -j limit-967 -A FORWARD -o eth1 -d fc00::/7 -j limit-968 -A FORWARD -o eth1 -d fc00::/7 -j limit-969 -A FORWARD -o eth1 -d fc00::/7 -j limit-970 -A FORWARD -o eth1 -d fc00::/7 -j limit-971 -A FORWARD -o eth1 -d fc00::/7 -j limit-972 -A FORWARD -o eth1 -d fc00::/7 -j limit-973 -A FORWARD -o eth1 -d fc00::/7 -j limit-974 -A FORWARD -o eth1 -d fc00::/7 -j limit-975 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-0 -A FORWARD -j logaccept-final-1 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-2 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-3 -A FORWARD -j logaccept-final-4 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-5 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-6 -A FORWARD -j logaccept-final-7 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-8 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-9 -A FORWARD -j logaccept-final-10 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-11 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-12 -A FORWARD -j logaccept-final-13 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-14 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-15 -A FORWARD -j logaccept-final-16 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-17 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-18 -A FORWARD -j logaccept-final-19 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-20 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-21 -A FORWARD -j logaccept-final-22 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-23 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-24 -A FORWARD -j logaccept-final-25 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-26 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-27 -A FORWARD -j logaccept-final-28 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-29 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-30 -A FORWARD -j logaccept-final-31 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-32 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-33 -A FORWARD -j logaccept-final-34 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-35 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-36 -A FORWARD -j logaccept-final-37 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-38 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-39 -A FORWARD -j logaccept-final-40 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-41 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-42 -A FORWARD -j logaccept-final-43 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-44 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-45 -A FORWARD -j logaccept-final-46 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-47 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-48 -A FORWARD -j logaccept-final-49 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-50 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-51 -A FORWARD -j logaccept-final-52 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-53 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-54 -A FORWARD -j logaccept-final-55 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-56 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-57 -A FORWARD -j logaccept-final-58 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-59 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-60 -A FORWARD -j logaccept-final-61 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-62 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-63 -A FORWARD -j logaccept-final-64 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-65 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-66 -A FORWARD -j logaccept-final-67 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-68 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-69 -A FORWARD -j logaccept-final-70 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-71 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-72 -A FORWARD -j logaccept-final-73 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-74 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-75 -A FORWARD -j logaccept-final-76 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-77 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-78 -A FORWARD -j logaccept-final-79 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-80 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-81 -A FORWARD -j logaccept-final-82 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-83 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-84 -A FORWARD -j logaccept-final-85 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-86 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-87 -A FORWARD -j logaccept-final-88 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-89 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-90 -A FORWARD -j logaccept-final-91 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-92 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-93 -A FORWARD -j logaccept-final-94 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-95 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-96 -A FORWARD -j logaccept-final-97 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-98 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-99 -A FORWARD -j logaccept-final-100 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-101 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-102 -A FORWARD -j logaccept-final-103 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-104 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-105 -A FORWARD -j logaccept-final-106 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-107 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-108 -A FORWARD -j logaccept-final-109 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-110 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-111 -A FORWARD -j logaccept-final-112 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-113 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-114 -A FORWARD -j logaccept-final-115 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-116 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-117 -A FORWARD -j logaccept-final-118 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-119 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-120 -A FORWARD -j logaccept-final-121 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-122 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-123 -A FORWARD -j logaccept-final-124 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-125 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-126 -A FORWARD -j logaccept-final-127 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-128 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-129 -A FORWARD -j logaccept-final-130 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-131 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-132 -A FORWARD -j logaccept-final-133 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-134 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-135 -A FORWARD -j logaccept-final-136 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-137 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-138 -A FORWARD -j logaccept-final-139 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-140 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-141 -A FORWARD -j logaccept-final-142 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-143 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-144 -A FORWARD -j logaccept-final-145 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-146 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-147 -A FORWARD -j logaccept-final-148 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-149 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-150 -A FORWARD -j logaccept-final-151 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-152 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-153 -A FORWARD -j logaccept-final-154 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-155 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-156 -A FORWARD -j logaccept-final-157 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-158 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-159 -A FORWARD -j logaccept-final-160 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-161 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-162 -A FORWARD -j logaccept-final-163 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-164 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-165 -A FORWARD -j logaccept-final-166 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-167 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-168 -A FORWARD -j logaccept-final-169 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-170 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-171 -A FORWARD -j logaccept-final-172 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-173 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-174 -A FORWARD -j logaccept-final-175 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-176 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-177 -A FORWARD -j logaccept-final-178 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-179 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-180 -A FORWARD -j logaccept-final-181 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-182 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-183 -A FORWARD -j logaccept-final-184 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-185 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-186 -A FORWARD -j logaccept-final-187 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-188 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-189 -A FORWARD -j logaccept-final-190 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-191 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-192 -A FORWARD -j logaccept-final-193 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-194 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-195 -A FORWARD -j logaccept-final-196 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-197 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-198 -A FORWARD -j logaccept-final-199 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-200 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-201 -A FORWARD -j logaccept-final-202 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-203 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-204 -A FORWARD -j logaccept-final-205 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-206 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-207 -A FORWARD -j logaccept-final-208 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-209 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-210 -A FORWARD -j logaccept-final-211 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-212 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-213 -A FORWARD -j logaccept-final-214 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-215 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-216 -A FORWARD -j logaccept-final-217 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-218 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-219 -A FORWARD -j logaccept-final-220 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-221 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-222 -A FORWARD -j logaccept-final-223 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-224 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-225 -A FORWARD -j logaccept-final-226 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-227 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-228 -A FORWARD -j logaccept-final-229 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-230 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-231 -A FORWARD -j logaccept-final-232 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-233 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-234 -A FORWARD -j logaccept-final-235 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-236 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-237 -A FORWARD -j logaccept-final-238 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-239 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-240 -A FORWARD -j logaccept-final-241 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-242 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-243 -A FORWARD -j logaccept-final-244 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-245 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-246 -A FORWARD -j logaccept-final-247 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-248 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-249 -A FORWARD -j logaccept-final-250 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-251 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-252 -A FORWARD -j logaccept-final-253 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-254 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-255 -A FORWARD -j logaccept-final-256 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-257 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-258 -A FORWARD -j logaccept-final-259 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-260 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-261 -A FORWARD -j logaccept-final-262 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-263 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-264 -A FORWARD -j logaccept-final-265 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-266 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-267 -A FORWARD -j logaccept-final-268 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-269 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-270 -A FORWARD -j logaccept-final-271 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-272 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-273 -A FORWARD -j logaccept-final-274 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-275 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-276 -A FORWARD -j logaccept-final-277 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-278 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-279 -A FORWARD -j logaccept-final-280 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-281 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-282 -A FORWARD -j logaccept-final-283 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-284 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-285 -A FORWARD -j logaccept-final-286 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-287 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-288 -A FORWARD -j logaccept-final-289 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-290 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-291 -A FORWARD -j logaccept-final-292 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-293 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-294 -A FORWARD -j logaccept-final-295 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-296 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-297 -A FORWARD -j logaccept-final-298 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-299 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-300 -A FORWARD -j logaccept-final-301 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-302 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-303 -A FORWARD -j logaccept-final-304 -A FORWARD -j ACCEPT -A FORWARD -j logaccept-final-305 -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:C --rsource --mask fe00:: --set -A FORWARD -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A FORWARD -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A FORWARD -j ACCEPT -A FORWARD -j logdrop-1650 -A FORWARD -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-66 -A FORWARD -j logdrop-1651 -A FORWARD -j logpass-0 -A FORWARD -j logaccept-67 -A FORWARD -j logdrop-1652 -A FORWARD -j logpass-1 -A FORWARD -j logaccept-68 -A FORWARD -j logdrop-1653 -A FORWARD -j logpass-2 -A FORWARD -j ACCEPT -A FORWARD -j DROP -A FORWARD -A FORWARD -j logaccept-69 -A FORWARD -j logdrop-1654 -A FORWARD -i eth0 -j ACCEPT -A FORWARD -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth0 -o eth4 -j ACCEPT -A FORWARD -i eth0 -o eth5 -j ACCEPT -A FORWARD -i eth0 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth1 -s fc00::/7 -o eth0 -j ACCEPT -A FORWARD -i eth1 -s fc00::/7 -o eth4 -j ACCEPT -A FORWARD -i eth1 -s fc00::/7 -o eth5 -j ACCEPT -A FORWARD -i eth1 -s fc00::/7 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth4 -o eth0 -j ACCEPT -A FORWARD -i eth5 -o eth0 -j ACCEPT -A FORWARD -i eth4 -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth5 -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -i eth4 -o eth4 -j ACCEPT -A FORWARD -i eth4 -o eth5 -j ACCEPT -A FORWARD -i eth5 -o eth4 -j ACCEPT -A FORWARD -i eth5 -o eth5 -j ACCEPT -A FORWARD -i eth4 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -i eth5 -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth0 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth1 -d fc00::/7 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth4 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -o eth5 -j ACCEPT -A FORWARD -m policy --dir in --pol ipsec -m policy --dir out --pol ipsec -j ACCEPT -A FORWARD -p icmpv6 -j icmp-routing -A INPUT -j NFLOG --nflog-group 1 --nflog-size 128 -A INPUT -j TEE --gateway fc00::2 -A INPUT -m limit --limit 1/second -j LOG -A INPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j limit-2927 -A INPUT -j limit-2926 -A INPUT -j limit-2925 -A INPUT -j limit-2924 -A INPUT -j limit-2923 -A INPUT -j limit-2922 -A INPUT -j limit-2921 -A INPUT -j limit-2920 -A INPUT -j limit-2919 -A INPUT -j limit-2918 -A INPUT -j limit-2917 -A INPUT -j limit-2916 -A INPUT -j limit-2915 -A INPUT -j limit-2914 -A INPUT -j limit-2913 -A INPUT -j limit-2912 -A INPUT -j limit-2911 -A INPUT -j limit-2910 -A INPUT -j limit-2909 -A INPUT -j limit-2908 -A INPUT -j limit-2907 -A INPUT -j limit-2906 -A INPUT -j limit-2905 -A INPUT -j limit-2904 -A INPUT -j limit-2903 -A INPUT -j limit-2902 -A INPUT -j limit-2901 -A INPUT -j limit-2900 -A INPUT -j limit-2899 -A INPUT -j limit-2898 -A INPUT -j limit-2897 -A INPUT -j limit-2896 -A INPUT -j limit-2895 -A INPUT -j limit-2894 -A INPUT -j limit-2893 -A INPUT -j limit-2892 -A INPUT -j limit-2891 -A INPUT -j limit-2890 -A INPUT -j limit-2889 -A INPUT -j limit-2888 -A INPUT -j limit-2887 -A INPUT -j limit-2886 -A INPUT -j limit-2885 -A INPUT -j limit-2884 -A INPUT -j limit-2883 -A INPUT -j limit-2882 -A INPUT -j limit-2881 -A INPUT -j limit-2880 -A INPUT -j limit-2879 -A INPUT -j limit-2878 -A INPUT -j limit-2877 -A INPUT -j limit-2876 -A INPUT -j limit-2875 -A INPUT -j limit-2874 -A INPUT -j limit-2873 -A INPUT -j limit-2872 -A INPUT -j limit-2871 -A INPUT -j limit-2870 -A INPUT -j limit-2869 -A INPUT -j limit-2868 -A INPUT -j limit-2867 -A INPUT -j limit-2866 -A INPUT -j limit-2865 -A INPUT -j limit-2864 -A INPUT -j limit-2863 -A INPUT -j limit-2862 -A INPUT -j limit-2861 -A INPUT -j limit-2860 -A INPUT -j limit-2859 -A INPUT -j limit-2858 -A INPUT -j limit-2857 -A INPUT -j limit-2856 -A INPUT -j limit-2855 -A INPUT -j limit-2854 -A INPUT -j limit-2853 -A INPUT -j limit-2852 -A INPUT -j limit-2851 -A INPUT -j limit-2850 -A INPUT -j limit-2849 -A INPUT -j limit-2848 -A INPUT -j limit-2847 -A INPUT -j limit-2846 -A INPUT -j limit-2845 -A INPUT -j limit-2844 -A INPUT -j limit-2843 -A INPUT -j limit-2842 -A INPUT -j limit-2841 -A INPUT -j limit-2840 -A INPUT -j limit-2839 -A INPUT -j limit-2838 -A INPUT -j limit-2837 -A INPUT -j limit-2836 -A INPUT -j limit-2835 -A INPUT -j limit-2834 -A INPUT -j limit-2833 -A INPUT -j limit-2832 -A INPUT -j limit-2831 -A INPUT -j limit-2830 -A INPUT -j limit-2829 -A INPUT -j limit-2828 -A INPUT -j limit-2827 -A INPUT -j limit-2826 -A INPUT -j limit-2825 -A INPUT -j limit-2824 -A INPUT -j limit-2823 -A INPUT -j limit-2822 -A INPUT -j limit-2821 -A INPUT -j limit-2820 -A INPUT -j limit-2819 -A INPUT -j limit-2818 -A INPUT -j limit-2817 -A INPUT -j limit-2816 -A INPUT -j limit-2815 -A INPUT -j limit-2814 -A INPUT -j limit-2813 -A INPUT -j limit-2812 -A INPUT -j limit-2811 -A INPUT -j limit-2810 -A INPUT -j limit-2809 -A INPUT -j limit-2808 -A INPUT -j limit-2807 -A INPUT -j limit-2806 -A INPUT -j limit-2805 -A INPUT -j limit-2804 -A INPUT -j limit-2803 -A INPUT -j limit-2802 -A INPUT -j limit-2801 -A INPUT -j limit-2800 -A INPUT -j limit-2799 -A INPUT -j limit-2798 -A INPUT -j limit-2797 -A INPUT -j limit-2796 -A INPUT -j limit-2795 -A INPUT -j limit-2794 -A INPUT -j limit-2793 -A INPUT -j limit-2792 -A INPUT -j limit-2791 -A INPUT -j limit-2790 -A INPUT -j limit-2789 -A INPUT -j limit-2788 -A INPUT -j limit-2787 -A INPUT -j limit-2786 -A INPUT -j limit-2785 -A INPUT -j limit-2784 -A INPUT -j limit-2783 -A INPUT -j limit-2782 -A INPUT -j limit-2781 -A INPUT -j limit-2780 -A INPUT -j limit-2779 -A INPUT -j limit-2778 -A INPUT -j limit-2777 -A INPUT -j limit-2776 -A INPUT -j limit-2775 -A INPUT -j limit-2774 -A INPUT -j limit-2773 -A INPUT -j limit-2772 -A INPUT -j limit-2771 -A INPUT -j limit-2770 -A INPUT -j limit-2769 -A INPUT -j limit-2768 -A INPUT -j limit-2767 -A INPUT -j limit-2766 -A INPUT -j limit-2765 -A INPUT -j limit-2764 -A INPUT -j limit-2763 -A INPUT -j limit-2762 -A INPUT -j limit-2761 -A INPUT -j limit-2760 -A INPUT -j limit-2759 -A INPUT -j limit-2758 -A INPUT -j limit-2757 -A INPUT -j limit-2756 -A INPUT -j limit-2755 -A INPUT -j limit-2754 -A INPUT -j limit-2753 -A INPUT -j limit-2752 -A INPUT -j limit-2751 -A INPUT -j limit-2750 -A INPUT -j limit-2749 -A INPUT -j limit-2748 -A INPUT -j limit-2747 -A INPUT -j limit-2746 -A INPUT -j limit-2745 -A INPUT -j limit-2744 -A INPUT -j limit-2743 -A INPUT -j limit-2742 -A INPUT -j limit-2741 -A INPUT -j limit-2740 -A INPUT -j limit-2739 -A INPUT -j limit-2738 -A INPUT -j limit-2737 -A INPUT -j limit-2736 -A INPUT -j limit-2735 -A INPUT -j limit-2734 -A INPUT -j limit-2733 -A INPUT -j limit-2732 -A INPUT -j limit-2731 -A INPUT -j limit-2730 -A INPUT -j limit-2729 -A INPUT -j limit-2728 -A INPUT -j limit-2727 -A INPUT -j limit-2726 -A INPUT -j limit-2725 -A INPUT -j limit-2724 -A INPUT -j limit-2723 -A INPUT -j limit-2722 -A INPUT -j limit-2721 -A INPUT -j limit-2720 -A INPUT -j limit-2719 -A INPUT -j limit-2718 -A INPUT -j limit-2717 -A INPUT -j limit-2716 -A INPUT -j limit-2715 -A INPUT -j limit-2714 -A INPUT -j limit-2713 -A INPUT -j limit-2712 -A INPUT -j limit-2711 -A INPUT -j limit-2710 -A INPUT -j limit-2709 -A INPUT -j limit-2708 -A INPUT -j limit-2707 -A INPUT -j limit-2706 -A INPUT -j limit-2705 -A INPUT -j limit-2704 -A INPUT -j limit-2703 -A INPUT -j limit-2702 -A INPUT -j limit-2701 -A INPUT -j limit-2700 -A INPUT -j limit-2699 -A INPUT -j limit-2698 -A INPUT -j limit-2697 -A INPUT -j limit-2696 -A INPUT -j limit-2695 -A INPUT -j limit-2694 -A INPUT -j limit-2693 -A INPUT -j limit-2692 -A INPUT -j limit-2691 -A INPUT -j limit-2690 -A INPUT -j limit-2689 -A INPUT -j limit-2688 -A INPUT -j limit-2687 -A INPUT -j limit-2686 -A INPUT -j limit-2685 -A INPUT -j limit-2684 -A INPUT -j limit-2683 -A INPUT -j limit-2682 -A INPUT -j limit-2681 -A INPUT -j limit-2680 -A INPUT -j limit-2679 -A INPUT -j limit-2678 -A INPUT -j limit-2677 -A INPUT -j limit-2676 -A INPUT -j limit-2675 -A INPUT -j limit-2674 -A INPUT -j limit-2673 -A INPUT -j limit-2672 -A INPUT -j limit-2671 -A INPUT -j limit-2670 -A INPUT -j limit-2669 -A INPUT -j limit-2668 -A INPUT -j limit-2667 -A INPUT -j limit-2666 -A INPUT -j limit-2665 -A INPUT -j limit-2664 -A INPUT -j limit-2663 -A INPUT -j limit-2662 -A INPUT -j limit-2661 -A INPUT -j limit-2660 -A INPUT -j limit-2659 -A INPUT -j limit-2658 -A INPUT -j limit-2657 -A INPUT -j limit-2656 -A INPUT -j limit-2655 -A INPUT -j limit-2654 -A INPUT -j limit-2653 -A INPUT -j limit-2652 -A INPUT -j limit-2651 -A INPUT -j limit-2650 -A INPUT -j limit-2649 -A INPUT -j limit-2648 -A INPUT -j limit-2647 -A INPUT -j limit-2646 -A INPUT -j limit-2645 -A INPUT -j limit-2644 -A INPUT -j limit-2643 -A INPUT -j limit-2642 -A INPUT -j limit-2641 -A INPUT -j limit-2640 -A INPUT -j limit-2639 -A INPUT -j limit-2638 -A INPUT -j limit-2637 -A INPUT -j limit-2636 -A INPUT -j limit-2635 -A INPUT -j limit-2634 -A INPUT -j limit-2633 -A INPUT -j limit-2632 -A INPUT -j limit-2631 -A INPUT -j limit-2630 -A INPUT -j limit-2629 -A INPUT -j limit-2628 -A INPUT -j limit-2627 -A INPUT -j limit-2626 -A INPUT -j limit-2625 -A INPUT -j limit-2624 -A INPUT -j limit-2623 -A INPUT -j limit-2622 -A INPUT -j limit-2621 -A INPUT -j limit-2620 -A INPUT -j limit-2619 -A INPUT -j limit-2618 -A INPUT -j limit-2617 -A INPUT -j limit-2616 -A INPUT -j limit-2615 -A INPUT -j limit-2614 -A INPUT -j limit-2613 -A INPUT -j limit-2612 -A INPUT -j limit-2611 -A INPUT -j limit-2610 -A INPUT -j limit-2609 -A INPUT -j limit-2608 -A INPUT -j limit-2607 -A INPUT -j limit-2606 -A INPUT -j limit-2605 -A INPUT -j limit-2604 -A INPUT -j limit-2603 -A INPUT -j limit-2602 -A INPUT -j limit-2601 -A INPUT -j limit-2600 -A INPUT -j limit-2599 -A INPUT -j limit-2598 -A INPUT -j limit-2597 -A INPUT -j limit-2596 -A INPUT -j limit-2595 -A INPUT -j limit-2594 -A INPUT -j limit-2593 -A INPUT -j limit-2592 -A INPUT -j limit-2591 -A INPUT -j limit-2590 -A INPUT -j limit-2589 -A INPUT -j limit-2588 -A INPUT -j limit-2587 -A INPUT -j limit-2586 -A INPUT -j limit-2585 -A INPUT -j limit-2584 -A INPUT -j limit-2583 -A INPUT -j limit-2582 -A INPUT -j limit-2581 -A INPUT -j limit-2580 -A INPUT -j limit-2579 -A INPUT -j limit-2578 -A INPUT -j limit-2577 -A INPUT -j limit-2576 -A INPUT -j limit-2575 -A INPUT -j limit-2574 -A INPUT -j limit-2573 -A INPUT -j limit-2572 -A INPUT -j limit-2571 -A INPUT -j limit-2570 -A INPUT -j limit-2569 -A INPUT -j limit-2568 -A INPUT -j limit-2567 -A INPUT -j limit-2566 -A INPUT -j limit-2565 -A INPUT -j limit-2564 -A INPUT -j limit-2563 -A INPUT -j limit-2562 -A INPUT -j limit-2561 -A INPUT -j limit-2560 -A INPUT -j limit-2559 -A INPUT -j limit-2558 -A INPUT -j limit-2557 -A INPUT -j limit-2556 -A INPUT -j limit-2555 -A INPUT -j limit-2554 -A INPUT -j limit-2553 -A INPUT -j limit-2552 -A INPUT -j limit-2551 -A INPUT -j limit-2550 -A INPUT -j limit-2549 -A INPUT -j limit-2548 -A INPUT -j limit-2547 -A INPUT -j limit-2546 -A INPUT -j limit-2545 -A INPUT -j limit-2544 -A INPUT -j limit-2543 -A INPUT -j limit-2542 -A INPUT -j limit-2541 -A INPUT -j limit-2540 -A INPUT -j limit-2539 -A INPUT -j limit-2538 -A INPUT -j limit-2537 -A INPUT -j limit-2536 -A INPUT -j limit-2535 -A INPUT -j limit-2534 -A INPUT -j limit-2533 -A INPUT -j limit-2532 -A INPUT -j limit-2531 -A INPUT -j limit-2530 -A INPUT -j limit-2529 -A INPUT -j limit-2528 -A INPUT -j limit-2527 -A INPUT -j limit-2526 -A INPUT -j limit-2525 -A INPUT -j limit-2524 -A INPUT -j limit-2523 -A INPUT -j limit-2522 -A INPUT -j limit-2521 -A INPUT -j limit-2520 -A INPUT -j limit-2519 -A INPUT -j limit-2518 -A INPUT -j limit-2517 -A INPUT -j limit-2516 -A INPUT -j limit-2515 -A INPUT -j limit-2514 -A INPUT -j limit-2513 -A INPUT -j limit-2512 -A INPUT -j limit-2511 -A INPUT -j limit-2510 -A INPUT -j limit-2509 -A INPUT -j limit-2508 -A INPUT -j limit-2507 -A INPUT -j limit-2506 -A INPUT -j limit-2505 -A INPUT -j limit-2504 -A INPUT -j limit-2503 -A INPUT -j limit-2502 -A INPUT -j limit-2501 -A INPUT -j limit-2500 -A INPUT -j limit-2499 -A INPUT -j limit-2498 -A INPUT -j limit-2497 -A INPUT -j limit-2496 -A INPUT -j limit-2495 -A INPUT -j limit-2494 -A INPUT -j limit-2493 -A INPUT -j limit-2492 -A INPUT -j limit-2491 -A INPUT -j limit-2490 -A INPUT -j limit-2489 -A INPUT -j limit-2488 -A INPUT -j limit-2487 -A INPUT -j limit-2486 -A INPUT -j limit-2485 -A INPUT -j limit-2484 -A INPUT -j limit-2483 -A INPUT -j limit-2482 -A INPUT -j limit-2481 -A INPUT -j limit-2480 -A INPUT -j limit-2479 -A INPUT -j limit-2478 -A INPUT -j limit-2477 -A INPUT -j limit-2476 -A INPUT -j limit-2475 -A INPUT -j limit-2474 -A INPUT -j limit-2473 -A INPUT -j limit-2472 -A INPUT -j limit-2471 -A INPUT -j limit-2470 -A INPUT -j limit-2469 -A INPUT -j limit-2468 -A INPUT -j limit-2467 -A INPUT -j limit-2466 -A INPUT -j limit-2465 -A INPUT -j limit-2464 -A INPUT -j limit-2463 -A INPUT -j limit-2462 -A INPUT -j limit-2461 -A INPUT -j limit-2460 -A INPUT -j limit-2459 -A INPUT -j limit-2458 -A INPUT -j limit-2457 -A INPUT -j limit-2456 -A INPUT -j limit-2455 -A INPUT -j limit-2454 -A INPUT -j limit-2453 -A INPUT -j limit-2452 -A INPUT -j limit-2451 -A INPUT -j limit-2450 -A INPUT -j limit-2449 -A INPUT -j limit-2448 -A INPUT -j limit-2447 -A INPUT -j limit-2446 -A INPUT -j limit-2445 -A INPUT -j limit-2444 -A INPUT -j limit-2443 -A INPUT -j limit-2442 -A INPUT -j limit-2441 -A INPUT -j limit-2440 -A INPUT -j limit-2439 -A INPUT -j limit-2438 -A INPUT -j limit-2437 -A INPUT -j limit-2436 -A INPUT -j limit-2435 -A INPUT -j limit-2434 -A INPUT -j limit-2433 -A INPUT -j limit-2432 -A INPUT -j limit-2431 -A INPUT -j limit-2430 -A INPUT -j limit-2429 -A INPUT -j limit-2428 -A INPUT -j limit-2427 -A INPUT -j limit-2426 -A INPUT -j limit-2425 -A INPUT -j limit-2424 -A INPUT -j limit-2423 -A INPUT -j limit-2422 -A INPUT -j limit-2421 -A INPUT -j limit-2420 -A INPUT -j limit-2419 -A INPUT -j limit-2418 -A INPUT -j limit-2417 -A INPUT -j limit-2416 -A INPUT -j limit-2415 -A INPUT -j limit-2414 -A INPUT -j limit-2413 -A INPUT -j limit-2412 -A INPUT -j limit-2411 -A INPUT -j limit-2410 -A INPUT -j limit-2409 -A INPUT -j limit-2408 -A INPUT -j limit-2407 -A INPUT -j limit-2406 -A INPUT -j limit-2405 -A INPUT -j limit-2404 -A INPUT -j limit-2403 -A INPUT -j limit-2402 -A INPUT -j limit-2401 -A INPUT -j limit-2400 -A INPUT -j limit-2399 -A INPUT -j limit-2398 -A INPUT -j limit-2397 -A INPUT -j limit-2396 -A INPUT -j limit-2395 -A INPUT -j limit-2394 -A INPUT -j limit-2393 -A INPUT -j limit-2392 -A INPUT -j limit-2391 -A INPUT -j limit-2390 -A INPUT -j limit-2389 -A INPUT -j limit-2388 -A INPUT -j limit-2387 -A INPUT -j limit-2386 -A INPUT -j limit-2385 -A INPUT -j limit-2384 -A INPUT -j limit-2383 -A INPUT -j limit-2382 -A INPUT -j limit-2381 -A INPUT -j limit-2380 -A INPUT -j limit-2379 -A INPUT -j limit-2378 -A INPUT -j limit-2377 -A INPUT -j limit-2376 -A INPUT -j limit-2375 -A INPUT -j limit-2374 -A INPUT -j limit-2373 -A INPUT -j limit-2372 -A INPUT -j limit-2371 -A INPUT -j limit-2370 -A INPUT -j limit-2369 -A INPUT -j limit-2368 -A INPUT -j limit-2367 -A INPUT -j limit-2366 -A INPUT -j limit-2365 -A INPUT -j limit-2364 -A INPUT -j limit-2363 -A INPUT -j limit-2362 -A INPUT -j limit-2361 -A INPUT -j limit-2360 -A INPUT -j limit-2359 -A INPUT -j limit-2358 -A INPUT -j limit-2357 -A INPUT -j limit-2356 -A INPUT -j limit-2355 -A INPUT -j limit-2354 -A INPUT -j limit-2353 -A INPUT -j limit-2352 -A INPUT -j limit-2351 -A INPUT -j limit-2350 -A INPUT -j limit-2349 -A INPUT -j limit-2348 -A INPUT -j limit-2347 -A INPUT -j limit-2346 -A INPUT -j limit-2345 -A INPUT -j limit-2344 -A INPUT -j limit-2343 -A INPUT -j limit-2342 -A INPUT -j limit-2341 -A INPUT -j limit-2340 -A INPUT -j limit-2339 -A INPUT -j limit-2338 -A INPUT -j limit-2337 -A INPUT -j limit-2336 -A INPUT -j limit-2335 -A INPUT -j limit-2334 -A INPUT -j limit-2333 -A INPUT -j limit-2332 -A INPUT -j limit-2331 -A INPUT -j limit-2330 -A INPUT -j limit-2329 -A INPUT -j limit-2328 -A INPUT -j limit-2327 -A INPUT -j limit-2326 -A INPUT -j limit-2325 -A INPUT -j limit-2324 -A INPUT -j limit-2323 -A INPUT -j limit-2322 -A INPUT -j limit-2321 -A INPUT -j limit-2320 -A INPUT -j limit-2319 -A INPUT -j limit-2318 -A INPUT -j limit-2317 -A INPUT -j limit-2316 -A INPUT -j limit-2315 -A INPUT -j limit-2314 -A INPUT -j limit-2313 -A INPUT -j limit-2312 -A INPUT -j limit-2311 -A INPUT -j limit-2310 -A INPUT -j limit-2309 -A INPUT -j limit-2308 -A INPUT -j limit-2307 -A INPUT -j limit-2306 -A INPUT -j limit-2305 -A INPUT -j limit-2304 -A INPUT -j limit-2303 -A INPUT -j limit-2302 -A INPUT -j limit-2301 -A INPUT -j limit-2300 -A INPUT -j limit-2299 -A INPUT -j limit-2298 -A INPUT -j limit-2297 -A INPUT -j limit-2296 -A INPUT -j limit-2295 -A INPUT -j limit-2294 -A INPUT -j limit-2293 -A INPUT -j limit-2292 -A INPUT -j limit-2291 -A INPUT -j limit-2290 -A INPUT -j limit-2289 -A INPUT -j limit-2288 -A INPUT -j limit-2287 -A INPUT -j limit-2286 -A INPUT -j limit-2285 -A INPUT -j limit-2284 -A INPUT -j limit-2283 -A INPUT -j limit-2282 -A INPUT -j limit-2281 -A INPUT -j limit-2280 -A INPUT -j limit-2279 -A INPUT -j limit-2278 -A INPUT -j limit-2277 -A INPUT -j limit-2276 -A INPUT -j limit-2275 -A INPUT -j limit-2274 -A INPUT -j limit-2273 -A INPUT -j limit-2272 -A INPUT -j limit-2271 -A INPUT -j limit-2270 -A INPUT -j limit-2269 -A INPUT -j limit-2268 -A INPUT -j limit-2267 -A INPUT -j limit-2266 -A INPUT -j limit-2265 -A INPUT -j limit-2264 -A INPUT -j limit-2263 -A INPUT -j limit-2262 -A INPUT -j limit-2261 -A INPUT -j limit-2260 -A INPUT -j limit-2259 -A INPUT -j limit-2258 -A INPUT -j limit-2257 -A INPUT -j limit-2256 -A INPUT -j limit-2255 -A INPUT -j limit-2254 -A INPUT -j limit-2253 -A INPUT -j limit-2252 -A INPUT -j limit-2251 -A INPUT -j limit-2250 -A INPUT -j limit-2249 -A INPUT -j limit-2248 -A INPUT -j limit-2247 -A INPUT -j limit-2246 -A INPUT -j limit-2245 -A INPUT -j limit-2244 -A INPUT -j limit-2243 -A INPUT -j limit-2242 -A INPUT -j limit-2241 -A INPUT -j limit-2240 -A INPUT -j limit-2239 -A INPUT -j limit-2238 -A INPUT -j limit-2237 -A INPUT -j limit-2236 -A INPUT -j limit-2235 -A INPUT -j limit-2234 -A INPUT -j limit-2233 -A INPUT -j limit-2232 -A INPUT -j limit-2231 -A INPUT -j limit-2230 -A INPUT -j limit-2229 -A INPUT -j limit-2228 -A INPUT -j limit-2227 -A INPUT -j limit-2226 -A INPUT -j limit-2225 -A INPUT -j limit-2224 -A INPUT -j limit-2223 -A INPUT -j limit-2222 -A INPUT -j limit-2221 -A INPUT -j limit-2220 -A INPUT -j limit-2219 -A INPUT -j limit-2218 -A INPUT -j limit-2217 -A INPUT -j limit-2216 -A INPUT -j limit-2215 -A INPUT -j limit-2214 -A INPUT -j limit-2213 -A INPUT -j limit-2212 -A INPUT -j limit-2211 -A INPUT -j limit-2210 -A INPUT -j limit-2209 -A INPUT -j limit-2208 -A INPUT -j limit-2207 -A INPUT -j limit-2206 -A INPUT -j limit-2205 -A INPUT -j limit-2204 -A INPUT -j limit-2203 -A INPUT -j limit-2202 -A INPUT -j limit-2201 -A INPUT -j limit-2200 -A INPUT -j limit-2199 -A INPUT -j limit-2198 -A INPUT -j limit-2197 -A INPUT -j limit-2196 -A INPUT -j limit-2195 -A INPUT -j limit-2194 -A INPUT -j limit-2193 -A INPUT -j limit-2192 -A INPUT -j limit-2191 -A INPUT -j limit-2190 -A INPUT -j limit-2189 -A INPUT -j limit-2188 -A INPUT -j limit-2187 -A INPUT -j limit-2186 -A INPUT -j limit-2185 -A INPUT -j limit-2184 -A INPUT -j limit-2183 -A INPUT -j limit-2182 -A INPUT -j limit-2181 -A INPUT -j limit-2180 -A INPUT -j limit-2179 -A INPUT -j limit-2178 -A INPUT -j limit-2177 -A INPUT -j limit-2176 -A INPUT -j limit-2175 -A INPUT -j limit-2174 -A INPUT -j limit-2173 -A INPUT -j limit-2172 -A INPUT -j limit-2171 -A INPUT -j limit-2170 -A INPUT -j limit-2169 -A INPUT -j limit-2168 -A INPUT -j limit-2167 -A INPUT -j limit-2166 -A INPUT -j limit-2165 -A INPUT -j limit-2164 -A INPUT -j limit-2163 -A INPUT -j limit-2162 -A INPUT -j limit-2161 -A INPUT -j limit-2160 -A INPUT -j limit-2159 -A INPUT -j limit-2158 -A INPUT -j limit-2157 -A INPUT -j limit-2156 -A INPUT -j limit-2155 -A INPUT -j limit-2154 -A INPUT -j limit-2153 -A INPUT -j limit-2152 -A INPUT -j limit-2151 -A INPUT -j limit-2150 -A INPUT -j limit-2149 -A INPUT -j limit-2148 -A INPUT -j limit-2147 -A INPUT -j limit-2146 -A INPUT -j limit-2145 -A INPUT -j limit-2144 -A INPUT -j limit-2143 -A INPUT -j limit-2142 -A INPUT -j limit-2141 -A INPUT -j limit-2140 -A INPUT -j limit-2139 -A INPUT -j limit-2138 -A INPUT -j limit-2137 -A INPUT -j limit-2136 -A INPUT -j limit-2135 -A INPUT -j limit-2134 -A INPUT -j limit-2133 -A INPUT -j limit-2132 -A INPUT -j limit-2131 -A INPUT -j limit-2130 -A INPUT -j limit-2129 -A INPUT -j limit-2128 -A INPUT -j limit-2127 -A INPUT -j limit-2126 -A INPUT -j limit-2125 -A INPUT -j limit-2124 -A INPUT -j limit-2123 -A INPUT -j limit-2122 -A INPUT -j limit-2121 -A INPUT -j limit-2120 -A INPUT -j limit-2119 -A INPUT -j limit-2118 -A INPUT -j limit-2117 -A INPUT -j limit-2116 -A INPUT -j limit-2115 -A INPUT -j limit-2114 -A INPUT -j limit-2113 -A INPUT -j limit-2112 -A INPUT -j limit-2111 -A INPUT -j limit-2110 -A INPUT -j limit-2109 -A INPUT -j limit-2108 -A INPUT -j limit-2107 -A INPUT -j limit-2106 -A INPUT -j limit-2105 -A INPUT -j limit-2104 -A INPUT -j limit-2103 -A INPUT -j limit-2102 -A INPUT -j limit-2101 -A INPUT -j limit-2100 -A INPUT -j limit-2099 -A INPUT -j limit-2098 -A INPUT -j limit-2097 -A INPUT -j limit-2096 -A INPUT -j limit-2095 -A INPUT -j limit-2094 -A INPUT -j limit-2093 -A INPUT -j limit-2092 -A INPUT -j limit-2091 -A INPUT -j limit-2090 -A INPUT -j limit-2089 -A INPUT -j limit-2088 -A INPUT -j limit-2087 -A INPUT -j limit-2086 -A INPUT -j limit-2085 -A INPUT -j limit-2084 -A INPUT -j limit-2083 -A INPUT -j limit-2082 -A INPUT -j limit-2081 -A INPUT -j limit-2080 -A INPUT -j limit-2079 -A INPUT -j limit-2078 -A INPUT -j limit-2077 -A INPUT -j limit-2076 -A INPUT -j limit-2075 -A INPUT -j limit-2074 -A INPUT -j limit-2073 -A INPUT -j limit-2072 -A INPUT -j limit-2071 -A INPUT -j limit-2070 -A INPUT -j limit-2069 -A INPUT -j limit-2068 -A INPUT -j limit-2067 -A INPUT -j limit-2066 -A INPUT -j limit-2065 -A INPUT -j limit-2064 -A INPUT -j limit-2063 -A INPUT -j limit-2062 -A INPUT -j limit-2061 -A INPUT -j limit-2060 -A INPUT -j limit-2059 -A INPUT -j limit-2058 -A INPUT -j limit-2057 -A INPUT -j limit-2056 -A INPUT -j limit-2055 -A INPUT -j limit-2054 -A INPUT -j limit-2053 -A INPUT -j limit-2052 -A INPUT -j limit-2051 -A INPUT -j limit-2050 -A INPUT -j limit-2049 -A INPUT -j limit-2048 -A INPUT -j limit-2047 -A INPUT -j limit-2046 -A INPUT -j limit-2045 -A INPUT -j limit-2044 -A INPUT -j limit-2043 -A INPUT -j limit-2042 -A INPUT -j limit-2041 -A INPUT -j limit-2040 -A INPUT -j limit-2039 -A INPUT -j limit-2038 -A INPUT -j limit-2037 -A INPUT -j limit-2036 -A INPUT -j limit-2035 -A INPUT -j limit-2034 -A INPUT -j limit-2033 -A INPUT -j limit-2032 -A INPUT -j limit-2031 -A INPUT -j limit-2030 -A INPUT -j limit-2029 -A INPUT -j limit-2028 -A INPUT -j limit-2027 -A INPUT -j limit-2026 -A INPUT -j limit-2025 -A INPUT -j limit-2024 -A INPUT -j limit-2023 -A INPUT -j limit-2022 -A INPUT -j limit-2021 -A INPUT -j limit-2020 -A INPUT -j limit-2019 -A INPUT -j limit-2018 -A INPUT -j limit-2017 -A INPUT -j limit-2016 -A INPUT -j limit-2015 -A INPUT -j limit-2014 -A INPUT -j limit-2013 -A INPUT -j limit-2012 -A INPUT -j limit-2011 -A INPUT -j limit-2010 -A INPUT -j limit-2009 -A INPUT -j limit-2008 -A INPUT -j limit-2007 -A INPUT -j limit-2006 -A INPUT -j limit-2005 -A INPUT -j limit-2004 -A INPUT -j limit-2003 -A INPUT -j limit-2002 -A INPUT -j limit-2001 -A INPUT -j limit-2000 -A INPUT -j limit-1999 -A INPUT -j limit-1998 -A INPUT -j limit-1997 -A INPUT -j limit-1996 -A INPUT -j limit-1995 -A INPUT -j limit-1994 -A INPUT -j limit-1993 -A INPUT -j limit-1992 -A INPUT -j limit-1991 -A INPUT -j limit-1990 -A INPUT -j limit-1989 -A INPUT -j limit-1988 -A INPUT -j limit-1987 -A INPUT -j limit-1986 -A INPUT -j limit-1985 -A INPUT -j limit-1984 -A INPUT -j limit-1983 -A INPUT -j limit-1982 -A INPUT -j limit-1981 -A INPUT -j limit-1980 -A INPUT -j limit-1979 -A INPUT -j limit-1978 -A INPUT -j limit-1977 -A INPUT -j limit-1976 -A INPUT -j limit-1975 -A INPUT -j limit-1974 -A INPUT -j limit-1973 -A INPUT -j limit-1972 -A INPUT -j limit-1971 -A INPUT -j limit-1970 -A INPUT -j limit-1969 -A INPUT -j limit-1968 -A INPUT -j limit-1967 -A INPUT -j limit-1966 -A INPUT -j limit-1965 -A INPUT -j limit-1964 -A INPUT -j limit-1963 -A INPUT -j limit-1962 -A INPUT -j limit-1961 -A INPUT -j limit-1960 -A INPUT -j limit-1959 -A INPUT -j limit-1958 -A INPUT -j limit-1957 -A INPUT -j limit-1956 -A INPUT -j limit-1955 -A INPUT -j limit-1954 -A INPUT -j limit-1953 -A INPUT -j limit-1952 -A INPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -j ACCEPT -A INPUT -j logaccept-final-0 -A INPUT -j logaccept-final-1 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-2 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-3 -A INPUT -j logaccept-final-4 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-5 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-6 -A INPUT -j logaccept-final-7 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-8 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-9 -A INPUT -j logaccept-final-10 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-11 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-12 -A INPUT -j logaccept-final-13 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-14 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-15 -A INPUT -j logaccept-final-16 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-17 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-18 -A INPUT -j logaccept-final-19 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-20 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-21 -A INPUT -j logaccept-final-22 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-23 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-24 -A INPUT -j logaccept-final-25 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-26 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-27 -A INPUT -j logaccept-final-28 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-29 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-30 -A INPUT -j logaccept-final-31 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-32 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-33 -A INPUT -j logaccept-final-34 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-35 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-36 -A INPUT -j logaccept-final-37 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-38 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-39 -A INPUT -j logaccept-final-40 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-41 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-42 -A INPUT -j logaccept-final-43 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-44 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-45 -A INPUT -j logaccept-final-46 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-47 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-48 -A INPUT -j logaccept-final-49 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-50 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-51 -A INPUT -j logaccept-final-52 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-53 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-54 -A INPUT -j logaccept-final-55 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-56 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-57 -A INPUT -j logaccept-final-58 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-59 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-60 -A INPUT -j logaccept-final-61 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-62 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-63 -A INPUT -j logaccept-final-64 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-65 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-66 -A INPUT -j logaccept-final-67 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-68 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-69 -A INPUT -j logaccept-final-70 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-71 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-72 -A INPUT -j logaccept-final-73 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-74 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-75 -A INPUT -j logaccept-final-76 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-77 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-78 -A INPUT -j logaccept-final-79 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-80 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-81 -A INPUT -j logaccept-final-82 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-83 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-84 -A INPUT -j logaccept-final-85 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-86 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-87 -A INPUT -j logaccept-final-88 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-89 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-90 -A INPUT -j logaccept-final-91 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-92 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-93 -A INPUT -j logaccept-final-94 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-95 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-96 -A INPUT -j logaccept-final-97 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-98 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-99 -A INPUT -j logaccept-final-100 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-101 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-102 -A INPUT -j logaccept-final-103 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-104 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-105 -A INPUT -j logaccept-final-106 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-107 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-108 -A INPUT -j logaccept-final-109 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-110 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-111 -A INPUT -j logaccept-final-112 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-113 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-114 -A INPUT -j logaccept-final-115 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-116 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-117 -A INPUT -j logaccept-final-118 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-119 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-120 -A INPUT -j logaccept-final-121 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-122 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-123 -A INPUT -j logaccept-final-124 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-125 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-126 -A INPUT -j logaccept-final-127 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-128 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-129 -A INPUT -j logaccept-final-130 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-131 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-132 -A INPUT -j logaccept-final-133 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-134 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-135 -A INPUT -j logaccept-final-136 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-137 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-138 -A INPUT -j logaccept-final-139 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-140 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-141 -A INPUT -j logaccept-final-142 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-143 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-144 -A INPUT -j logaccept-final-145 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-146 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-147 -A INPUT -j logaccept-final-148 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-149 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-150 -A INPUT -j logaccept-final-151 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-152 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-153 -A INPUT -j logaccept-final-154 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-155 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-156 -A INPUT -j logaccept-final-157 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-158 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-159 -A INPUT -j logaccept-final-160 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-161 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-162 -A INPUT -j logaccept-final-163 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-164 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-165 -A INPUT -j logaccept-final-166 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-167 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-168 -A INPUT -j logaccept-final-169 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-170 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-171 -A INPUT -j logaccept-final-172 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-173 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-174 -A INPUT -j logaccept-final-175 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-176 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-177 -A INPUT -j logaccept-final-178 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-179 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-180 -A INPUT -j logaccept-final-181 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-182 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-183 -A INPUT -j logaccept-final-184 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-185 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-186 -A INPUT -j logaccept-final-187 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-188 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-189 -A INPUT -j logaccept-final-190 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-191 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-192 -A INPUT -j logaccept-final-193 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-194 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-195 -A INPUT -j logaccept-final-196 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-197 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-198 -A INPUT -j logaccept-final-199 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-200 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-201 -A INPUT -j logaccept-final-202 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-203 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-204 -A INPUT -j logaccept-final-205 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-206 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-207 -A INPUT -j logaccept-final-208 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-209 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-210 -A INPUT -j logaccept-final-211 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-212 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-213 -A INPUT -j logaccept-final-214 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-215 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-216 -A INPUT -j logaccept-final-217 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-218 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-219 -A INPUT -j logaccept-final-220 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-221 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-222 -A INPUT -j logaccept-final-223 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-224 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-225 -A INPUT -j logaccept-final-226 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-227 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-228 -A INPUT -j logaccept-final-229 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-230 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-231 -A INPUT -j logaccept-final-232 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-233 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-234 -A INPUT -j logaccept-final-235 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-236 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-237 -A INPUT -j logaccept-final-238 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-239 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-240 -A INPUT -j logaccept-final-241 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-242 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-243 -A INPUT -j logaccept-final-244 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-245 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-246 -A INPUT -j logaccept-final-247 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-248 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-249 -A INPUT -j logaccept-final-250 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-251 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-252 -A INPUT -j logaccept-final-253 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-254 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-255 -A INPUT -j logaccept-final-256 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-257 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-258 -A INPUT -j logaccept-final-259 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-260 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-261 -A INPUT -j logaccept-final-262 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-263 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-264 -A INPUT -j logaccept-final-265 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-266 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-267 -A INPUT -j logaccept-final-268 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-269 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-270 -A INPUT -j logaccept-final-271 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-272 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-273 -A INPUT -j logaccept-final-274 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-275 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-276 -A INPUT -j logaccept-final-277 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-278 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-279 -A INPUT -j logaccept-final-280 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-281 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-282 -A INPUT -j logaccept-final-283 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-284 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-285 -A INPUT -j logaccept-final-286 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-287 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-288 -A INPUT -j logaccept-final-289 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-290 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-291 -A INPUT -j logaccept-final-292 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-293 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-294 -A INPUT -j logaccept-final-295 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-296 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-297 -A INPUT -j logaccept-final-298 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-299 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-300 -A INPUT -j logaccept-final-301 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-302 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-303 -A INPUT -j logaccept-final-304 -A INPUT -j ACCEPT -A INPUT -j logaccept-final-305 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-0 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-1 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-2 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-3 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-4 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-5 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-6 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-7 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-8 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-9 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-10 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-11 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-12 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-13 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-14 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-15 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-16 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-17 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-18 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-19 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-20 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-21 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-22 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-23 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-24 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-25 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-26 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-27 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-28 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-29 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-30 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-32 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-33 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-34 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-35 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-36 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-38 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-39 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-40 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-41 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-42 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-43 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-44 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-45 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-46 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-47 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-48 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-49 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-50 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-52 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-53 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-54 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-55 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-56 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-58 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-59 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-60 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-61 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-62 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-63 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-64 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-65 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-66 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-67 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-68 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-69 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-70 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-72 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-73 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-74 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-75 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-76 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-78 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-79 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-80 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-81 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-82 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-83 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-84 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-85 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-86 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-87 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-88 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-89 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-90 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-92 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-93 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-94 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-95 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-96 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-98 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-99 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-100 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-101 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-102 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-103 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-104 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-105 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-106 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-107 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-108 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-109 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-110 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-111 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-112 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-113 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-114 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-115 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-116 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-117 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-118 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-119 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-120 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-31 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-122 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-123 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-124 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-125 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-126 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-37 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-128 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-129 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-130 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-131 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-132 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-133 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-134 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-135 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-136 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-137 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-138 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-139 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-140 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-51 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-142 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-143 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-144 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-145 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-146 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-57 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-148 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-149 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-150 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-151 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-152 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-153 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-154 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-155 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-156 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-157 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-158 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-159 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-160 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-71 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-162 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-163 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-164 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-165 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-166 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-77 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-168 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-169 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-170 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-171 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-172 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-173 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-174 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-175 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-176 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-177 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-178 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-179 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-180 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-91 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-182 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-183 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-184 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-185 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-186 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-97 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-188 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-189 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-190 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-191 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-192 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-193 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-194 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-195 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-196 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-197 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-198 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-199 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-200 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-201 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-202 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-203 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-204 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-205 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-206 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-207 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-208 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-209 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-210 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-121 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-212 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-213 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-214 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-215 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-216 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-127 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-218 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-219 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-220 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-221 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-222 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-223 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-224 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-225 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-226 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-227 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-228 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-229 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-230 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-141 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-232 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-233 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-234 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-235 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-236 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-147 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-238 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-239 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-240 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-241 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-242 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-243 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-244 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-245 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-246 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-247 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-248 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-249 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-250 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-161 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-252 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-253 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-254 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-255 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-256 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-167 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-258 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-259 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-260 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-261 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-262 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-263 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-264 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-265 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-266 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-267 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-268 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-269 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-270 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-181 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-272 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-273 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-274 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-275 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-276 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-187 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-278 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-279 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-280 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-281 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-282 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-283 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-284 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-285 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-286 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-287 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-288 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-289 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-290 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-291 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-292 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-293 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-294 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-295 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-296 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-297 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-298 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-299 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-300 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-302 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-303 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-304 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-305 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-306 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-308 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-309 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-310 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-311 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-312 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-313 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-314 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-315 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-316 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-317 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-318 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-319 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-320 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-322 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-323 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-324 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-325 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-326 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-328 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-329 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-330 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-331 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-332 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-333 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-334 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-335 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-336 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-337 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-338 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-339 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-340 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-342 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-343 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-344 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-345 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-346 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-348 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-349 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-350 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-351 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-352 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-353 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-354 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-355 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-356 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-357 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-358 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-359 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-360 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-362 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-363 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-364 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-365 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-366 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-368 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-369 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-370 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-371 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-372 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-373 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-374 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-375 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-376 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-377 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-378 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-379 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-380 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-381 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-382 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-383 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-384 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-385 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-386 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-387 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-388 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-389 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-390 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-211 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-392 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-393 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-394 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-395 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-396 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-217 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-398 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-399 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-400 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-401 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-402 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-403 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-404 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-405 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-406 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-407 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-408 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-409 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-410 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-231 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-412 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-413 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-414 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-415 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-416 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-237 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-418 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-419 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-420 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-421 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-422 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-423 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-424 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-425 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-426 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-427 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-428 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-429 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-430 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-251 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-432 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-433 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-434 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-435 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-436 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-257 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-438 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-439 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-440 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-441 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-442 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-443 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-444 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-445 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-446 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-447 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-448 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-449 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-450 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-271 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-452 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-453 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-454 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-455 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-456 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-277 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-458 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-459 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-460 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-461 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-462 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-463 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-464 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-465 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-466 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-467 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-468 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-469 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-470 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-471 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-472 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-473 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-474 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-475 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-476 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-477 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-478 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-479 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-480 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-482 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-483 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-484 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-485 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-486 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-488 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-489 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-490 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-491 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-492 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-493 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-494 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-495 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-496 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-497 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-498 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-499 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-500 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-502 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-503 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-504 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-505 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-506 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-508 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-509 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-510 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-511 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-512 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-513 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-514 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-515 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-516 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-517 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-518 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-519 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-520 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-522 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-523 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-524 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-525 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-526 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-528 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-529 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-530 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-531 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-532 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-533 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-534 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-535 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-536 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-537 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-538 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-539 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-540 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-542 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-543 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-544 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-545 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-546 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-548 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-549 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-550 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-551 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-552 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-553 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-554 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-555 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-556 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-557 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-558 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-559 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-560 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-561 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-562 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-563 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-564 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-565 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-566 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-567 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-568 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-569 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-570 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-301 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-572 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-573 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-574 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-575 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-576 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-307 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-578 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-579 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-580 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-581 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-582 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-583 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-584 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-585 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-586 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-587 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-588 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-589 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-590 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-321 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-592 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-593 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-594 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-595 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-596 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-327 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-598 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-599 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-600 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-601 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-602 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-603 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-604 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-605 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-606 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-607 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-608 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-609 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-610 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-341 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-612 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-613 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-614 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-615 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-616 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-347 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-618 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-619 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-620 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-621 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-622 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-623 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-624 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-625 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-626 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-627 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-628 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-629 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-630 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-361 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-632 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-633 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-634 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-635 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-636 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-367 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-638 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-639 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-640 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-641 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-642 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-643 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-644 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-645 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-646 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-647 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-648 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-649 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-650 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-651 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-652 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-653 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-654 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-655 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-656 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-657 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-658 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-659 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-660 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-391 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-662 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-663 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-664 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-665 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-666 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-397 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-668 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-669 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-670 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-671 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-672 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-673 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-674 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-675 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-676 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-677 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-678 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-679 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-680 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-411 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-682 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-683 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-684 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-685 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-686 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-417 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-688 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-689 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-690 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-691 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-692 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-693 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-694 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-695 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-696 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-697 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-698 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-699 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-700 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-431 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-702 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-703 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-704 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-705 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-706 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-437 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-708 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-709 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-710 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-711 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-712 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-713 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-714 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-715 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-716 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-717 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-718 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-719 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-720 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-451 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-722 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-723 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-724 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-725 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-726 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-457 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-728 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-729 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-730 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-731 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-732 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-733 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-734 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-735 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-736 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-737 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-738 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-739 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-740 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-741 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-742 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-743 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-744 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-745 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-746 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-747 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-748 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-749 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-750 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-752 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-753 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-754 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-755 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-756 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-758 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-759 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-760 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-761 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-762 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-763 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-764 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-765 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-766 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-767 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-768 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-769 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-770 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-772 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-773 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-774 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-775 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-776 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-778 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-779 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-780 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-781 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-782 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-783 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-784 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-785 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-786 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-787 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-788 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-789 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-790 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-792 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-793 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-794 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-795 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-796 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-798 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-799 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-800 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-801 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-802 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-803 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-804 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-805 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-806 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-807 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-808 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-809 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-810 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-812 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-813 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-814 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-815 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-816 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-818 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-819 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-820 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-821 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-822 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-823 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-824 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-825 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-826 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-827 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-828 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-829 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-830 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-831 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-832 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-833 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-834 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-835 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-836 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-837 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-838 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-839 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-840 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-481 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-842 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-843 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-844 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-845 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-846 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-487 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-848 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-849 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-850 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-851 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-852 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-853 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-854 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-855 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-856 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-857 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-858 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-859 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-860 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-501 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-862 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-863 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-864 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-865 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-866 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-507 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-868 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-869 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-870 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-871 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-872 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-873 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-874 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-875 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-876 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-877 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-878 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-879 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-880 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-521 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-882 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-883 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-884 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-885 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-886 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-527 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-888 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-889 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-890 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-891 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-892 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-893 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-894 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-895 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-896 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-897 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-898 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-899 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-900 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-541 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-902 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-903 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-904 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-905 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-906 -A INPUT -i eth0 -p udp --dport 123 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-547 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-908 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-909 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-910 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-911 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-912 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-913 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-914 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-915 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-916 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-917 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-918 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-919 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-920 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-921 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-922 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-923 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-924 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-925 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-926 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-927 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-928 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-929 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-930 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-931 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-932 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-933 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-934 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-935 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-936 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-937 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-938 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-939 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-940 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-941 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-942 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-943 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-944 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-945 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-946 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-947 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-948 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-949 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-950 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-951 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-952 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-953 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-954 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-955 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-956 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-957 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-958 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-959 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-960 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-961 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-962 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-963 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-964 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-965 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-966 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-967 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-968 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-969 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-970 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-971 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-972 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-973 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-974 -A INPUT -i eth0 -p udp --dport 123 -j limit-ntp-975 -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:C --rsource --mask fe00:: --set -A INPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A INPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A INPUT -j ACCEPT -A INPUT -j logdrop-1650 -A INPUT -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-66 -A INPUT -j logdrop-1651 -A INPUT -j logpass-0 -A INPUT -j logaccept-67 -A INPUT -j logdrop-1652 -A INPUT -j logpass-1 -A INPUT -j logaccept-68 -A INPUT -j logdrop-1653 -A INPUT -j logpass-2 -A INPUT -j ACCEPT -A INPUT -j DROP -A INPUT -A INPUT -j logaccept-69 -A INPUT -j logdrop-1654 -A INPUT -i eth0 -j ACCEPT -A INPUT -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT -A OUTPUT -m recent --name user:B --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j limit-2927 -A OUTPUT -j limit-2926 -A OUTPUT -j limit-2925 -A OUTPUT -j limit-2924 -A OUTPUT -j limit-2923 -A OUTPUT -j limit-2922 -A OUTPUT -j limit-2921 -A OUTPUT -j limit-2920 -A OUTPUT -j limit-2919 -A OUTPUT -j limit-2918 -A OUTPUT -j limit-2917 -A OUTPUT -j limit-2916 -A OUTPUT -j limit-2915 -A OUTPUT -j limit-2914 -A OUTPUT -j limit-2913 -A OUTPUT -j limit-2912 -A OUTPUT -j limit-2911 -A OUTPUT -j limit-2910 -A OUTPUT -j limit-2909 -A OUTPUT -j limit-2908 -A OUTPUT -j limit-2907 -A OUTPUT -j limit-2906 -A OUTPUT -j limit-2905 -A OUTPUT -j limit-2904 -A OUTPUT -j limit-2903 -A OUTPUT -j limit-2902 -A OUTPUT -j limit-2901 -A OUTPUT -j limit-2900 -A OUTPUT -j limit-2899 -A OUTPUT -j limit-2898 -A OUTPUT -j limit-2897 -A OUTPUT -j limit-2896 -A OUTPUT -j limit-2895 -A OUTPUT -j limit-2894 -A OUTPUT -j limit-2893 -A OUTPUT -j limit-2892 -A OUTPUT -j limit-2891 -A OUTPUT -j limit-2890 -A OUTPUT -j limit-2889 -A OUTPUT -j limit-2888 -A OUTPUT -j limit-2887 -A OUTPUT -j limit-2886 -A OUTPUT -j limit-2885 -A OUTPUT -j limit-2884 -A OUTPUT -j limit-2883 -A OUTPUT -j limit-2882 -A OUTPUT -j limit-2881 -A OUTPUT -j limit-2880 -A OUTPUT -j limit-2879 -A OUTPUT -j limit-2878 -A OUTPUT -j limit-2877 -A OUTPUT -j limit-2876 -A OUTPUT -j limit-2875 -A OUTPUT -j limit-2874 -A OUTPUT -j limit-2873 -A OUTPUT -j limit-2872 -A OUTPUT -j limit-2871 -A OUTPUT -j limit-2870 -A OUTPUT -j limit-2869 -A OUTPUT -j limit-2868 -A OUTPUT -j limit-2867 -A OUTPUT -j limit-2866 -A OUTPUT -j limit-2865 -A OUTPUT -j limit-2864 -A OUTPUT -j limit-2863 -A OUTPUT -j limit-2862 -A OUTPUT -j limit-2861 -A OUTPUT -j limit-2860 -A OUTPUT -j limit-2859 -A OUTPUT -j limit-2858 -A OUTPUT -j limit-2857 -A OUTPUT -j limit-2856 -A OUTPUT -j limit-2855 -A OUTPUT -j limit-2854 -A OUTPUT -j limit-2853 -A OUTPUT -j limit-2852 -A OUTPUT -j limit-2851 -A OUTPUT -j limit-2850 -A OUTPUT -j limit-2849 -A OUTPUT -j limit-2848 -A OUTPUT -j limit-2847 -A OUTPUT -j limit-2846 -A OUTPUT -j limit-2845 -A OUTPUT -j limit-2844 -A OUTPUT -j limit-2843 -A OUTPUT -j limit-2842 -A OUTPUT -j limit-2841 -A OUTPUT -j limit-2840 -A OUTPUT -j limit-2839 -A OUTPUT -j limit-2838 -A OUTPUT -j limit-2837 -A OUTPUT -j limit-2836 -A OUTPUT -j limit-2835 -A OUTPUT -j limit-2834 -A OUTPUT -j limit-2833 -A OUTPUT -j limit-2832 -A OUTPUT -j limit-2831 -A OUTPUT -j limit-2830 -A OUTPUT -j limit-2829 -A OUTPUT -j limit-2828 -A OUTPUT -j limit-2827 -A OUTPUT -j limit-2826 -A OUTPUT -j limit-2825 -A OUTPUT -j limit-2824 -A OUTPUT -j limit-2823 -A OUTPUT -j limit-2822 -A OUTPUT -j limit-2821 -A OUTPUT -j limit-2820 -A OUTPUT -j limit-2819 -A OUTPUT -j limit-2818 -A OUTPUT -j limit-2817 -A OUTPUT -j limit-2816 -A OUTPUT -j limit-2815 -A OUTPUT -j limit-2814 -A OUTPUT -j limit-2813 -A OUTPUT -j limit-2812 -A OUTPUT -j limit-2811 -A OUTPUT -j limit-2810 -A OUTPUT -j limit-2809 -A OUTPUT -j limit-2808 -A OUTPUT -j limit-2807 -A OUTPUT -j limit-2806 -A OUTPUT -j limit-2805 -A OUTPUT -j limit-2804 -A OUTPUT -j limit-2803 -A OUTPUT -j limit-2802 -A OUTPUT -j limit-2801 -A OUTPUT -j limit-2800 -A OUTPUT -j limit-2799 -A OUTPUT -j limit-2798 -A OUTPUT -j limit-2797 -A OUTPUT -j limit-2796 -A OUTPUT -j limit-2795 -A OUTPUT -j limit-2794 -A OUTPUT -j limit-2793 -A OUTPUT -j limit-2792 -A OUTPUT -j limit-2791 -A OUTPUT -j limit-2790 -A OUTPUT -j limit-2789 -A OUTPUT -j limit-2788 -A OUTPUT -j limit-2787 -A OUTPUT -j limit-2786 -A OUTPUT -j limit-2785 -A OUTPUT -j limit-2784 -A OUTPUT -j limit-2783 -A OUTPUT -j limit-2782 -A OUTPUT -j limit-2781 -A OUTPUT -j limit-2780 -A OUTPUT -j limit-2779 -A OUTPUT -j limit-2778 -A OUTPUT -j limit-2777 -A OUTPUT -j limit-2776 -A OUTPUT -j limit-2775 -A OUTPUT -j limit-2774 -A OUTPUT -j limit-2773 -A OUTPUT -j limit-2772 -A OUTPUT -j limit-2771 -A OUTPUT -j limit-2770 -A OUTPUT -j limit-2769 -A OUTPUT -j limit-2768 -A OUTPUT -j limit-2767 -A OUTPUT -j limit-2766 -A OUTPUT -j limit-2765 -A OUTPUT -j limit-2764 -A OUTPUT -j limit-2763 -A OUTPUT -j limit-2762 -A OUTPUT -j limit-2761 -A OUTPUT -j limit-2760 -A OUTPUT -j limit-2759 -A OUTPUT -j limit-2758 -A OUTPUT -j limit-2757 -A OUTPUT -j limit-2756 -A OUTPUT -j limit-2755 -A OUTPUT -j limit-2754 -A OUTPUT -j limit-2753 -A OUTPUT -j limit-2752 -A OUTPUT -j limit-2751 -A OUTPUT -j limit-2750 -A OUTPUT -j limit-2749 -A OUTPUT -j limit-2748 -A OUTPUT -j limit-2747 -A OUTPUT -j limit-2746 -A OUTPUT -j limit-2745 -A OUTPUT -j limit-2744 -A OUTPUT -j limit-2743 -A OUTPUT -j limit-2742 -A OUTPUT -j limit-2741 -A OUTPUT -j limit-2740 -A OUTPUT -j limit-2739 -A OUTPUT -j limit-2738 -A OUTPUT -j limit-2737 -A OUTPUT -j limit-2736 -A OUTPUT -j limit-2735 -A OUTPUT -j limit-2734 -A OUTPUT -j limit-2733 -A OUTPUT -j limit-2732 -A OUTPUT -j limit-2731 -A OUTPUT -j limit-2730 -A OUTPUT -j limit-2729 -A OUTPUT -j limit-2728 -A OUTPUT -j limit-2727 -A OUTPUT -j limit-2726 -A OUTPUT -j limit-2725 -A OUTPUT -j limit-2724 -A OUTPUT -j limit-2723 -A OUTPUT -j limit-2722 -A OUTPUT -j limit-2721 -A OUTPUT -j limit-2720 -A OUTPUT -j limit-2719 -A OUTPUT -j limit-2718 -A OUTPUT -j limit-2717 -A OUTPUT -j limit-2716 -A OUTPUT -j limit-2715 -A OUTPUT -j limit-2714 -A OUTPUT -j limit-2713 -A OUTPUT -j limit-2712 -A OUTPUT -j limit-2711 -A OUTPUT -j limit-2710 -A OUTPUT -j limit-2709 -A OUTPUT -j limit-2708 -A OUTPUT -j limit-2707 -A OUTPUT -j limit-2706 -A OUTPUT -j limit-2705 -A OUTPUT -j limit-2704 -A OUTPUT -j limit-2703 -A OUTPUT -j limit-2702 -A OUTPUT -j limit-2701 -A OUTPUT -j limit-2700 -A OUTPUT -j limit-2699 -A OUTPUT -j limit-2698 -A OUTPUT -j limit-2697 -A OUTPUT -j limit-2696 -A OUTPUT -j limit-2695 -A OUTPUT -j limit-2694 -A OUTPUT -j limit-2693 -A OUTPUT -j limit-2692 -A OUTPUT -j limit-2691 -A OUTPUT -j limit-2690 -A OUTPUT -j limit-2689 -A OUTPUT -j limit-2688 -A OUTPUT -j limit-2687 -A OUTPUT -j limit-2686 -A OUTPUT -j limit-2685 -A OUTPUT -j limit-2684 -A OUTPUT -j limit-2683 -A OUTPUT -j limit-2682 -A OUTPUT -j limit-2681 -A OUTPUT -j limit-2680 -A OUTPUT -j limit-2679 -A OUTPUT -j limit-2678 -A OUTPUT -j limit-2677 -A OUTPUT -j limit-2676 -A OUTPUT -j limit-2675 -A OUTPUT -j limit-2674 -A OUTPUT -j limit-2673 -A OUTPUT -j limit-2672 -A OUTPUT -j limit-2671 -A OUTPUT -j limit-2670 -A OUTPUT -j limit-2669 -A OUTPUT -j limit-2668 -A OUTPUT -j limit-2667 -A OUTPUT -j limit-2666 -A OUTPUT -j limit-2665 -A OUTPUT -j limit-2664 -A OUTPUT -j limit-2663 -A OUTPUT -j limit-2662 -A OUTPUT -j limit-2661 -A OUTPUT -j limit-2660 -A OUTPUT -j limit-2659 -A OUTPUT -j limit-2658 -A OUTPUT -j limit-2657 -A OUTPUT -j limit-2656 -A OUTPUT -j limit-2655 -A OUTPUT -j limit-2654 -A OUTPUT -j limit-2653 -A OUTPUT -j limit-2652 -A OUTPUT -j limit-2651 -A OUTPUT -j limit-2650 -A OUTPUT -j limit-2649 -A OUTPUT -j limit-2648 -A OUTPUT -j limit-2647 -A OUTPUT -j limit-2646 -A OUTPUT -j limit-2645 -A OUTPUT -j limit-2644 -A OUTPUT -j limit-2643 -A OUTPUT -j limit-2642 -A OUTPUT -j limit-2641 -A OUTPUT -j limit-2640 -A OUTPUT -j limit-2639 -A OUTPUT -j limit-2638 -A OUTPUT -j limit-2637 -A OUTPUT -j limit-2636 -A OUTPUT -j limit-2635 -A OUTPUT -j limit-2634 -A OUTPUT -j limit-2633 -A OUTPUT -j limit-2632 -A OUTPUT -j limit-2631 -A OUTPUT -j limit-2630 -A OUTPUT -j limit-2629 -A OUTPUT -j limit-2628 -A OUTPUT -j limit-2627 -A OUTPUT -j limit-2626 -A OUTPUT -j limit-2625 -A OUTPUT -j limit-2624 -A OUTPUT -j limit-2623 -A OUTPUT -j limit-2622 -A OUTPUT -j limit-2621 -A OUTPUT -j limit-2620 -A OUTPUT -j limit-2619 -A OUTPUT -j limit-2618 -A OUTPUT -j limit-2617 -A OUTPUT -j limit-2616 -A OUTPUT -j limit-2615 -A OUTPUT -j limit-2614 -A OUTPUT -j limit-2613 -A OUTPUT -j limit-2612 -A OUTPUT -j limit-2611 -A OUTPUT -j limit-2610 -A OUTPUT -j limit-2609 -A OUTPUT -j limit-2608 -A OUTPUT -j limit-2607 -A OUTPUT -j limit-2606 -A OUTPUT -j limit-2605 -A OUTPUT -j limit-2604 -A OUTPUT -j limit-2603 -A OUTPUT -j limit-2602 -A OUTPUT -j limit-2601 -A OUTPUT -j limit-2600 -A OUTPUT -j limit-2599 -A OUTPUT -j limit-2598 -A OUTPUT -j limit-2597 -A OUTPUT -j limit-2596 -A OUTPUT -j limit-2595 -A OUTPUT -j limit-2594 -A OUTPUT -j limit-2593 -A OUTPUT -j limit-2592 -A OUTPUT -j limit-2591 -A OUTPUT -j limit-2590 -A OUTPUT -j limit-2589 -A OUTPUT -j limit-2588 -A OUTPUT -j limit-2587 -A OUTPUT -j limit-2586 -A OUTPUT -j limit-2585 -A OUTPUT -j limit-2584 -A OUTPUT -j limit-2583 -A OUTPUT -j limit-2582 -A OUTPUT -j limit-2581 -A OUTPUT -j limit-2580 -A OUTPUT -j limit-2579 -A OUTPUT -j limit-2578 -A OUTPUT -j limit-2577 -A OUTPUT -j limit-2576 -A OUTPUT -j limit-2575 -A OUTPUT -j limit-2574 -A OUTPUT -j limit-2573 -A OUTPUT -j limit-2572 -A OUTPUT -j limit-2571 -A OUTPUT -j limit-2570 -A OUTPUT -j limit-2569 -A OUTPUT -j limit-2568 -A OUTPUT -j limit-2567 -A OUTPUT -j limit-2566 -A OUTPUT -j limit-2565 -A OUTPUT -j limit-2564 -A OUTPUT -j limit-2563 -A OUTPUT -j limit-2562 -A OUTPUT -j limit-2561 -A OUTPUT -j limit-2560 -A OUTPUT -j limit-2559 -A OUTPUT -j limit-2558 -A OUTPUT -j limit-2557 -A OUTPUT -j limit-2556 -A OUTPUT -j limit-2555 -A OUTPUT -j limit-2554 -A OUTPUT -j limit-2553 -A OUTPUT -j limit-2552 -A OUTPUT -j limit-2551 -A OUTPUT -j limit-2550 -A OUTPUT -j limit-2549 -A OUTPUT -j limit-2548 -A OUTPUT -j limit-2547 -A OUTPUT -j limit-2546 -A OUTPUT -j limit-2545 -A OUTPUT -j limit-2544 -A OUTPUT -j limit-2543 -A OUTPUT -j limit-2542 -A OUTPUT -j limit-2541 -A OUTPUT -j limit-2540 -A OUTPUT -j limit-2539 -A OUTPUT -j limit-2538 -A OUTPUT -j limit-2537 -A OUTPUT -j limit-2536 -A OUTPUT -j limit-2535 -A OUTPUT -j limit-2534 -A OUTPUT -j limit-2533 -A OUTPUT -j limit-2532 -A OUTPUT -j limit-2531 -A OUTPUT -j limit-2530 -A OUTPUT -j limit-2529 -A OUTPUT -j limit-2528 -A OUTPUT -j limit-2527 -A OUTPUT -j limit-2526 -A OUTPUT -j limit-2525 -A OUTPUT -j limit-2524 -A OUTPUT -j limit-2523 -A OUTPUT -j limit-2522 -A OUTPUT -j limit-2521 -A OUTPUT -j limit-2520 -A OUTPUT -j limit-2519 -A OUTPUT -j limit-2518 -A OUTPUT -j limit-2517 -A OUTPUT -j limit-2516 -A OUTPUT -j limit-2515 -A OUTPUT -j limit-2514 -A OUTPUT -j limit-2513 -A OUTPUT -j limit-2512 -A OUTPUT -j limit-2511 -A OUTPUT -j limit-2510 -A OUTPUT -j limit-2509 -A OUTPUT -j limit-2508 -A OUTPUT -j limit-2507 -A OUTPUT -j limit-2506 -A OUTPUT -j limit-2505 -A OUTPUT -j limit-2504 -A OUTPUT -j limit-2503 -A OUTPUT -j limit-2502 -A OUTPUT -j limit-2501 -A OUTPUT -j limit-2500 -A OUTPUT -j limit-2499 -A OUTPUT -j limit-2498 -A OUTPUT -j limit-2497 -A OUTPUT -j limit-2496 -A OUTPUT -j limit-2495 -A OUTPUT -j limit-2494 -A OUTPUT -j limit-2493 -A OUTPUT -j limit-2492 -A OUTPUT -j limit-2491 -A OUTPUT -j limit-2490 -A OUTPUT -j limit-2489 -A OUTPUT -j limit-2488 -A OUTPUT -j limit-2487 -A OUTPUT -j limit-2486 -A OUTPUT -j limit-2485 -A OUTPUT -j limit-2484 -A OUTPUT -j limit-2483 -A OUTPUT -j limit-2482 -A OUTPUT -j limit-2481 -A OUTPUT -j limit-2480 -A OUTPUT -j limit-2479 -A OUTPUT -j limit-2478 -A OUTPUT -j limit-2477 -A OUTPUT -j limit-2476 -A OUTPUT -j limit-2475 -A OUTPUT -j limit-2474 -A OUTPUT -j limit-2473 -A OUTPUT -j limit-2472 -A OUTPUT -j limit-2471 -A OUTPUT -j limit-2470 -A OUTPUT -j limit-2469 -A OUTPUT -j limit-2468 -A OUTPUT -j limit-2467 -A OUTPUT -j limit-2466 -A OUTPUT -j limit-2465 -A OUTPUT -j limit-2464 -A OUTPUT -j limit-2463 -A OUTPUT -j limit-2462 -A OUTPUT -j limit-2461 -A OUTPUT -j limit-2460 -A OUTPUT -j limit-2459 -A OUTPUT -j limit-2458 -A OUTPUT -j limit-2457 -A OUTPUT -j limit-2456 -A OUTPUT -j limit-2455 -A OUTPUT -j limit-2454 -A OUTPUT -j limit-2453 -A OUTPUT -j limit-2452 -A OUTPUT -j limit-2451 -A OUTPUT -j limit-2450 -A OUTPUT -j limit-2449 -A OUTPUT -j limit-2448 -A OUTPUT -j limit-2447 -A OUTPUT -j limit-2446 -A OUTPUT -j limit-2445 -A OUTPUT -j limit-2444 -A OUTPUT -j limit-2443 -A OUTPUT -j limit-2442 -A OUTPUT -j limit-2441 -A OUTPUT -j limit-2440 -A OUTPUT -j limit-2439 -A OUTPUT -j limit-2438 -A OUTPUT -j limit-2437 -A OUTPUT -j limit-2436 -A OUTPUT -j limit-2435 -A OUTPUT -j limit-2434 -A OUTPUT -j limit-2433 -A OUTPUT -j limit-2432 -A OUTPUT -j limit-2431 -A OUTPUT -j limit-2430 -A OUTPUT -j limit-2429 -A OUTPUT -j limit-2428 -A OUTPUT -j limit-2427 -A OUTPUT -j limit-2426 -A OUTPUT -j limit-2425 -A OUTPUT -j limit-2424 -A OUTPUT -j limit-2423 -A OUTPUT -j limit-2422 -A OUTPUT -j limit-2421 -A OUTPUT -j limit-2420 -A OUTPUT -j limit-2419 -A OUTPUT -j limit-2418 -A OUTPUT -j limit-2417 -A OUTPUT -j limit-2416 -A OUTPUT -j limit-2415 -A OUTPUT -j limit-2414 -A OUTPUT -j limit-2413 -A OUTPUT -j limit-2412 -A OUTPUT -j limit-2411 -A OUTPUT -j limit-2410 -A OUTPUT -j limit-2409 -A OUTPUT -j limit-2408 -A OUTPUT -j limit-2407 -A OUTPUT -j limit-2406 -A OUTPUT -j limit-2405 -A OUTPUT -j limit-2404 -A OUTPUT -j limit-2403 -A OUTPUT -j limit-2402 -A OUTPUT -j limit-2401 -A OUTPUT -j limit-2400 -A OUTPUT -j limit-2399 -A OUTPUT -j limit-2398 -A OUTPUT -j limit-2397 -A OUTPUT -j limit-2396 -A OUTPUT -j limit-2395 -A OUTPUT -j limit-2394 -A OUTPUT -j limit-2393 -A OUTPUT -j limit-2392 -A OUTPUT -j limit-2391 -A OUTPUT -j limit-2390 -A OUTPUT -j limit-2389 -A OUTPUT -j limit-2388 -A OUTPUT -j limit-2387 -A OUTPUT -j limit-2386 -A OUTPUT -j limit-2385 -A OUTPUT -j limit-2384 -A OUTPUT -j limit-2383 -A OUTPUT -j limit-2382 -A OUTPUT -j limit-2381 -A OUTPUT -j limit-2380 -A OUTPUT -j limit-2379 -A OUTPUT -j limit-2378 -A OUTPUT -j limit-2377 -A OUTPUT -j limit-2376 -A OUTPUT -j limit-2375 -A OUTPUT -j limit-2374 -A OUTPUT -j limit-2373 -A OUTPUT -j limit-2372 -A OUTPUT -j limit-2371 -A OUTPUT -j limit-2370 -A OUTPUT -j limit-2369 -A OUTPUT -j limit-2368 -A OUTPUT -j limit-2367 -A OUTPUT -j limit-2366 -A OUTPUT -j limit-2365 -A OUTPUT -j limit-2364 -A OUTPUT -j limit-2363 -A OUTPUT -j limit-2362 -A OUTPUT -j limit-2361 -A OUTPUT -j limit-2360 -A OUTPUT -j limit-2359 -A OUTPUT -j limit-2358 -A OUTPUT -j limit-2357 -A OUTPUT -j limit-2356 -A OUTPUT -j limit-2355 -A OUTPUT -j limit-2354 -A OUTPUT -j limit-2353 -A OUTPUT -j limit-2352 -A OUTPUT -j limit-2351 -A OUTPUT -j limit-2350 -A OUTPUT -j limit-2349 -A OUTPUT -j limit-2348 -A OUTPUT -j limit-2347 -A OUTPUT -j limit-2346 -A OUTPUT -j limit-2345 -A OUTPUT -j limit-2344 -A OUTPUT -j limit-2343 -A OUTPUT -j limit-2342 -A OUTPUT -j limit-2341 -A OUTPUT -j limit-2340 -A OUTPUT -j limit-2339 -A OUTPUT -j limit-2338 -A OUTPUT -j limit-2337 -A OUTPUT -j limit-2336 -A OUTPUT -j limit-2335 -A OUTPUT -j limit-2334 -A OUTPUT -j limit-2333 -A OUTPUT -j limit-2332 -A OUTPUT -j limit-2331 -A OUTPUT -j limit-2330 -A OUTPUT -j limit-2329 -A OUTPUT -j limit-2328 -A OUTPUT -j limit-2327 -A OUTPUT -j limit-2326 -A OUTPUT -j limit-2325 -A OUTPUT -j limit-2324 -A OUTPUT -j limit-2323 -A OUTPUT -j limit-2322 -A OUTPUT -j limit-2321 -A OUTPUT -j limit-2320 -A OUTPUT -j limit-2319 -A OUTPUT -j limit-2318 -A OUTPUT -j limit-2317 -A OUTPUT -j limit-2316 -A OUTPUT -j limit-2315 -A OUTPUT -j limit-2314 -A OUTPUT -j limit-2313 -A OUTPUT -j limit-2312 -A OUTPUT -j limit-2311 -A OUTPUT -j limit-2310 -A OUTPUT -j limit-2309 -A OUTPUT -j limit-2308 -A OUTPUT -j limit-2307 -A OUTPUT -j limit-2306 -A OUTPUT -j limit-2305 -A OUTPUT -j limit-2304 -A OUTPUT -j limit-2303 -A OUTPUT -j limit-2302 -A OUTPUT -j limit-2301 -A OUTPUT -j limit-2300 -A OUTPUT -j limit-2299 -A OUTPUT -j limit-2298 -A OUTPUT -j limit-2297 -A OUTPUT -j limit-2296 -A OUTPUT -j limit-2295 -A OUTPUT -j limit-2294 -A OUTPUT -j limit-2293 -A OUTPUT -j limit-2292 -A OUTPUT -j limit-2291 -A OUTPUT -j limit-2290 -A OUTPUT -j limit-2289 -A OUTPUT -j limit-2288 -A OUTPUT -j limit-2287 -A OUTPUT -j limit-2286 -A OUTPUT -j limit-2285 -A OUTPUT -j limit-2284 -A OUTPUT -j limit-2283 -A OUTPUT -j limit-2282 -A OUTPUT -j limit-2281 -A OUTPUT -j limit-2280 -A OUTPUT -j limit-2279 -A OUTPUT -j limit-2278 -A OUTPUT -j limit-2277 -A OUTPUT -j limit-2276 -A OUTPUT -j limit-2275 -A OUTPUT -j limit-2274 -A OUTPUT -j limit-2273 -A OUTPUT -j limit-2272 -A OUTPUT -j limit-2271 -A OUTPUT -j limit-2270 -A OUTPUT -j limit-2269 -A OUTPUT -j limit-2268 -A OUTPUT -j limit-2267 -A OUTPUT -j limit-2266 -A OUTPUT -j limit-2265 -A OUTPUT -j limit-2264 -A OUTPUT -j limit-2263 -A OUTPUT -j limit-2262 -A OUTPUT -j limit-2261 -A OUTPUT -j limit-2260 -A OUTPUT -j limit-2259 -A OUTPUT -j limit-2258 -A OUTPUT -j limit-2257 -A OUTPUT -j limit-2256 -A OUTPUT -j limit-2255 -A OUTPUT -j limit-2254 -A OUTPUT -j limit-2253 -A OUTPUT -j limit-2252 -A OUTPUT -j limit-2251 -A OUTPUT -j limit-2250 -A OUTPUT -j limit-2249 -A OUTPUT -j limit-2248 -A OUTPUT -j limit-2247 -A OUTPUT -j limit-2246 -A OUTPUT -j limit-2245 -A OUTPUT -j limit-2244 -A OUTPUT -j limit-2243 -A OUTPUT -j limit-2242 -A OUTPUT -j limit-2241 -A OUTPUT -j limit-2240 -A OUTPUT -j limit-2239 -A OUTPUT -j limit-2238 -A OUTPUT -j limit-2237 -A OUTPUT -j limit-2236 -A OUTPUT -j limit-2235 -A OUTPUT -j limit-2234 -A OUTPUT -j limit-2233 -A OUTPUT -j limit-2232 -A OUTPUT -j limit-2231 -A OUTPUT -j limit-2230 -A OUTPUT -j limit-2229 -A OUTPUT -j limit-2228 -A OUTPUT -j limit-2227 -A OUTPUT -j limit-2226 -A OUTPUT -j limit-2225 -A OUTPUT -j limit-2224 -A OUTPUT -j limit-2223 -A OUTPUT -j limit-2222 -A OUTPUT -j limit-2221 -A OUTPUT -j limit-2220 -A OUTPUT -j limit-2219 -A OUTPUT -j limit-2218 -A OUTPUT -j limit-2217 -A OUTPUT -j limit-2216 -A OUTPUT -j limit-2215 -A OUTPUT -j limit-2214 -A OUTPUT -j limit-2213 -A OUTPUT -j limit-2212 -A OUTPUT -j limit-2211 -A OUTPUT -j limit-2210 -A OUTPUT -j limit-2209 -A OUTPUT -j limit-2208 -A OUTPUT -j limit-2207 -A OUTPUT -j limit-2206 -A OUTPUT -j limit-2205 -A OUTPUT -j limit-2204 -A OUTPUT -j limit-2203 -A OUTPUT -j limit-2202 -A OUTPUT -j limit-2201 -A OUTPUT -j limit-2200 -A OUTPUT -j limit-2199 -A OUTPUT -j limit-2198 -A OUTPUT -j limit-2197 -A OUTPUT -j limit-2196 -A OUTPUT -j limit-2195 -A OUTPUT -j limit-2194 -A OUTPUT -j limit-2193 -A OUTPUT -j limit-2192 -A OUTPUT -j limit-2191 -A OUTPUT -j limit-2190 -A OUTPUT -j limit-2189 -A OUTPUT -j limit-2188 -A OUTPUT -j limit-2187 -A OUTPUT -j limit-2186 -A OUTPUT -j limit-2185 -A OUTPUT -j limit-2184 -A OUTPUT -j limit-2183 -A OUTPUT -j limit-2182 -A OUTPUT -j limit-2181 -A OUTPUT -j limit-2180 -A OUTPUT -j limit-2179 -A OUTPUT -j limit-2178 -A OUTPUT -j limit-2177 -A OUTPUT -j limit-2176 -A OUTPUT -j limit-2175 -A OUTPUT -j limit-2174 -A OUTPUT -j limit-2173 -A OUTPUT -j limit-2172 -A OUTPUT -j limit-2171 -A OUTPUT -j limit-2170 -A OUTPUT -j limit-2169 -A OUTPUT -j limit-2168 -A OUTPUT -j limit-2167 -A OUTPUT -j limit-2166 -A OUTPUT -j limit-2165 -A OUTPUT -j limit-2164 -A OUTPUT -j limit-2163 -A OUTPUT -j limit-2162 -A OUTPUT -j limit-2161 -A OUTPUT -j limit-2160 -A OUTPUT -j limit-2159 -A OUTPUT -j limit-2158 -A OUTPUT -j limit-2157 -A OUTPUT -j limit-2156 -A OUTPUT -j limit-2155 -A OUTPUT -j limit-2154 -A OUTPUT -j limit-2153 -A OUTPUT -j limit-2152 -A OUTPUT -j limit-2151 -A OUTPUT -j limit-2150 -A OUTPUT -j limit-2149 -A OUTPUT -j limit-2148 -A OUTPUT -j limit-2147 -A OUTPUT -j limit-2146 -A OUTPUT -j limit-2145 -A OUTPUT -j limit-2144 -A OUTPUT -j limit-2143 -A OUTPUT -j limit-2142 -A OUTPUT -j limit-2141 -A OUTPUT -j limit-2140 -A OUTPUT -j limit-2139 -A OUTPUT -j limit-2138 -A OUTPUT -j limit-2137 -A OUTPUT -j limit-2136 -A OUTPUT -j limit-2135 -A OUTPUT -j limit-2134 -A OUTPUT -j limit-2133 -A OUTPUT -j limit-2132 -A OUTPUT -j limit-2131 -A OUTPUT -j limit-2130 -A OUTPUT -j limit-2129 -A OUTPUT -j limit-2128 -A OUTPUT -j limit-2127 -A OUTPUT -j limit-2126 -A OUTPUT -j limit-2125 -A OUTPUT -j limit-2124 -A OUTPUT -j limit-2123 -A OUTPUT -j limit-2122 -A OUTPUT -j limit-2121 -A OUTPUT -j limit-2120 -A OUTPUT -j limit-2119 -A OUTPUT -j limit-2118 -A OUTPUT -j limit-2117 -A OUTPUT -j limit-2116 -A OUTPUT -j limit-2115 -A OUTPUT -j limit-2114 -A OUTPUT -j limit-2113 -A OUTPUT -j limit-2112 -A OUTPUT -j limit-2111 -A OUTPUT -j limit-2110 -A OUTPUT -j limit-2109 -A OUTPUT -j limit-2108 -A OUTPUT -j limit-2107 -A OUTPUT -j limit-2106 -A OUTPUT -j limit-2105 -A OUTPUT -j limit-2104 -A OUTPUT -j limit-2103 -A OUTPUT -j limit-2102 -A OUTPUT -j limit-2101 -A OUTPUT -j limit-2100 -A OUTPUT -j limit-2099 -A OUTPUT -j limit-2098 -A OUTPUT -j limit-2097 -A OUTPUT -j limit-2096 -A OUTPUT -j limit-2095 -A OUTPUT -j limit-2094 -A OUTPUT -j limit-2093 -A OUTPUT -j limit-2092 -A OUTPUT -j limit-2091 -A OUTPUT -j limit-2090 -A OUTPUT -j limit-2089 -A OUTPUT -j limit-2088 -A OUTPUT -j limit-2087 -A OUTPUT -j limit-2086 -A OUTPUT -j limit-2085 -A OUTPUT -j limit-2084 -A OUTPUT -j limit-2083 -A OUTPUT -j limit-2082 -A OUTPUT -j limit-2081 -A OUTPUT -j limit-2080 -A OUTPUT -j limit-2079 -A OUTPUT -j limit-2078 -A OUTPUT -j limit-2077 -A OUTPUT -j limit-2076 -A OUTPUT -j limit-2075 -A OUTPUT -j limit-2074 -A OUTPUT -j limit-2073 -A OUTPUT -j limit-2072 -A OUTPUT -j limit-2071 -A OUTPUT -j limit-2070 -A OUTPUT -j limit-2069 -A OUTPUT -j limit-2068 -A OUTPUT -j limit-2067 -A OUTPUT -j limit-2066 -A OUTPUT -j limit-2065 -A OUTPUT -j limit-2064 -A OUTPUT -j limit-2063 -A OUTPUT -j limit-2062 -A OUTPUT -j limit-2061 -A OUTPUT -j limit-2060 -A OUTPUT -j limit-2059 -A OUTPUT -j limit-2058 -A OUTPUT -j limit-2057 -A OUTPUT -j limit-2056 -A OUTPUT -j limit-2055 -A OUTPUT -j limit-2054 -A OUTPUT -j limit-2053 -A OUTPUT -j limit-2052 -A OUTPUT -j limit-2051 -A OUTPUT -j limit-2050 -A OUTPUT -j limit-2049 -A OUTPUT -j limit-2048 -A OUTPUT -j limit-2047 -A OUTPUT -j limit-2046 -A OUTPUT -j limit-2045 -A OUTPUT -j limit-2044 -A OUTPUT -j limit-2043 -A OUTPUT -j limit-2042 -A OUTPUT -j limit-2041 -A OUTPUT -j limit-2040 -A OUTPUT -j limit-2039 -A OUTPUT -j limit-2038 -A OUTPUT -j limit-2037 -A OUTPUT -j limit-2036 -A OUTPUT -j limit-2035 -A OUTPUT -j limit-2034 -A OUTPUT -j limit-2033 -A OUTPUT -j limit-2032 -A OUTPUT -j limit-2031 -A OUTPUT -j limit-2030 -A OUTPUT -j limit-2029 -A OUTPUT -j limit-2028 -A OUTPUT -j limit-2027 -A OUTPUT -j limit-2026 -A OUTPUT -j limit-2025 -A OUTPUT -j limit-2024 -A OUTPUT -j limit-2023 -A OUTPUT -j limit-2022 -A OUTPUT -j limit-2021 -A OUTPUT -j limit-2020 -A OUTPUT -j limit-2019 -A OUTPUT -j limit-2018 -A OUTPUT -j limit-2017 -A OUTPUT -j limit-2016 -A OUTPUT -j limit-2015 -A OUTPUT -j limit-2014 -A OUTPUT -j limit-2013 -A OUTPUT -j limit-2012 -A OUTPUT -j limit-2011 -A OUTPUT -j limit-2010 -A OUTPUT -j limit-2009 -A OUTPUT -j limit-2008 -A OUTPUT -j limit-2007 -A OUTPUT -j limit-2006 -A OUTPUT -j limit-2005 -A OUTPUT -j limit-2004 -A OUTPUT -j limit-2003 -A OUTPUT -j limit-2002 -A OUTPUT -j limit-2001 -A OUTPUT -j limit-2000 -A OUTPUT -j limit-1999 -A OUTPUT -j limit-1998 -A OUTPUT -j limit-1997 -A OUTPUT -j limit-1996 -A OUTPUT -j limit-1995 -A OUTPUT -j limit-1994 -A OUTPUT -j limit-1993 -A OUTPUT -j limit-1992 -A OUTPUT -j limit-1991 -A OUTPUT -j limit-1990 -A OUTPUT -j limit-1989 -A OUTPUT -j limit-1988 -A OUTPUT -j limit-1987 -A OUTPUT -j limit-1986 -A OUTPUT -j limit-1985 -A OUTPUT -j limit-1984 -A OUTPUT -j limit-1983 -A OUTPUT -j limit-1982 -A OUTPUT -j limit-1981 -A OUTPUT -j limit-1980 -A OUTPUT -j limit-1979 -A OUTPUT -j limit-1978 -A OUTPUT -j limit-1977 -A OUTPUT -j limit-1976 -A OUTPUT -j limit-1975 -A OUTPUT -j limit-1974 -A OUTPUT -j limit-1973 -A OUTPUT -j limit-1972 -A OUTPUT -j limit-1971 -A OUTPUT -j limit-1970 -A OUTPUT -j limit-1969 -A OUTPUT -j limit-1968 -A OUTPUT -j limit-1967 -A OUTPUT -j limit-1966 -A OUTPUT -j limit-1965 -A OUTPUT -j limit-1964 -A OUTPUT -j limit-1963 -A OUTPUT -j limit-1962 -A OUTPUT -j limit-1961 -A OUTPUT -j limit-1960 -A OUTPUT -j limit-1959 -A OUTPUT -j limit-1958 -A OUTPUT -j limit-1957 -A OUTPUT -j limit-1956 -A OUTPUT -j limit-1955 -A OUTPUT -j limit-1954 -A OUTPUT -j limit-1953 -A OUTPUT -j limit-1952 -A OUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j limit-0 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1 -A OUTPUT -o eth1 -d fc00::/7 -j limit-2 -A OUTPUT -o eth1 -d fc00::/7 -j limit-3 -A OUTPUT -o eth1 -d fc00::/7 -j limit-4 -A OUTPUT -o eth1 -d fc00::/7 -j limit-5 -A OUTPUT -o eth1 -d fc00::/7 -j limit-6 -A OUTPUT -o eth1 -d fc00::/7 -j limit-7 -A OUTPUT -o eth1 -d fc00::/7 -j limit-8 -A OUTPUT -o eth1 -d fc00::/7 -j limit-9 -A OUTPUT -o eth1 -d fc00::/7 -j limit-10 -A OUTPUT -o eth1 -d fc00::/7 -j limit-11 -A OUTPUT -o eth1 -d fc00::/7 -j limit-12 -A OUTPUT -o eth1 -d fc00::/7 -j limit-13 -A OUTPUT -o eth1 -d fc00::/7 -j limit-14 -A OUTPUT -o eth1 -d fc00::/7 -j limit-15 -A OUTPUT -o eth1 -d fc00::/7 -j limit-16 -A OUTPUT -o eth1 -d fc00::/7 -j limit-17 -A OUTPUT -o eth1 -d fc00::/7 -j limit-18 -A OUTPUT -o eth1 -d fc00::/7 -j limit-19 -A OUTPUT -o eth1 -d fc00::/7 -j limit-20 -A OUTPUT -o eth1 -d fc00::/7 -j limit-21 -A OUTPUT -o eth1 -d fc00::/7 -j limit-22 -A OUTPUT -o eth1 -d fc00::/7 -j limit-23 -A OUTPUT -o eth1 -d fc00::/7 -j limit-24 -A OUTPUT -o eth1 -d fc00::/7 -j limit-25 -A OUTPUT -o eth1 -d fc00::/7 -j limit-26 -A OUTPUT -o eth1 -d fc00::/7 -j limit-27 -A OUTPUT -o eth1 -d fc00::/7 -j limit-28 -A OUTPUT -o eth1 -d fc00::/7 -j limit-29 -A OUTPUT -o eth1 -d fc00::/7 -j limit-30 -A OUTPUT -o eth1 -d fc00::/7 -j limit-31 -A OUTPUT -o eth1 -d fc00::/7 -j limit-32 -A OUTPUT -o eth1 -d fc00::/7 -j limit-33 -A OUTPUT -o eth1 -d fc00::/7 -j limit-34 -A OUTPUT -o eth1 -d fc00::/7 -j limit-35 -A OUTPUT -o eth1 -d fc00::/7 -j limit-36 -A OUTPUT -o eth1 -d fc00::/7 -j limit-37 -A OUTPUT -o eth1 -d fc00::/7 -j limit-38 -A OUTPUT -o eth1 -d fc00::/7 -j limit-39 -A OUTPUT -o eth1 -d fc00::/7 -j limit-40 -A OUTPUT -o eth1 -d fc00::/7 -j limit-41 -A OUTPUT -o eth1 -d fc00::/7 -j limit-42 -A OUTPUT -o eth1 -d fc00::/7 -j limit-43 -A OUTPUT -o eth1 -d fc00::/7 -j limit-44 -A OUTPUT -o eth1 -d fc00::/7 -j limit-45 -A OUTPUT -o eth1 -d fc00::/7 -j limit-46 -A OUTPUT -o eth1 -d fc00::/7 -j limit-47 -A OUTPUT -o eth1 -d fc00::/7 -j limit-48 -A OUTPUT -o eth1 -d fc00::/7 -j limit-49 -A OUTPUT -o eth1 -d fc00::/7 -j limit-50 -A OUTPUT -o eth1 -d fc00::/7 -j limit-51 -A OUTPUT -o eth1 -d fc00::/7 -j limit-52 -A OUTPUT -o eth1 -d fc00::/7 -j limit-53 -A OUTPUT -o eth1 -d fc00::/7 -j limit-54 -A OUTPUT -o eth1 -d fc00::/7 -j limit-55 -A OUTPUT -o eth1 -d fc00::/7 -j limit-56 -A OUTPUT -o eth1 -d fc00::/7 -j limit-57 -A OUTPUT -o eth1 -d fc00::/7 -j limit-58 -A OUTPUT -o eth1 -d fc00::/7 -j limit-59 -A OUTPUT -o eth1 -d fc00::/7 -j limit-60 -A OUTPUT -o eth1 -d fc00::/7 -j limit-61 -A OUTPUT -o eth1 -d fc00::/7 -j limit-62 -A OUTPUT -o eth1 -d fc00::/7 -j limit-63 -A OUTPUT -o eth1 -d fc00::/7 -j limit-64 -A OUTPUT -o eth1 -d fc00::/7 -j limit-65 -A OUTPUT -o eth1 -d fc00::/7 -j limit-66 -A OUTPUT -o eth1 -d fc00::/7 -j limit-67 -A OUTPUT -o eth1 -d fc00::/7 -j limit-68 -A OUTPUT -o eth1 -d fc00::/7 -j limit-69 -A OUTPUT -o eth1 -d fc00::/7 -j limit-70 -A OUTPUT -o eth1 -d fc00::/7 -j limit-71 -A OUTPUT -o eth1 -d fc00::/7 -j limit-72 -A OUTPUT -o eth1 -d fc00::/7 -j limit-73 -A OUTPUT -o eth1 -d fc00::/7 -j limit-74 -A OUTPUT -o eth1 -d fc00::/7 -j limit-75 -A OUTPUT -o eth1 -d fc00::/7 -j limit-76 -A OUTPUT -o eth1 -d fc00::/7 -j limit-77 -A OUTPUT -o eth1 -d fc00::/7 -j limit-78 -A OUTPUT -o eth1 -d fc00::/7 -j limit-79 -A OUTPUT -o eth1 -d fc00::/7 -j limit-80 -A OUTPUT -o eth1 -d fc00::/7 -j limit-81 -A OUTPUT -o eth1 -d fc00::/7 -j limit-82 -A OUTPUT -o eth1 -d fc00::/7 -j limit-83 -A OUTPUT -o eth1 -d fc00::/7 -j limit-84 -A OUTPUT -o eth1 -d fc00::/7 -j limit-85 -A OUTPUT -o eth1 -d fc00::/7 -j limit-86 -A OUTPUT -o eth1 -d fc00::/7 -j limit-87 -A OUTPUT -o eth1 -d fc00::/7 -j limit-88 -A OUTPUT -o eth1 -d fc00::/7 -j limit-89 -A OUTPUT -o eth1 -d fc00::/7 -j limit-90 -A OUTPUT -o eth1 -d fc00::/7 -j limit-91 -A OUTPUT -o eth1 -d fc00::/7 -j limit-92 -A OUTPUT -o eth1 -d fc00::/7 -j limit-93 -A OUTPUT -o eth1 -d fc00::/7 -j limit-94 -A OUTPUT -o eth1 -d fc00::/7 -j limit-95 -A OUTPUT -o eth1 -d fc00::/7 -j limit-96 -A OUTPUT -o eth1 -d fc00::/7 -j limit-97 -A OUTPUT -o eth1 -d fc00::/7 -j limit-98 -A OUTPUT -o eth1 -d fc00::/7 -j limit-99 -A OUTPUT -o eth1 -d fc00::/7 -j limit-100 -A OUTPUT -o eth1 -d fc00::/7 -j limit-101 -A OUTPUT -o eth1 -d fc00::/7 -j limit-102 -A OUTPUT -o eth1 -d fc00::/7 -j limit-103 -A OUTPUT -o eth1 -d fc00::/7 -j limit-104 -A OUTPUT -o eth1 -d fc00::/7 -j limit-105 -A OUTPUT -o eth1 -d fc00::/7 -j limit-106 -A OUTPUT -o eth1 -d fc00::/7 -j limit-107 -A OUTPUT -o eth1 -d fc00::/7 -j limit-108 -A OUTPUT -o eth1 -d fc00::/7 -j limit-109 -A OUTPUT -o eth1 -d fc00::/7 -j limit-110 -A OUTPUT -o eth1 -d fc00::/7 -j limit-111 -A OUTPUT -o eth1 -d fc00::/7 -j limit-112 -A OUTPUT -o eth1 -d fc00::/7 -j limit-113 -A OUTPUT -o eth1 -d fc00::/7 -j limit-114 -A OUTPUT -o eth1 -d fc00::/7 -j limit-115 -A OUTPUT -o eth1 -d fc00::/7 -j limit-116 -A OUTPUT -o eth1 -d fc00::/7 -j limit-117 -A OUTPUT -o eth1 -d fc00::/7 -j limit-118 -A OUTPUT -o eth1 -d fc00::/7 -j limit-119 -A OUTPUT -o eth1 -d fc00::/7 -j limit-120 -A OUTPUT -o eth1 -d fc00::/7 -j limit-121 -A OUTPUT -o eth1 -d fc00::/7 -j limit-122 -A OUTPUT -o eth1 -d fc00::/7 -j limit-123 -A OUTPUT -o eth1 -d fc00::/7 -j limit-124 -A OUTPUT -o eth1 -d fc00::/7 -j limit-125 -A OUTPUT -o eth1 -d fc00::/7 -j limit-126 -A OUTPUT -o eth1 -d fc00::/7 -j limit-127 -A OUTPUT -o eth1 -d fc00::/7 -j limit-128 -A OUTPUT -o eth1 -d fc00::/7 -j limit-129 -A OUTPUT -o eth1 -d fc00::/7 -j limit-130 -A OUTPUT -o eth1 -d fc00::/7 -j limit-131 -A OUTPUT -o eth1 -d fc00::/7 -j limit-132 -A OUTPUT -o eth1 -d fc00::/7 -j limit-133 -A OUTPUT -o eth1 -d fc00::/7 -j limit-134 -A OUTPUT -o eth1 -d fc00::/7 -j limit-135 -A OUTPUT -o eth1 -d fc00::/7 -j limit-136 -A OUTPUT -o eth1 -d fc00::/7 -j limit-137 -A OUTPUT -o eth1 -d fc00::/7 -j limit-138 -A OUTPUT -o eth1 -d fc00::/7 -j limit-139 -A OUTPUT -o eth1 -d fc00::/7 -j limit-140 -A OUTPUT -o eth1 -d fc00::/7 -j limit-141 -A OUTPUT -o eth1 -d fc00::/7 -j limit-142 -A OUTPUT -o eth1 -d fc00::/7 -j limit-143 -A OUTPUT -o eth1 -d fc00::/7 -j limit-144 -A OUTPUT -o eth1 -d fc00::/7 -j limit-145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-146 -A OUTPUT -o eth1 -d fc00::/7 -j limit-147 -A OUTPUT -o eth1 -d fc00::/7 -j limit-148 -A OUTPUT -o eth1 -d fc00::/7 -j limit-149 -A OUTPUT -o eth1 -d fc00::/7 -j limit-150 -A OUTPUT -o eth1 -d fc00::/7 -j limit-151 -A OUTPUT -o eth1 -d fc00::/7 -j limit-152 -A OUTPUT -o eth1 -d fc00::/7 -j limit-153 -A OUTPUT -o eth1 -d fc00::/7 -j limit-154 -A OUTPUT -o eth1 -d fc00::/7 -j limit-155 -A OUTPUT -o eth1 -d fc00::/7 -j limit-156 -A OUTPUT -o eth1 -d fc00::/7 -j limit-157 -A OUTPUT -o eth1 -d fc00::/7 -j limit-158 -A OUTPUT -o eth1 -d fc00::/7 -j limit-159 -A OUTPUT -o eth1 -d fc00::/7 -j limit-160 -A OUTPUT -o eth1 -d fc00::/7 -j limit-161 -A OUTPUT -o eth1 -d fc00::/7 -j limit-162 -A OUTPUT -o eth1 -d fc00::/7 -j limit-163 -A OUTPUT -o eth1 -d fc00::/7 -j limit-164 -A OUTPUT -o eth1 -d fc00::/7 -j limit-165 -A OUTPUT -o eth1 -d fc00::/7 -j limit-166 -A OUTPUT -o eth1 -d fc00::/7 -j limit-167 -A OUTPUT -o eth1 -d fc00::/7 -j limit-168 -A OUTPUT -o eth1 -d fc00::/7 -j limit-169 -A OUTPUT -o eth1 -d fc00::/7 -j limit-170 -A OUTPUT -o eth1 -d fc00::/7 -j limit-171 -A OUTPUT -o eth1 -d fc00::/7 -j limit-172 -A OUTPUT -o eth1 -d fc00::/7 -j limit-173 -A OUTPUT -o eth1 -d fc00::/7 -j limit-174 -A OUTPUT -o eth1 -d fc00::/7 -j limit-175 -A OUTPUT -o eth1 -d fc00::/7 -j limit-176 -A OUTPUT -o eth1 -d fc00::/7 -j limit-177 -A OUTPUT -o eth1 -d fc00::/7 -j limit-178 -A OUTPUT -o eth1 -d fc00::/7 -j limit-179 -A OUTPUT -o eth1 -d fc00::/7 -j limit-180 -A OUTPUT -o eth1 -d fc00::/7 -j limit-181 -A OUTPUT -o eth1 -d fc00::/7 -j limit-182 -A OUTPUT -o eth1 -d fc00::/7 -j limit-183 -A OUTPUT -o eth1 -d fc00::/7 -j limit-184 -A OUTPUT -o eth1 -d fc00::/7 -j limit-185 -A OUTPUT -o eth1 -d fc00::/7 -j limit-186 -A OUTPUT -o eth1 -d fc00::/7 -j limit-187 -A OUTPUT -o eth1 -d fc00::/7 -j limit-188 -A OUTPUT -o eth1 -d fc00::/7 -j limit-189 -A OUTPUT -o eth1 -d fc00::/7 -j limit-190 -A OUTPUT -o eth1 -d fc00::/7 -j limit-191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-192 -A OUTPUT -o eth1 -d fc00::/7 -j limit-193 -A OUTPUT -o eth1 -d fc00::/7 -j limit-194 -A OUTPUT -o eth1 -d fc00::/7 -j limit-195 -A OUTPUT -o eth1 -d fc00::/7 -j limit-196 -A OUTPUT -o eth1 -d fc00::/7 -j limit-197 -A OUTPUT -o eth1 -d fc00::/7 -j limit-198 -A OUTPUT -o eth1 -d fc00::/7 -j limit-199 -A OUTPUT -o eth1 -d fc00::/7 -j limit-200 -A OUTPUT -o eth1 -d fc00::/7 -j limit-201 -A OUTPUT -o eth1 -d fc00::/7 -j limit-202 -A OUTPUT -o eth1 -d fc00::/7 -j limit-203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-204 -A OUTPUT -o eth1 -d fc00::/7 -j limit-205 -A OUTPUT -o eth1 -d fc00::/7 -j limit-206 -A OUTPUT -o eth1 -d fc00::/7 -j limit-207 -A OUTPUT -o eth1 -d fc00::/7 -j limit-208 -A OUTPUT -o eth1 -d fc00::/7 -j limit-209 -A OUTPUT -o eth1 -d fc00::/7 -j limit-210 -A OUTPUT -o eth1 -d fc00::/7 -j limit-211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-212 -A OUTPUT -o eth1 -d fc00::/7 -j limit-213 -A OUTPUT -o eth1 -d fc00::/7 -j limit-214 -A OUTPUT -o eth1 -d fc00::/7 -j limit-215 -A OUTPUT -o eth1 -d fc00::/7 -j limit-216 -A OUTPUT -o eth1 -d fc00::/7 -j limit-217 -A OUTPUT -o eth1 -d fc00::/7 -j limit-218 -A OUTPUT -o eth1 -d fc00::/7 -j limit-219 -A OUTPUT -o eth1 -d fc00::/7 -j limit-220 -A OUTPUT -o eth1 -d fc00::/7 -j limit-221 -A OUTPUT -o eth1 -d fc00::/7 -j limit-222 -A OUTPUT -o eth1 -d fc00::/7 -j limit-223 -A OUTPUT -o eth1 -d fc00::/7 -j limit-224 -A OUTPUT -o eth1 -d fc00::/7 -j limit-225 -A OUTPUT -o eth1 -d fc00::/7 -j limit-226 -A OUTPUT -o eth1 -d fc00::/7 -j limit-227 -A OUTPUT -o eth1 -d fc00::/7 -j limit-228 -A OUTPUT -o eth1 -d fc00::/7 -j limit-229 -A OUTPUT -o eth1 -d fc00::/7 -j limit-230 -A OUTPUT -o eth1 -d fc00::/7 -j limit-231 -A OUTPUT -o eth1 -d fc00::/7 -j limit-232 -A OUTPUT -o eth1 -d fc00::/7 -j limit-233 -A OUTPUT -o eth1 -d fc00::/7 -j limit-234 -A OUTPUT -o eth1 -d fc00::/7 -j limit-235 -A OUTPUT -o eth1 -d fc00::/7 -j limit-236 -A OUTPUT -o eth1 -d fc00::/7 -j limit-237 -A OUTPUT -o eth1 -d fc00::/7 -j limit-238 -A OUTPUT -o eth1 -d fc00::/7 -j limit-239 -A OUTPUT -o eth1 -d fc00::/7 -j limit-240 -A OUTPUT -o eth1 -d fc00::/7 -j limit-241 -A OUTPUT -o eth1 -d fc00::/7 -j limit-242 -A OUTPUT -o eth1 -d fc00::/7 -j limit-243 -A OUTPUT -o eth1 -d fc00::/7 -j limit-244 -A OUTPUT -o eth1 -d fc00::/7 -j limit-245 -A OUTPUT -o eth1 -d fc00::/7 -j limit-246 -A OUTPUT -o eth1 -d fc00::/7 -j limit-247 -A OUTPUT -o eth1 -d fc00::/7 -j limit-248 -A OUTPUT -o eth1 -d fc00::/7 -j limit-249 -A OUTPUT -o eth1 -d fc00::/7 -j limit-250 -A OUTPUT -o eth1 -d fc00::/7 -j limit-251 -A OUTPUT -o eth1 -d fc00::/7 -j limit-252 -A OUTPUT -o eth1 -d fc00::/7 -j limit-253 -A OUTPUT -o eth1 -d fc00::/7 -j limit-254 -A OUTPUT -o eth1 -d fc00::/7 -j limit-255 -A OUTPUT -o eth1 -d fc00::/7 -j limit-256 -A OUTPUT -o eth1 -d fc00::/7 -j limit-257 -A OUTPUT -o eth1 -d fc00::/7 -j limit-258 -A OUTPUT -o eth1 -d fc00::/7 -j limit-259 -A OUTPUT -o eth1 -d fc00::/7 -j limit-260 -A OUTPUT -o eth1 -d fc00::/7 -j limit-261 -A OUTPUT -o eth1 -d fc00::/7 -j limit-262 -A OUTPUT -o eth1 -d fc00::/7 -j limit-263 -A OUTPUT -o eth1 -d fc00::/7 -j limit-264 -A OUTPUT -o eth1 -d fc00::/7 -j limit-265 -A OUTPUT -o eth1 -d fc00::/7 -j limit-266 -A OUTPUT -o eth1 -d fc00::/7 -j limit-267 -A OUTPUT -o eth1 -d fc00::/7 -j limit-268 -A OUTPUT -o eth1 -d fc00::/7 -j limit-269 -A OUTPUT -o eth1 -d fc00::/7 -j limit-270 -A OUTPUT -o eth1 -d fc00::/7 -j limit-271 -A OUTPUT -o eth1 -d fc00::/7 -j limit-272 -A OUTPUT -o eth1 -d fc00::/7 -j limit-273 -A OUTPUT -o eth1 -d fc00::/7 -j limit-274 -A OUTPUT -o eth1 -d fc00::/7 -j limit-275 -A OUTPUT -o eth1 -d fc00::/7 -j limit-276 -A OUTPUT -o eth1 -d fc00::/7 -j limit-277 -A OUTPUT -o eth1 -d fc00::/7 -j limit-278 -A OUTPUT -o eth1 -d fc00::/7 -j limit-279 -A OUTPUT -o eth1 -d fc00::/7 -j limit-280 -A OUTPUT -o eth1 -d fc00::/7 -j limit-281 -A OUTPUT -o eth1 -d fc00::/7 -j limit-282 -A OUTPUT -o eth1 -d fc00::/7 -j limit-283 -A OUTPUT -o eth1 -d fc00::/7 -j limit-284 -A OUTPUT -o eth1 -d fc00::/7 -j limit-285 -A OUTPUT -o eth1 -d fc00::/7 -j limit-286 -A OUTPUT -o eth1 -d fc00::/7 -j limit-287 -A OUTPUT -o eth1 -d fc00::/7 -j limit-288 -A OUTPUT -o eth1 -d fc00::/7 -j limit-289 -A OUTPUT -o eth1 -d fc00::/7 -j limit-290 -A OUTPUT -o eth1 -d fc00::/7 -j limit-291 -A OUTPUT -o eth1 -d fc00::/7 -j limit-292 -A OUTPUT -o eth1 -d fc00::/7 -j limit-293 -A OUTPUT -o eth1 -d fc00::/7 -j limit-294 -A OUTPUT -o eth1 -d fc00::/7 -j limit-295 -A OUTPUT -o eth1 -d fc00::/7 -j limit-296 -A OUTPUT -o eth1 -d fc00::/7 -j limit-297 -A OUTPUT -o eth1 -d fc00::/7 -j limit-298 -A OUTPUT -o eth1 -d fc00::/7 -j limit-299 -A OUTPUT -o eth1 -d fc00::/7 -j limit-300 -A OUTPUT -o eth1 -d fc00::/7 -j limit-301 -A OUTPUT -o eth1 -d fc00::/7 -j limit-302 -A OUTPUT -o eth1 -d fc00::/7 -j limit-303 -A OUTPUT -o eth1 -d fc00::/7 -j limit-304 -A OUTPUT -o eth1 -d fc00::/7 -j limit-305 -A OUTPUT -o eth1 -d fc00::/7 -j limit-306 -A OUTPUT -o eth1 -d fc00::/7 -j limit-307 -A OUTPUT -o eth1 -d fc00::/7 -j limit-308 -A OUTPUT -o eth1 -d fc00::/7 -j limit-309 -A OUTPUT -o eth1 -d fc00::/7 -j limit-310 -A OUTPUT -o eth1 -d fc00::/7 -j limit-311 -A OUTPUT -o eth1 -d fc00::/7 -j limit-312 -A OUTPUT -o eth1 -d fc00::/7 -j limit-313 -A OUTPUT -o eth1 -d fc00::/7 -j limit-314 -A OUTPUT -o eth1 -d fc00::/7 -j limit-315 -A OUTPUT -o eth1 -d fc00::/7 -j limit-316 -A OUTPUT -o eth1 -d fc00::/7 -j limit-317 -A OUTPUT -o eth1 -d fc00::/7 -j limit-318 -A OUTPUT -o eth1 -d fc00::/7 -j limit-319 -A OUTPUT -o eth1 -d fc00::/7 -j limit-320 -A OUTPUT -o eth1 -d fc00::/7 -j limit-321 -A OUTPUT -o eth1 -d fc00::/7 -j limit-322 -A OUTPUT -o eth1 -d fc00::/7 -j limit-323 -A OUTPUT -o eth1 -d fc00::/7 -j limit-324 -A OUTPUT -o eth1 -d fc00::/7 -j limit-325 -A OUTPUT -o eth1 -d fc00::/7 -j limit-326 -A OUTPUT -o eth1 -d fc00::/7 -j limit-327 -A OUTPUT -o eth1 -d fc00::/7 -j limit-328 -A OUTPUT -o eth1 -d fc00::/7 -j limit-329 -A OUTPUT -o eth1 -d fc00::/7 -j limit-330 -A OUTPUT -o eth1 -d fc00::/7 -j limit-331 -A OUTPUT -o eth1 -d fc00::/7 -j limit-332 -A OUTPUT -o eth1 -d fc00::/7 -j limit-333 -A OUTPUT -o eth1 -d fc00::/7 -j limit-334 -A OUTPUT -o eth1 -d fc00::/7 -j limit-335 -A OUTPUT -o eth1 -d fc00::/7 -j limit-336 -A OUTPUT -o eth1 -d fc00::/7 -j limit-337 -A OUTPUT -o eth1 -d fc00::/7 -j limit-338 -A OUTPUT -o eth1 -d fc00::/7 -j limit-339 -A OUTPUT -o eth1 -d fc00::/7 -j limit-340 -A OUTPUT -o eth1 -d fc00::/7 -j limit-341 -A OUTPUT -o eth1 -d fc00::/7 -j limit-342 -A OUTPUT -o eth1 -d fc00::/7 -j limit-343 -A OUTPUT -o eth1 -d fc00::/7 -j limit-344 -A OUTPUT -o eth1 -d fc00::/7 -j limit-345 -A OUTPUT -o eth1 -d fc00::/7 -j limit-346 -A OUTPUT -o eth1 -d fc00::/7 -j limit-347 -A OUTPUT -o eth1 -d fc00::/7 -j limit-348 -A OUTPUT -o eth1 -d fc00::/7 -j limit-349 -A OUTPUT -o eth1 -d fc00::/7 -j limit-350 -A OUTPUT -o eth1 -d fc00::/7 -j limit-351 -A OUTPUT -o eth1 -d fc00::/7 -j limit-352 -A OUTPUT -o eth1 -d fc00::/7 -j limit-353 -A OUTPUT -o eth1 -d fc00::/7 -j limit-354 -A OUTPUT -o eth1 -d fc00::/7 -j limit-355 -A OUTPUT -o eth1 -d fc00::/7 -j limit-356 -A OUTPUT -o eth1 -d fc00::/7 -j limit-357 -A OUTPUT -o eth1 -d fc00::/7 -j limit-358 -A OUTPUT -o eth1 -d fc00::/7 -j limit-359 -A OUTPUT -o eth1 -d fc00::/7 -j limit-360 -A OUTPUT -o eth1 -d fc00::/7 -j limit-361 -A OUTPUT -o eth1 -d fc00::/7 -j limit-362 -A OUTPUT -o eth1 -d fc00::/7 -j limit-363 -A OUTPUT -o eth1 -d fc00::/7 -j limit-364 -A OUTPUT -o eth1 -d fc00::/7 -j limit-365 -A OUTPUT -o eth1 -d fc00::/7 -j limit-366 -A OUTPUT -o eth1 -d fc00::/7 -j limit-367 -A OUTPUT -o eth1 -d fc00::/7 -j limit-368 -A OUTPUT -o eth1 -d fc00::/7 -j limit-369 -A OUTPUT -o eth1 -d fc00::/7 -j limit-370 -A OUTPUT -o eth1 -d fc00::/7 -j limit-371 -A OUTPUT -o eth1 -d fc00::/7 -j limit-372 -A OUTPUT -o eth1 -d fc00::/7 -j limit-373 -A OUTPUT -o eth1 -d fc00::/7 -j limit-374 -A OUTPUT -o eth1 -d fc00::/7 -j limit-375 -A OUTPUT -o eth1 -d fc00::/7 -j limit-376 -A OUTPUT -o eth1 -d fc00::/7 -j limit-377 -A OUTPUT -o eth1 -d fc00::/7 -j limit-378 -A OUTPUT -o eth1 -d fc00::/7 -j limit-379 -A OUTPUT -o eth1 -d fc00::/7 -j limit-380 -A OUTPUT -o eth1 -d fc00::/7 -j limit-381 -A OUTPUT -o eth1 -d fc00::/7 -j limit-382 -A OUTPUT -o eth1 -d fc00::/7 -j limit-383 -A OUTPUT -o eth1 -d fc00::/7 -j limit-384 -A OUTPUT -o eth1 -d fc00::/7 -j limit-385 -A OUTPUT -o eth1 -d fc00::/7 -j limit-386 -A OUTPUT -o eth1 -d fc00::/7 -j limit-387 -A OUTPUT -o eth1 -d fc00::/7 -j limit-388 -A OUTPUT -o eth1 -d fc00::/7 -j limit-389 -A OUTPUT -o eth1 -d fc00::/7 -j limit-390 -A OUTPUT -o eth1 -d fc00::/7 -j limit-391 -A OUTPUT -o eth1 -d fc00::/7 -j limit-392 -A OUTPUT -o eth1 -d fc00::/7 -j limit-393 -A OUTPUT -o eth1 -d fc00::/7 -j limit-394 -A OUTPUT -o eth1 -d fc00::/7 -j limit-395 -A OUTPUT -o eth1 -d fc00::/7 -j limit-396 -A OUTPUT -o eth1 -d fc00::/7 -j limit-397 -A OUTPUT -o eth1 -d fc00::/7 -j limit-398 -A OUTPUT -o eth1 -d fc00::/7 -j limit-399 -A OUTPUT -o eth1 -d fc00::/7 -j limit-400 -A OUTPUT -o eth1 -d fc00::/7 -j limit-401 -A OUTPUT -o eth1 -d fc00::/7 -j limit-402 -A OUTPUT -o eth1 -d fc00::/7 -j limit-403 -A OUTPUT -o eth1 -d fc00::/7 -j limit-404 -A OUTPUT -o eth1 -d fc00::/7 -j limit-405 -A OUTPUT -o eth1 -d fc00::/7 -j limit-406 -A OUTPUT -o eth1 -d fc00::/7 -j limit-407 -A OUTPUT -o eth1 -d fc00::/7 -j limit-408 -A OUTPUT -o eth1 -d fc00::/7 -j limit-409 -A OUTPUT -o eth1 -d fc00::/7 -j limit-410 -A OUTPUT -o eth1 -d fc00::/7 -j limit-411 -A OUTPUT -o eth1 -d fc00::/7 -j limit-412 -A OUTPUT -o eth1 -d fc00::/7 -j limit-413 -A OUTPUT -o eth1 -d fc00::/7 -j limit-414 -A OUTPUT -o eth1 -d fc00::/7 -j limit-415 -A OUTPUT -o eth1 -d fc00::/7 -j limit-416 -A OUTPUT -o eth1 -d fc00::/7 -j limit-417 -A OUTPUT -o eth1 -d fc00::/7 -j limit-418 -A OUTPUT -o eth1 -d fc00::/7 -j limit-419 -A OUTPUT -o eth1 -d fc00::/7 -j limit-420 -A OUTPUT -o eth1 -d fc00::/7 -j limit-421 -A OUTPUT -o eth1 -d fc00::/7 -j limit-422 -A OUTPUT -o eth1 -d fc00::/7 -j limit-423 -A OUTPUT -o eth1 -d fc00::/7 -j limit-424 -A OUTPUT -o eth1 -d fc00::/7 -j limit-425 -A OUTPUT -o eth1 -d fc00::/7 -j limit-426 -A OUTPUT -o eth1 -d fc00::/7 -j limit-427 -A OUTPUT -o eth1 -d fc00::/7 -j limit-428 -A OUTPUT -o eth1 -d fc00::/7 -j limit-429 -A OUTPUT -o eth1 -d fc00::/7 -j limit-430 -A OUTPUT -o eth1 -d fc00::/7 -j limit-431 -A OUTPUT -o eth1 -d fc00::/7 -j limit-432 -A OUTPUT -o eth1 -d fc00::/7 -j limit-433 -A OUTPUT -o eth1 -d fc00::/7 -j limit-434 -A OUTPUT -o eth1 -d fc00::/7 -j limit-435 -A OUTPUT -o eth1 -d fc00::/7 -j limit-436 -A OUTPUT -o eth1 -d fc00::/7 -j limit-437 -A OUTPUT -o eth1 -d fc00::/7 -j limit-438 -A OUTPUT -o eth1 -d fc00::/7 -j limit-439 -A OUTPUT -o eth1 -d fc00::/7 -j limit-440 -A OUTPUT -o eth1 -d fc00::/7 -j limit-441 -A OUTPUT -o eth1 -d fc00::/7 -j limit-442 -A OUTPUT -o eth1 -d fc00::/7 -j limit-443 -A OUTPUT -o eth1 -d fc00::/7 -j limit-444 -A OUTPUT -o eth1 -d fc00::/7 -j limit-445 -A OUTPUT -o eth1 -d fc00::/7 -j limit-446 -A OUTPUT -o eth1 -d fc00::/7 -j limit-447 -A OUTPUT -o eth1 -d fc00::/7 -j limit-448 -A OUTPUT -o eth1 -d fc00::/7 -j limit-449 -A OUTPUT -o eth1 -d fc00::/7 -j limit-450 -A OUTPUT -o eth1 -d fc00::/7 -j limit-451 -A OUTPUT -o eth1 -d fc00::/7 -j limit-452 -A OUTPUT -o eth1 -d fc00::/7 -j limit-453 -A OUTPUT -o eth1 -d fc00::/7 -j limit-454 -A OUTPUT -o eth1 -d fc00::/7 -j limit-455 -A OUTPUT -o eth1 -d fc00::/7 -j limit-456 -A OUTPUT -o eth1 -d fc00::/7 -j limit-457 -A OUTPUT -o eth1 -d fc00::/7 -j limit-458 -A OUTPUT -o eth1 -d fc00::/7 -j limit-459 -A OUTPUT -o eth1 -d fc00::/7 -j limit-460 -A OUTPUT -o eth1 -d fc00::/7 -j limit-461 -A OUTPUT -o eth1 -d fc00::/7 -j limit-462 -A OUTPUT -o eth1 -d fc00::/7 -j limit-463 -A OUTPUT -o eth1 -d fc00::/7 -j limit-464 -A OUTPUT -o eth1 -d fc00::/7 -j limit-465 -A OUTPUT -o eth1 -d fc00::/7 -j limit-466 -A OUTPUT -o eth1 -d fc00::/7 -j limit-467 -A OUTPUT -o eth1 -d fc00::/7 -j limit-468 -A OUTPUT -o eth1 -d fc00::/7 -j limit-469 -A OUTPUT -o eth1 -d fc00::/7 -j limit-470 -A OUTPUT -o eth1 -d fc00::/7 -j limit-471 -A OUTPUT -o eth1 -d fc00::/7 -j limit-472 -A OUTPUT -o eth1 -d fc00::/7 -j limit-473 -A OUTPUT -o eth1 -d fc00::/7 -j limit-474 -A OUTPUT -o eth1 -d fc00::/7 -j limit-475 -A OUTPUT -o eth1 -d fc00::/7 -j limit-476 -A OUTPUT -o eth1 -d fc00::/7 -j limit-477 -A OUTPUT -o eth1 -d fc00::/7 -j limit-478 -A OUTPUT -o eth1 -d fc00::/7 -j limit-479 -A OUTPUT -o eth1 -d fc00::/7 -j limit-480 -A OUTPUT -o eth1 -d fc00::/7 -j limit-481 -A OUTPUT -o eth1 -d fc00::/7 -j limit-482 -A OUTPUT -o eth1 -d fc00::/7 -j limit-483 -A OUTPUT -o eth1 -d fc00::/7 -j limit-484 -A OUTPUT -o eth1 -d fc00::/7 -j limit-485 -A OUTPUT -o eth1 -d fc00::/7 -j limit-486 -A OUTPUT -o eth1 -d fc00::/7 -j limit-487 -A OUTPUT -o eth1 -d fc00::/7 -j limit-488 -A OUTPUT -o eth1 -d fc00::/7 -j limit-489 -A OUTPUT -o eth1 -d fc00::/7 -j limit-490 -A OUTPUT -o eth1 -d fc00::/7 -j limit-491 -A OUTPUT -o eth1 -d fc00::/7 -j limit-492 -A OUTPUT -o eth1 -d fc00::/7 -j limit-493 -A OUTPUT -o eth1 -d fc00::/7 -j limit-494 -A OUTPUT -o eth1 -d fc00::/7 -j limit-495 -A OUTPUT -o eth1 -d fc00::/7 -j limit-496 -A OUTPUT -o eth1 -d fc00::/7 -j limit-497 -A OUTPUT -o eth1 -d fc00::/7 -j limit-498 -A OUTPUT -o eth1 -d fc00::/7 -j limit-499 -A OUTPUT -o eth1 -d fc00::/7 -j limit-500 -A OUTPUT -o eth1 -d fc00::/7 -j limit-501 -A OUTPUT -o eth1 -d fc00::/7 -j limit-502 -A OUTPUT -o eth1 -d fc00::/7 -j limit-503 -A OUTPUT -o eth1 -d fc00::/7 -j limit-504 -A OUTPUT -o eth1 -d fc00::/7 -j limit-505 -A OUTPUT -o eth1 -d fc00::/7 -j limit-506 -A OUTPUT -o eth1 -d fc00::/7 -j limit-507 -A OUTPUT -o eth1 -d fc00::/7 -j limit-508 -A OUTPUT -o eth1 -d fc00::/7 -j limit-509 -A OUTPUT -o eth1 -d fc00::/7 -j limit-510 -A OUTPUT -o eth1 -d fc00::/7 -j limit-511 -A OUTPUT -o eth1 -d fc00::/7 -j limit-512 -A OUTPUT -o eth1 -d fc00::/7 -j limit-513 -A OUTPUT -o eth1 -d fc00::/7 -j limit-514 -A OUTPUT -o eth1 -d fc00::/7 -j limit-515 -A OUTPUT -o eth1 -d fc00::/7 -j limit-516 -A OUTPUT -o eth1 -d fc00::/7 -j limit-517 -A OUTPUT -o eth1 -d fc00::/7 -j limit-518 -A OUTPUT -o eth1 -d fc00::/7 -j limit-519 -A OUTPUT -o eth1 -d fc00::/7 -j limit-520 -A OUTPUT -o eth1 -d fc00::/7 -j limit-521 -A OUTPUT -o eth1 -d fc00::/7 -j limit-522 -A OUTPUT -o eth1 -d fc00::/7 -j limit-523 -A OUTPUT -o eth1 -d fc00::/7 -j limit-524 -A OUTPUT -o eth1 -d fc00::/7 -j limit-525 -A OUTPUT -o eth1 -d fc00::/7 -j limit-526 -A OUTPUT -o eth1 -d fc00::/7 -j limit-527 -A OUTPUT -o eth1 -d fc00::/7 -j limit-528 -A OUTPUT -o eth1 -d fc00::/7 -j limit-529 -A OUTPUT -o eth1 -d fc00::/7 -j limit-530 -A OUTPUT -o eth1 -d fc00::/7 -j limit-531 -A OUTPUT -o eth1 -d fc00::/7 -j limit-532 -A OUTPUT -o eth1 -d fc00::/7 -j limit-533 -A OUTPUT -o eth1 -d fc00::/7 -j limit-534 -A OUTPUT -o eth1 -d fc00::/7 -j limit-535 -A OUTPUT -o eth1 -d fc00::/7 -j limit-536 -A OUTPUT -o eth1 -d fc00::/7 -j limit-537 -A OUTPUT -o eth1 -d fc00::/7 -j limit-538 -A OUTPUT -o eth1 -d fc00::/7 -j limit-539 -A OUTPUT -o eth1 -d fc00::/7 -j limit-540 -A OUTPUT -o eth1 -d fc00::/7 -j limit-541 -A OUTPUT -o eth1 -d fc00::/7 -j limit-542 -A OUTPUT -o eth1 -d fc00::/7 -j limit-543 -A OUTPUT -o eth1 -d fc00::/7 -j limit-544 -A OUTPUT -o eth1 -d fc00::/7 -j limit-545 -A OUTPUT -o eth1 -d fc00::/7 -j limit-546 -A OUTPUT -o eth1 -d fc00::/7 -j limit-547 -A OUTPUT -o eth1 -d fc00::/7 -j limit-548 -A OUTPUT -o eth1 -d fc00::/7 -j limit-549 -A OUTPUT -o eth1 -d fc00::/7 -j limit-550 -A OUTPUT -o eth1 -d fc00::/7 -j limit-551 -A OUTPUT -o eth1 -d fc00::/7 -j limit-552 -A OUTPUT -o eth1 -d fc00::/7 -j limit-553 -A OUTPUT -o eth1 -d fc00::/7 -j limit-554 -A OUTPUT -o eth1 -d fc00::/7 -j limit-555 -A OUTPUT -o eth1 -d fc00::/7 -j limit-556 -A OUTPUT -o eth1 -d fc00::/7 -j limit-557 -A OUTPUT -o eth1 -d fc00::/7 -j limit-558 -A OUTPUT -o eth1 -d fc00::/7 -j limit-559 -A OUTPUT -o eth1 -d fc00::/7 -j limit-560 -A OUTPUT -o eth1 -d fc00::/7 -j limit-561 -A OUTPUT -o eth1 -d fc00::/7 -j limit-562 -A OUTPUT -o eth1 -d fc00::/7 -j limit-563 -A OUTPUT -o eth1 -d fc00::/7 -j limit-564 -A OUTPUT -o eth1 -d fc00::/7 -j limit-565 -A OUTPUT -o eth1 -d fc00::/7 -j limit-566 -A OUTPUT -o eth1 -d fc00::/7 -j limit-567 -A OUTPUT -o eth1 -d fc00::/7 -j limit-568 -A OUTPUT -o eth1 -d fc00::/7 -j limit-569 -A OUTPUT -o eth1 -d fc00::/7 -j limit-570 -A OUTPUT -o eth1 -d fc00::/7 -j limit-571 -A OUTPUT -o eth1 -d fc00::/7 -j limit-572 -A OUTPUT -o eth1 -d fc00::/7 -j limit-573 -A OUTPUT -o eth1 -d fc00::/7 -j limit-574 -A OUTPUT -o eth1 -d fc00::/7 -j limit-575 -A OUTPUT -o eth1 -d fc00::/7 -j limit-576 -A OUTPUT -o eth1 -d fc00::/7 -j limit-577 -A OUTPUT -o eth1 -d fc00::/7 -j limit-578 -A OUTPUT -o eth1 -d fc00::/7 -j limit-579 -A OUTPUT -o eth1 -d fc00::/7 -j limit-580 -A OUTPUT -o eth1 -d fc00::/7 -j limit-581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-582 -A OUTPUT -o eth1 -d fc00::/7 -j limit-583 -A OUTPUT -o eth1 -d fc00::/7 -j limit-584 -A OUTPUT -o eth1 -d fc00::/7 -j limit-585 -A OUTPUT -o eth1 -d fc00::/7 -j limit-586 -A OUTPUT -o eth1 -d fc00::/7 -j limit-587 -A OUTPUT -o eth1 -d fc00::/7 -j limit-588 -A OUTPUT -o eth1 -d fc00::/7 -j limit-589 -A OUTPUT -o eth1 -d fc00::/7 -j limit-590 -A OUTPUT -o eth1 -d fc00::/7 -j limit-591 -A OUTPUT -o eth1 -d fc00::/7 -j limit-592 -A OUTPUT -o eth1 -d fc00::/7 -j limit-593 -A OUTPUT -o eth1 -d fc00::/7 -j limit-594 -A OUTPUT -o eth1 -d fc00::/7 -j limit-595 -A OUTPUT -o eth1 -d fc00::/7 -j limit-596 -A OUTPUT -o eth1 -d fc00::/7 -j limit-597 -A OUTPUT -o eth1 -d fc00::/7 -j limit-598 -A OUTPUT -o eth1 -d fc00::/7 -j limit-599 -A OUTPUT -o eth1 -d fc00::/7 -j limit-600 -A OUTPUT -o eth1 -d fc00::/7 -j limit-601 -A OUTPUT -o eth1 -d fc00::/7 -j limit-602 -A OUTPUT -o eth1 -d fc00::/7 -j limit-603 -A OUTPUT -o eth1 -d fc00::/7 -j limit-604 -A OUTPUT -o eth1 -d fc00::/7 -j limit-605 -A OUTPUT -o eth1 -d fc00::/7 -j limit-606 -A OUTPUT -o eth1 -d fc00::/7 -j limit-607 -A OUTPUT -o eth1 -d fc00::/7 -j limit-608 -A OUTPUT -o eth1 -d fc00::/7 -j limit-609 -A OUTPUT -o eth1 -d fc00::/7 -j limit-610 -A OUTPUT -o eth1 -d fc00::/7 -j limit-611 -A OUTPUT -o eth1 -d fc00::/7 -j limit-612 -A OUTPUT -o eth1 -d fc00::/7 -j limit-613 -A OUTPUT -o eth1 -d fc00::/7 -j limit-614 -A OUTPUT -o eth1 -d fc00::/7 -j limit-615 -A OUTPUT -o eth1 -d fc00::/7 -j limit-616 -A OUTPUT -o eth1 -d fc00::/7 -j limit-617 -A OUTPUT -o eth1 -d fc00::/7 -j limit-618 -A OUTPUT -o eth1 -d fc00::/7 -j limit-619 -A OUTPUT -o eth1 -d fc00::/7 -j limit-620 -A OUTPUT -o eth1 -d fc00::/7 -j limit-621 -A OUTPUT -o eth1 -d fc00::/7 -j limit-622 -A OUTPUT -o eth1 -d fc00::/7 -j limit-623 -A OUTPUT -o eth1 -d fc00::/7 -j limit-624 -A OUTPUT -o eth1 -d fc00::/7 -j limit-625 -A OUTPUT -o eth1 -d fc00::/7 -j limit-626 -A OUTPUT -o eth1 -d fc00::/7 -j limit-627 -A OUTPUT -o eth1 -d fc00::/7 -j limit-628 -A OUTPUT -o eth1 -d fc00::/7 -j limit-629 -A OUTPUT -o eth1 -d fc00::/7 -j limit-630 -A OUTPUT -o eth1 -d fc00::/7 -j limit-631 -A OUTPUT -o eth1 -d fc00::/7 -j limit-632 -A OUTPUT -o eth1 -d fc00::/7 -j limit-633 -A OUTPUT -o eth1 -d fc00::/7 -j limit-634 -A OUTPUT -o eth1 -d fc00::/7 -j limit-635 -A OUTPUT -o eth1 -d fc00::/7 -j limit-636 -A OUTPUT -o eth1 -d fc00::/7 -j limit-637 -A OUTPUT -o eth1 -d fc00::/7 -j limit-638 -A OUTPUT -o eth1 -d fc00::/7 -j limit-639 -A OUTPUT -o eth1 -d fc00::/7 -j limit-640 -A OUTPUT -o eth1 -d fc00::/7 -j limit-641 -A OUTPUT -o eth1 -d fc00::/7 -j limit-642 -A OUTPUT -o eth1 -d fc00::/7 -j limit-643 -A OUTPUT -o eth1 -d fc00::/7 -j limit-644 -A OUTPUT -o eth1 -d fc00::/7 -j limit-645 -A OUTPUT -o eth1 -d fc00::/7 -j limit-646 -A OUTPUT -o eth1 -d fc00::/7 -j limit-647 -A OUTPUT -o eth1 -d fc00::/7 -j limit-648 -A OUTPUT -o eth1 -d fc00::/7 -j limit-649 -A OUTPUT -o eth1 -d fc00::/7 -j limit-650 -A OUTPUT -o eth1 -d fc00::/7 -j limit-651 -A OUTPUT -o eth1 -d fc00::/7 -j limit-652 -A OUTPUT -o eth1 -d fc00::/7 -j limit-653 -A OUTPUT -o eth1 -d fc00::/7 -j limit-654 -A OUTPUT -o eth1 -d fc00::/7 -j limit-655 -A OUTPUT -o eth1 -d fc00::/7 -j limit-656 -A OUTPUT -o eth1 -d fc00::/7 -j limit-657 -A OUTPUT -o eth1 -d fc00::/7 -j limit-658 -A OUTPUT -o eth1 -d fc00::/7 -j limit-659 -A OUTPUT -o eth1 -d fc00::/7 -j limit-660 -A OUTPUT -o eth1 -d fc00::/7 -j limit-661 -A OUTPUT -o eth1 -d fc00::/7 -j limit-662 -A OUTPUT -o eth1 -d fc00::/7 -j limit-663 -A OUTPUT -o eth1 -d fc00::/7 -j limit-664 -A OUTPUT -o eth1 -d fc00::/7 -j limit-665 -A OUTPUT -o eth1 -d fc00::/7 -j limit-666 -A OUTPUT -o eth1 -d fc00::/7 -j limit-667 -A OUTPUT -o eth1 -d fc00::/7 -j limit-668 -A OUTPUT -o eth1 -d fc00::/7 -j limit-669 -A OUTPUT -o eth1 -d fc00::/7 -j limit-670 -A OUTPUT -o eth1 -d fc00::/7 -j limit-671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-672 -A OUTPUT -o eth1 -d fc00::/7 -j limit-673 -A OUTPUT -o eth1 -d fc00::/7 -j limit-674 -A OUTPUT -o eth1 -d fc00::/7 -j limit-675 -A OUTPUT -o eth1 -d fc00::/7 -j limit-676 -A OUTPUT -o eth1 -d fc00::/7 -j limit-677 -A OUTPUT -o eth1 -d fc00::/7 -j limit-678 -A OUTPUT -o eth1 -d fc00::/7 -j limit-679 -A OUTPUT -o eth1 -d fc00::/7 -j limit-680 -A OUTPUT -o eth1 -d fc00::/7 -j limit-681 -A OUTPUT -o eth1 -d fc00::/7 -j limit-682 -A OUTPUT -o eth1 -d fc00::/7 -j limit-683 -A OUTPUT -o eth1 -d fc00::/7 -j limit-684 -A OUTPUT -o eth1 -d fc00::/7 -j limit-685 -A OUTPUT -o eth1 -d fc00::/7 -j limit-686 -A OUTPUT -o eth1 -d fc00::/7 -j limit-687 -A OUTPUT -o eth1 -d fc00::/7 -j limit-688 -A OUTPUT -o eth1 -d fc00::/7 -j limit-689 -A OUTPUT -o eth1 -d fc00::/7 -j limit-690 -A OUTPUT -o eth1 -d fc00::/7 -j limit-691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-692 -A OUTPUT -o eth1 -d fc00::/7 -j limit-693 -A OUTPUT -o eth1 -d fc00::/7 -j limit-694 -A OUTPUT -o eth1 -d fc00::/7 -j limit-695 -A OUTPUT -o eth1 -d fc00::/7 -j limit-696 -A OUTPUT -o eth1 -d fc00::/7 -j limit-697 -A OUTPUT -o eth1 -d fc00::/7 -j limit-698 -A OUTPUT -o eth1 -d fc00::/7 -j limit-699 -A OUTPUT -o eth1 -d fc00::/7 -j limit-700 -A OUTPUT -o eth1 -d fc00::/7 -j limit-701 -A OUTPUT -o eth1 -d fc00::/7 -j limit-702 -A OUTPUT -o eth1 -d fc00::/7 -j limit-703 -A OUTPUT -o eth1 -d fc00::/7 -j limit-704 -A OUTPUT -o eth1 -d fc00::/7 -j limit-705 -A OUTPUT -o eth1 -d fc00::/7 -j limit-706 -A OUTPUT -o eth1 -d fc00::/7 -j limit-707 -A OUTPUT -o eth1 -d fc00::/7 -j limit-708 -A OUTPUT -o eth1 -d fc00::/7 -j limit-709 -A OUTPUT -o eth1 -d fc00::/7 -j limit-710 -A OUTPUT -o eth1 -d fc00::/7 -j limit-711 -A OUTPUT -o eth1 -d fc00::/7 -j limit-712 -A OUTPUT -o eth1 -d fc00::/7 -j limit-713 -A OUTPUT -o eth1 -d fc00::/7 -j limit-714 -A OUTPUT -o eth1 -d fc00::/7 -j limit-715 -A OUTPUT -o eth1 -d fc00::/7 -j limit-716 -A OUTPUT -o eth1 -d fc00::/7 -j limit-717 -A OUTPUT -o eth1 -d fc00::/7 -j limit-718 -A OUTPUT -o eth1 -d fc00::/7 -j limit-719 -A OUTPUT -o eth1 -d fc00::/7 -j limit-720 -A OUTPUT -o eth1 -d fc00::/7 -j limit-721 -A OUTPUT -o eth1 -d fc00::/7 -j limit-722 -A OUTPUT -o eth1 -d fc00::/7 -j limit-723 -A OUTPUT -o eth1 -d fc00::/7 -j limit-724 -A OUTPUT -o eth1 -d fc00::/7 -j limit-725 -A OUTPUT -o eth1 -d fc00::/7 -j limit-726 -A OUTPUT -o eth1 -d fc00::/7 -j limit-727 -A OUTPUT -o eth1 -d fc00::/7 -j limit-728 -A OUTPUT -o eth1 -d fc00::/7 -j limit-729 -A OUTPUT -o eth1 -d fc00::/7 -j limit-730 -A OUTPUT -o eth1 -d fc00::/7 -j limit-731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-732 -A OUTPUT -o eth1 -d fc00::/7 -j limit-733 -A OUTPUT -o eth1 -d fc00::/7 -j limit-734 -A OUTPUT -o eth1 -d fc00::/7 -j limit-735 -A OUTPUT -o eth1 -d fc00::/7 -j limit-736 -A OUTPUT -o eth1 -d fc00::/7 -j limit-737 -A OUTPUT -o eth1 -d fc00::/7 -j limit-738 -A OUTPUT -o eth1 -d fc00::/7 -j limit-739 -A OUTPUT -o eth1 -d fc00::/7 -j limit-740 -A OUTPUT -o eth1 -d fc00::/7 -j limit-741 -A OUTPUT -o eth1 -d fc00::/7 -j limit-742 -A OUTPUT -o eth1 -d fc00::/7 -j limit-743 -A OUTPUT -o eth1 -d fc00::/7 -j limit-744 -A OUTPUT -o eth1 -d fc00::/7 -j limit-745 -A OUTPUT -o eth1 -d fc00::/7 -j limit-746 -A OUTPUT -o eth1 -d fc00::/7 -j limit-747 -A OUTPUT -o eth1 -d fc00::/7 -j limit-748 -A OUTPUT -o eth1 -d fc00::/7 -j limit-749 -A OUTPUT -o eth1 -d fc00::/7 -j limit-750 -A OUTPUT -o eth1 -d fc00::/7 -j limit-751 -A OUTPUT -o eth1 -d fc00::/7 -j limit-752 -A OUTPUT -o eth1 -d fc00::/7 -j limit-753 -A OUTPUT -o eth1 -d fc00::/7 -j limit-754 -A OUTPUT -o eth1 -d fc00::/7 -j limit-755 -A OUTPUT -o eth1 -d fc00::/7 -j limit-756 -A OUTPUT -o eth1 -d fc00::/7 -j limit-757 -A OUTPUT -o eth1 -d fc00::/7 -j limit-758 -A OUTPUT -o eth1 -d fc00::/7 -j limit-759 -A OUTPUT -o eth1 -d fc00::/7 -j limit-760 -A OUTPUT -o eth1 -d fc00::/7 -j limit-761 -A OUTPUT -o eth1 -d fc00::/7 -j limit-762 -A OUTPUT -o eth1 -d fc00::/7 -j limit-763 -A OUTPUT -o eth1 -d fc00::/7 -j limit-764 -A OUTPUT -o eth1 -d fc00::/7 -j limit-765 -A OUTPUT -o eth1 -d fc00::/7 -j limit-766 -A OUTPUT -o eth1 -d fc00::/7 -j limit-767 -A OUTPUT -o eth1 -d fc00::/7 -j limit-768 -A OUTPUT -o eth1 -d fc00::/7 -j limit-769 -A OUTPUT -o eth1 -d fc00::/7 -j limit-770 -A OUTPUT -o eth1 -d fc00::/7 -j limit-771 -A OUTPUT -o eth1 -d fc00::/7 -j limit-772 -A OUTPUT -o eth1 -d fc00::/7 -j limit-773 -A OUTPUT -o eth1 -d fc00::/7 -j limit-774 -A OUTPUT -o eth1 -d fc00::/7 -j limit-775 -A OUTPUT -o eth1 -d fc00::/7 -j limit-776 -A OUTPUT -o eth1 -d fc00::/7 -j limit-777 -A OUTPUT -o eth1 -d fc00::/7 -j limit-778 -A OUTPUT -o eth1 -d fc00::/7 -j limit-779 -A OUTPUT -o eth1 -d fc00::/7 -j limit-780 -A OUTPUT -o eth1 -d fc00::/7 -j limit-781 -A OUTPUT -o eth1 -d fc00::/7 -j limit-782 -A OUTPUT -o eth1 -d fc00::/7 -j limit-783 -A OUTPUT -o eth1 -d fc00::/7 -j limit-784 -A OUTPUT -o eth1 -d fc00::/7 -j limit-785 -A OUTPUT -o eth1 -d fc00::/7 -j limit-786 -A OUTPUT -o eth1 -d fc00::/7 -j limit-787 -A OUTPUT -o eth1 -d fc00::/7 -j limit-788 -A OUTPUT -o eth1 -d fc00::/7 -j limit-789 -A OUTPUT -o eth1 -d fc00::/7 -j limit-790 -A OUTPUT -o eth1 -d fc00::/7 -j limit-791 -A OUTPUT -o eth1 -d fc00::/7 -j limit-792 -A OUTPUT -o eth1 -d fc00::/7 -j limit-793 -A OUTPUT -o eth1 -d fc00::/7 -j limit-794 -A OUTPUT -o eth1 -d fc00::/7 -j limit-795 -A OUTPUT -o eth1 -d fc00::/7 -j limit-796 -A OUTPUT -o eth1 -d fc00::/7 -j limit-797 -A OUTPUT -o eth1 -d fc00::/7 -j limit-798 -A OUTPUT -o eth1 -d fc00::/7 -j limit-799 -A OUTPUT -o eth1 -d fc00::/7 -j limit-800 -A OUTPUT -o eth1 -d fc00::/7 -j limit-801 -A OUTPUT -o eth1 -d fc00::/7 -j limit-802 -A OUTPUT -o eth1 -d fc00::/7 -j limit-803 -A OUTPUT -o eth1 -d fc00::/7 -j limit-804 -A OUTPUT -o eth1 -d fc00::/7 -j limit-805 -A OUTPUT -o eth1 -d fc00::/7 -j limit-806 -A OUTPUT -o eth1 -d fc00::/7 -j limit-807 -A OUTPUT -o eth1 -d fc00::/7 -j limit-808 -A OUTPUT -o eth1 -d fc00::/7 -j limit-809 -A OUTPUT -o eth1 -d fc00::/7 -j limit-810 -A OUTPUT -o eth1 -d fc00::/7 -j limit-811 -A OUTPUT -o eth1 -d fc00::/7 -j limit-812 -A OUTPUT -o eth1 -d fc00::/7 -j limit-813 -A OUTPUT -o eth1 -d fc00::/7 -j limit-814 -A OUTPUT -o eth1 -d fc00::/7 -j limit-815 -A OUTPUT -o eth1 -d fc00::/7 -j limit-816 -A OUTPUT -o eth1 -d fc00::/7 -j limit-817 -A OUTPUT -o eth1 -d fc00::/7 -j limit-818 -A OUTPUT -o eth1 -d fc00::/7 -j limit-819 -A OUTPUT -o eth1 -d fc00::/7 -j limit-820 -A OUTPUT -o eth1 -d fc00::/7 -j limit-821 -A OUTPUT -o eth1 -d fc00::/7 -j limit-822 -A OUTPUT -o eth1 -d fc00::/7 -j limit-823 -A OUTPUT -o eth1 -d fc00::/7 -j limit-824 -A OUTPUT -o eth1 -d fc00::/7 -j limit-825 -A OUTPUT -o eth1 -d fc00::/7 -j limit-826 -A OUTPUT -o eth1 -d fc00::/7 -j limit-827 -A OUTPUT -o eth1 -d fc00::/7 -j limit-828 -A OUTPUT -o eth1 -d fc00::/7 -j limit-829 -A OUTPUT -o eth1 -d fc00::/7 -j limit-830 -A OUTPUT -o eth1 -d fc00::/7 -j limit-831 -A OUTPUT -o eth1 -d fc00::/7 -j limit-832 -A OUTPUT -o eth1 -d fc00::/7 -j limit-833 -A OUTPUT -o eth1 -d fc00::/7 -j limit-834 -A OUTPUT -o eth1 -d fc00::/7 -j limit-835 -A OUTPUT -o eth1 -d fc00::/7 -j limit-836 -A OUTPUT -o eth1 -d fc00::/7 -j limit-837 -A OUTPUT -o eth1 -d fc00::/7 -j limit-838 -A OUTPUT -o eth1 -d fc00::/7 -j limit-839 -A OUTPUT -o eth1 -d fc00::/7 -j limit-840 -A OUTPUT -o eth1 -d fc00::/7 -j limit-841 -A OUTPUT -o eth1 -d fc00::/7 -j limit-842 -A OUTPUT -o eth1 -d fc00::/7 -j limit-843 -A OUTPUT -o eth1 -d fc00::/7 -j limit-844 -A OUTPUT -o eth1 -d fc00::/7 -j limit-845 -A OUTPUT -o eth1 -d fc00::/7 -j limit-846 -A OUTPUT -o eth1 -d fc00::/7 -j limit-847 -A OUTPUT -o eth1 -d fc00::/7 -j limit-848 -A OUTPUT -o eth1 -d fc00::/7 -j limit-849 -A OUTPUT -o eth1 -d fc00::/7 -j limit-850 -A OUTPUT -o eth1 -d fc00::/7 -j limit-851 -A OUTPUT -o eth1 -d fc00::/7 -j limit-852 -A OUTPUT -o eth1 -d fc00::/7 -j limit-853 -A OUTPUT -o eth1 -d fc00::/7 -j limit-854 -A OUTPUT -o eth1 -d fc00::/7 -j limit-855 -A OUTPUT -o eth1 -d fc00::/7 -j limit-856 -A OUTPUT -o eth1 -d fc00::/7 -j limit-857 -A OUTPUT -o eth1 -d fc00::/7 -j limit-858 -A OUTPUT -o eth1 -d fc00::/7 -j limit-859 -A OUTPUT -o eth1 -d fc00::/7 -j limit-860 -A OUTPUT -o eth1 -d fc00::/7 -j limit-861 -A OUTPUT -o eth1 -d fc00::/7 -j limit-862 -A OUTPUT -o eth1 -d fc00::/7 -j limit-863 -A OUTPUT -o eth1 -d fc00::/7 -j limit-864 -A OUTPUT -o eth1 -d fc00::/7 -j limit-865 -A OUTPUT -o eth1 -d fc00::/7 -j limit-866 -A OUTPUT -o eth1 -d fc00::/7 -j limit-867 -A OUTPUT -o eth1 -d fc00::/7 -j limit-868 -A OUTPUT -o eth1 -d fc00::/7 -j limit-869 -A OUTPUT -o eth1 -d fc00::/7 -j limit-870 -A OUTPUT -o eth1 -d fc00::/7 -j limit-871 -A OUTPUT -o eth1 -d fc00::/7 -j limit-872 -A OUTPUT -o eth1 -d fc00::/7 -j limit-873 -A OUTPUT -o eth1 -d fc00::/7 -j limit-874 -A OUTPUT -o eth1 -d fc00::/7 -j limit-875 -A OUTPUT -o eth1 -d fc00::/7 -j limit-876 -A OUTPUT -o eth1 -d fc00::/7 -j limit-877 -A OUTPUT -o eth1 -d fc00::/7 -j limit-878 -A OUTPUT -o eth1 -d fc00::/7 -j limit-879 -A OUTPUT -o eth1 -d fc00::/7 -j limit-880 -A OUTPUT -o eth1 -d fc00::/7 -j limit-881 -A OUTPUT -o eth1 -d fc00::/7 -j limit-882 -A OUTPUT -o eth1 -d fc00::/7 -j limit-883 -A OUTPUT -o eth1 -d fc00::/7 -j limit-884 -A OUTPUT -o eth1 -d fc00::/7 -j limit-885 -A OUTPUT -o eth1 -d fc00::/7 -j limit-886 -A OUTPUT -o eth1 -d fc00::/7 -j limit-887 -A OUTPUT -o eth1 -d fc00::/7 -j limit-888 -A OUTPUT -o eth1 -d fc00::/7 -j limit-889 -A OUTPUT -o eth1 -d fc00::/7 -j limit-890 -A OUTPUT -o eth1 -d fc00::/7 -j limit-891 -A OUTPUT -o eth1 -d fc00::/7 -j limit-892 -A OUTPUT -o eth1 -d fc00::/7 -j limit-893 -A OUTPUT -o eth1 -d fc00::/7 -j limit-894 -A OUTPUT -o eth1 -d fc00::/7 -j limit-895 -A OUTPUT -o eth1 -d fc00::/7 -j limit-896 -A OUTPUT -o eth1 -d fc00::/7 -j limit-897 -A OUTPUT -o eth1 -d fc00::/7 -j limit-898 -A OUTPUT -o eth1 -d fc00::/7 -j limit-899 -A OUTPUT -o eth1 -d fc00::/7 -j limit-900 -A OUTPUT -o eth1 -d fc00::/7 -j limit-901 -A OUTPUT -o eth1 -d fc00::/7 -j limit-902 -A OUTPUT -o eth1 -d fc00::/7 -j limit-903 -A OUTPUT -o eth1 -d fc00::/7 -j limit-904 -A OUTPUT -o eth1 -d fc00::/7 -j limit-905 -A OUTPUT -o eth1 -d fc00::/7 -j limit-906 -A OUTPUT -o eth1 -d fc00::/7 -j limit-907 -A OUTPUT -o eth1 -d fc00::/7 -j limit-908 -A OUTPUT -o eth1 -d fc00::/7 -j limit-909 -A OUTPUT -o eth1 -d fc00::/7 -j limit-910 -A OUTPUT -o eth1 -d fc00::/7 -j limit-911 -A OUTPUT -o eth1 -d fc00::/7 -j limit-912 -A OUTPUT -o eth1 -d fc00::/7 -j limit-913 -A OUTPUT -o eth1 -d fc00::/7 -j limit-914 -A OUTPUT -o eth1 -d fc00::/7 -j limit-915 -A OUTPUT -o eth1 -d fc00::/7 -j limit-916 -A OUTPUT -o eth1 -d fc00::/7 -j limit-917 -A OUTPUT -o eth1 -d fc00::/7 -j limit-918 -A OUTPUT -o eth1 -d fc00::/7 -j limit-919 -A OUTPUT -o eth1 -d fc00::/7 -j limit-920 -A OUTPUT -o eth1 -d fc00::/7 -j limit-921 -A OUTPUT -o eth1 -d fc00::/7 -j limit-922 -A OUTPUT -o eth1 -d fc00::/7 -j limit-923 -A OUTPUT -o eth1 -d fc00::/7 -j limit-924 -A OUTPUT -o eth1 -d fc00::/7 -j limit-925 -A OUTPUT -o eth1 -d fc00::/7 -j limit-926 -A OUTPUT -o eth1 -d fc00::/7 -j limit-927 -A OUTPUT -o eth1 -d fc00::/7 -j limit-928 -A OUTPUT -o eth1 -d fc00::/7 -j limit-929 -A OUTPUT -o eth1 -d fc00::/7 -j limit-930 -A OUTPUT -o eth1 -d fc00::/7 -j limit-931 -A OUTPUT -o eth1 -d fc00::/7 -j limit-932 -A OUTPUT -o eth1 -d fc00::/7 -j limit-933 -A OUTPUT -o eth1 -d fc00::/7 -j limit-934 -A OUTPUT -o eth1 -d fc00::/7 -j limit-935 -A OUTPUT -o eth1 -d fc00::/7 -j limit-936 -A OUTPUT -o eth1 -d fc00::/7 -j limit-937 -A OUTPUT -o eth1 -d fc00::/7 -j limit-938 -A OUTPUT -o eth1 -d fc00::/7 -j limit-939 -A OUTPUT -o eth1 -d fc00::/7 -j limit-940 -A OUTPUT -o eth1 -d fc00::/7 -j limit-941 -A OUTPUT -o eth1 -d fc00::/7 -j limit-942 -A OUTPUT -o eth1 -d fc00::/7 -j limit-943 -A OUTPUT -o eth1 -d fc00::/7 -j limit-944 -A OUTPUT -o eth1 -d fc00::/7 -j limit-945 -A OUTPUT -o eth1 -d fc00::/7 -j limit-946 -A OUTPUT -o eth1 -d fc00::/7 -j limit-947 -A OUTPUT -o eth1 -d fc00::/7 -j limit-948 -A OUTPUT -o eth1 -d fc00::/7 -j limit-949 -A OUTPUT -o eth1 -d fc00::/7 -j limit-950 -A OUTPUT -o eth1 -d fc00::/7 -j limit-951 -A OUTPUT -o eth1 -d fc00::/7 -j limit-952 -A OUTPUT -o eth1 -d fc00::/7 -j limit-953 -A OUTPUT -o eth1 -d fc00::/7 -j limit-954 -A OUTPUT -o eth1 -d fc00::/7 -j limit-955 -A OUTPUT -o eth1 -d fc00::/7 -j limit-956 -A OUTPUT -o eth1 -d fc00::/7 -j limit-957 -A OUTPUT -o eth1 -d fc00::/7 -j limit-958 -A OUTPUT -o eth1 -d fc00::/7 -j limit-959 -A OUTPUT -o eth1 -d fc00::/7 -j limit-960 -A OUTPUT -o eth1 -d fc00::/7 -j limit-961 -A OUTPUT -o eth1 -d fc00::/7 -j limit-962 -A OUTPUT -o eth1 -d fc00::/7 -j limit-963 -A OUTPUT -o eth1 -d fc00::/7 -j limit-964 -A OUTPUT -o eth1 -d fc00::/7 -j limit-965 -A OUTPUT -o eth1 -d fc00::/7 -j limit-966 -A OUTPUT -o eth1 -d fc00::/7 -j limit-967 -A OUTPUT -o eth1 -d fc00::/7 -j limit-968 -A OUTPUT -o eth1 -d fc00::/7 -j limit-969 -A OUTPUT -o eth1 -d fc00::/7 -j limit-970 -A OUTPUT -o eth1 -d fc00::/7 -j limit-971 -A OUTPUT -o eth1 -d fc00::/7 -j limit-972 -A OUTPUT -o eth1 -d fc00::/7 -j limit-973 -A OUTPUT -o eth1 -d fc00::/7 -j limit-974 -A OUTPUT -o eth1 -d fc00::/7 -j limit-975 -A OUTPUT -o eth1 -d fc00::/7 -j limit-976 -A OUTPUT -o eth1 -d fc00::/7 -j limit-977 -A OUTPUT -o eth1 -d fc00::/7 -j limit-978 -A OUTPUT -o eth1 -d fc00::/7 -j limit-979 -A OUTPUT -o eth1 -d fc00::/7 -j limit-980 -A OUTPUT -o eth1 -d fc00::/7 -j limit-981 -A OUTPUT -o eth1 -d fc00::/7 -j limit-982 -A OUTPUT -o eth1 -d fc00::/7 -j limit-983 -A OUTPUT -o eth1 -d fc00::/7 -j limit-984 -A OUTPUT -o eth1 -d fc00::/7 -j limit-985 -A OUTPUT -o eth1 -d fc00::/7 -j limit-986 -A OUTPUT -o eth1 -d fc00::/7 -j limit-987 -A OUTPUT -o eth1 -d fc00::/7 -j limit-988 -A OUTPUT -o eth1 -d fc00::/7 -j limit-989 -A OUTPUT -o eth1 -d fc00::/7 -j limit-990 -A OUTPUT -o eth1 -d fc00::/7 -j limit-991 -A OUTPUT -o eth1 -d fc00::/7 -j limit-992 -A OUTPUT -o eth1 -d fc00::/7 -j limit-993 -A OUTPUT -o eth1 -d fc00::/7 -j limit-994 -A OUTPUT -o eth1 -d fc00::/7 -j limit-995 -A OUTPUT -o eth1 -d fc00::/7 -j limit-996 -A OUTPUT -o eth1 -d fc00::/7 -j limit-997 -A OUTPUT -o eth1 -d fc00::/7 -j limit-998 -A OUTPUT -o eth1 -d fc00::/7 -j limit-999 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1000 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1001 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1002 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1003 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1004 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1005 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1006 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1008 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1009 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1010 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1011 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1012 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1014 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1015 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1016 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1017 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1018 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1019 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1020 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1021 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1022 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1023 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1024 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1025 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1026 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1028 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1029 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1030 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1031 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1032 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1034 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1035 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1036 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1037 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1038 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1039 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1040 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1041 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1042 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1043 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1044 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1045 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1046 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1048 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1049 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1050 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1051 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1052 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1054 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1055 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1056 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1057 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1058 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1059 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1060 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1061 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1062 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1063 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1064 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1065 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1066 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1068 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1069 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1070 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1071 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1072 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1074 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1075 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1076 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1077 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1078 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1079 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1080 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1081 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1082 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1083 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1084 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1085 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1086 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1087 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1088 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1089 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1090 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1091 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1092 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1093 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1094 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1095 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1096 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1098 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1099 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1100 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1101 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1102 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-587 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1104 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1105 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1106 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1107 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1108 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1109 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1110 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1111 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1112 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1113 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1114 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1115 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1116 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-601 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1118 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1119 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1120 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1121 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1122 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-607 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1124 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1125 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1126 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1127 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1128 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1129 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1130 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1131 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1132 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1133 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1134 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1135 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1136 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-621 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1138 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1139 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1140 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1141 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1142 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-627 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1144 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1145 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1146 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1147 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1148 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1149 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1150 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1151 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1152 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1153 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1154 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1155 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1156 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-641 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1158 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1159 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1160 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1161 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1162 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-647 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1164 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1165 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1166 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1167 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1168 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1169 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1170 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1171 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1172 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1173 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1174 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1175 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1176 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1177 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1178 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1179 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1180 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1181 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1182 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1183 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1184 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1185 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1186 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1188 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1189 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1190 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1191 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1192 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-677 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1194 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1195 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1196 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1197 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1198 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1199 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1200 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1201 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1202 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1203 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1204 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1205 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1206 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1208 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1209 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1210 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1211 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1212 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-697 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1214 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1215 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1216 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1217 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1218 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1219 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1220 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1221 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1222 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1223 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1224 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1225 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1226 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-711 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1228 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1229 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1230 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1231 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1232 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-717 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1234 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1235 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1236 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1237 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1238 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1239 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1240 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1241 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1242 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1243 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1244 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1245 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1246 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1248 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1249 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1250 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1251 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1252 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-737 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1254 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1255 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1256 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1257 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1258 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1259 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1260 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1261 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1262 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1263 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1264 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1265 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1266 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1267 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1268 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1269 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1270 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1271 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1272 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1273 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1274 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1275 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1276 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1278 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1279 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1280 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1281 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1282 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1284 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1285 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1286 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1287 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1288 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1289 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1290 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1291 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1292 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1293 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1294 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1295 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1296 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1298 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1299 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1300 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1301 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1302 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1304 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1305 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1306 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1307 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1308 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1309 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1310 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1311 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1312 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1313 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1314 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1315 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1316 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1318 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1319 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1320 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1321 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1322 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1324 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1325 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1326 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1327 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1328 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1329 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1330 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1331 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1332 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1333 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1334 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1335 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1336 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1338 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1339 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1340 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1341 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1342 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1344 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1345 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1346 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1347 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1348 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1349 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1350 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1351 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1352 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1353 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1354 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1355 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1356 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1357 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1358 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1359 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1360 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1361 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1362 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1363 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1364 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1365 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1366 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-761 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1368 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1369 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1370 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1371 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1372 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-767 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1374 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1375 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1376 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1377 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1378 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1379 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1380 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1381 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1382 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1383 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1384 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1385 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1386 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-781 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1388 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1389 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1390 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1391 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1392 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-787 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1394 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1395 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1396 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1397 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1398 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1399 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1400 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1401 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1402 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1403 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1404 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1405 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1406 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-801 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1408 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1409 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1410 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1411 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1412 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-807 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1414 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1415 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1416 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1417 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1418 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1419 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1420 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1421 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1422 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1423 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1424 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1425 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1426 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-821 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1428 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1429 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1430 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1431 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1432 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-827 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1434 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1435 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1436 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1437 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1438 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1439 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1440 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1441 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1442 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1443 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1444 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1445 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1446 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1447 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1448 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1449 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1450 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1451 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1452 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1453 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1454 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1455 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1456 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1458 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1459 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1460 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1461 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1462 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1464 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1465 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1466 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1467 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1468 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1469 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1470 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1471 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1472 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1473 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1474 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1475 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1476 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1478 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1479 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1480 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1481 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1482 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1484 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1485 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1486 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1487 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1488 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1489 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1490 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1491 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1492 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1493 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1494 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1495 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1496 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1498 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1499 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1500 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1501 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1502 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1504 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1505 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1506 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1507 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1508 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1509 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1510 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1511 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1512 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1513 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1514 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1515 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1516 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1518 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1519 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1520 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1521 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1522 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1524 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1525 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1526 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1527 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1528 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1529 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1530 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1531 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1532 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1533 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1534 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1535 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1536 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1537 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1538 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1539 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1540 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1541 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1542 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1543 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1544 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1545 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1546 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-851 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1548 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1549 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1550 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1551 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1552 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-857 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1554 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1555 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1556 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1557 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1558 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1559 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1560 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1561 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1562 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1563 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1564 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1565 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1566 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-871 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1568 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1569 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1570 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1571 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1572 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-877 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1574 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1575 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1576 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1577 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1578 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1579 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1580 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1581 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1582 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1583 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1584 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1585 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1586 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-891 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1588 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1589 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1590 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1591 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1592 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-897 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1594 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1595 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1596 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1597 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1598 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1599 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1600 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1601 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1602 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1603 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1604 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1605 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1606 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-911 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1608 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1609 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1610 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1611 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1612 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-917 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1614 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1615 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1616 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1617 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1618 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1619 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1620 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1621 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1622 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1623 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1624 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1625 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1626 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1627 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1628 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1629 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1630 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1631 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1632 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1633 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1634 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1635 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1636 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-941 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1638 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1639 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1640 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1641 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1642 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-947 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1644 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1645 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1646 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1647 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1648 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1649 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1650 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1651 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1652 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1653 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1654 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1655 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1656 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-961 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1658 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1659 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1660 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1661 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1662 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-967 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1664 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1665 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1666 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1667 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1668 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1669 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1670 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1671 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1672 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1673 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1674 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1675 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1676 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-981 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1678 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1679 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1680 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1681 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1682 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-987 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1684 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1685 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1686 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1687 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1688 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1689 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1690 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1691 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1692 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1693 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1694 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1695 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1696 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1001 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1698 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1699 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1700 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1701 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1702 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1007 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1704 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1705 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1706 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1707 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1708 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1709 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1710 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1711 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1712 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1713 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1714 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1715 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1716 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1717 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1718 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1719 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1720 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1721 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1722 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1723 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1724 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1725 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1726 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1728 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1729 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1730 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1731 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1732 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1734 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1735 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1736 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1737 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1738 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1739 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1740 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1741 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1742 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1743 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1744 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1745 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1746 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1748 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1749 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1750 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1751 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1752 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1754 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1755 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1756 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1757 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1758 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1759 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1760 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1761 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1762 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1763 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1764 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1765 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1766 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1768 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1769 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1770 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1771 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1772 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1774 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1775 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1776 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1777 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1778 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1779 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1780 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1781 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1782 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1783 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1784 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1785 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1786 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1788 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1789 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1790 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1791 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1792 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A OUTPUT -o eth1 -d fc00::/7 -j limit-1794 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1795 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1796 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1797 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1798 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1799 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1800 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1801 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1802 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1803 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1804 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1805 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1806 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1807 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1808 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1809 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1810 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1811 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1812 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1813 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1814 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1815 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1816 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1031 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1818 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1819 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1820 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1821 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1822 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1037 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1824 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1825 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1826 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1827 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1828 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1829 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1830 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1831 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1832 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1833 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1834 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1835 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1836 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1051 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1838 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1839 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1840 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1841 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1842 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1057 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1844 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1845 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1846 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1847 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1848 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1849 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1850 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1851 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1852 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1853 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1854 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1855 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1856 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1071 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1858 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1859 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1860 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1861 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1862 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1077 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1864 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1865 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1866 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1867 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1868 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1869 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1870 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1871 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1872 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1873 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1874 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1875 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1876 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1091 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1878 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1879 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1880 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1881 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1882 -A OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1097 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1884 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1885 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1886 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1887 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1888 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1889 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1890 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1891 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1892 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1893 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1894 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1895 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1896 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1897 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1898 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1899 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1900 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1901 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1902 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1903 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1904 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1905 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1906 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1907 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1908 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1909 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1910 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1911 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1912 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1913 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1914 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1915 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1916 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1917 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1918 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1919 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1920 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1921 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1922 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1923 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1924 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1925 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1926 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1927 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1928 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1929 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1930 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1931 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1932 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1933 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1934 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1935 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1936 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1937 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1938 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1939 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1940 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1941 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1942 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1943 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1944 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1945 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1946 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1947 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1948 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1949 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1950 -A OUTPUT -o eth1 -d fc00::/7 -j limit-1951 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-0 -A OUTPUT -j logaccept-final-1 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-2 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-3 -A OUTPUT -j logaccept-final-4 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-5 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-6 -A OUTPUT -j logaccept-final-7 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-8 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-9 -A OUTPUT -j logaccept-final-10 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-11 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-12 -A OUTPUT -j logaccept-final-13 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-14 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-15 -A OUTPUT -j logaccept-final-16 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-17 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-18 -A OUTPUT -j logaccept-final-19 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-20 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-21 -A OUTPUT -j logaccept-final-22 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-23 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-24 -A OUTPUT -j logaccept-final-25 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-26 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-27 -A OUTPUT -j logaccept-final-28 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-29 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-30 -A OUTPUT -j logaccept-final-31 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-32 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-33 -A OUTPUT -j logaccept-final-34 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-35 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-36 -A OUTPUT -j logaccept-final-37 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-38 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-39 -A OUTPUT -j logaccept-final-40 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-41 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-42 -A OUTPUT -j logaccept-final-43 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-44 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-45 -A OUTPUT -j logaccept-final-46 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-47 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-48 -A OUTPUT -j logaccept-final-49 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-50 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-51 -A OUTPUT -j logaccept-final-52 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-53 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-54 -A OUTPUT -j logaccept-final-55 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-56 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-57 -A OUTPUT -j logaccept-final-58 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-59 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-60 -A OUTPUT -j logaccept-final-61 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-62 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-63 -A OUTPUT -j logaccept-final-64 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-65 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-66 -A OUTPUT -j logaccept-final-67 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-68 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-69 -A OUTPUT -j logaccept-final-70 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-71 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-72 -A OUTPUT -j logaccept-final-73 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-74 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-75 -A OUTPUT -j logaccept-final-76 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-77 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-78 -A OUTPUT -j logaccept-final-79 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-80 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-81 -A OUTPUT -j logaccept-final-82 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-83 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-84 -A OUTPUT -j logaccept-final-85 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-86 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-87 -A OUTPUT -j logaccept-final-88 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-89 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-90 -A OUTPUT -j logaccept-final-91 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-92 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-93 -A OUTPUT -j logaccept-final-94 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-95 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-96 -A OUTPUT -j logaccept-final-97 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-98 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-99 -A OUTPUT -j logaccept-final-100 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-101 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-102 -A OUTPUT -j logaccept-final-103 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-104 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-105 -A OUTPUT -j logaccept-final-106 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-107 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-108 -A OUTPUT -j logaccept-final-109 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-110 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-111 -A OUTPUT -j logaccept-final-112 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-113 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-114 -A OUTPUT -j logaccept-final-115 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-116 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-117 -A OUTPUT -j logaccept-final-118 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-119 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-120 -A OUTPUT -j logaccept-final-121 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-122 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-123 -A OUTPUT -j logaccept-final-124 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-125 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-126 -A OUTPUT -j logaccept-final-127 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-128 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-129 -A OUTPUT -j logaccept-final-130 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-131 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-132 -A OUTPUT -j logaccept-final-133 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-134 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-135 -A OUTPUT -j logaccept-final-136 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-137 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-138 -A OUTPUT -j logaccept-final-139 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-140 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-141 -A OUTPUT -j logaccept-final-142 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-143 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-144 -A OUTPUT -j logaccept-final-145 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-146 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-147 -A OUTPUT -j logaccept-final-148 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-149 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-150 -A OUTPUT -j logaccept-final-151 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-152 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-153 -A OUTPUT -j logaccept-final-154 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-155 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-156 -A OUTPUT -j logaccept-final-157 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-158 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-159 -A OUTPUT -j logaccept-final-160 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-161 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-162 -A OUTPUT -j logaccept-final-163 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-164 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-165 -A OUTPUT -j logaccept-final-166 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-167 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-168 -A OUTPUT -j logaccept-final-169 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-170 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-171 -A OUTPUT -j logaccept-final-172 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-173 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-174 -A OUTPUT -j logaccept-final-175 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-176 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-177 -A OUTPUT -j logaccept-final-178 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-179 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-180 -A OUTPUT -j logaccept-final-181 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-182 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-183 -A OUTPUT -j logaccept-final-184 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-185 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-186 -A OUTPUT -j logaccept-final-187 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-188 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-189 -A OUTPUT -j logaccept-final-190 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-191 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-192 -A OUTPUT -j logaccept-final-193 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-194 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-195 -A OUTPUT -j logaccept-final-196 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-197 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-198 -A OUTPUT -j logaccept-final-199 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-200 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-201 -A OUTPUT -j logaccept-final-202 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-203 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-204 -A OUTPUT -j logaccept-final-205 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-206 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-207 -A OUTPUT -j logaccept-final-208 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-209 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-210 -A OUTPUT -j logaccept-final-211 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-212 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-213 -A OUTPUT -j logaccept-final-214 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-215 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-216 -A OUTPUT -j logaccept-final-217 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-218 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-219 -A OUTPUT -j logaccept-final-220 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-221 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-222 -A OUTPUT -j logaccept-final-223 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-224 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-225 -A OUTPUT -j logaccept-final-226 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-227 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-228 -A OUTPUT -j logaccept-final-229 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-230 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-231 -A OUTPUT -j logaccept-final-232 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-233 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-234 -A OUTPUT -j logaccept-final-235 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-236 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-237 -A OUTPUT -j logaccept-final-238 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-239 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-240 -A OUTPUT -j logaccept-final-241 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-242 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-243 -A OUTPUT -j logaccept-final-244 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-245 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-246 -A OUTPUT -j logaccept-final-247 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-248 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-249 -A OUTPUT -j logaccept-final-250 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-251 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-252 -A OUTPUT -j logaccept-final-253 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-254 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-255 -A OUTPUT -j logaccept-final-256 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-257 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-258 -A OUTPUT -j logaccept-final-259 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-260 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-261 -A OUTPUT -j logaccept-final-262 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-263 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-264 -A OUTPUT -j logaccept-final-265 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-266 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-267 -A OUTPUT -j logaccept-final-268 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-269 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-270 -A OUTPUT -j logaccept-final-271 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-272 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-273 -A OUTPUT -j logaccept-final-274 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-275 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-276 -A OUTPUT -j logaccept-final-277 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-278 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-279 -A OUTPUT -j logaccept-final-280 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-281 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-282 -A OUTPUT -j logaccept-final-283 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-284 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-285 -A OUTPUT -j logaccept-final-286 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-287 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-288 -A OUTPUT -j logaccept-final-289 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-290 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-291 -A OUTPUT -j logaccept-final-292 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-293 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-294 -A OUTPUT -j logaccept-final-295 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-296 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-297 -A OUTPUT -j logaccept-final-298 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-299 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-300 -A OUTPUT -j logaccept-final-301 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-302 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-303 -A OUTPUT -j logaccept-final-304 -A OUTPUT -j ACCEPT -A OUTPUT -j logaccept-final-305 -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -o eth0 -p udp --sport 123 -j ACCEPT -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:B --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:C --rsource --mask fe00:: --set -A OUTPUT -m recent --name user:D --rsource --mask ffff:ffff:ffff:ffc0:: --set -A OUTPUT -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A OUTPUT -j ACCEPT -A OUTPUT -j logdrop-1650 -A OUTPUT -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-66 -A OUTPUT -j logdrop-1651 -A OUTPUT -j logpass-0 -A OUTPUT -j logaccept-67 -A OUTPUT -j logdrop-1652 -A OUTPUT -j logpass-1 -A OUTPUT -j logaccept-68 -A OUTPUT -j logdrop-1653 -A OUTPUT -j logpass-2 -A OUTPUT -j ACCEPT -A OUTPUT -j DROP -A OUTPUT -A OUTPUT -j logaccept-69 -A OUTPUT -j logdrop-1654 -A OUTPUT -j ACCEPT -A OUTPUT -o eth1 -d fc00::/7 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 1 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 2 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 3 -j ACCEPT -A icmp-routing -p icmpv6 --icmpv6-type 4 -j ACCEPT -A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-0 -A limit-0 -m recent --name limit-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1 -A limit-1 -m recent --name limit-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-10 -m recent --name limit-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-10 -A limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1000 -j TEE --gateway fc00::2 -A limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1006 -j ACCEPT -A limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1008 -m limit --limit 1/second -j LOG -A limit-1008 -j ACCEPT -A limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1009 -m limit --limit 1/second -j LOG -A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-11 -A limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1010 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1010 -j TEE --gateway fc00::2 -A limit-1010 -j ACCEPT -A limit-1011 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1011 -j TEE --gateway fc00::2 -A limit-1012 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1012 -j ACCEPT -A limit-1014 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1014 -j ACCEPT -A limit-1015 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1018 -m limit --limit 1/second -j LOG -A limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-12 -A limit-102 -m limit --limit 1/second -j LOG -A limit-102 -m recent --name limit-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1020 -j TEE --gateway fc00::2 -A limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1022 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1023 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1024 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1025 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1026 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1026 -j ACCEPT -A limit-1028 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1028 -m limit --limit 1/second -j LOG -A limit-1028 -j ACCEPT -A limit-1029 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1029 -m limit --limit 1/second -j LOG -A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-13 -A limit-103 -m recent --name limit-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1030 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1030 -j TEE --gateway fc00::2 -A limit-1030 -j ACCEPT -A limit-1031 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1031 -j TEE --gateway fc00::2 -A limit-1032 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1032 -j ACCEPT -A limit-1034 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1034 -j ACCEPT -A limit-1035 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1036 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1036 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1037 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1037 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1038 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1038 -m limit --limit 1/second -j LOG -A limit-1038 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1039 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1039 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-14 -A limit-104 -j TEE --gateway fc00::2 -A limit-104 -m recent --name limit-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1040 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1040 -j TEE --gateway fc00::2 -A limit-1040 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1041 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1041 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1042 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1042 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1043 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1043 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1044 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1044 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1045 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1046 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1046 -j ACCEPT -A limit-1048 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1048 -m limit --limit 1/second -j LOG -A limit-1048 -j ACCEPT -A limit-1049 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1049 -m limit --limit 1/second -j LOG -A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-15 -A limit-105 -m recent --name limit-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1050 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1050 -j TEE --gateway fc00::2 -A limit-1050 -j ACCEPT -A limit-1051 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1051 -j TEE --gateway fc00::2 -A limit-1052 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1052 -j ACCEPT -A limit-1054 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1054 -j ACCEPT -A limit-1055 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1056 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1056 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1057 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1057 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1058 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1058 -m limit --limit 1/second -j LOG -A limit-1058 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1059 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1059 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-16 -A limit-106 -m recent --name limit-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1060 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1060 -j TEE --gateway fc00::2 -A limit-1060 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1061 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1061 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1062 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1062 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1063 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1063 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1064 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1064 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1065 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1066 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1066 -j ACCEPT -A limit-1068 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1068 -m limit --limit 1/second -j LOG -A limit-1068 -j ACCEPT -A limit-1069 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1069 -m limit --limit 1/second -j LOG -A limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-17 -A limit-107 -m recent --name limit-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1070 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1070 -j TEE --gateway fc00::2 -A limit-1070 -j ACCEPT -A limit-1071 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1071 -j TEE --gateway fc00::2 -A limit-1072 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1072 -j ACCEPT -A limit-1074 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1074 -j ACCEPT -A limit-1075 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-560 -A limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-561 -A limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-562 -A limit-1078 -m limit --limit 1/second -j LOG -A limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-563 -A limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-18 -A limit-108 -m recent --name limit-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-564 -A limit-1080 -j TEE --gateway fc00::2 -A limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-565 -A limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-566 -A limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-567 -A limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-568 -A limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-569 -A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-570 -A limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-571 -A limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-572 -A limit-1088 -m limit --limit 1/second -j LOG -A limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-573 -A limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-109 -m recent --name limit-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-19 -A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-574 -A limit-1090 -j TEE --gateway fc00::2 -A limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-575 -A limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-576 -A limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-577 -A limit-1093 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-578 -A limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-579 -A limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-580 -A limit-1096 -j ACCEPT -A limit-1098 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-582 -A limit-1098 -m limit --limit 1/second -j LOG -A limit-1098 -j ACCEPT -A limit-1099 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-583 -A limit-1099 -m limit --limit 1/second -j LOG -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-11 -m recent --name limit-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-20 -A limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1100 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-584 -A limit-1100 -j TEE --gateway fc00::2 -A limit-1100 -j ACCEPT -A limit-1101 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-585 -A limit-1101 -j TEE --gateway fc00::2 -A limit-1102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-586 -A limit-1102 -j ACCEPT -A limit-1104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-588 -A limit-1104 -j ACCEPT -A limit-1105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-589 -A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-590 -A limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-591 -A limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-592 -A limit-1108 -m limit --limit 1/second -j LOG -A limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-593 -A limit-1109 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-21 -A limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-594 -A limit-1110 -j TEE --gateway fc00::2 -A limit-1110 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-595 -A limit-1111 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-596 -A limit-1112 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-597 -A limit-1113 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-598 -A limit-1114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-599 -A limit-1116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-600 -A limit-1116 -j ACCEPT -A limit-1118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-602 -A limit-1118 -m limit --limit 1/second -j LOG -A limit-1118 -j ACCEPT -A limit-1119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-603 -A limit-1119 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-22 -A limit-112 -m limit --limit 1/second -j LOG -A limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-604 -A limit-1120 -j TEE --gateway fc00::2 -A limit-1120 -j ACCEPT -A limit-1121 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-605 -A limit-1121 -j TEE --gateway fc00::2 -A limit-1122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-606 -A limit-1122 -j ACCEPT -A limit-1124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-608 -A limit-1124 -j ACCEPT -A limit-1125 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-609 -A limit-1126 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-610 -A limit-1126 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1127 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-611 -A limit-1127 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1128 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-612 -A limit-1128 -m limit --limit 1/second -j LOG -A limit-1128 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1129 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-613 -A limit-1129 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-23 -A limit-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1130 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-614 -A limit-1130 -j TEE --gateway fc00::2 -A limit-1130 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1131 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-615 -A limit-1131 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1132 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-616 -A limit-1132 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1133 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-617 -A limit-1133 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1134 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-618 -A limit-1134 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1135 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-619 -A limit-1136 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-620 -A limit-1136 -j ACCEPT -A limit-1138 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-622 -A limit-1138 -m limit --limit 1/second -j LOG -A limit-1138 -j ACCEPT -A limit-1139 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-623 -A limit-1139 -m limit --limit 1/second -j LOG -A limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-24 -A limit-114 -j TEE --gateway fc00::2 -A limit-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1140 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-624 -A limit-1140 -j TEE --gateway fc00::2 -A limit-1140 -j ACCEPT -A limit-1141 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-625 -A limit-1141 -j TEE --gateway fc00::2 -A limit-1142 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-626 -A limit-1142 -j ACCEPT -A limit-1144 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-628 -A limit-1144 -j ACCEPT -A limit-1145 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-629 -A limit-1146 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-630 -A limit-1146 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1147 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-631 -A limit-1147 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1148 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-632 -A limit-1148 -m limit --limit 1/second -j LOG -A limit-1148 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1149 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-633 -A limit-1149 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-25 -A limit-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1150 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-634 -A limit-1150 -j TEE --gateway fc00::2 -A limit-1150 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1151 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-635 -A limit-1151 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1152 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-636 -A limit-1152 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1153 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-637 -A limit-1153 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1154 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-638 -A limit-1154 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1155 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-639 -A limit-1156 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-640 -A limit-1156 -j ACCEPT -A limit-1158 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-642 -A limit-1158 -m limit --limit 1/second -j LOG -A limit-1158 -j ACCEPT -A limit-1159 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-643 -A limit-1159 -m limit --limit 1/second -j LOG -A limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-26 -A limit-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1160 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-644 -A limit-1160 -j TEE --gateway fc00::2 -A limit-1160 -j ACCEPT -A limit-1161 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-645 -A limit-1161 -j TEE --gateway fc00::2 -A limit-1162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-646 -A limit-1162 -j ACCEPT -A limit-1164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-648 -A limit-1164 -j ACCEPT -A limit-1165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-649 -A limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-650 -A limit-1166 -m recent --name limit-1166 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-651 -A limit-1167 -m recent --name limit-1167 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-652 -A limit-1168 -m limit --limit 1/second -j LOG -A limit-1168 -m recent --name limit-1168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-653 -A limit-1169 -m recent --name limit-1169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-27 -A limit-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-654 -A limit-1170 -j TEE --gateway fc00::2 -A limit-1170 -m recent --name limit-1170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-655 -A limit-1171 -m recent --name limit-1171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-656 -A limit-1172 -m recent --name limit-1172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-657 -A limit-1173 -m recent --name limit-1173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-658 -A limit-1174 -m recent --name limit-1174 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1175 -m recent --name limit-1175 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-659 -A limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-660 -A limit-1176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-661 -A limit-1177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-662 -A limit-1178 -m limit --limit 1/second -j LOG -A limit-1178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-663 -A limit-1179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-28 -A limit-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-664 -A limit-1180 -j TEE --gateway fc00::2 -A limit-1180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-665 -A limit-1181 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-666 -A limit-1182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-667 -A limit-1183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-668 -A limit-1184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1185 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-669 -A limit-1186 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-670 -A limit-1186 -j ACCEPT -A limit-1188 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-672 -A limit-1188 -m limit --limit 1/second -j LOG -A limit-1188 -j ACCEPT -A limit-1189 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-673 -A limit-1189 -m limit --limit 1/second -j LOG -A limit-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-29 -A limit-1190 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-674 -A limit-1190 -j TEE --gateway fc00::2 -A limit-1190 -j ACCEPT -A limit-1191 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-675 -A limit-1191 -j TEE --gateway fc00::2 -A limit-1192 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-676 -A limit-1192 -j ACCEPT -A limit-1194 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-678 -A limit-1194 -j ACCEPT -A limit-1195 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-679 -A limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-680 -A limit-1196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-681 -A limit-1197 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-682 -A limit-1198 -m limit --limit 1/second -j LOG -A limit-1198 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-683 -A limit-1199 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-12 -m limit --limit 1/second -j LOG -A limit-12 -m recent --name limit-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-30 -A limit-120 -j ACCEPT -A limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-684 -A limit-1200 -j TEE --gateway fc00::2 -A limit-1200 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-685 -A limit-1201 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-686 -A limit-1202 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-687 -A limit-1203 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-688 -A limit-1204 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1205 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-689 -A limit-1206 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-690 -A limit-1206 -j ACCEPT -A limit-1208 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-692 -A limit-1208 -m limit --limit 1/second -j LOG -A limit-1208 -j ACCEPT -A limit-1209 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-693 -A limit-1209 -m limit --limit 1/second -j LOG -A limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-31 -A limit-1210 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-694 -A limit-1210 -j TEE --gateway fc00::2 -A limit-1210 -j ACCEPT -A limit-1211 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-695 -A limit-1211 -j TEE --gateway fc00::2 -A limit-1212 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-696 -A limit-1212 -j ACCEPT -A limit-1214 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-698 -A limit-1214 -j ACCEPT -A limit-1215 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-699 -A limit-1216 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-700 -A limit-1216 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1217 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-701 -A limit-1217 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1218 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-702 -A limit-1218 -m limit --limit 1/second -j LOG -A limit-1218 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1219 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-703 -A limit-1219 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32 -A limit-122 -m limit --limit 1/second -j LOG -A limit-122 -j ACCEPT -A limit-1220 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-704 -A limit-1220 -j TEE --gateway fc00::2 -A limit-1220 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1221 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-705 -A limit-1221 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1222 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-706 -A limit-1222 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1223 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-707 -A limit-1223 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1224 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-708 -A limit-1224 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1225 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-709 -A limit-1226 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-710 -A limit-1226 -j ACCEPT -A limit-1228 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-712 -A limit-1228 -m limit --limit 1/second -j LOG -A limit-1228 -j ACCEPT -A limit-1229 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-713 -A limit-1229 -m limit --limit 1/second -j LOG -A limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-33 -A limit-123 -m limit --limit 1/second -j LOG -A limit-1230 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-714 -A limit-1230 -j TEE --gateway fc00::2 -A limit-1230 -j ACCEPT -A limit-1231 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-715 -A limit-1231 -j TEE --gateway fc00::2 -A limit-1232 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-716 -A limit-1232 -j ACCEPT -A limit-1234 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-718 -A limit-1234 -j ACCEPT -A limit-1235 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-719 -A limit-1236 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-720 -A limit-1236 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1237 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-721 -A limit-1237 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1238 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-722 -A limit-1238 -m limit --limit 1/second -j LOG -A limit-1238 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1239 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-723 -A limit-1239 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-34 -A limit-124 -j TEE --gateway fc00::2 -A limit-124 -j ACCEPT -A limit-1240 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-724 -A limit-1240 -j TEE --gateway fc00::2 -A limit-1240 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1241 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-725 -A limit-1241 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1242 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-726 -A limit-1242 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1243 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-727 -A limit-1243 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1244 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-728 -A limit-1244 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1245 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-729 -A limit-1246 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-730 -A limit-1246 -j ACCEPT -A limit-1248 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-732 -A limit-1248 -m limit --limit 1/second -j LOG -A limit-1248 -j ACCEPT -A limit-1249 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-733 -A limit-1249 -m limit --limit 1/second -j LOG -A limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-35 -A limit-125 -j TEE --gateway fc00::2 -A limit-1250 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-734 -A limit-1250 -j TEE --gateway fc00::2 -A limit-1250 -j ACCEPT -A limit-1251 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-735 -A limit-1251 -j TEE --gateway fc00::2 -A limit-1252 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-736 -A limit-1252 -j ACCEPT -A limit-1254 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-738 -A limit-1254 -j ACCEPT -A limit-1255 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-739 -A limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1256 -m recent --name limit-1256 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1257 -m recent --name limit-1257 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1258 -m limit --limit 1/second -j LOG -A limit-1258 -m recent --name limit-1258 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1259 -m recent --name limit-1259 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 -A limit-126 -j ACCEPT -A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1260 -j TEE --gateway fc00::2 -A limit-1260 -m recent --name limit-1260 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1261 -m recent --name limit-1261 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1262 -m recent --name limit-1262 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1263 -m recent --name limit-1263 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1264 -m recent --name limit-1264 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1265 -m recent --name limit-1265 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1268 -m limit --limit 1/second -j LOG -A limit-1268 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1269 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-127 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-37 -A limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1270 -j TEE --gateway fc00::2 -A limit-1270 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1271 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1272 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1273 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1274 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1275 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1276 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1276 -j ACCEPT -A limit-1278 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1278 -m limit --limit 1/second -j LOG -A limit-1278 -j ACCEPT -A limit-1279 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1279 -m limit --limit 1/second -j LOG -A limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-38 -A limit-128 -j ACCEPT -A limit-1280 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1280 -j TEE --gateway fc00::2 -A limit-1280 -j ACCEPT -A limit-1281 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1281 -j TEE --gateway fc00::2 -A limit-1282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1282 -j ACCEPT -A limit-1284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1284 -j ACCEPT -A limit-1285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1286 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1287 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1288 -m limit --limit 1/second -j LOG -A limit-1288 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1289 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-39 -A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1290 -j TEE --gateway fc00::2 -A limit-1290 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1291 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1292 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1293 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1296 -j ACCEPT -A limit-1298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1298 -m limit --limit 1/second -j LOG -A limit-1298 -j ACCEPT -A limit-1299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1299 -m limit --limit 1/second -j LOG -A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-13 -m recent --name limit-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-40 -A limit-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1300 -j TEE --gateway fc00::2 -A limit-1300 -j ACCEPT -A limit-1301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1301 -j TEE --gateway fc00::2 -A limit-1302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1302 -j ACCEPT -A limit-1304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1304 -j ACCEPT -A limit-1305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1307 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1308 -m limit --limit 1/second -j LOG -A limit-1308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-41 -A limit-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1310 -j TEE --gateway fc00::2 -A limit-1310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1311 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1312 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1312 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1313 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1313 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1314 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1314 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1315 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1316 -j ACCEPT -A limit-1318 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1318 -m limit --limit 1/second -j LOG -A limit-1318 -j ACCEPT -A limit-1319 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1319 -m limit --limit 1/second -j LOG -A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-42 -A limit-132 -m limit --limit 1/second -j LOG -A limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1320 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1320 -j TEE --gateway fc00::2 -A limit-1320 -j ACCEPT -A limit-1321 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1321 -j TEE --gateway fc00::2 -A limit-1322 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1322 -j ACCEPT -A limit-1324 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1324 -j ACCEPT -A limit-1325 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1326 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1326 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1327 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1327 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1328 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1328 -m limit --limit 1/second -j LOG -A limit-1328 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1329 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1329 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-43 -A limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1330 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1330 -j TEE --gateway fc00::2 -A limit-1330 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1331 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1331 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1332 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1332 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1333 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1333 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1334 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1334 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1335 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-1336 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1336 -j ACCEPT -A limit-1338 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1338 -m limit --limit 1/second -j LOG -A limit-1338 -j ACCEPT -A limit-1339 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1339 -m limit --limit 1/second -j LOG -A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-44 -A limit-134 -j TEE --gateway fc00::2 -A limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1340 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1340 -j TEE --gateway fc00::2 -A limit-1340 -j ACCEPT -A limit-1341 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1341 -j TEE --gateway fc00::2 -A limit-1342 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1342 -j ACCEPT -A limit-1344 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1344 -j ACCEPT -A limit-1345 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-740 -A limit-1346 -m recent --name limit-1346 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-741 -A limit-1347 -m recent --name limit-1347 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-742 -A limit-1348 -m limit --limit 1/second -j LOG -A limit-1348 -m recent --name limit-1348 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-743 -A limit-1349 -m recent --name limit-1349 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-45 -A limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-744 -A limit-1350 -j TEE --gateway fc00::2 -A limit-1350 -m recent --name limit-1350 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-745 -A limit-1351 -m recent --name limit-1351 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-746 -A limit-1352 -m recent --name limit-1352 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-747 -A limit-1353 -m recent --name limit-1353 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-748 -A limit-1354 -m recent --name limit-1354 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1355 -m recent --name limit-1355 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-749 -A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-750 -A limit-1356 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-751 -A limit-1357 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-752 -A limit-1358 -m limit --limit 1/second -j LOG -A limit-1358 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-753 -A limit-1359 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-46 -A limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-754 -A limit-1360 -j TEE --gateway fc00::2 -A limit-1360 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-755 -A limit-1361 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-756 -A limit-1362 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-757 -A limit-1363 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-758 -A limit-1364 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1365 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-759 -A limit-1366 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-760 -A limit-1366 -j ACCEPT -A limit-1368 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-762 -A limit-1368 -m limit --limit 1/second -j LOG -A limit-1368 -j ACCEPT -A limit-1369 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-763 -A limit-1369 -m limit --limit 1/second -j LOG -A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-47 -A limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-764 -A limit-1370 -j TEE --gateway fc00::2 -A limit-1370 -j ACCEPT -A limit-1371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-765 -A limit-1371 -j TEE --gateway fc00::2 -A limit-1372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-766 -A limit-1372 -j ACCEPT -A limit-1374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-768 -A limit-1374 -j ACCEPT -A limit-1375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-769 -A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-770 -A limit-1376 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-771 -A limit-1377 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-772 -A limit-1378 -m limit --limit 1/second -j LOG -A limit-1378 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-773 -A limit-1379 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-48 -A limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-774 -A limit-1380 -j TEE --gateway fc00::2 -A limit-1380 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-775 -A limit-1381 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-776 -A limit-1382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-777 -A limit-1383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-778 -A limit-1384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-779 -A limit-1386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-780 -A limit-1386 -j ACCEPT -A limit-1388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-782 -A limit-1388 -m limit --limit 1/second -j LOG -A limit-1388 -j ACCEPT -A limit-1389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-783 -A limit-1389 -m limit --limit 1/second -j LOG -A limit-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-49 -A limit-1390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-784 -A limit-1390 -j TEE --gateway fc00::2 -A limit-1390 -j ACCEPT -A limit-1391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-785 -A limit-1391 -j TEE --gateway fc00::2 -A limit-1392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-786 -A limit-1392 -j ACCEPT -A limit-1394 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-788 -A limit-1394 -j ACCEPT -A limit-1395 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-789 -A limit-1396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-790 -A limit-1396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-791 -A limit-1397 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-792 -A limit-1398 -m limit --limit 1/second -j LOG -A limit-1398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-793 -A limit-1399 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-14 -j TEE --gateway fc00::2 -A limit-14 -m recent --name limit-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-50 -A limit-140 -j ACCEPT -A limit-1400 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-794 -A limit-1400 -j TEE --gateway fc00::2 -A limit-1400 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1401 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-795 -A limit-1401 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1402 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-796 -A limit-1402 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1403 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-797 -A limit-1403 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1404 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-798 -A limit-1404 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1405 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-799 -A limit-1406 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-800 -A limit-1406 -j ACCEPT -A limit-1408 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-802 -A limit-1408 -m limit --limit 1/second -j LOG -A limit-1408 -j ACCEPT -A limit-1409 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-803 -A limit-1409 -m limit --limit 1/second -j LOG -A limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-51 -A limit-1410 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-804 -A limit-1410 -j TEE --gateway fc00::2 -A limit-1410 -j ACCEPT -A limit-1411 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-805 -A limit-1411 -j TEE --gateway fc00::2 -A limit-1412 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-806 -A limit-1412 -j ACCEPT -A limit-1414 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-808 -A limit-1414 -j ACCEPT -A limit-1415 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-809 -A limit-1416 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-810 -A limit-1416 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1417 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-811 -A limit-1417 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1418 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-812 -A limit-1418 -m limit --limit 1/second -j LOG -A limit-1418 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1419 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-813 -A limit-1419 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-52 -A limit-142 -m limit --limit 1/second -j LOG -A limit-142 -j ACCEPT -A limit-1420 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-814 -A limit-1420 -j TEE --gateway fc00::2 -A limit-1420 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1421 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-815 -A limit-1421 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1422 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-816 -A limit-1422 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1423 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-817 -A limit-1423 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1424 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-818 -A limit-1424 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1425 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-819 -A limit-1426 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-820 -A limit-1426 -j ACCEPT -A limit-1428 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-822 -A limit-1428 -m limit --limit 1/second -j LOG -A limit-1428 -j ACCEPT -A limit-1429 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-823 -A limit-1429 -m limit --limit 1/second -j LOG -A limit-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-53 -A limit-143 -m limit --limit 1/second -j LOG -A limit-1430 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-824 -A limit-1430 -j TEE --gateway fc00::2 -A limit-1430 -j ACCEPT -A limit-1431 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-825 -A limit-1431 -j TEE --gateway fc00::2 -A limit-1432 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-826 -A limit-1432 -j ACCEPT -A limit-1434 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-828 -A limit-1434 -j ACCEPT -A limit-1435 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-829 -A limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1436 -m recent --name limit-1436 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1437 -m recent --name limit-1437 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1438 -m limit --limit 1/second -j LOG -A limit-1438 -m recent --name limit-1438 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1439 -m recent --name limit-1439 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-54 -A limit-144 -j TEE --gateway fc00::2 -A limit-144 -j ACCEPT -A limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1440 -j TEE --gateway fc00::2 -A limit-1440 -m recent --name limit-1440 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1441 -m recent --name limit-1441 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1442 -m recent --name limit-1442 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1443 -m recent --name limit-1443 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1444 -m recent --name limit-1444 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1445 -m recent --name limit-1445 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1446 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1447 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1448 -m limit --limit 1/second -j LOG -A limit-1448 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1449 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-55 -A limit-145 -j TEE --gateway fc00::2 -A limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1450 -j TEE --gateway fc00::2 -A limit-1450 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1451 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1452 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1453 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1454 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1455 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1456 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1456 -j ACCEPT -A limit-1458 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1458 -m limit --limit 1/second -j LOG -A limit-1458 -j ACCEPT -A limit-1459 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1459 -m limit --limit 1/second -j LOG -A limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -A limit-146 -j ACCEPT -A limit-1460 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1460 -j TEE --gateway fc00::2 -A limit-1460 -j ACCEPT -A limit-1461 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1461 -j TEE --gateway fc00::2 -A limit-1462 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1462 -j ACCEPT -A limit-1464 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1464 -j ACCEPT -A limit-1465 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1466 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1467 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1468 -m limit --limit 1/second -j LOG -A limit-1468 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1469 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-57 -A limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1470 -j TEE --gateway fc00::2 -A limit-1470 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1471 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1472 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1473 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1474 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1475 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1476 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1476 -j ACCEPT -A limit-1478 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1478 -m limit --limit 1/second -j LOG -A limit-1478 -j ACCEPT -A limit-1479 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1479 -m limit --limit 1/second -j LOG -A limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-58 -A limit-148 -j ACCEPT -A limit-1480 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1480 -j TEE --gateway fc00::2 -A limit-1480 -j ACCEPT -A limit-1481 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1481 -j TEE --gateway fc00::2 -A limit-1482 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1482 -j ACCEPT -A limit-1484 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1484 -j ACCEPT -A limit-1485 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1486 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1486 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1487 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1487 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1488 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1488 -m limit --limit 1/second -j LOG -A limit-1488 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1489 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1489 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-59 -A limit-1490 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1490 -j TEE --gateway fc00::2 -A limit-1490 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1491 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1491 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1492 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1492 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1493 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1493 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1494 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1494 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1495 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1496 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1496 -j ACCEPT -A limit-1498 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1498 -m limit --limit 1/second -j LOG -A limit-1498 -j ACCEPT -A limit-1499 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1499 -m limit --limit 1/second -j LOG -A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-15 -m recent --name limit-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-60 -A limit-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1500 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1500 -j TEE --gateway fc00::2 -A limit-1500 -j ACCEPT -A limit-1501 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1501 -j TEE --gateway fc00::2 -A limit-1502 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1502 -j ACCEPT -A limit-1504 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1504 -j ACCEPT -A limit-1505 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1506 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1506 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1507 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1507 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1508 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1508 -m limit --limit 1/second -j LOG -A limit-1508 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1509 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1509 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-61 -A limit-151 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1510 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1510 -j TEE --gateway fc00::2 -A limit-1510 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1511 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1511 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1512 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1512 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1513 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1513 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1516 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1516 -j ACCEPT -A limit-1518 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1518 -m limit --limit 1/second -j LOG -A limit-1518 -j ACCEPT -A limit-1519 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1519 -m limit --limit 1/second -j LOG -A limit-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-62 -A limit-152 -m limit --limit 1/second -j LOG -A limit-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1520 -j TEE --gateway fc00::2 -A limit-1520 -j ACCEPT -A limit-1521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1521 -j TEE --gateway fc00::2 -A limit-1522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1522 -j ACCEPT -A limit-1524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1524 -j ACCEPT -A limit-1525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-830 -A limit-1526 -m recent --name limit-1526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-831 -A limit-1527 -m recent --name limit-1527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-832 -A limit-1528 -m limit --limit 1/second -j LOG -A limit-1528 -m recent --name limit-1528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-833 -A limit-1529 -m recent --name limit-1529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-63 -A limit-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-834 -A limit-1530 -j TEE --gateway fc00::2 -A limit-1530 -m recent --name limit-1530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-835 -A limit-1531 -m recent --name limit-1531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-836 -A limit-1532 -m recent --name limit-1532 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-837 -A limit-1533 -m recent --name limit-1533 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-838 -A limit-1534 -m recent --name limit-1534 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1535 -m recent --name limit-1535 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-839 -A limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-840 -A limit-1536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-841 -A limit-1537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-842 -A limit-1538 -m limit --limit 1/second -j LOG -A limit-1538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-843 -A limit-1539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-64 -A limit-154 -j TEE --gateway fc00::2 -A limit-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-844 -A limit-1540 -j TEE --gateway fc00::2 -A limit-1540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-845 -A limit-1541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-846 -A limit-1542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-847 -A limit-1543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-848 -A limit-1544 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1545 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-849 -A limit-1546 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-850 -A limit-1546 -j ACCEPT -A limit-1548 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-852 -A limit-1548 -m limit --limit 1/second -j LOG -A limit-1548 -j ACCEPT -A limit-1549 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-853 -A limit-1549 -m limit --limit 1/second -j LOG -A limit-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-65 -A limit-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1550 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-854 -A limit-1550 -j TEE --gateway fc00::2 -A limit-1550 -j ACCEPT -A limit-1551 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-855 -A limit-1551 -j TEE --gateway fc00::2 -A limit-1552 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-856 -A limit-1552 -j ACCEPT -A limit-1554 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-858 -A limit-1554 -j ACCEPT -A limit-1555 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-859 -A limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-860 -A limit-1556 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-861 -A limit-1557 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-862 -A limit-1558 -m limit --limit 1/second -j LOG -A limit-1558 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-863 -A limit-1559 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-66 -A limit-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-864 -A limit-1560 -j TEE --gateway fc00::2 -A limit-1560 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-865 -A limit-1561 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-866 -A limit-1562 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-867 -A limit-1563 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-868 -A limit-1564 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1565 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-869 -A limit-1566 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-870 -A limit-1566 -j ACCEPT -A limit-1568 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-872 -A limit-1568 -m limit --limit 1/second -j LOG -A limit-1568 -j ACCEPT -A limit-1569 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-873 -A limit-1569 -m limit --limit 1/second -j LOG -A limit-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-67 -A limit-157 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1570 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-874 -A limit-1570 -j TEE --gateway fc00::2 -A limit-1570 -j ACCEPT -A limit-1571 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-875 -A limit-1571 -j TEE --gateway fc00::2 -A limit-1572 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-876 -A limit-1572 -j ACCEPT -A limit-1574 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-878 -A limit-1574 -j ACCEPT -A limit-1575 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-879 -A limit-1576 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-880 -A limit-1576 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1577 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-881 -A limit-1577 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1578 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-882 -A limit-1578 -m limit --limit 1/second -j LOG -A limit-1578 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1579 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-883 -A limit-1579 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-68 -A limit-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1580 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-884 -A limit-1580 -j TEE --gateway fc00::2 -A limit-1580 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1581 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-885 -A limit-1581 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1582 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-886 -A limit-1582 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1583 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-887 -A limit-1583 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1584 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-888 -A limit-1584 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1585 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-889 -A limit-1586 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-890 -A limit-1586 -j ACCEPT -A limit-1588 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-892 -A limit-1588 -m limit --limit 1/second -j LOG -A limit-1588 -j ACCEPT -A limit-1589 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-893 -A limit-1589 -m limit --limit 1/second -j LOG -A limit-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-69 -A limit-1590 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-894 -A limit-1590 -j TEE --gateway fc00::2 -A limit-1590 -j ACCEPT -A limit-1591 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-895 -A limit-1591 -j TEE --gateway fc00::2 -A limit-1592 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-896 -A limit-1592 -j ACCEPT -A limit-1594 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-898 -A limit-1594 -j ACCEPT -A limit-1595 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-899 -A limit-1596 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-900 -A limit-1596 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1597 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-901 -A limit-1597 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1598 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-902 -A limit-1598 -m limit --limit 1/second -j LOG -A limit-1598 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1599 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-903 -A limit-1599 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-16 -m recent --name limit-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-70 -A limit-160 -j ACCEPT -A limit-1600 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-904 -A limit-1600 -j TEE --gateway fc00::2 -A limit-1600 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1601 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-905 -A limit-1601 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1602 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-906 -A limit-1602 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1603 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-907 -A limit-1603 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1604 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-908 -A limit-1604 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1605 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-909 -A limit-1606 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-910 -A limit-1606 -j ACCEPT -A limit-1608 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-912 -A limit-1608 -m limit --limit 1/second -j LOG -A limit-1608 -j ACCEPT -A limit-1609 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-913 -A limit-1609 -m limit --limit 1/second -j LOG -A limit-161 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-71 -A limit-1610 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-914 -A limit-1610 -j TEE --gateway fc00::2 -A limit-1610 -j ACCEPT -A limit-1611 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-915 -A limit-1611 -j TEE --gateway fc00::2 -A limit-1612 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-916 -A limit-1612 -j ACCEPT -A limit-1614 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-918 -A limit-1614 -j ACCEPT -A limit-1615 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-919 -A limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-920 -A limit-1616 -m recent --name limit-1616 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-921 -A limit-1617 -m recent --name limit-1617 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-922 -A limit-1618 -m limit --limit 1/second -j LOG -A limit-1618 -m recent --name limit-1618 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-923 -A limit-1619 -m recent --name limit-1619 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-72 -A limit-162 -m limit --limit 1/second -j LOG -A limit-162 -j ACCEPT -A limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-924 -A limit-1620 -j TEE --gateway fc00::2 -A limit-1620 -m recent --name limit-1620 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-925 -A limit-1621 -m recent --name limit-1621 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-926 -A limit-1622 -m recent --name limit-1622 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-927 -A limit-1623 -m recent --name limit-1623 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-928 -A limit-1624 -m recent --name limit-1624 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1625 -m recent --name limit-1625 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-929 -A limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-930 -A limit-1626 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-931 -A limit-1627 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-932 -A limit-1628 -m limit --limit 1/second -j LOG -A limit-1628 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-933 -A limit-1629 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-73 -A limit-163 -m limit --limit 1/second -j LOG -A limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-934 -A limit-1630 -j TEE --gateway fc00::2 -A limit-1630 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-935 -A limit-1631 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-936 -A limit-1632 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-937 -A limit-1633 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-938 -A limit-1634 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1635 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-939 -A limit-1636 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-940 -A limit-1636 -j ACCEPT -A limit-1638 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-942 -A limit-1638 -m limit --limit 1/second -j LOG -A limit-1638 -j ACCEPT -A limit-1639 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-943 -A limit-1639 -m limit --limit 1/second -j LOG -A limit-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-74 -A limit-164 -j TEE --gateway fc00::2 -A limit-164 -j ACCEPT -A limit-1640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-944 -A limit-1640 -j TEE --gateway fc00::2 -A limit-1640 -j ACCEPT -A limit-1641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-945 -A limit-1641 -j TEE --gateway fc00::2 -A limit-1642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-946 -A limit-1642 -j ACCEPT -A limit-1644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-948 -A limit-1644 -j ACCEPT -A limit-1645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-949 -A limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-950 -A limit-1646 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-951 -A limit-1647 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-952 -A limit-1648 -m limit --limit 1/second -j LOG -A limit-1648 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-953 -A limit-1649 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-75 -A limit-165 -j TEE --gateway fc00::2 -A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-954 -A limit-1650 -j TEE --gateway fc00::2 -A limit-1650 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-955 -A limit-1651 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-956 -A limit-1652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-957 -A limit-1653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-958 -A limit-1654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-959 -A limit-1656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-960 -A limit-1656 -j ACCEPT -A limit-1658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-962 -A limit-1658 -m limit --limit 1/second -j LOG -A limit-1658 -j ACCEPT -A limit-1659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-963 -A limit-1659 -m limit --limit 1/second -j LOG -A limit-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-76 -A limit-166 -j ACCEPT -A limit-1660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-964 -A limit-1660 -j TEE --gateway fc00::2 -A limit-1660 -j ACCEPT -A limit-1661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-965 -A limit-1661 -j TEE --gateway fc00::2 -A limit-1662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-966 -A limit-1662 -j ACCEPT -A limit-1664 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-968 -A limit-1664 -j ACCEPT -A limit-1665 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-969 -A limit-1666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-970 -A limit-1666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-971 -A limit-1667 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-972 -A limit-1668 -m limit --limit 1/second -j LOG -A limit-1668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-973 -A limit-1669 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-167 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-77 -A limit-1670 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-974 -A limit-1670 -j TEE --gateway fc00::2 -A limit-1670 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1671 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-975 -A limit-1671 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1672 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-976 -A limit-1672 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1673 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-977 -A limit-1673 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1674 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-978 -A limit-1674 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1675 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-979 -A limit-1676 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-980 -A limit-1676 -j ACCEPT -A limit-1678 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-982 -A limit-1678 -m limit --limit 1/second -j LOG -A limit-1678 -j ACCEPT -A limit-1679 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-983 -A limit-1679 -m limit --limit 1/second -j LOG -A limit-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-78 -A limit-168 -j ACCEPT -A limit-1680 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-984 -A limit-1680 -j TEE --gateway fc00::2 -A limit-1680 -j ACCEPT -A limit-1681 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-985 -A limit-1681 -j TEE --gateway fc00::2 -A limit-1682 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-986 -A limit-1682 -j ACCEPT -A limit-1684 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-988 -A limit-1684 -j ACCEPT -A limit-1685 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-989 -A limit-1686 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-990 -A limit-1686 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1687 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-991 -A limit-1687 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1688 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-992 -A limit-1688 -m limit --limit 1/second -j LOG -A limit-1688 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1689 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-993 -A limit-1689 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-79 -A limit-1690 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-994 -A limit-1690 -j TEE --gateway fc00::2 -A limit-1690 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1691 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-995 -A limit-1691 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1692 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-996 -A limit-1692 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1693 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-997 -A limit-1693 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1694 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-998 -A limit-1694 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1695 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-999 -A limit-1696 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1000 -A limit-1696 -j ACCEPT -A limit-1698 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1002 -A limit-1698 -m limit --limit 1/second -j LOG -A limit-1698 -j ACCEPT -A limit-1699 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1003 -A limit-1699 -m limit --limit 1/second -j LOG -A limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-17 -m recent --name limit-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-80 -A limit-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1700 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1004 -A limit-1700 -j TEE --gateway fc00::2 -A limit-1700 -j ACCEPT -A limit-1701 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1005 -A limit-1701 -j TEE --gateway fc00::2 -A limit-1702 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1006 -A limit-1702 -j ACCEPT -A limit-1704 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1008 -A limit-1704 -j ACCEPT -A limit-1705 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1009 -A limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1706 -m recent --name limit-1706 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1707 -m recent --name limit-1707 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1708 -m limit --limit 1/second -j LOG -A limit-1708 -m recent --name limit-1708 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1709 -m recent --name limit-1709 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-81 -A limit-171 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1710 -j TEE --gateway fc00::2 -A limit-1710 -m recent --name limit-1710 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1711 -m recent --name limit-1711 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1712 -m recent --name limit-1712 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1713 -m recent --name limit-1713 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1714 -m recent --name limit-1714 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1715 -m recent --name limit-1715 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1716 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1717 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1718 -m limit --limit 1/second -j LOG -A limit-1718 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1719 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-82 -A limit-172 -m limit --limit 1/second -j LOG -A limit-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1720 -j TEE --gateway fc00::2 -A limit-1720 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1721 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1722 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1723 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1724 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1725 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1726 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1726 -j ACCEPT -A limit-1728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1728 -m limit --limit 1/second -j LOG -A limit-1728 -j ACCEPT -A limit-1729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1729 -m limit --limit 1/second -j LOG -A limit-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-83 -A limit-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-1730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1730 -j TEE --gateway fc00::2 -A limit-1730 -j ACCEPT -A limit-1731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1731 -j TEE --gateway fc00::2 -A limit-1732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1732 -j ACCEPT -A limit-1734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1734 -j ACCEPT -A limit-1735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1736 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1737 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1738 -m limit --limit 1/second -j LOG -A limit-1738 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1739 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-84 -A limit-174 -j TEE --gateway fc00::2 -A limit-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1740 -j TEE --gateway fc00::2 -A limit-1740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-1746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1746 -j ACCEPT -A limit-1748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1748 -m limit --limit 1/second -j LOG -A limit-1748 -j ACCEPT -A limit-1749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1749 -m limit --limit 1/second -j LOG -A limit-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-85 -A limit-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1750 -j TEE --gateway fc00::2 -A limit-1750 -j ACCEPT -A limit-1751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1751 -j TEE --gateway fc00::2 -A limit-1752 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1752 -j ACCEPT -A limit-1754 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1754 -j ACCEPT -A limit-1755 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1757 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1758 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1758 -m limit --limit 1/second -j LOG -A limit-1758 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1759 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1759 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-86 -A limit-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1760 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1760 -j TEE --gateway fc00::2 -A limit-1760 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1761 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1761 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1762 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1762 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1763 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1763 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1764 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1764 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1765 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1766 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1766 -j ACCEPT -A limit-1768 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1768 -m limit --limit 1/second -j LOG -A limit-1768 -j ACCEPT -A limit-1769 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1769 -m limit --limit 1/second -j LOG -A limit-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-87 -A limit-177 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1770 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1770 -j TEE --gateway fc00::2 -A limit-1770 -j ACCEPT -A limit-1771 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1771 -j TEE --gateway fc00::2 -A limit-1772 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1772 -j ACCEPT -A limit-1774 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1774 -j ACCEPT -A limit-1775 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1776 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1776 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1777 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1777 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1778 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1778 -m limit --limit 1/second -j LOG -A limit-1778 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1779 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1779 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-88 -A limit-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1780 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1780 -j TEE --gateway fc00::2 -A limit-1780 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1781 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1781 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1782 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1782 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1783 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1783 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1784 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1784 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1785 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-1786 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1786 -j ACCEPT -A limit-1788 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1788 -m limit --limit 1/second -j LOG -A limit-1788 -j ACCEPT -A limit-1789 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1789 -m limit --limit 1/second -j LOG -A limit-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-89 -A limit-1790 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1790 -j TEE --gateway fc00::2 -A limit-1790 -j ACCEPT -A limit-1791 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1791 -j TEE --gateway fc00::2 -A limit-1792 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1792 -j ACCEPT -A limit-1794 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1794 -j ACCEPT -A limit-1795 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1010 -A limit-1796 -m recent --name limit-1796 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1011 -A limit-1797 -m recent --name limit-1797 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1012 -A limit-1798 -m limit --limit 1/second -j LOG -A limit-1798 -m recent --name limit-1798 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1013 -A limit-1799 -m recent --name limit-1799 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-18 -m recent --name limit-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-90 -A limit-180 -j ACCEPT -A limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1014 -A limit-1800 -j TEE --gateway fc00::2 -A limit-1800 -m recent --name limit-1800 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1015 -A limit-1801 -m recent --name limit-1801 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1016 -A limit-1802 -m recent --name limit-1802 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1017 -A limit-1803 -m recent --name limit-1803 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1018 -A limit-1804 -m recent --name limit-1804 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1805 -m recent --name limit-1805 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1019 -A limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1020 -A limit-1806 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1021 -A limit-1807 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1022 -A limit-1808 -m limit --limit 1/second -j LOG -A limit-1808 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1023 -A limit-1809 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-181 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-91 -A limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1024 -A limit-1810 -j TEE --gateway fc00::2 -A limit-1810 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1025 -A limit-1811 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1026 -A limit-1812 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1027 -A limit-1813 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1028 -A limit-1814 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1815 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1029 -A limit-1816 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1030 -A limit-1816 -j ACCEPT -A limit-1818 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1032 -A limit-1818 -m limit --limit 1/second -j LOG -A limit-1818 -j ACCEPT -A limit-1819 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1033 -A limit-1819 -m limit --limit 1/second -j LOG -A limit-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-92 -A limit-182 -m limit --limit 1/second -j LOG -A limit-182 -j ACCEPT -A limit-1820 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1034 -A limit-1820 -j TEE --gateway fc00::2 -A limit-1820 -j ACCEPT -A limit-1821 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1035 -A limit-1821 -j TEE --gateway fc00::2 -A limit-1822 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1036 -A limit-1822 -j ACCEPT -A limit-1824 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1038 -A limit-1824 -j ACCEPT -A limit-1825 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1039 -A limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1040 -A limit-1826 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1041 -A limit-1827 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1042 -A limit-1828 -m limit --limit 1/second -j LOG -A limit-1828 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1043 -A limit-1829 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-93 -A limit-183 -m limit --limit 1/second -j LOG -A limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1044 -A limit-1830 -j TEE --gateway fc00::2 -A limit-1830 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1045 -A limit-1831 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1046 -A limit-1832 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1047 -A limit-1833 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1048 -A limit-1834 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1835 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1049 -A limit-1836 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1050 -A limit-1836 -j ACCEPT -A limit-1838 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1052 -A limit-1838 -m limit --limit 1/second -j LOG -A limit-1838 -j ACCEPT -A limit-1839 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1053 -A limit-1839 -m limit --limit 1/second -j LOG -A limit-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-94 -A limit-184 -j TEE --gateway fc00::2 -A limit-184 -j ACCEPT -A limit-1840 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1054 -A limit-1840 -j TEE --gateway fc00::2 -A limit-1840 -j ACCEPT -A limit-1841 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1055 -A limit-1841 -j TEE --gateway fc00::2 -A limit-1842 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1056 -A limit-1842 -j ACCEPT -A limit-1844 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1058 -A limit-1844 -j ACCEPT -A limit-1845 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1059 -A limit-1846 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1060 -A limit-1846 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1847 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1061 -A limit-1847 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1848 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1062 -A limit-1848 -m limit --limit 1/second -j LOG -A limit-1848 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1849 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1063 -A limit-1849 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-95 -A limit-185 -j TEE --gateway fc00::2 -A limit-1850 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1064 -A limit-1850 -j TEE --gateway fc00::2 -A limit-1850 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1851 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1065 -A limit-1851 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1852 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1066 -A limit-1852 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1853 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1067 -A limit-1853 -m recent --name user:C --rsource --mask fe00:: --set -A limit-1854 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1068 -A limit-1854 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-1855 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1069 -A limit-1856 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1070 -A limit-1856 -j ACCEPT -A limit-1858 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1072 -A limit-1858 -m limit --limit 1/second -j LOG -A limit-1858 -j ACCEPT -A limit-1859 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1073 -A limit-1859 -m limit --limit 1/second -j LOG -A limit-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-96 -A limit-186 -j ACCEPT -A limit-1860 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1074 -A limit-1860 -j TEE --gateway fc00::2 -A limit-1860 -j ACCEPT -A limit-1861 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1075 -A limit-1861 -j TEE --gateway fc00::2 -A limit-1862 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1076 -A limit-1862 -j ACCEPT -A limit-1864 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1078 -A limit-1864 -j ACCEPT -A limit-1865 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1079 -A limit-1866 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1080 -A limit-1866 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1867 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1081 -A limit-1867 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1868 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1082 -A limit-1868 -m limit --limit 1/second -j LOG -A limit-1868 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1869 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1083 -A limit-1869 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-187 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-97 -A limit-1870 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1084 -A limit-1870 -j TEE --gateway fc00::2 -A limit-1870 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1871 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1085 -A limit-1871 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-1872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1086 -A limit-1872 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1087 -A limit-1873 -m recent --name user:C --rdest --mask fe00:: --set -A limit-1874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1088 -A limit-1874 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-1875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1089 -A limit-1876 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1090 -A limit-1876 -j ACCEPT -A limit-1878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1092 -A limit-1878 -m limit --limit 1/second -j LOG -A limit-1878 -j ACCEPT -A limit-1879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1093 -A limit-1879 -m limit --limit 1/second -j LOG -A limit-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-98 -A limit-188 -j ACCEPT -A limit-1880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1094 -A limit-1880 -j TEE --gateway fc00::2 -A limit-1880 -j ACCEPT -A limit-1881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1095 -A limit-1881 -j TEE --gateway fc00::2 -A limit-1882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1096 -A limit-1882 -j ACCEPT -A limit-1884 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1098 -A limit-1884 -j ACCEPT -A limit-1885 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1099 -A limit-1886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1886 -j ACCEPT -A limit-1886 -m limit --limit 1/second -j LOG -A limit-1886 -j DROP -A limit-1887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1887 -j RETURN -A limit-1887 -m limit --limit 1/second -j LOG -A limit-1887 -j DROP -A limit-1888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1888 -j logaccept-33 -A limit-1888 -m limit --limit 1/second -j LOG -A limit-1888 -j DROP -A limit-1889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1889 -j logaccept-34 -A limit-1889 -m limit --limit 1/second -j LOG -A limit-1889 -j DROP -A limit-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-99 -A limit-1890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1890 -j ACCEPT -A limit-1890 -m limit --limit 1/second -j LOG -A limit-1890 -j DROP -A limit-1891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1891 -j logaccept-35 -A limit-1891 -m limit --limit 1/second -j LOG -A limit-1891 -j DROP -A limit-1892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1892 -j ACCEPT -A limit-1892 -j DROP -A limit-1893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1893 -j RETURN -A limit-1893 -j DROP -A limit-1894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1894 -j logaccept-36 -A limit-1894 -j DROP -A limit-1895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1895 -j logaccept-37 -A limit-1895 -j DROP -A limit-1896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1896 -j ACCEPT -A limit-1896 -j DROP -A limit-1897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1897 -j logaccept-38 -A limit-1897 -j DROP -A limit-1898 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1898 -j ACCEPT -A limit-1898 -m limit --limit 1/second -j LOG -A limit-1898 -j DROP -A limit-1899 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1899 -j RETURN -A limit-1899 -m limit --limit 1/second -j LOG -A limit-1899 -j DROP -A limit-19 -m recent --name limit-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-100 -A limit-190 -m recent --name limit-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1900 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1900 -j logaccept-39 -A limit-1900 -m limit --limit 1/second -j LOG -A limit-1900 -j DROP -A limit-1901 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1901 -j logaccept-40 -A limit-1901 -m limit --limit 1/second -j LOG -A limit-1901 -j DROP -A limit-1902 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1902 -j ACCEPT -A limit-1902 -m limit --limit 1/second -j LOG -A limit-1902 -j DROP -A limit-1903 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1903 -j logaccept-41 -A limit-1903 -m limit --limit 1/second -j LOG -A limit-1903 -j DROP -A limit-1904 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1904 -j ACCEPT -A limit-1904 -j TEE --gateway fc00::2 -A limit-1904 -j DROP -A limit-1905 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1905 -j RETURN -A limit-1905 -j TEE --gateway fc00::2 -A limit-1905 -j DROP -A limit-1906 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1906 -j logaccept-42 -A limit-1906 -j TEE --gateway fc00::2 -A limit-1906 -j DROP -A limit-1907 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1907 -j logaccept-43 -A limit-1907 -j TEE --gateway fc00::2 -A limit-1907 -j DROP -A limit-1908 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1908 -j ACCEPT -A limit-1908 -j TEE --gateway fc00::2 -A limit-1908 -j DROP -A limit-1909 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1909 -j logaccept-44 -A limit-1909 -j TEE --gateway fc00::2 -A limit-1909 -j DROP -A limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-101 -A limit-191 -m recent --name limit-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1910 -j ACCEPT -A limit-1910 -j DROP -A limit-1911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1911 -j RETURN -A limit-1911 -j DROP -A limit-1912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1912 -j logaccept-45 -A limit-1912 -j DROP -A limit-1913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1913 -j logaccept-46 -A limit-1913 -j DROP -A limit-1914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1914 -j ACCEPT -A limit-1914 -j DROP -A limit-1915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1915 -j logaccept-47 -A limit-1915 -j DROP -A limit-1916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1916 -j ACCEPT -A limit-1916 -j DROP -A limit-1917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1917 -j RETURN -A limit-1917 -j DROP -A limit-1918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1918 -j logaccept-48 -A limit-1918 -j DROP -A limit-1919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1919 -j logaccept-49 -A limit-1919 -j DROP -A limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-102 -A limit-192 -m limit --limit 1/second -j LOG -A limit-192 -m recent --name limit-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1920 -j ACCEPT -A limit-1920 -j DROP -A limit-1921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1921 -j logaccept-50 -A limit-1921 -j DROP -A limit-1922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1922 -j ACCEPT -A limit-1922 -j DROP -A limit-1923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1923 -j RETURN -A limit-1923 -j DROP -A limit-1924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1924 -j logaccept-51 -A limit-1924 -j DROP -A limit-1925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1925 -j logaccept-52 -A limit-1925 -j DROP -A limit-1926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1926 -j ACCEPT -A limit-1926 -j DROP -A limit-1927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1927 -j logaccept-53 -A limit-1927 -j DROP -A limit-1928 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1928 -j ACCEPT -A limit-1928 -m limit --limit 1/second -j LOG -A limit-1928 -j DROP -A limit-1929 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1929 -j RETURN -A limit-1929 -m limit --limit 1/second -j LOG -A limit-1929 -j DROP -A limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-103 -A limit-193 -m recent --name limit-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1930 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1930 -j logaccept-54 -A limit-1930 -m limit --limit 1/second -j LOG -A limit-1930 -j DROP -A limit-1931 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1931 -j logaccept-55 -A limit-1931 -m limit --limit 1/second -j LOG -A limit-1931 -j DROP -A limit-1932 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1932 -j ACCEPT -A limit-1932 -m limit --limit 1/second -j LOG -A limit-1932 -j DROP -A limit-1933 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1933 -j logaccept-56 -A limit-1933 -m limit --limit 1/second -j LOG -A limit-1933 -j DROP -A limit-1934 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1934 -j ACCEPT -A limit-1934 -j TEE --gateway fc00::2 -A limit-1934 -j DROP -A limit-1935 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1935 -j RETURN -A limit-1935 -j TEE --gateway fc00::2 -A limit-1935 -j DROP -A limit-1936 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1936 -j logaccept-57 -A limit-1936 -j TEE --gateway fc00::2 -A limit-1936 -j DROP -A limit-1937 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1937 -j logaccept-58 -A limit-1937 -j TEE --gateway fc00::2 -A limit-1937 -j DROP -A limit-1938 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1938 -j ACCEPT -A limit-1938 -j TEE --gateway fc00::2 -A limit-1938 -j DROP -A limit-1939 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1939 -j logaccept-59 -A limit-1939 -j TEE --gateway fc00::2 -A limit-1939 -j DROP -A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-104 -A limit-194 -j TEE --gateway fc00::2 -A limit-194 -m recent --name limit-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1940 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1940 -j ACCEPT -A limit-1940 -j DROP -A limit-1941 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1941 -j RETURN -A limit-1941 -j DROP -A limit-1942 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1942 -j logaccept-60 -A limit-1942 -j DROP -A limit-1943 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1943 -j logaccept-61 -A limit-1943 -j DROP -A limit-1944 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1944 -j ACCEPT -A limit-1944 -j DROP -A limit-1945 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1945 -j logaccept-62 -A limit-1945 -j DROP -A limit-1946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1946 -j ACCEPT -A limit-1946 -j DROP -A limit-1947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1947 -j RETURN -A limit-1947 -j DROP -A limit-1948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1948 -j logaccept-63 -A limit-1948 -j DROP -A limit-1949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1949 -j logaccept-64 -A limit-1949 -j DROP -A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-105 -A limit-195 -m recent --name limit-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1950 -j ACCEPT -A limit-1950 -j DROP -A limit-1951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1951 -j logaccept-65 -A limit-1951 -j DROP -A limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1100 -A limit-1952 -m recent --name limit-1952 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1101 -A limit-1953 -m recent --name limit-1953 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1102 -A limit-1954 -m recent --name limit-1954 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1103 -A limit-1955 -m recent --name limit-1955 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1104 -A limit-1956 -m recent --name limit-1956 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1105 -A limit-1957 -m recent --name limit-1957 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1106 -A limit-1958 -m recent --name limit-1958 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1107 -A limit-1959 -m recent --name limit-1959 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-106 -A limit-196 -m recent --name limit-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1108 -A limit-1960 -m recent --name limit-1960 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1961 -m recent --name limit-1961 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1109 -A limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1962 -m recent --name limit-1962 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1963 -m recent --name limit-1963 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1964 -m recent --name limit-1964 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1965 -m recent --name limit-1965 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1966 -m recent --name limit-1966 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1967 -m recent --name limit-1967 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1968 -m recent --name limit-1968 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1969 -m recent --name limit-1969 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-107 -A limit-197 -m recent --name limit-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1970 -m recent --name limit-1970 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1971 -m recent --name limit-1971 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1972 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1973 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1974 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1975 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1976 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1977 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1978 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1979 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-108 -A limit-198 -m recent --name limit-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1980 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1981 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1982 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1983 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1984 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1985 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1985 -m limit --limit 1/second -j LOG -A limit-1986 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1987 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1987 -j TEE --gateway fc00::2 -A limit-1988 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1989 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-199 -m recent --name limit-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-109 -A limit-1990 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1991 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1992 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1993 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1994 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1995 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1996 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1997 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1998 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-1999 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-2 -A limit-2 -m limit --limit 1/second -j LOG -A limit-2 -m recent --name limit-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-110 -A limit-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2000 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2001 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2002 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2003 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2004 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2005 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2005 -m limit --limit 1/second -j LOG -A limit-2006 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2007 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2007 -j TEE --gateway fc00::2 -A limit-2008 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2009 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-111 -A limit-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2012 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2012 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2013 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2013 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2014 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2014 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2015 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2015 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2016 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2016 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2017 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2017 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2018 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2018 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2019 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2019 -m recent --name user:C --rsource --mask fe00:: --set -A limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-112 -A limit-202 -m limit --limit 1/second -j LOG -A limit-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2020 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2020 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2021 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2022 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2023 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2024 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2025 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2025 -m limit --limit 1/second -j LOG -A limit-2026 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2027 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2027 -j TEE --gateway fc00::2 -A limit-2028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-113 -A limit-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2032 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2032 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2033 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2033 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2034 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2035 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2036 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2037 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2038 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2039 -m recent --name user:C --rdest --mask fe00:: --set -A limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-114 -A limit-204 -j TEE --gateway fc00::2 -A limit-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2040 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2040 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2041 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2045 -m limit --limit 1/second -j LOG -A limit-2046 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2047 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2047 -j TEE --gateway fc00::2 -A limit-2048 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2049 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 -A limit-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2050 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2051 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1110 -A limit-2052 -m recent --name limit-2052 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1111 -A limit-2053 -m recent --name limit-2053 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1112 -A limit-2054 -m recent --name limit-2054 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1113 -A limit-2055 -m recent --name limit-2055 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1114 -A limit-2056 -m recent --name limit-2056 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1115 -A limit-2057 -m recent --name limit-2057 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1116 -A limit-2058 -m recent --name limit-2058 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1117 -A limit-2059 -m recent --name limit-2059 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 -A limit-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1118 -A limit-2060 -m recent --name limit-2060 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2061 -m recent --name limit-2061 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1119 -A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1120 -A limit-2062 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1121 -A limit-2063 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1122 -A limit-2064 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1123 -A limit-2065 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1124 -A limit-2066 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1125 -A limit-2067 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1126 -A limit-2068 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1127 -A limit-2069 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 -A limit-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1128 -A limit-2070 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2071 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1129 -A limit-2072 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1130 -A limit-2073 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1131 -A limit-2074 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1132 -A limit-2075 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1133 -A limit-2075 -m limit --limit 1/second -j LOG -A limit-2076 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1134 -A limit-2077 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1135 -A limit-2077 -j TEE --gateway fc00::2 -A limit-2078 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1136 -A limit-2079 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1137 -A limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 -A limit-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2080 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1138 -A limit-2081 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1139 -A limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1140 -A limit-2082 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1141 -A limit-2083 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1142 -A limit-2084 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1143 -A limit-2085 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1144 -A limit-2086 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1145 -A limit-2087 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1146 -A limit-2088 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1147 -A limit-2089 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 -A limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1148 -A limit-2090 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2091 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1149 -A limit-2092 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1150 -A limit-2093 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1151 -A limit-2094 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1152 -A limit-2095 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1153 -A limit-2095 -m limit --limit 1/second -j LOG -A limit-2096 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1154 -A limit-2097 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1155 -A limit-2097 -j TEE --gateway fc00::2 -A limit-2098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1156 -A limit-2099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1157 -A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-120 -A limit-210 -j ACCEPT -A limit-2100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1158 -A limit-2101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1159 -A limit-2102 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1160 -A limit-2102 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2103 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1161 -A limit-2103 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2104 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1162 -A limit-2104 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2105 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1163 -A limit-2105 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2106 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1164 -A limit-2106 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2107 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1165 -A limit-2107 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2108 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1166 -A limit-2108 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2109 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1167 -A limit-2109 -m recent --name user:C --rsource --mask fe00:: --set -A limit-211 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-121 -A limit-2110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1168 -A limit-2110 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1169 -A limit-2112 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1170 -A limit-2113 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1171 -A limit-2114 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1172 -A limit-2115 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1173 -A limit-2115 -m limit --limit 1/second -j LOG -A limit-2116 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1174 -A limit-2117 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1175 -A limit-2117 -j TEE --gateway fc00::2 -A limit-2118 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1176 -A limit-2119 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1177 -A limit-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-122 -A limit-212 -m limit --limit 1/second -j LOG -A limit-212 -j ACCEPT -A limit-2120 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1178 -A limit-2121 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1179 -A limit-2122 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1180 -A limit-2122 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2123 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1181 -A limit-2123 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2124 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1182 -A limit-2124 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2125 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1183 -A limit-2125 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2126 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1184 -A limit-2126 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2127 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1185 -A limit-2127 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2128 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1186 -A limit-2128 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2129 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1187 -A limit-2129 -m recent --name user:C --rdest --mask fe00:: --set -A limit-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-123 -A limit-213 -m limit --limit 1/second -j LOG -A limit-2130 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1188 -A limit-2130 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2131 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1189 -A limit-2132 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1190 -A limit-2133 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1191 -A limit-2134 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1192 -A limit-2135 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1193 -A limit-2135 -m limit --limit 1/second -j LOG -A limit-2136 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1194 -A limit-2137 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1195 -A limit-2137 -j TEE --gateway fc00::2 -A limit-2138 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1196 -A limit-2139 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1197 -A limit-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-124 -A limit-214 -j TEE --gateway fc00::2 -A limit-214 -j ACCEPT -A limit-2140 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1198 -A limit-2141 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1199 -A limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1200 -A limit-2142 -m recent --name limit-2142 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1201 -A limit-2143 -m recent --name limit-2143 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1202 -A limit-2144 -m recent --name limit-2144 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1203 -A limit-2145 -m recent --name limit-2145 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1204 -A limit-2146 -m recent --name limit-2146 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1205 -A limit-2147 -m recent --name limit-2147 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1206 -A limit-2148 -m recent --name limit-2148 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1207 -A limit-2149 -m recent --name limit-2149 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-125 -A limit-215 -j TEE --gateway fc00::2 -A limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1208 -A limit-2150 -m recent --name limit-2150 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2151 -m recent --name limit-2151 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1209 -A limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1210 -A limit-2152 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1211 -A limit-2153 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1212 -A limit-2154 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1213 -A limit-2155 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1214 -A limit-2156 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1215 -A limit-2157 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1216 -A limit-2158 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1217 -A limit-2159 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-126 -A limit-216 -j ACCEPT -A limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1218 -A limit-2160 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2161 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1219 -A limit-2162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1220 -A limit-2163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1221 -A limit-2164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1222 -A limit-2165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1223 -A limit-2165 -m limit --limit 1/second -j LOG -A limit-2166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1224 -A limit-2167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1225 -A limit-2167 -j TEE --gateway fc00::2 -A limit-2168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1226 -A limit-2169 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1227 -A limit-217 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-127 -A limit-2170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1228 -A limit-2171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1229 -A limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1230 -A limit-2172 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1231 -A limit-2173 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1232 -A limit-2174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1233 -A limit-2175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1234 -A limit-2176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1235 -A limit-2177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1236 -A limit-2178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1237 -A limit-2179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-128 -A limit-218 -j ACCEPT -A limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1238 -A limit-2180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2181 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1239 -A limit-2182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1240 -A limit-2183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1241 -A limit-2184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1242 -A limit-2185 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1243 -A limit-2185 -m limit --limit 1/second -j LOG -A limit-2186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1244 -A limit-2187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1245 -A limit-2187 -j TEE --gateway fc00::2 -A limit-2188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1246 -A limit-2189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1247 -A limit-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-129 -A limit-2190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1248 -A limit-2191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1249 -A limit-2192 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1250 -A limit-2192 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2193 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1251 -A limit-2193 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2194 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1252 -A limit-2194 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2195 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1253 -A limit-2195 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2196 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1254 -A limit-2196 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2197 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1255 -A limit-2197 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1256 -A limit-2198 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1257 -A limit-2199 -m recent --name user:C --rsource --mask fe00:: --set -A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-22 -m limit --limit 1/second -j LOG -A limit-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 -A limit-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1258 -A limit-2200 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1259 -A limit-2202 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1260 -A limit-2203 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1261 -A limit-2204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1262 -A limit-2205 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1263 -A limit-2205 -m limit --limit 1/second -j LOG -A limit-2206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1264 -A limit-2207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1265 -A limit-2207 -j TEE --gateway fc00::2 -A limit-2208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1266 -A limit-2209 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1267 -A limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 -A limit-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2210 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1268 -A limit-2211 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1269 -A limit-2212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1270 -A limit-2212 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1271 -A limit-2213 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1272 -A limit-2214 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1273 -A limit-2215 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2216 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1274 -A limit-2216 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2217 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1275 -A limit-2217 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2218 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1276 -A limit-2218 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2219 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1277 -A limit-2219 -m recent --name user:C --rdest --mask fe00:: --set -A limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 -A limit-222 -m limit --limit 1/second -j LOG -A limit-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2220 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1278 -A limit-2220 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2221 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1279 -A limit-2222 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1280 -A limit-2223 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1281 -A limit-2224 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1282 -A limit-2225 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1283 -A limit-2225 -m limit --limit 1/second -j LOG -A limit-2226 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1284 -A limit-2227 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1285 -A limit-2227 -j TEE --gateway fc00::2 -A limit-2228 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1286 -A limit-2229 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1287 -A limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-133 -A limit-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2230 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1288 -A limit-2231 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1289 -A limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2232 -m recent --name limit-2232 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2233 -m recent --name limit-2233 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2234 -m recent --name limit-2234 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2235 -m recent --name limit-2235 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2236 -m recent --name limit-2236 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2237 -m recent --name limit-2237 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2238 -m recent --name limit-2238 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2239 -m recent --name limit-2239 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-134 -A limit-224 -j TEE --gateway fc00::2 -A limit-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2240 -m recent --name limit-2240 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2241 -m recent --name limit-2241 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2242 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2243 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2244 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2245 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2246 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2247 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2248 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2249 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-135 -A limit-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2250 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2251 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2252 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2253 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2254 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2255 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2255 -m limit --limit 1/second -j LOG -A limit-2256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2257 -j TEE --gateway fc00::2 -A limit-2258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-136 -A limit-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2262 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2263 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2264 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2265 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2266 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2267 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-137 -A limit-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2275 -m limit --limit 1/second -j LOG -A limit-2276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2277 -j TEE --gateway fc00::2 -A limit-2278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-138 -A limit-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2280 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2281 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2282 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2282 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2283 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2283 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2284 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2284 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2285 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2285 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2286 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2286 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2287 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2287 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2288 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2288 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2289 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2289 -m recent --name user:C --rsource --mask fe00:: --set -A limit-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 -A limit-2290 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2290 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2291 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2292 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2293 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2294 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2295 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2295 -m limit --limit 1/second -j LOG -A limit-2296 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2297 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2297 -j TEE --gateway fc00::2 -A limit-2298 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2299 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-140 -A limit-230 -j ACCEPT -A limit-2300 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2301 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2302 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2302 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2303 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2303 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2304 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2304 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2305 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2305 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2306 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2306 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2307 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2307 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2308 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2308 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2309 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2309 -m recent --name user:C --rdest --mask fe00:: --set -A limit-231 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-141 -A limit-2310 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2310 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2311 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-2312 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2313 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2314 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2315 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2315 -m limit --limit 1/second -j LOG -A limit-2316 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2317 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2317 -j TEE --gateway fc00::2 -A limit-2318 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2319 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-142 -A limit-232 -m limit --limit 1/second -j LOG -A limit-232 -j ACCEPT -A limit-2320 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2321 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1290 -A limit-2322 -m recent --name limit-2322 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1291 -A limit-2323 -m recent --name limit-2323 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1292 -A limit-2324 -m recent --name limit-2324 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1293 -A limit-2325 -m recent --name limit-2325 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1294 -A limit-2326 -m recent --name limit-2326 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1295 -A limit-2327 -m recent --name limit-2327 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1296 -A limit-2328 -m recent --name limit-2328 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1297 -A limit-2329 -m recent --name limit-2329 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-143 -A limit-233 -m limit --limit 1/second -j LOG -A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1298 -A limit-2330 -m recent --name limit-2330 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2331 -m recent --name limit-2331 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1299 -A limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1300 -A limit-2332 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1301 -A limit-2333 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1302 -A limit-2334 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1303 -A limit-2335 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1304 -A limit-2336 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1305 -A limit-2337 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1306 -A limit-2338 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1307 -A limit-2339 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-144 -A limit-234 -j TEE --gateway fc00::2 -A limit-234 -j ACCEPT -A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1308 -A limit-2340 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2341 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1309 -A limit-2342 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1310 -A limit-2343 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1311 -A limit-2344 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1312 -A limit-2345 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1313 -A limit-2345 -m limit --limit 1/second -j LOG -A limit-2346 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1314 -A limit-2347 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1315 -A limit-2347 -j TEE --gateway fc00::2 -A limit-2348 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1316 -A limit-2349 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1317 -A limit-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 -A limit-235 -j TEE --gateway fc00::2 -A limit-2350 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1318 -A limit-2351 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1319 -A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1320 -A limit-2352 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1321 -A limit-2353 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1322 -A limit-2354 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1323 -A limit-2355 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1324 -A limit-2356 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1325 -A limit-2357 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1326 -A limit-2358 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1327 -A limit-2359 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 -A limit-236 -j ACCEPT -A limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1328 -A limit-2360 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2361 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-1329 -A limit-2362 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1330 -A limit-2363 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1331 -A limit-2364 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1332 -A limit-2365 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1333 -A limit-2365 -m limit --limit 1/second -j LOG -A limit-2366 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1334 -A limit-2367 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1335 -A limit-2367 -j TEE --gateway fc00::2 -A limit-2368 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1336 -A limit-2369 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1337 -A limit-237 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 -A limit-2370 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1338 -A limit-2371 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-1339 -A limit-2372 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1340 -A limit-2372 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2373 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1341 -A limit-2373 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2374 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1342 -A limit-2374 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2375 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1343 -A limit-2375 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2376 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1344 -A limit-2376 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2377 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1345 -A limit-2377 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2378 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1346 -A limit-2378 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2379 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1347 -A limit-2379 -m recent --name user:C --rsource --mask fe00:: --set -A limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 -A limit-238 -j ACCEPT -A limit-2380 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1348 -A limit-2380 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2381 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1349 -A limit-2382 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1350 -A limit-2383 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1351 -A limit-2384 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1352 -A limit-2385 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1353 -A limit-2385 -m limit --limit 1/second -j LOG -A limit-2386 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1354 -A limit-2387 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1355 -A limit-2387 -j TEE --gateway fc00::2 -A limit-2388 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1356 -A limit-2389 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1357 -A limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 -A limit-2390 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1358 -A limit-2391 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1359 -A limit-2392 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1360 -A limit-2392 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2393 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1361 -A limit-2393 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2394 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1362 -A limit-2394 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2395 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1363 -A limit-2395 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2396 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1364 -A limit-2396 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2397 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1365 -A limit-2397 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2398 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1366 -A limit-2398 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2399 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1367 -A limit-2399 -m recent --name user:C --rdest --mask fe00:: --set -A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-24 -j TEE --gateway fc00::2 -A limit-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-150 -A limit-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-2400 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1368 -A limit-2400 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2401 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-1369 -A limit-2402 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1370 -A limit-2403 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1371 -A limit-2404 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1372 -A limit-2405 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1373 -A limit-2405 -m limit --limit 1/second -j LOG -A limit-2406 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1374 -A limit-2407 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1375 -A limit-2407 -j TEE --gateway fc00::2 -A limit-2408 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1376 -A limit-2409 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1377 -A limit-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 -A limit-241 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2410 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1378 -A limit-2411 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-1379 -A limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2412 -m recent --name limit-2412 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2413 -m recent --name limit-2413 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2414 -m recent --name limit-2414 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2415 -m recent --name limit-2415 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2416 -m recent --name limit-2416 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2417 -m recent --name limit-2417 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2418 -m recent --name limit-2418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2419 -m recent --name limit-2419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 -A limit-242 -m limit --limit 1/second -j LOG -A limit-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2420 -m recent --name limit-2420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2421 -m recent --name limit-2421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2422 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2423 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 -A limit-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2435 -m limit --limit 1/second -j LOG -A limit-2436 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2437 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2437 -j TEE --gateway fc00::2 -A limit-2438 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2439 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 -A limit-244 -j TEE --gateway fc00::2 -A limit-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-2440 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2441 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2448 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2449 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 -A limit-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2450 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2451 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2452 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2453 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2454 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2455 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2455 -m limit --limit 1/second -j LOG -A limit-2456 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2457 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2457 -j TEE --gateway fc00::2 -A limit-2458 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2459 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 -A limit-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-2460 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2461 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2462 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2462 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2463 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2463 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2464 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2464 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2465 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2465 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2466 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2466 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2467 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2467 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2468 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2468 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2469 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2469 -m recent --name user:C --rsource --mask fe00:: --set -A limit-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-157 -A limit-247 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2470 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2470 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2471 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2472 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2473 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2474 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2475 -m limit --limit 1/second -j LOG -A limit-2476 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2477 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2477 -j TEE --gateway fc00::2 -A limit-2478 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2479 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-158 -A limit-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-2480 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2481 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2482 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2482 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2483 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2483 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2484 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2484 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2485 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2485 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2486 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2486 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2487 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2487 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2488 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2488 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2489 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2489 -m recent --name user:C --rdest --mask fe00:: --set -A limit-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-159 -A limit-2490 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2490 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2491 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2492 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2493 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2494 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2495 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2495 -m limit --limit 1/second -j LOG -A limit-2496 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2497 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2497 -j TEE --gateway fc00::2 -A limit-2498 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2499 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 -A limit-250 -j ACCEPT -A limit-2500 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2501 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1380 -A limit-2502 -m recent --name limit-2502 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1381 -A limit-2503 -m recent --name limit-2503 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1382 -A limit-2504 -m recent --name limit-2504 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1383 -A limit-2505 -m recent --name limit-2505 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1384 -A limit-2506 -m recent --name limit-2506 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1385 -A limit-2507 -m recent --name limit-2507 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1386 -A limit-2508 -m recent --name limit-2508 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1387 -A limit-2509 -m recent --name limit-2509 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-251 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 -A limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1388 -A limit-2510 -m recent --name limit-2510 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2511 -m recent --name limit-2511 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1389 -A limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1390 -A limit-2512 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1391 -A limit-2513 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1392 -A limit-2514 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1393 -A limit-2515 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1394 -A limit-2516 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1395 -A limit-2517 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1396 -A limit-2518 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1397 -A limit-2519 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 -A limit-252 -m limit --limit 1/second -j LOG -A limit-252 -j ACCEPT -A limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1398 -A limit-2520 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2521 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1399 -A limit-2522 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1400 -A limit-2523 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1401 -A limit-2524 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1402 -A limit-2525 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1403 -A limit-2525 -m limit --limit 1/second -j LOG -A limit-2526 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1404 -A limit-2527 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1405 -A limit-2527 -j TEE --gateway fc00::2 -A limit-2528 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1406 -A limit-2529 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1407 -A limit-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-163 -A limit-253 -m limit --limit 1/second -j LOG -A limit-2530 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1408 -A limit-2531 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1409 -A limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1410 -A limit-2532 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1411 -A limit-2533 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1412 -A limit-2534 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1413 -A limit-2535 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1414 -A limit-2536 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1415 -A limit-2537 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1416 -A limit-2538 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1417 -A limit-2539 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-164 -A limit-254 -j TEE --gateway fc00::2 -A limit-254 -j ACCEPT -A limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1418 -A limit-2540 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2541 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1419 -A limit-2542 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1420 -A limit-2543 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1421 -A limit-2544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1422 -A limit-2545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1423 -A limit-2545 -m limit --limit 1/second -j LOG -A limit-2546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1424 -A limit-2547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1425 -A limit-2547 -j TEE --gateway fc00::2 -A limit-2548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1426 -A limit-2549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1427 -A limit-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-165 -A limit-255 -j TEE --gateway fc00::2 -A limit-2550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1428 -A limit-2551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1429 -A limit-2552 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1430 -A limit-2552 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2553 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1431 -A limit-2553 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2554 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1432 -A limit-2554 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2555 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1433 -A limit-2555 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1434 -A limit-2556 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1435 -A limit-2557 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1436 -A limit-2558 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1437 -A limit-2559 -m recent --name user:C --rsource --mask fe00:: --set -A limit-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-166 -A limit-256 -j ACCEPT -A limit-2560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1438 -A limit-2560 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1439 -A limit-2562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1440 -A limit-2563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1441 -A limit-2564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1442 -A limit-2565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1443 -A limit-2565 -m limit --limit 1/second -j LOG -A limit-2566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1444 -A limit-2567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1445 -A limit-2567 -j TEE --gateway fc00::2 -A limit-2568 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1446 -A limit-2569 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1447 -A limit-257 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-167 -A limit-2570 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1448 -A limit-2571 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1449 -A limit-2572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1450 -A limit-2572 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1451 -A limit-2573 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2574 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1452 -A limit-2574 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2575 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1453 -A limit-2575 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2576 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1454 -A limit-2576 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2577 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1455 -A limit-2577 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2578 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1456 -A limit-2578 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2579 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1457 -A limit-2579 -m recent --name user:C --rdest --mask fe00:: --set -A limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-168 -A limit-258 -j ACCEPT -A limit-2580 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1458 -A limit-2580 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2581 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1459 -A limit-2582 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1460 -A limit-2583 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1461 -A limit-2584 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1462 -A limit-2585 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1463 -A limit-2585 -m limit --limit 1/second -j LOG -A limit-2586 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1464 -A limit-2587 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1465 -A limit-2587 -j TEE --gateway fc00::2 -A limit-2588 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1466 -A limit-2589 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1467 -A limit-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 -A limit-2590 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1468 -A limit-2591 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1469 -A limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1470 -A limit-2592 -m recent --name limit-2592 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1471 -A limit-2593 -m recent --name limit-2593 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1472 -A limit-2594 -m recent --name limit-2594 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1473 -A limit-2595 -m recent --name limit-2595 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1474 -A limit-2596 -m recent --name limit-2596 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1475 -A limit-2597 -m recent --name limit-2597 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1476 -A limit-2598 -m recent --name limit-2598 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1477 -A limit-2599 -m recent --name limit-2599 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-170 -A limit-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1478 -A limit-2600 -m recent --name limit-2600 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2601 -m recent --name limit-2601 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1479 -A limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1480 -A limit-2602 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1481 -A limit-2603 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1482 -A limit-2604 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1483 -A limit-2605 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1484 -A limit-2606 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1485 -A limit-2607 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1486 -A limit-2608 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1487 -A limit-2609 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-171 -A limit-261 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1488 -A limit-2610 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2611 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1489 -A limit-2612 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1490 -A limit-2613 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1491 -A limit-2614 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1492 -A limit-2615 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1493 -A limit-2615 -m limit --limit 1/second -j LOG -A limit-2616 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1494 -A limit-2617 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1495 -A limit-2617 -j TEE --gateway fc00::2 -A limit-2618 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1496 -A limit-2619 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1497 -A limit-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-172 -A limit-262 -m limit --limit 1/second -j LOG -A limit-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-2620 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1498 -A limit-2621 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1499 -A limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1500 -A limit-2622 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1501 -A limit-2623 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1502 -A limit-2624 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1503 -A limit-2625 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1504 -A limit-2626 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1505 -A limit-2627 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1506 -A limit-2628 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1507 -A limit-2629 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-173 -A limit-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1508 -A limit-2630 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2631 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1509 -A limit-2632 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1510 -A limit-2633 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1511 -A limit-2634 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1512 -A limit-2635 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1513 -A limit-2635 -m limit --limit 1/second -j LOG -A limit-2636 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1514 -A limit-2637 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1515 -A limit-2637 -j TEE --gateway fc00::2 -A limit-2638 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1516 -A limit-2639 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1517 -A limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-174 -A limit-264 -j TEE --gateway fc00::2 -A limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-2640 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1518 -A limit-2641 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1519 -A limit-2642 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1520 -A limit-2642 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2643 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1521 -A limit-2643 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2644 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1522 -A limit-2644 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2645 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1523 -A limit-2645 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2646 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1524 -A limit-2646 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2647 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1525 -A limit-2647 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2648 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1526 -A limit-2648 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2649 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1527 -A limit-2649 -m recent --name user:C --rsource --mask fe00:: --set -A limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-175 -A limit-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2650 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1528 -A limit-2650 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2651 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1529 -A limit-2652 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1530 -A limit-2653 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1531 -A limit-2654 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1532 -A limit-2655 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1533 -A limit-2655 -m limit --limit 1/second -j LOG -A limit-2656 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1534 -A limit-2657 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1535 -A limit-2657 -j TEE --gateway fc00::2 -A limit-2658 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1536 -A limit-2659 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1537 -A limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-176 -A limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-2660 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1538 -A limit-2661 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1539 -A limit-2662 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1540 -A limit-2662 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2663 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1541 -A limit-2663 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2664 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1542 -A limit-2664 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2665 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1543 -A limit-2665 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2666 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1544 -A limit-2666 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2667 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1545 -A limit-2667 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2668 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1546 -A limit-2668 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2669 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1547 -A limit-2669 -m recent --name user:C --rdest --mask fe00:: --set -A limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-177 -A limit-267 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2670 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1548 -A limit-2670 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2671 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1549 -A limit-2672 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1550 -A limit-2673 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1551 -A limit-2674 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1552 -A limit-2675 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1553 -A limit-2675 -m limit --limit 1/second -j LOG -A limit-2676 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1554 -A limit-2677 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1555 -A limit-2677 -j TEE --gateway fc00::2 -A limit-2678 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1556 -A limit-2679 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1557 -A limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-178 -A limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-2680 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1558 -A limit-2681 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1559 -A limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2682 -m recent --name limit-2682 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2683 -m recent --name limit-2683 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2684 -m recent --name limit-2684 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2685 -m recent --name limit-2685 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2686 -m recent --name limit-2686 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2687 -m recent --name limit-2687 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2688 -m recent --name limit-2688 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2689 -m recent --name limit-2689 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-179 -A limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2690 -m recent --name limit-2690 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2691 -m recent --name limit-2691 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2692 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2693 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2694 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2695 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2696 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2697 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2698 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2699 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-180 -A limit-270 -j ACCEPT -A limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2700 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2701 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2702 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2703 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2704 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2705 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2705 -m limit --limit 1/second -j LOG -A limit-2706 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2707 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2707 -j TEE --gateway fc00::2 -A limit-2708 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2709 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-271 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-181 -A limit-2710 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2711 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2712 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2713 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2714 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2715 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2716 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2717 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2718 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2719 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-182 -A limit-272 -m limit --limit 1/second -j LOG -A limit-272 -j ACCEPT -A limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2720 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2721 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-2722 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2723 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2724 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2725 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2725 -m limit --limit 1/second -j LOG -A limit-2726 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2727 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2727 -j TEE --gateway fc00::2 -A limit-2728 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2729 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-183 -A limit-273 -m limit --limit 1/second -j LOG -A limit-2730 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2731 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2732 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2732 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2733 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2733 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2734 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2734 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2735 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2735 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2736 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2736 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2737 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2737 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2738 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2738 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2739 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2739 -m recent --name user:C --rsource --mask fe00:: --set -A limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-184 -A limit-274 -j TEE --gateway fc00::2 -A limit-274 -j ACCEPT -A limit-2740 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2740 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2741 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2742 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2743 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2744 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2745 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2745 -m limit --limit 1/second -j LOG -A limit-2746 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2747 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2747 -j TEE --gateway fc00::2 -A limit-2748 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2749 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-185 -A limit-275 -j TEE --gateway fc00::2 -A limit-2750 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2751 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2752 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2752 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2753 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2753 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2754 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2754 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2755 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2755 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2756 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2756 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2757 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2757 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2758 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2758 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2759 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2759 -m recent --name user:C --rdest --mask fe00:: --set -A limit-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-186 -A limit-276 -j ACCEPT -A limit-2760 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2760 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2761 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-2762 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2763 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2764 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2765 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2765 -m limit --limit 1/second -j LOG -A limit-2766 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2767 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2767 -j TEE --gateway fc00::2 -A limit-2768 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2769 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-277 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-187 -A limit-2770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1560 -A limit-2772 -m recent --name limit-2772 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1561 -A limit-2773 -m recent --name limit-2773 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1562 -A limit-2774 -m recent --name limit-2774 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1563 -A limit-2775 -m recent --name limit-2775 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1564 -A limit-2776 -m recent --name limit-2776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1565 -A limit-2777 -m recent --name limit-2777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1566 -A limit-2778 -m recent --name limit-2778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1567 -A limit-2779 -m recent --name limit-2779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-188 -A limit-278 -j ACCEPT -A limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1568 -A limit-2780 -m recent --name limit-2780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2781 -m recent --name limit-2781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1569 -A limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1570 -A limit-2782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1571 -A limit-2783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1572 -A limit-2784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1573 -A limit-2785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1574 -A limit-2786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1575 -A limit-2787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1576 -A limit-2788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1577 -A limit-2789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-189 -A limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1578 -A limit-2790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1579 -A limit-2792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1580 -A limit-2793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1581 -A limit-2794 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1582 -A limit-2795 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1583 -A limit-2795 -m limit --limit 1/second -j LOG -A limit-2796 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1584 -A limit-2797 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1585 -A limit-2797 -j TEE --gateway fc00::2 -A limit-2798 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1586 -A limit-2799 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1587 -A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2800 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1588 -A limit-2801 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1589 -A limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1590 -A limit-2802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1591 -A limit-2803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1592 -A limit-2804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1593 -A limit-2805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1594 -A limit-2806 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1595 -A limit-2807 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1596 -A limit-2808 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1597 -A limit-2809 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1598 -A limit-2810 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2811 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-1599 -A limit-2812 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1600 -A limit-2813 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1601 -A limit-2814 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1602 -A limit-2815 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1603 -A limit-2815 -m limit --limit 1/second -j LOG -A limit-2816 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1604 -A limit-2817 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1605 -A limit-2817 -j TEE --gateway fc00::2 -A limit-2818 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1606 -A limit-2819 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1607 -A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-282 -m limit --limit 1/second -j LOG -A limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2820 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1608 -A limit-2821 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-1609 -A limit-2822 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1610 -A limit-2822 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2823 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1611 -A limit-2823 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2824 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1612 -A limit-2824 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2825 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1613 -A limit-2825 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2826 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1614 -A limit-2826 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2827 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1615 -A limit-2827 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2828 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1616 -A limit-2828 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2829 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1617 -A limit-2829 -m recent --name user:C --rsource --mask fe00:: --set -A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-2830 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1618 -A limit-2830 -m recent --name user:C --rsource --mask fe00:: --set -A limit-2831 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1619 -A limit-2832 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1620 -A limit-2833 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1621 -A limit-2834 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1622 -A limit-2835 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1623 -A limit-2835 -m limit --limit 1/second -j LOG -A limit-2836 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1624 -A limit-2837 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1625 -A limit-2837 -j TEE --gateway fc00::2 -A limit-2838 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1626 -A limit-2839 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1627 -A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-284 -j TEE --gateway fc00::2 -A limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2840 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1628 -A limit-2841 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1629 -A limit-2842 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1630 -A limit-2842 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2843 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1631 -A limit-2843 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2844 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1632 -A limit-2844 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2845 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1633 -A limit-2845 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-2846 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1634 -A limit-2846 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2847 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1635 -A limit-2847 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-2848 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1636 -A limit-2848 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2849 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1637 -A limit-2849 -m recent --name user:C --rdest --mask fe00:: --set -A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-2850 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1638 -A limit-2850 -m recent --name user:C --rdest --mask fe00:: --set -A limit-2851 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-1639 -A limit-2852 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1640 -A limit-2853 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1641 -A limit-2854 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1642 -A limit-2855 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1643 -A limit-2855 -m limit --limit 1/second -j LOG -A limit-2856 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1644 -A limit-2857 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1645 -A limit-2857 -j TEE --gateway fc00::2 -A limit-2858 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1646 -A limit-2859 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1647 -A limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-286 -m recent --name limit-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2860 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1648 -A limit-2861 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-1649 -A limit-2862 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2862 -j RETURN -A limit-2862 -m limit --limit 1/second -j LOG -A limit-2862 -j DROP -A limit-2863 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2863 -j RETURN -A limit-2863 -m limit --limit 1/second -j LOG -A limit-2863 -j DROP -A limit-2864 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2864 -j RETURN -A limit-2864 -m limit --limit 1/second -j LOG -A limit-2864 -j DROP -A limit-2865 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2865 -j RETURN -A limit-2865 -m limit --limit 1/second -j LOG -A limit-2865 -j DROP -A limit-2866 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2866 -j RETURN -A limit-2866 -m limit --limit 1/second -j LOG -A limit-2866 -j DROP -A limit-2867 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2867 -j RETURN -A limit-2867 -m limit --limit 1/second -j LOG -A limit-2867 -j DROP -A limit-2868 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2868 -j RETURN -A limit-2868 -j DROP -A limit-2869 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2869 -j RETURN -A limit-2869 -j DROP -A limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-287 -m recent --name limit-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2870 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2870 -j RETURN -A limit-2870 -j DROP -A limit-2871 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2871 -j RETURN -A limit-2871 -j DROP -A limit-2872 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2872 -j RETURN -A limit-2872 -j DROP -A limit-2873 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2873 -j RETURN -A limit-2873 -j DROP -A limit-2874 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2874 -j RETURN -A limit-2874 -m limit --limit 1/second -j LOG -A limit-2874 -j DROP -A limit-2875 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2875 -j RETURN -A limit-2875 -m limit --limit 1/second -j LOG -A limit-2875 -j DROP -A limit-2876 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2876 -j RETURN -A limit-2876 -m limit --limit 1/second -j LOG -A limit-2876 -j DROP -A limit-2877 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2877 -j RETURN -A limit-2877 -m limit --limit 1/second -j LOG -A limit-2877 -j DROP -A limit-2878 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2878 -j RETURN -A limit-2878 -m limit --limit 1/second -j LOG -A limit-2878 -j DROP -A limit-2879 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2879 -j RETURN -A limit-2879 -m limit --limit 1/second -j LOG -A limit-2879 -j DROP -A limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-288 -m recent --name limit-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2880 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2880 -j RETURN -A limit-2880 -j TEE --gateway fc00::2 -A limit-2880 -j DROP -A limit-2881 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2881 -j RETURN -A limit-2881 -j TEE --gateway fc00::2 -A limit-2881 -j DROP -A limit-2882 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2882 -j RETURN -A limit-2882 -j TEE --gateway fc00::2 -A limit-2882 -j DROP -A limit-2883 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2883 -j RETURN -A limit-2883 -j TEE --gateway fc00::2 -A limit-2883 -j DROP -A limit-2884 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2884 -j RETURN -A limit-2884 -j TEE --gateway fc00::2 -A limit-2884 -j DROP -A limit-2885 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2885 -j RETURN -A limit-2885 -j TEE --gateway fc00::2 -A limit-2885 -j DROP -A limit-2886 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2886 -j RETURN -A limit-2886 -j DROP -A limit-2887 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2887 -j RETURN -A limit-2887 -j DROP -A limit-2888 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2888 -j RETURN -A limit-2888 -j DROP -A limit-2889 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2889 -j RETURN -A limit-2889 -j DROP -A limit-289 -m recent --name limit-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-2890 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2890 -j RETURN -A limit-2890 -j DROP -A limit-2891 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2891 -j RETURN -A limit-2891 -j DROP -A limit-2892 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2892 -j RETURN -A limit-2892 -j DROP -A limit-2893 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2893 -j RETURN -A limit-2893 -j DROP -A limit-2894 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2894 -j RETURN -A limit-2894 -j DROP -A limit-2895 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2895 -j RETURN -A limit-2895 -j DROP -A limit-2896 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2896 -j RETURN -A limit-2896 -j DROP -A limit-2897 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2897 -j RETURN -A limit-2897 -j DROP -A limit-2898 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2898 -j RETURN -A limit-2898 -j DROP -A limit-2899 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2899 -j RETURN -A limit-2899 -j DROP -A limit-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2900 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2900 -j RETURN -A limit-2900 -j DROP -A limit-2901 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2901 -j RETURN -A limit-2901 -j DROP -A limit-2902 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2902 -j RETURN -A limit-2902 -j DROP -A limit-2903 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2903 -j RETURN -A limit-2903 -j DROP -A limit-2904 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2904 -j RETURN -A limit-2904 -m limit --limit 1/second -j LOG -A limit-2904 -j DROP -A limit-2905 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2905 -j RETURN -A limit-2905 -m limit --limit 1/second -j LOG -A limit-2905 -j DROP -A limit-2906 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2906 -j RETURN -A limit-2906 -m limit --limit 1/second -j LOG -A limit-2906 -j DROP -A limit-2907 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2907 -j RETURN -A limit-2907 -m limit --limit 1/second -j LOG -A limit-2907 -j DROP -A limit-2908 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2908 -j RETURN -A limit-2908 -m limit --limit 1/second -j LOG -A limit-2908 -j DROP -A limit-2909 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2909 -j RETURN -A limit-2909 -m limit --limit 1/second -j LOG -A limit-2909 -j DROP -A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-2910 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2910 -j RETURN -A limit-2910 -j TEE --gateway fc00::2 -A limit-2910 -j DROP -A limit-2911 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2911 -j RETURN -A limit-2911 -j TEE --gateway fc00::2 -A limit-2911 -j DROP -A limit-2912 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2912 -j RETURN -A limit-2912 -j TEE --gateway fc00::2 -A limit-2912 -j DROP -A limit-2913 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2913 -j RETURN -A limit-2913 -j TEE --gateway fc00::2 -A limit-2913 -j DROP -A limit-2914 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2914 -j RETURN -A limit-2914 -j TEE --gateway fc00::2 -A limit-2914 -j DROP -A limit-2915 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2915 -j RETURN -A limit-2915 -j TEE --gateway fc00::2 -A limit-2915 -j DROP -A limit-2916 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2916 -j RETURN -A limit-2916 -j DROP -A limit-2917 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2917 -j RETURN -A limit-2917 -j DROP -A limit-2918 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2918 -j RETURN -A limit-2918 -j DROP -A limit-2919 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2919 -j RETURN -A limit-2919 -j DROP -A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-292 -m limit --limit 1/second -j LOG -A limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-2920 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2920 -j RETURN -A limit-2920 -j DROP -A limit-2921 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2921 -j RETURN -A limit-2921 -j DROP -A limit-2922 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2922 -j RETURN -A limit-2922 -j DROP -A limit-2923 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2923 -j RETURN -A limit-2923 -j DROP -A limit-2924 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2924 -j RETURN -A limit-2924 -j DROP -A limit-2925 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2925 -j RETURN -A limit-2925 -j DROP -A limit-2926 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2926 -j RETURN -A limit-2926 -j DROP -A limit-2927 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-2927 -j RETURN -A limit-2927 -j DROP -A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-294 -j TEE --gateway fc00::2 -A limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-3 -A limit-3 -m recent --name limit-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-30 -j ACCEPT -A limit-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-300 -j ACCEPT -A limit-301 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-302 -m limit --limit 1/second -j LOG -A limit-302 -j ACCEPT -A limit-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-303 -m limit --limit 1/second -j LOG -A limit-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-304 -j TEE --gateway fc00::2 -A limit-304 -j ACCEPT -A limit-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-305 -j TEE --gateway fc00::2 -A limit-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-306 -j ACCEPT -A limit-307 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-308 -j ACCEPT -A limit-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-31 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-312 -m limit --limit 1/second -j LOG -A limit-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-314 -j TEE --gateway fc00::2 -A limit-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-32 -m limit --limit 1/second -j LOG -A limit-32 -j ACCEPT -A limit-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-320 -j ACCEPT -A limit-321 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-322 -m limit --limit 1/second -j LOG -A limit-322 -j ACCEPT -A limit-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-323 -m limit --limit 1/second -j LOG -A limit-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-324 -j TEE --gateway fc00::2 -A limit-324 -j ACCEPT -A limit-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-325 -j TEE --gateway fc00::2 -A limit-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-326 -j ACCEPT -A limit-327 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-328 -j ACCEPT -A limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-33 -m limit --limit 1/second -j LOG -A limit-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-331 -m recent --name user:C --rsource --mask fe00:: --set -A limit-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-332 -m limit --limit 1/second -j LOG -A limit-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-334 -j TEE --gateway fc00::2 -A limit-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-337 -m recent --name user:C --rsource --mask fe00:: --set -A limit-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-34 -j TEE --gateway fc00::2 -A limit-34 -j ACCEPT -A limit-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-340 -j ACCEPT -A limit-341 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-342 -m limit --limit 1/second -j LOG -A limit-342 -j ACCEPT -A limit-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-343 -m limit --limit 1/second -j LOG -A limit-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-344 -j TEE --gateway fc00::2 -A limit-344 -j ACCEPT -A limit-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-345 -j TEE --gateway fc00::2 -A limit-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-346 -j ACCEPT -A limit-347 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-348 -j ACCEPT -A limit-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-35 -j TEE --gateway fc00::2 -A limit-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-351 -m recent --name user:C --rdest --mask fe00:: --set -A limit-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-352 -m limit --limit 1/second -j LOG -A limit-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-354 -j TEE --gateway fc00::2 -A limit-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-357 -m recent --name user:C --rdest --mask fe00:: --set -A limit-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-36 -j ACCEPT -A limit-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-360 -j ACCEPT -A limit-361 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-362 -m limit --limit 1/second -j LOG -A limit-362 -j ACCEPT -A limit-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-363 -m limit --limit 1/second -j LOG -A limit-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-364 -j TEE --gateway fc00::2 -A limit-364 -j ACCEPT -A limit-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-365 -j TEE --gateway fc00::2 -A limit-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-366 -j ACCEPT -A limit-367 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-368 -j ACCEPT -A limit-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-37 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-190 -A limit-370 -m recent --name limit-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-191 -A limit-371 -m recent --name limit-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-192 -A limit-372 -m limit --limit 1/second -j LOG -A limit-372 -m recent --name limit-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-193 -A limit-373 -m recent --name limit-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-194 -A limit-374 -j TEE --gateway fc00::2 -A limit-374 -m recent --name limit-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-195 -A limit-375 -m recent --name limit-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-196 -A limit-376 -m recent --name limit-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-197 -A limit-377 -m recent --name limit-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-198 -A limit-378 -m recent --name limit-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-379 -m recent --name limit-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-199 -A limit-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-38 -j ACCEPT -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-200 -A limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-201 -A limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-202 -A limit-382 -m limit --limit 1/second -j LOG -A limit-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-203 -A limit-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-204 -A limit-384 -j TEE --gateway fc00::2 -A limit-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-205 -A limit-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-206 -A limit-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-207 -A limit-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-208 -A limit-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-209 -A limit-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-210 -A limit-390 -j ACCEPT -A limit-391 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-211 -A limit-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-212 -A limit-392 -m limit --limit 1/second -j LOG -A limit-392 -j ACCEPT -A limit-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-213 -A limit-393 -m limit --limit 1/second -j LOG -A limit-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-214 -A limit-394 -j TEE --gateway fc00::2 -A limit-394 -j ACCEPT -A limit-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-215 -A limit-395 -j TEE --gateway fc00::2 -A limit-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-216 -A limit-396 -j ACCEPT -A limit-397 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-217 -A limit-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-218 -A limit-398 -j ACCEPT -A limit-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-219 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-4 -A limit-4 -j TEE --gateway fc00::2 -A limit-4 -m recent --name limit-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-220 -A limit-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-221 -A limit-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-222 -A limit-402 -m limit --limit 1/second -j LOG -A limit-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-223 -A limit-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-224 -A limit-404 -j TEE --gateway fc00::2 -A limit-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-225 -A limit-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-226 -A limit-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-227 -A limit-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-228 -A limit-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 -A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-230 -A limit-410 -j ACCEPT -A limit-411 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-231 -A limit-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-232 -A limit-412 -m limit --limit 1/second -j LOG -A limit-412 -j ACCEPT -A limit-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-233 -A limit-413 -m limit --limit 1/second -j LOG -A limit-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-234 -A limit-414 -j TEE --gateway fc00::2 -A limit-414 -j ACCEPT -A limit-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-235 -A limit-415 -j TEE --gateway fc00::2 -A limit-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-236 -A limit-416 -j ACCEPT -A limit-417 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-237 -A limit-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-238 -A limit-418 -j ACCEPT -A limit-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-239 -A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-42 -m limit --limit 1/second -j LOG -A limit-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-240 -A limit-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-241 -A limit-421 -m recent --name user:C --rsource --mask fe00:: --set -A limit-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-242 -A limit-422 -m limit --limit 1/second -j LOG -A limit-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-243 -A limit-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-244 -A limit-424 -j TEE --gateway fc00::2 -A limit-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-245 -A limit-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-246 -A limit-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-247 -A limit-427 -m recent --name user:C --rsource --mask fe00:: --set -A limit-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-248 -A limit-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-249 -A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-250 -A limit-430 -j ACCEPT -A limit-431 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-251 -A limit-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-252 -A limit-432 -m limit --limit 1/second -j LOG -A limit-432 -j ACCEPT -A limit-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-253 -A limit-433 -m limit --limit 1/second -j LOG -A limit-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-254 -A limit-434 -j TEE --gateway fc00::2 -A limit-434 -j ACCEPT -A limit-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-255 -A limit-435 -j TEE --gateway fc00::2 -A limit-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-256 -A limit-436 -j ACCEPT -A limit-437 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-257 -A limit-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-258 -A limit-438 -j ACCEPT -A limit-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-259 -A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-44 -j TEE --gateway fc00::2 -A limit-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-260 -A limit-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-261 -A limit-441 -m recent --name user:C --rdest --mask fe00:: --set -A limit-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-262 -A limit-442 -m limit --limit 1/second -j LOG -A limit-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-263 -A limit-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-264 -A limit-444 -j TEE --gateway fc00::2 -A limit-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 -A limit-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 -A limit-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 -A limit-447 -m recent --name user:C --rdest --mask fe00:: --set -A limit-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 -A limit-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 -A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-270 -A limit-450 -j ACCEPT -A limit-451 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 -A limit-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 -A limit-452 -m limit --limit 1/second -j LOG -A limit-452 -j ACCEPT -A limit-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 -A limit-453 -m limit --limit 1/second -j LOG -A limit-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 -A limit-454 -j TEE --gateway fc00::2 -A limit-454 -j ACCEPT -A limit-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 -A limit-455 -j TEE --gateway fc00::2 -A limit-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 -A limit-456 -j ACCEPT -A limit-457 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-277 -A limit-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-278 -A limit-458 -j ACCEPT -A limit-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-279 -A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-460 -m recent --name limit-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-461 -m recent --name limit-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-462 -m limit --limit 1/second -j LOG -A limit-462 -m recent --name limit-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-463 -m recent --name limit-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-464 -j TEE --gateway fc00::2 -A limit-464 -m recent --name limit-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-465 -m recent --name limit-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-466 -m recent --name limit-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-467 -m recent --name limit-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-468 -m recent --name limit-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-469 -m recent --name limit-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-472 -m limit --limit 1/second -j LOG -A limit-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-474 -j TEE --gateway fc00::2 -A limit-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-480 -j ACCEPT -A limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-482 -m limit --limit 1/second -j LOG -A limit-482 -j ACCEPT -A limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-483 -m limit --limit 1/second -j LOG -A limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-484 -j TEE --gateway fc00::2 -A limit-484 -j ACCEPT -A limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-485 -j TEE --gateway fc00::2 -A limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-486 -j ACCEPT -A limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-488 -j ACCEPT -A limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-492 -m limit --limit 1/second -j LOG -A limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-494 -j TEE --gateway fc00::2 -A limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-5 -A limit-5 -m recent --name limit-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-50 -j ACCEPT -A limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-500 -j ACCEPT -A limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-502 -m limit --limit 1/second -j LOG -A limit-502 -j ACCEPT -A limit-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-503 -m limit --limit 1/second -j LOG -A limit-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-504 -j TEE --gateway fc00::2 -A limit-504 -j ACCEPT -A limit-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-505 -j TEE --gateway fc00::2 -A limit-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-506 -j ACCEPT -A limit-507 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-508 -j ACCEPT -A limit-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-51 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-511 -m recent --name user:C --rsource --mask fe00:: --set -A limit-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-512 -m limit --limit 1/second -j LOG -A limit-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-514 -j TEE --gateway fc00::2 -A limit-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-517 -m recent --name user:C --rsource --mask fe00:: --set -A limit-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-52 -m limit --limit 1/second -j LOG -A limit-52 -j ACCEPT -A limit-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-520 -j ACCEPT -A limit-521 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-522 -m limit --limit 1/second -j LOG -A limit-522 -j ACCEPT -A limit-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-523 -m limit --limit 1/second -j LOG -A limit-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-524 -j TEE --gateway fc00::2 -A limit-524 -j ACCEPT -A limit-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-525 -j TEE --gateway fc00::2 -A limit-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-526 -j ACCEPT -A limit-527 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-528 -j ACCEPT -A limit-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-53 -m limit --limit 1/second -j LOG -A limit-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-531 -m recent --name user:C --rdest --mask fe00:: --set -A limit-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-532 -m limit --limit 1/second -j LOG -A limit-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-534 -j TEE --gateway fc00::2 -A limit-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-537 -m recent --name user:C --rdest --mask fe00:: --set -A limit-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-54 -j TEE --gateway fc00::2 -A limit-54 -j ACCEPT -A limit-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-540 -j ACCEPT -A limit-541 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-542 -m limit --limit 1/second -j LOG -A limit-542 -j ACCEPT -A limit-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-543 -m limit --limit 1/second -j LOG -A limit-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-544 -j TEE --gateway fc00::2 -A limit-544 -j ACCEPT -A limit-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-545 -j TEE --gateway fc00::2 -A limit-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-546 -j ACCEPT -A limit-547 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-548 -j ACCEPT -A limit-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-55 -j TEE --gateway fc00::2 -A limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-280 -A limit-550 -m recent --name limit-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-281 -A limit-551 -m recent --name limit-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-282 -A limit-552 -m limit --limit 1/second -j LOG -A limit-552 -m recent --name limit-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-283 -A limit-553 -m recent --name limit-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-284 -A limit-554 -j TEE --gateway fc00::2 -A limit-554 -m recent --name limit-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-285 -A limit-555 -m recent --name limit-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-286 -A limit-556 -m recent --name limit-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-287 -A limit-557 -m recent --name limit-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-288 -A limit-558 -m recent --name limit-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-559 -m recent --name limit-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 -A limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-56 -j ACCEPT -A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 -A limit-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 -A limit-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 -A limit-562 -m limit --limit 1/second -j LOG -A limit-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 -A limit-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 -A limit-564 -j TEE --gateway fc00::2 -A limit-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 -A limit-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 -A limit-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 -A limit-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 -A limit-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 -A limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-300 -A limit-570 -j ACCEPT -A limit-571 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 -A limit-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 -A limit-572 -m limit --limit 1/second -j LOG -A limit-572 -j ACCEPT -A limit-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 -A limit-573 -m limit --limit 1/second -j LOG -A limit-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 -A limit-574 -j TEE --gateway fc00::2 -A limit-574 -j ACCEPT -A limit-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 -A limit-575 -j TEE --gateway fc00::2 -A limit-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 -A limit-576 -j ACCEPT -A limit-577 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-307 -A limit-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-308 -A limit-578 -j ACCEPT -A limit-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-309 -A limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-58 -j ACCEPT -A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 -A limit-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 -A limit-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 -A limit-582 -m limit --limit 1/second -j LOG -A limit-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-313 -A limit-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-314 -A limit-584 -j TEE --gateway fc00::2 -A limit-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-315 -A limit-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-316 -A limit-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-317 -A limit-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-318 -A limit-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-319 -A limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-320 -A limit-590 -j ACCEPT -A limit-591 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-321 -A limit-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-322 -A limit-592 -m limit --limit 1/second -j LOG -A limit-592 -j ACCEPT -A limit-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-323 -A limit-593 -m limit --limit 1/second -j LOG -A limit-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-324 -A limit-594 -j TEE --gateway fc00::2 -A limit-594 -j ACCEPT -A limit-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-325 -A limit-595 -j TEE --gateway fc00::2 -A limit-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-326 -A limit-596 -j ACCEPT -A limit-597 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-327 -A limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-328 -A limit-598 -j ACCEPT -A limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-329 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-6 -A limit-6 -m recent --name limit-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-330 -A limit-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 -A limit-601 -m recent --name user:C --rsource --mask fe00:: --set -A limit-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 -A limit-602 -m limit --limit 1/second -j LOG -A limit-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 -A limit-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 -A limit-604 -j TEE --gateway fc00::2 -A limit-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 -A limit-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 -A limit-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-337 -A limit-607 -m recent --name user:C --rsource --mask fe00:: --set -A limit-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-338 -A limit-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-339 -A limit-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-61 -m recent --name user:C --rsource --mask fe00:: --set -A limit-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 -A limit-610 -j ACCEPT -A limit-611 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 -A limit-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 -A limit-612 -m limit --limit 1/second -j LOG -A limit-612 -j ACCEPT -A limit-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-343 -A limit-613 -m limit --limit 1/second -j LOG -A limit-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-344 -A limit-614 -j TEE --gateway fc00::2 -A limit-614 -j ACCEPT -A limit-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-345 -A limit-615 -j TEE --gateway fc00::2 -A limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-346 -A limit-616 -j ACCEPT -A limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-347 -A limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-348 -A limit-618 -j ACCEPT -A limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-349 -A limit-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-62 -m limit --limit 1/second -j LOG -A limit-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-350 -A limit-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-351 -A limit-621 -m recent --name user:C --rdest --mask fe00:: --set -A limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-352 -A limit-622 -m limit --limit 1/second -j LOG -A limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-353 -A limit-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-354 -A limit-624 -j TEE --gateway fc00::2 -A limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-355 -A limit-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-356 -A limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-357 -A limit-627 -m recent --name user:C --rdest --mask fe00:: --set -A limit-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-358 -A limit-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-359 -A limit-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-360 -A limit-630 -j ACCEPT -A limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-361 -A limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-362 -A limit-632 -m limit --limit 1/second -j LOG -A limit-632 -j ACCEPT -A limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-363 -A limit-633 -m limit --limit 1/second -j LOG -A limit-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-364 -A limit-634 -j TEE --gateway fc00::2 -A limit-634 -j ACCEPT -A limit-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-365 -A limit-635 -j TEE --gateway fc00::2 -A limit-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-366 -A limit-636 -j ACCEPT -A limit-637 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-367 -A limit-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-368 -A limit-638 -j ACCEPT -A limit-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-369 -A limit-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-64 -j TEE --gateway fc00::2 -A limit-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-370 -A limit-640 -m recent --name limit-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-371 -A limit-641 -m recent --name limit-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-372 -A limit-642 -m limit --limit 1/second -j LOG -A limit-642 -m recent --name limit-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-373 -A limit-643 -m recent --name limit-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-374 -A limit-644 -j TEE --gateway fc00::2 -A limit-644 -m recent --name limit-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-375 -A limit-645 -m recent --name limit-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-376 -A limit-646 -m recent --name limit-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-377 -A limit-647 -m recent --name limit-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-378 -A limit-648 -m recent --name limit-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-649 -m recent --name limit-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-379 -A limit-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-380 -A limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-381 -A limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-382 -A limit-652 -m limit --limit 1/second -j LOG -A limit-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-383 -A limit-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-384 -A limit-654 -j TEE --gateway fc00::2 -A limit-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-385 -A limit-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-386 -A limit-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-387 -A limit-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-388 -A limit-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-389 -A limit-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-390 -A limit-660 -j ACCEPT -A limit-661 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-391 -A limit-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-392 -A limit-662 -m limit --limit 1/second -j LOG -A limit-662 -j ACCEPT -A limit-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-393 -A limit-663 -m limit --limit 1/second -j LOG -A limit-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-394 -A limit-664 -j TEE --gateway fc00::2 -A limit-664 -j ACCEPT -A limit-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-395 -A limit-665 -j TEE --gateway fc00::2 -A limit-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-396 -A limit-666 -j ACCEPT -A limit-667 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-397 -A limit-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-398 -A limit-668 -j ACCEPT -A limit-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-399 -A limit-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-67 -m recent --name user:C --rsource --mask fe00:: --set -A limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-400 -A limit-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-401 -A limit-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-402 -A limit-672 -m limit --limit 1/second -j LOG -A limit-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-403 -A limit-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-404 -A limit-674 -j TEE --gateway fc00::2 -A limit-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-405 -A limit-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-406 -A limit-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-407 -A limit-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-408 -A limit-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-409 -A limit-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-410 -A limit-680 -j ACCEPT -A limit-681 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-411 -A limit-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-412 -A limit-682 -m limit --limit 1/second -j LOG -A limit-682 -j ACCEPT -A limit-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-413 -A limit-683 -m limit --limit 1/second -j LOG -A limit-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-414 -A limit-684 -j TEE --gateway fc00::2 -A limit-684 -j ACCEPT -A limit-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-415 -A limit-685 -j TEE --gateway fc00::2 -A limit-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-416 -A limit-686 -j ACCEPT -A limit-687 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-417 -A limit-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-418 -A limit-688 -j ACCEPT -A limit-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-419 -A limit-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-420 -A limit-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-421 -A limit-691 -m recent --name user:C --rsource --mask fe00:: --set -A limit-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-422 -A limit-692 -m limit --limit 1/second -j LOG -A limit-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-423 -A limit-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-424 -A limit-694 -j TEE --gateway fc00::2 -A limit-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-425 -A limit-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-426 -A limit-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-427 -A limit-697 -m recent --name user:C --rsource --mask fe00:: --set -A limit-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-428 -A limit-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-429 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-7 -A limit-7 -m recent --name limit-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-70 -j ACCEPT -A limit-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-430 -A limit-700 -j ACCEPT -A limit-701 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-431 -A limit-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-432 -A limit-702 -m limit --limit 1/second -j LOG -A limit-702 -j ACCEPT -A limit-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-433 -A limit-703 -m limit --limit 1/second -j LOG -A limit-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-434 -A limit-704 -j TEE --gateway fc00::2 -A limit-704 -j ACCEPT -A limit-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-435 -A limit-705 -j TEE --gateway fc00::2 -A limit-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-436 -A limit-706 -j ACCEPT -A limit-707 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-437 -A limit-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-438 -A limit-708 -j ACCEPT -A limit-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-439 -A limit-71 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-440 -A limit-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-441 -A limit-711 -m recent --name user:C --rdest --mask fe00:: --set -A limit-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-442 -A limit-712 -m limit --limit 1/second -j LOG -A limit-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-443 -A limit-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-444 -A limit-714 -j TEE --gateway fc00::2 -A limit-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-445 -A limit-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-446 -A limit-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-447 -A limit-717 -m recent --name user:C --rdest --mask fe00:: --set -A limit-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-448 -A limit-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-449 -A limit-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-72 -m limit --limit 1/second -j LOG -A limit-72 -j ACCEPT -A limit-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-450 -A limit-720 -j ACCEPT -A limit-721 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-451 -A limit-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-452 -A limit-722 -m limit --limit 1/second -j LOG -A limit-722 -j ACCEPT -A limit-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-453 -A limit-723 -m limit --limit 1/second -j LOG -A limit-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-454 -A limit-724 -j TEE --gateway fc00::2 -A limit-724 -j ACCEPT -A limit-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-455 -A limit-725 -j TEE --gateway fc00::2 -A limit-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-456 -A limit-726 -j ACCEPT -A limit-727 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-457 -A limit-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-458 -A limit-728 -j ACCEPT -A limit-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-459 -A limit-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-73 -m limit --limit 1/second -j LOG -A limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-730 -m recent --name limit-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-731 -m recent --name limit-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-732 -m limit --limit 1/second -j LOG -A limit-732 -m recent --name limit-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-733 -m recent --name limit-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-734 -j TEE --gateway fc00::2 -A limit-734 -m recent --name limit-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-735 -m recent --name limit-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-736 -m recent --name limit-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-737 -m recent --name limit-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-738 -m recent --name limit-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-739 -m recent --name limit-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-74 -j TEE --gateway fc00::2 -A limit-74 -j ACCEPT -A limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-742 -m limit --limit 1/second -j LOG -A limit-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-744 -j TEE --gateway fc00::2 -A limit-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-75 -j TEE --gateway fc00::2 -A limit-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-750 -j ACCEPT -A limit-751 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-752 -m limit --limit 1/second -j LOG -A limit-752 -j ACCEPT -A limit-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-753 -m limit --limit 1/second -j LOG -A limit-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-754 -j TEE --gateway fc00::2 -A limit-754 -j ACCEPT -A limit-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-755 -j TEE --gateway fc00::2 -A limit-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-756 -j ACCEPT -A limit-757 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-758 -j ACCEPT -A limit-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-76 -j ACCEPT -A limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-762 -m limit --limit 1/second -j LOG -A limit-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-764 -j TEE --gateway fc00::2 -A limit-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-77 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-770 -j ACCEPT -A limit-771 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-772 -m limit --limit 1/second -j LOG -A limit-772 -j ACCEPT -A limit-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-773 -m limit --limit 1/second -j LOG -A limit-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-774 -j TEE --gateway fc00::2 -A limit-774 -j ACCEPT -A limit-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-775 -j TEE --gateway fc00::2 -A limit-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-776 -j ACCEPT -A limit-777 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-778 -j ACCEPT -A limit-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-78 -j ACCEPT -A limit-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-781 -m recent --name user:C --rsource --mask fe00:: --set -A limit-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-782 -m limit --limit 1/second -j LOG -A limit-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-784 -j TEE --gateway fc00::2 -A limit-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-787 -m recent --name user:C --rsource --mask fe00:: --set -A limit-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-790 -j ACCEPT -A limit-791 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-792 -m limit --limit 1/second -j LOG -A limit-792 -j ACCEPT -A limit-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-793 -m limit --limit 1/second -j LOG -A limit-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-794 -j TEE --gateway fc00::2 -A limit-794 -j ACCEPT -A limit-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-795 -j TEE --gateway fc00::2 -A limit-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-796 -j ACCEPT -A limit-797 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-798 -j ACCEPT -A limit-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-8 -A limit-8 -m recent --name limit-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-801 -m recent --name user:C --rdest --mask fe00:: --set -A limit-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-802 -m limit --limit 1/second -j LOG -A limit-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-804 -j TEE --gateway fc00::2 -A limit-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-807 -m recent --name user:C --rdest --mask fe00:: --set -A limit-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-81 -m recent --name user:C --rdest --mask fe00:: --set -A limit-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-810 -j ACCEPT -A limit-811 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-812 -m limit --limit 1/second -j LOG -A limit-812 -j ACCEPT -A limit-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-813 -m limit --limit 1/second -j LOG -A limit-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-814 -j TEE --gateway fc00::2 -A limit-814 -j ACCEPT -A limit-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-815 -j TEE --gateway fc00::2 -A limit-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-816 -j ACCEPT -A limit-817 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-818 -j ACCEPT -A limit-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-82 -m limit --limit 1/second -j LOG -A limit-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-460 -A limit-820 -m recent --name limit-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-461 -A limit-821 -m recent --name limit-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-462 -A limit-822 -m limit --limit 1/second -j LOG -A limit-822 -m recent --name limit-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-463 -A limit-823 -m recent --name limit-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-464 -A limit-824 -j TEE --gateway fc00::2 -A limit-824 -m recent --name limit-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-465 -A limit-825 -m recent --name limit-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-466 -A limit-826 -m recent --name limit-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-467 -A limit-827 -m recent --name limit-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-468 -A limit-828 -m recent --name limit-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-829 -m recent --name limit-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-469 -A limit-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-470 -A limit-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-471 -A limit-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-472 -A limit-832 -m limit --limit 1/second -j LOG -A limit-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-473 -A limit-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-474 -A limit-834 -j TEE --gateway fc00::2 -A limit-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-475 -A limit-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-476 -A limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-477 -A limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-478 -A limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-479 -A limit-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-84 -j TEE --gateway fc00::2 -A limit-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-480 -A limit-840 -j ACCEPT -A limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-481 -A limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-482 -A limit-842 -m limit --limit 1/second -j LOG -A limit-842 -j ACCEPT -A limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-483 -A limit-843 -m limit --limit 1/second -j LOG -A limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-484 -A limit-844 -j TEE --gateway fc00::2 -A limit-844 -j ACCEPT -A limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-485 -A limit-845 -j TEE --gateway fc00::2 -A limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-486 -A limit-846 -j ACCEPT -A limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-487 -A limit-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-488 -A limit-848 -j ACCEPT -A limit-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-489 -A limit-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-490 -A limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-491 -A limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-492 -A limit-852 -m limit --limit 1/second -j LOG -A limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-493 -A limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-494 -A limit-854 -j TEE --gateway fc00::2 -A limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-495 -A limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-496 -A limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-497 -A limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-498 -A limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-499 -A limit-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-500 -A limit-860 -j ACCEPT -A limit-861 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-501 -A limit-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-502 -A limit-862 -m limit --limit 1/second -j LOG -A limit-862 -j ACCEPT -A limit-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-503 -A limit-863 -m limit --limit 1/second -j LOG -A limit-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-504 -A limit-864 -j TEE --gateway fc00::2 -A limit-864 -j ACCEPT -A limit-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-505 -A limit-865 -j TEE --gateway fc00::2 -A limit-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-506 -A limit-866 -j ACCEPT -A limit-867 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-507 -A limit-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-508 -A limit-868 -j ACCEPT -A limit-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-509 -A limit-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-87 -m recent --name user:C --rdest --mask fe00:: --set -A limit-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-510 -A limit-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-511 -A limit-871 -m recent --name user:C --rsource --mask fe00:: --set -A limit-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-512 -A limit-872 -m limit --limit 1/second -j LOG -A limit-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-513 -A limit-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-514 -A limit-874 -j TEE --gateway fc00::2 -A limit-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-515 -A limit-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-516 -A limit-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-517 -A limit-877 -m recent --name user:C --rsource --mask fe00:: --set -A limit-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-518 -A limit-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-519 -A limit-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-520 -A limit-880 -j ACCEPT -A limit-881 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-521 -A limit-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-522 -A limit-882 -m limit --limit 1/second -j LOG -A limit-882 -j ACCEPT -A limit-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-523 -A limit-883 -m limit --limit 1/second -j LOG -A limit-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-524 -A limit-884 -j TEE --gateway fc00::2 -A limit-884 -j ACCEPT -A limit-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-525 -A limit-885 -j TEE --gateway fc00::2 -A limit-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-526 -A limit-886 -j ACCEPT -A limit-887 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-527 -A limit-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-528 -A limit-888 -j ACCEPT -A limit-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-529 -A limit-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-530 -A limit-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-531 -A limit-891 -m recent --name user:C --rdest --mask fe00:: --set -A limit-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-532 -A limit-892 -m limit --limit 1/second -j LOG -A limit-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-533 -A limit-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-534 -A limit-894 -j TEE --gateway fc00::2 -A limit-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-535 -A limit-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-536 -A limit-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-537 -A limit-897 -m recent --name user:C --rdest --mask fe00:: --set -A limit-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-538 -A limit-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-539 -A limit-9 -m recent --name limit-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-9 -A limit-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-90 -j ACCEPT -A limit-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-540 -A limit-900 -j ACCEPT -A limit-901 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-541 -A limit-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-542 -A limit-902 -m limit --limit 1/second -j LOG -A limit-902 -j ACCEPT -A limit-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-543 -A limit-903 -m limit --limit 1/second -j LOG -A limit-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-544 -A limit-904 -j TEE --gateway fc00::2 -A limit-904 -j ACCEPT -A limit-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-545 -A limit-905 -j TEE --gateway fc00::2 -A limit-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-546 -A limit-906 -j ACCEPT -A limit-907 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-547 -A limit-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-548 -A limit-908 -j ACCEPT -A limit-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-549 -A limit-91 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-910 -j ACCEPT -A limit-910 -m limit --limit 1/second -j LOG -A limit-910 -j DROP -A limit-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-911 -j RETURN -A limit-911 -m limit --limit 1/second -j LOG -A limit-911 -j DROP -A limit-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-912 -j logaccept-0 -A limit-912 -m limit --limit 1/second -j LOG -A limit-912 -j DROP -A limit-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-913 -j logaccept-1 -A limit-913 -m limit --limit 1/second -j LOG -A limit-913 -j DROP -A limit-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-914 -j ACCEPT -A limit-914 -m limit --limit 1/second -j LOG -A limit-914 -j DROP -A limit-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-915 -j logaccept-2 -A limit-915 -m limit --limit 1/second -j LOG -A limit-915 -j DROP -A limit-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-916 -j ACCEPT -A limit-916 -j DROP -A limit-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-917 -j RETURN -A limit-917 -j DROP -A limit-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-918 -j logaccept-3 -A limit-918 -j DROP -A limit-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-919 -j logaccept-4 -A limit-919 -j DROP -A limit-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-92 -m limit --limit 1/second -j LOG -A limit-92 -j ACCEPT -A limit-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-920 -j ACCEPT -A limit-920 -j DROP -A limit-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-921 -j logaccept-5 -A limit-921 -j DROP -A limit-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-922 -j ACCEPT -A limit-922 -m limit --limit 1/second -j LOG -A limit-922 -j DROP -A limit-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-923 -j RETURN -A limit-923 -m limit --limit 1/second -j LOG -A limit-923 -j DROP -A limit-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-924 -j logaccept-6 -A limit-924 -m limit --limit 1/second -j LOG -A limit-924 -j DROP -A limit-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-925 -j logaccept-7 -A limit-925 -m limit --limit 1/second -j LOG -A limit-925 -j DROP -A limit-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-926 -j ACCEPT -A limit-926 -m limit --limit 1/second -j LOG -A limit-926 -j DROP -A limit-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-927 -j logaccept-8 -A limit-927 -m limit --limit 1/second -j LOG -A limit-927 -j DROP -A limit-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-928 -j ACCEPT -A limit-928 -j TEE --gateway fc00::2 -A limit-928 -j DROP -A limit-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-929 -j RETURN -A limit-929 -j TEE --gateway fc00::2 -A limit-929 -j DROP -A limit-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-93 -m limit --limit 1/second -j LOG -A limit-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-930 -j logaccept-9 -A limit-930 -j TEE --gateway fc00::2 -A limit-930 -j DROP -A limit-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-931 -j logaccept-10 -A limit-931 -j TEE --gateway fc00::2 -A limit-931 -j DROP -A limit-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-932 -j ACCEPT -A limit-932 -j TEE --gateway fc00::2 -A limit-932 -j DROP -A limit-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-933 -j logaccept-11 -A limit-933 -j TEE --gateway fc00::2 -A limit-933 -j DROP -A limit-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-934 -j ACCEPT -A limit-934 -j DROP -A limit-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-935 -j RETURN -A limit-935 -j DROP -A limit-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-936 -j logaccept-12 -A limit-936 -j DROP -A limit-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-937 -j logaccept-13 -A limit-937 -j DROP -A limit-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-938 -j ACCEPT -A limit-938 -j DROP -A limit-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-939 -j logaccept-14 -A limit-939 -j DROP -A limit-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-94 -j TEE --gateway fc00::2 -A limit-94 -j ACCEPT -A limit-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-940 -j ACCEPT -A limit-940 -j DROP -A limit-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-941 -j RETURN -A limit-941 -j DROP -A limit-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-942 -j logaccept-15 -A limit-942 -j DROP -A limit-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-943 -j logaccept-16 -A limit-943 -j DROP -A limit-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-944 -j ACCEPT -A limit-944 -j DROP -A limit-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-945 -j logaccept-17 -A limit-945 -j DROP -A limit-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-946 -j ACCEPT -A limit-946 -j DROP -A limit-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-947 -j RETURN -A limit-947 -j DROP -A limit-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-948 -j logaccept-18 -A limit-948 -j DROP -A limit-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-949 -j logaccept-19 -A limit-949 -j DROP -A limit-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-95 -j TEE --gateway fc00::2 -A limit-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-950 -j ACCEPT -A limit-950 -j DROP -A limit-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-951 -j logaccept-20 -A limit-951 -j DROP -A limit-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-952 -j ACCEPT -A limit-952 -m limit --limit 1/second -j LOG -A limit-952 -j DROP -A limit-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-953 -j RETURN -A limit-953 -m limit --limit 1/second -j LOG -A limit-953 -j DROP -A limit-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-954 -j logaccept-21 -A limit-954 -m limit --limit 1/second -j LOG -A limit-954 -j DROP -A limit-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-955 -j logaccept-22 -A limit-955 -m limit --limit 1/second -j LOG -A limit-955 -j DROP -A limit-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-956 -j ACCEPT -A limit-956 -m limit --limit 1/second -j LOG -A limit-956 -j DROP -A limit-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-957 -j logaccept-23 -A limit-957 -m limit --limit 1/second -j LOG -A limit-957 -j DROP -A limit-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-958 -j ACCEPT -A limit-958 -j TEE --gateway fc00::2 -A limit-958 -j DROP -A limit-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-959 -j RETURN -A limit-959 -j TEE --gateway fc00::2 -A limit-959 -j DROP -A limit-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-96 -j ACCEPT -A limit-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-960 -j logaccept-24 -A limit-960 -j TEE --gateway fc00::2 -A limit-960 -j DROP -A limit-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-961 -j logaccept-25 -A limit-961 -j TEE --gateway fc00::2 -A limit-961 -j DROP -A limit-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-962 -j ACCEPT -A limit-962 -j TEE --gateway fc00::2 -A limit-962 -j DROP -A limit-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-963 -j logaccept-26 -A limit-963 -j TEE --gateway fc00::2 -A limit-963 -j DROP -A limit-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-964 -j ACCEPT -A limit-964 -j DROP -A limit-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-965 -j RETURN -A limit-965 -j DROP -A limit-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-966 -j logaccept-27 -A limit-966 -j DROP -A limit-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-967 -j logaccept-28 -A limit-967 -j DROP -A limit-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-968 -j ACCEPT -A limit-968 -j DROP -A limit-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-969 -j logaccept-29 -A limit-969 -j DROP -A limit-97 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-970 -j ACCEPT -A limit-970 -j DROP -A limit-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-971 -j RETURN -A limit-971 -j DROP -A limit-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-972 -j logaccept-30 -A limit-972 -j DROP -A limit-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-973 -j logaccept-31 -A limit-973 -j DROP -A limit-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-974 -j ACCEPT -A limit-974 -j DROP -A limit-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-975 -j logaccept-32 -A limit-975 -j DROP -A limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-550 -A limit-976 -m recent --name limit-976 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-551 -A limit-977 -m recent --name limit-977 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-552 -A limit-978 -m limit --limit 1/second -j LOG -A limit-978 -m recent --name limit-978 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-553 -A limit-979 -m recent --name limit-979 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-98 -j ACCEPT -A limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-554 -A limit-980 -j TEE --gateway fc00::2 -A limit-980 -m recent --name limit-980 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-555 -A limit-981 -m recent --name limit-981 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-556 -A limit-982 -m recent --name limit-982 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-557 -A limit-983 -m recent --name limit-983 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-558 -A limit-984 -m recent --name limit-984 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-985 -m recent --name limit-985 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-559 -A limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-986 -m recent --name limit-986 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-987 -m recent --name limit-987 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-988 -m limit --limit 1/second -j LOG -A limit-988 -m recent --name limit-988 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-989 -m recent --name limit-989 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-990 -j TEE --gateway fc00::2 -A limit-990 -m recent --name limit-990 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-991 -m recent --name limit-991 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-996 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-997 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-998 -m limit --limit 1/second -j LOG -A limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-0 -A limit-ntp-0 -m recent --name limit-ntp-0 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-1 -A limit-ntp-1 -m recent --name limit-ntp-1 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-10 -m recent --name limit-ntp-10 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-10 -A limit-ntp-100 -m recent --name limit-ntp-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-11 -A limit-ntp-101 -m recent --name limit-ntp-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-12 -A limit-ntp-102 -m limit --limit 1/second -j LOG -A limit-ntp-102 -m recent --name limit-ntp-102 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-13 -A limit-ntp-103 -m recent --name limit-ntp-103 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-14 -A limit-ntp-104 -j TEE --gateway fc00::2 -A limit-ntp-104 -m recent --name limit-ntp-104 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-15 -A limit-ntp-105 -m recent --name limit-ntp-105 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-16 -A limit-ntp-106 -m recent --name limit-ntp-106 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-17 -A limit-ntp-107 -m recent --name limit-ntp-107 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-18 -A limit-ntp-108 -m recent --name limit-ntp-108 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-109 -m recent --name limit-ntp-109 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-19 -A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-11 -m recent --name limit-ntp-11 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-20 -A limit-ntp-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-21 -A limit-ntp-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-22 -A limit-ntp-112 -m limit --limit 1/second -j LOG -A limit-ntp-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-23 -A limit-ntp-113 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-24 -A limit-ntp-114 -j TEE --gateway fc00::2 -A limit-ntp-114 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-25 -A limit-ntp-115 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-26 -A limit-ntp-116 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-27 -A limit-ntp-117 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-28 -A limit-ntp-118 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-119 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-29 -A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-12 -m limit --limit 1/second -j LOG -A limit-ntp-12 -m recent --name limit-ntp-12 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-30 -A limit-ntp-120 -j ACCEPT -A limit-ntp-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-32 -A limit-ntp-122 -m limit --limit 1/second -j LOG -A limit-ntp-122 -j ACCEPT -A limit-ntp-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-33 -A limit-ntp-123 -m limit --limit 1/second -j LOG -A limit-ntp-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-34 -A limit-ntp-124 -j TEE --gateway fc00::2 -A limit-ntp-124 -j ACCEPT -A limit-ntp-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-35 -A limit-ntp-125 -j TEE --gateway fc00::2 -A limit-ntp-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-36 -A limit-ntp-126 -j ACCEPT -A limit-ntp-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-38 -A limit-ntp-128 -j ACCEPT -A limit-ntp-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-39 -A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-13 -m recent --name limit-ntp-13 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-40 -A limit-ntp-130 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-41 -A limit-ntp-131 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-42 -A limit-ntp-132 -m limit --limit 1/second -j LOG -A limit-ntp-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-43 -A limit-ntp-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-44 -A limit-ntp-134 -j TEE --gateway fc00::2 -A limit-ntp-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-45 -A limit-ntp-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-46 -A limit-ntp-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-47 -A limit-ntp-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-48 -A limit-ntp-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-139 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-49 -A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-14 -j TEE --gateway fc00::2 -A limit-ntp-14 -m recent --name limit-ntp-14 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-50 -A limit-ntp-140 -j ACCEPT -A limit-ntp-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-52 -A limit-ntp-142 -m limit --limit 1/second -j LOG -A limit-ntp-142 -j ACCEPT -A limit-ntp-143 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-53 -A limit-ntp-143 -m limit --limit 1/second -j LOG -A limit-ntp-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-54 -A limit-ntp-144 -j TEE --gateway fc00::2 -A limit-ntp-144 -j ACCEPT -A limit-ntp-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-55 -A limit-ntp-145 -j TEE --gateway fc00::2 -A limit-ntp-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-56 -A limit-ntp-146 -j ACCEPT -A limit-ntp-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-58 -A limit-ntp-148 -j ACCEPT -A limit-ntp-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-59 -A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-15 -m recent --name limit-ntp-15 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-60 -A limit-ntp-150 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-61 -A limit-ntp-151 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-62 -A limit-ntp-152 -m limit --limit 1/second -j LOG -A limit-ntp-152 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-63 -A limit-ntp-153 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-64 -A limit-ntp-154 -j TEE --gateway fc00::2 -A limit-ntp-154 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-65 -A limit-ntp-155 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-66 -A limit-ntp-156 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-67 -A limit-ntp-157 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-68 -A limit-ntp-158 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-159 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-69 -A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-16 -m recent --name limit-ntp-16 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-160 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-70 -A limit-ntp-160 -j ACCEPT -A limit-ntp-162 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-72 -A limit-ntp-162 -m limit --limit 1/second -j LOG -A limit-ntp-162 -j ACCEPT -A limit-ntp-163 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-73 -A limit-ntp-163 -m limit --limit 1/second -j LOG -A limit-ntp-164 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-74 -A limit-ntp-164 -j TEE --gateway fc00::2 -A limit-ntp-164 -j ACCEPT -A limit-ntp-165 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-75 -A limit-ntp-165 -j TEE --gateway fc00::2 -A limit-ntp-166 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-76 -A limit-ntp-166 -j ACCEPT -A limit-ntp-168 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-78 -A limit-ntp-168 -j ACCEPT -A limit-ntp-169 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-79 -A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-17 -m recent --name limit-ntp-17 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-80 -A limit-ntp-170 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-81 -A limit-ntp-171 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-82 -A limit-ntp-172 -m limit --limit 1/second -j LOG -A limit-ntp-172 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-83 -A limit-ntp-173 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-84 -A limit-ntp-174 -j TEE --gateway fc00::2 -A limit-ntp-174 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-85 -A limit-ntp-175 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-86 -A limit-ntp-176 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-87 -A limit-ntp-177 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-88 -A limit-ntp-178 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-179 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-89 -A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-18 -m recent --name limit-ntp-18 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-180 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-90 -A limit-ntp-180 -j ACCEPT -A limit-ntp-182 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-92 -A limit-ntp-182 -m limit --limit 1/second -j LOG -A limit-ntp-182 -j ACCEPT -A limit-ntp-183 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-93 -A limit-ntp-183 -m limit --limit 1/second -j LOG -A limit-ntp-184 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-94 -A limit-ntp-184 -j TEE --gateway fc00::2 -A limit-ntp-184 -j ACCEPT -A limit-ntp-185 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-95 -A limit-ntp-185 -j TEE --gateway fc00::2 -A limit-ntp-186 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-96 -A limit-ntp-186 -j ACCEPT -A limit-ntp-188 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-98 -A limit-ntp-188 -j ACCEPT -A limit-ntp-189 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-99 -A limit-ntp-19 -m recent --name limit-ntp-19 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-100 -A limit-ntp-190 -m recent --name limit-ntp-190 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-101 -A limit-ntp-191 -m recent --name limit-ntp-191 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-102 -A limit-ntp-192 -m limit --limit 1/second -j LOG -A limit-ntp-192 -m recent --name limit-ntp-192 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-103 -A limit-ntp-193 -m recent --name limit-ntp-193 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-104 -A limit-ntp-194 -j TEE --gateway fc00::2 -A limit-ntp-194 -m recent --name limit-ntp-194 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-105 -A limit-ntp-195 -m recent --name limit-ntp-195 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-106 -A limit-ntp-196 -m recent --name limit-ntp-196 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-107 -A limit-ntp-197 -m recent --name limit-ntp-197 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-108 -A limit-ntp-198 -m recent --name limit-ntp-198 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-199 -m recent --name limit-ntp-199 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-109 -A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-2 -A limit-ntp-2 -m limit --limit 1/second -j LOG -A limit-ntp-2 -m recent --name limit-ntp-2 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-20 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-110 -A limit-ntp-200 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-111 -A limit-ntp-201 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-112 -A limit-ntp-202 -m limit --limit 1/second -j LOG -A limit-ntp-202 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-113 -A limit-ntp-203 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-114 -A limit-ntp-204 -j TEE --gateway fc00::2 -A limit-ntp-204 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-115 -A limit-ntp-205 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-116 -A limit-ntp-206 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-117 -A limit-ntp-207 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-118 -A limit-ntp-208 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-209 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-119 -A limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-21 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-210 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-120 -A limit-ntp-210 -j ACCEPT -A limit-ntp-212 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-122 -A limit-ntp-212 -m limit --limit 1/second -j LOG -A limit-ntp-212 -j ACCEPT -A limit-ntp-213 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-123 -A limit-ntp-213 -m limit --limit 1/second -j LOG -A limit-ntp-214 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-124 -A limit-ntp-214 -j TEE --gateway fc00::2 -A limit-ntp-214 -j ACCEPT -A limit-ntp-215 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-125 -A limit-ntp-215 -j TEE --gateway fc00::2 -A limit-ntp-216 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-126 -A limit-ntp-216 -j ACCEPT -A limit-ntp-218 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-128 -A limit-ntp-218 -j ACCEPT -A limit-ntp-219 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-129 -A limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-22 -m limit --limit 1/second -j LOG -A limit-ntp-22 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-130 -A limit-ntp-220 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-131 -A limit-ntp-221 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-132 -A limit-ntp-222 -m limit --limit 1/second -j LOG -A limit-ntp-222 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-133 -A limit-ntp-223 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-134 -A limit-ntp-224 -j TEE --gateway fc00::2 -A limit-ntp-224 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-135 -A limit-ntp-225 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-136 -A limit-ntp-226 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-137 -A limit-ntp-227 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-138 -A limit-ntp-228 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-229 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-139 -A limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-23 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-230 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-140 -A limit-ntp-230 -j ACCEPT -A limit-ntp-232 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-142 -A limit-ntp-232 -m limit --limit 1/second -j LOG -A limit-ntp-232 -j ACCEPT -A limit-ntp-233 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-143 -A limit-ntp-233 -m limit --limit 1/second -j LOG -A limit-ntp-234 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-144 -A limit-ntp-234 -j TEE --gateway fc00::2 -A limit-ntp-234 -j ACCEPT -A limit-ntp-235 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-145 -A limit-ntp-235 -j TEE --gateway fc00::2 -A limit-ntp-236 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-146 -A limit-ntp-236 -j ACCEPT -A limit-ntp-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-148 -A limit-ntp-238 -j ACCEPT -A limit-ntp-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-149 -A limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-24 -j TEE --gateway fc00::2 -A limit-ntp-24 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-150 -A limit-ntp-240 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-151 -A limit-ntp-241 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-152 -A limit-ntp-242 -m limit --limit 1/second -j LOG -A limit-ntp-242 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-153 -A limit-ntp-243 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-154 -A limit-ntp-244 -j TEE --gateway fc00::2 -A limit-ntp-244 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-155 -A limit-ntp-245 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-156 -A limit-ntp-246 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-157 -A limit-ntp-247 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-158 -A limit-ntp-248 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-249 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-159 -A limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-25 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-250 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-160 -A limit-ntp-250 -j ACCEPT -A limit-ntp-252 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-162 -A limit-ntp-252 -m limit --limit 1/second -j LOG -A limit-ntp-252 -j ACCEPT -A limit-ntp-253 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-163 -A limit-ntp-253 -m limit --limit 1/second -j LOG -A limit-ntp-254 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-164 -A limit-ntp-254 -j TEE --gateway fc00::2 -A limit-ntp-254 -j ACCEPT -A limit-ntp-255 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-165 -A limit-ntp-255 -j TEE --gateway fc00::2 -A limit-ntp-256 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-166 -A limit-ntp-256 -j ACCEPT -A limit-ntp-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-168 -A limit-ntp-258 -j ACCEPT -A limit-ntp-259 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-169 -A limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-26 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-170 -A limit-ntp-260 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-171 -A limit-ntp-261 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-172 -A limit-ntp-262 -m limit --limit 1/second -j LOG -A limit-ntp-262 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-173 -A limit-ntp-263 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-174 -A limit-ntp-264 -j TEE --gateway fc00::2 -A limit-ntp-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-175 -A limit-ntp-265 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-176 -A limit-ntp-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-177 -A limit-ntp-267 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-178 -A limit-ntp-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-179 -A limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-27 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-180 -A limit-ntp-270 -j ACCEPT -A limit-ntp-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-182 -A limit-ntp-272 -m limit --limit 1/second -j LOG -A limit-ntp-272 -j ACCEPT -A limit-ntp-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-183 -A limit-ntp-273 -m limit --limit 1/second -j LOG -A limit-ntp-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-184 -A limit-ntp-274 -j TEE --gateway fc00::2 -A limit-ntp-274 -j ACCEPT -A limit-ntp-275 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-185 -A limit-ntp-275 -j TEE --gateway fc00::2 -A limit-ntp-276 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-186 -A limit-ntp-276 -j ACCEPT -A limit-ntp-278 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-188 -A limit-ntp-278 -j ACCEPT -A limit-ntp-279 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-189 -A limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-28 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-280 -m recent --name limit-ntp-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-281 -m recent --name limit-ntp-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-282 -m limit --limit 1/second -j LOG -A limit-ntp-282 -m recent --name limit-ntp-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-283 -m recent --name limit-ntp-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-284 -j TEE --gateway fc00::2 -A limit-ntp-284 -m recent --name limit-ntp-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-285 -m recent --name limit-ntp-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-286 -m recent --name limit-ntp-286 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-287 -m recent --name limit-ntp-287 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-288 -m recent --name limit-ntp-288 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-289 -m recent --name limit-ntp-289 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-29 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-292 -m limit --limit 1/second -j LOG -A limit-ntp-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-294 -j TEE --gateway fc00::2 -A limit-ntp-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-298 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-299 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-3 -A limit-ntp-3 -m recent --name limit-ntp-3 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-30 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-30 -j ACCEPT -A limit-ntp-300 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-300 -j ACCEPT -A limit-ntp-302 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-302 -m limit --limit 1/second -j LOG -A limit-ntp-302 -j ACCEPT -A limit-ntp-303 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-303 -m limit --limit 1/second -j LOG -A limit-ntp-304 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-304 -j TEE --gateway fc00::2 -A limit-ntp-304 -j ACCEPT -A limit-ntp-305 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-305 -j TEE --gateway fc00::2 -A limit-ntp-306 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-306 -j ACCEPT -A limit-ntp-308 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-308 -j ACCEPT -A limit-ntp-309 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-310 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-311 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-312 -m limit --limit 1/second -j LOG -A limit-ntp-312 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-313 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-314 -j TEE --gateway fc00::2 -A limit-ntp-314 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-315 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-316 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-317 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-318 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-319 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-32 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-32 -m limit --limit 1/second -j LOG -A limit-ntp-32 -j ACCEPT -A limit-ntp-320 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-320 -j ACCEPT -A limit-ntp-322 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-322 -m limit --limit 1/second -j LOG -A limit-ntp-322 -j ACCEPT -A limit-ntp-323 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-323 -m limit --limit 1/second -j LOG -A limit-ntp-324 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-324 -j TEE --gateway fc00::2 -A limit-ntp-324 -j ACCEPT -A limit-ntp-325 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-325 -j TEE --gateway fc00::2 -A limit-ntp-326 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-326 -j ACCEPT -A limit-ntp-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-328 -j ACCEPT -A limit-ntp-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-33 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-33 -m limit --limit 1/second -j LOG -A limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-330 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-331 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-332 -m limit --limit 1/second -j LOG -A limit-ntp-332 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-333 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-334 -j TEE --gateway fc00::2 -A limit-ntp-334 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-335 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-336 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-337 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-338 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-339 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-34 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-34 -j TEE --gateway fc00::2 -A limit-ntp-34 -j ACCEPT -A limit-ntp-340 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-340 -j ACCEPT -A limit-ntp-342 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-342 -m limit --limit 1/second -j LOG -A limit-ntp-342 -j ACCEPT -A limit-ntp-343 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-343 -m limit --limit 1/second -j LOG -A limit-ntp-344 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-344 -j TEE --gateway fc00::2 -A limit-ntp-344 -j ACCEPT -A limit-ntp-345 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-345 -j TEE --gateway fc00::2 -A limit-ntp-346 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-346 -j ACCEPT -A limit-ntp-348 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-348 -j ACCEPT -A limit-ntp-349 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-35 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-35 -j TEE --gateway fc00::2 -A limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-350 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-351 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-352 -m limit --limit 1/second -j LOG -A limit-ntp-352 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-353 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-354 -j TEE --gateway fc00::2 -A limit-ntp-354 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-355 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-356 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-357 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-358 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-359 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-36 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-36 -j ACCEPT -A limit-ntp-360 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-360 -j ACCEPT -A limit-ntp-362 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-362 -m limit --limit 1/second -j LOG -A limit-ntp-362 -j ACCEPT -A limit-ntp-363 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-363 -m limit --limit 1/second -j LOG -A limit-ntp-364 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-364 -j TEE --gateway fc00::2 -A limit-ntp-364 -j ACCEPT -A limit-ntp-365 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-365 -j TEE --gateway fc00::2 -A limit-ntp-366 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-366 -j ACCEPT -A limit-ntp-368 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-368 -j ACCEPT -A limit-ntp-369 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-190 -A limit-ntp-370 -m recent --name limit-ntp-370 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-191 -A limit-ntp-371 -m recent --name limit-ntp-371 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-192 -A limit-ntp-372 -m limit --limit 1/second -j LOG -A limit-ntp-372 -m recent --name limit-ntp-372 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-193 -A limit-ntp-373 -m recent --name limit-ntp-373 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-194 -A limit-ntp-374 -j TEE --gateway fc00::2 -A limit-ntp-374 -m recent --name limit-ntp-374 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-195 -A limit-ntp-375 -m recent --name limit-ntp-375 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-196 -A limit-ntp-376 -m recent --name limit-ntp-376 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-197 -A limit-ntp-377 -m recent --name limit-ntp-377 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-198 -A limit-ntp-378 -m recent --name limit-ntp-378 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-379 -m recent --name limit-ntp-379 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-199 -A limit-ntp-38 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-38 -j ACCEPT -A limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-200 -A limit-ntp-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-201 -A limit-ntp-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-202 -A limit-ntp-382 -m limit --limit 1/second -j LOG -A limit-ntp-382 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-203 -A limit-ntp-383 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-204 -A limit-ntp-384 -j TEE --gateway fc00::2 -A limit-ntp-384 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-205 -A limit-ntp-385 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-206 -A limit-ntp-386 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-207 -A limit-ntp-387 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-208 -A limit-ntp-388 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-389 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-209 -A limit-ntp-39 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-390 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-210 -A limit-ntp-390 -j ACCEPT -A limit-ntp-392 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-212 -A limit-ntp-392 -m limit --limit 1/second -j LOG -A limit-ntp-392 -j ACCEPT -A limit-ntp-393 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-213 -A limit-ntp-393 -m limit --limit 1/second -j LOG -A limit-ntp-394 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-214 -A limit-ntp-394 -j TEE --gateway fc00::2 -A limit-ntp-394 -j ACCEPT -A limit-ntp-395 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-215 -A limit-ntp-395 -j TEE --gateway fc00::2 -A limit-ntp-396 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-216 -A limit-ntp-396 -j ACCEPT -A limit-ntp-398 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-218 -A limit-ntp-398 -j ACCEPT -A limit-ntp-399 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-219 -A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-4 -A limit-ntp-4 -j TEE --gateway fc00::2 -A limit-ntp-4 -m recent --name limit-ntp-4 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-40 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-220 -A limit-ntp-400 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-221 -A limit-ntp-401 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-222 -A limit-ntp-402 -m limit --limit 1/second -j LOG -A limit-ntp-402 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-223 -A limit-ntp-403 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-224 -A limit-ntp-404 -j TEE --gateway fc00::2 -A limit-ntp-404 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-225 -A limit-ntp-405 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-226 -A limit-ntp-406 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-227 -A limit-ntp-407 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-228 -A limit-ntp-408 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-409 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-229 -A limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-41 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-410 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-230 -A limit-ntp-410 -j ACCEPT -A limit-ntp-412 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-232 -A limit-ntp-412 -m limit --limit 1/second -j LOG -A limit-ntp-412 -j ACCEPT -A limit-ntp-413 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-233 -A limit-ntp-413 -m limit --limit 1/second -j LOG -A limit-ntp-414 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-234 -A limit-ntp-414 -j TEE --gateway fc00::2 -A limit-ntp-414 -j ACCEPT -A limit-ntp-415 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-235 -A limit-ntp-415 -j TEE --gateway fc00::2 -A limit-ntp-416 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-236 -A limit-ntp-416 -j ACCEPT -A limit-ntp-418 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-238 -A limit-ntp-418 -j ACCEPT -A limit-ntp-419 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-239 -A limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-42 -m limit --limit 1/second -j LOG -A limit-ntp-42 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-240 -A limit-ntp-420 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-241 -A limit-ntp-421 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-242 -A limit-ntp-422 -m limit --limit 1/second -j LOG -A limit-ntp-422 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-243 -A limit-ntp-423 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-244 -A limit-ntp-424 -j TEE --gateway fc00::2 -A limit-ntp-424 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-245 -A limit-ntp-425 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-246 -A limit-ntp-426 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-247 -A limit-ntp-427 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-248 -A limit-ntp-428 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-429 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-249 -A limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-43 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-430 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-250 -A limit-ntp-430 -j ACCEPT -A limit-ntp-432 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-252 -A limit-ntp-432 -m limit --limit 1/second -j LOG -A limit-ntp-432 -j ACCEPT -A limit-ntp-433 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-253 -A limit-ntp-433 -m limit --limit 1/second -j LOG -A limit-ntp-434 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-254 -A limit-ntp-434 -j TEE --gateway fc00::2 -A limit-ntp-434 -j ACCEPT -A limit-ntp-435 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-255 -A limit-ntp-435 -j TEE --gateway fc00::2 -A limit-ntp-436 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-256 -A limit-ntp-436 -j ACCEPT -A limit-ntp-438 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-258 -A limit-ntp-438 -j ACCEPT -A limit-ntp-439 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-259 -A limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-44 -j TEE --gateway fc00::2 -A limit-ntp-44 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-260 -A limit-ntp-440 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-261 -A limit-ntp-441 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-262 -A limit-ntp-442 -m limit --limit 1/second -j LOG -A limit-ntp-442 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-263 -A limit-ntp-443 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-264 -A limit-ntp-444 -j TEE --gateway fc00::2 -A limit-ntp-444 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-265 -A limit-ntp-445 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-266 -A limit-ntp-446 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-267 -A limit-ntp-447 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-268 -A limit-ntp-448 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-449 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-ntp-269 -A limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-45 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-450 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-270 -A limit-ntp-450 -j ACCEPT -A limit-ntp-452 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-272 -A limit-ntp-452 -m limit --limit 1/second -j LOG -A limit-ntp-452 -j ACCEPT -A limit-ntp-453 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-273 -A limit-ntp-453 -m limit --limit 1/second -j LOG -A limit-ntp-454 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-274 -A limit-ntp-454 -j TEE --gateway fc00::2 -A limit-ntp-454 -j ACCEPT -A limit-ntp-455 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-275 -A limit-ntp-455 -j TEE --gateway fc00::2 -A limit-ntp-456 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-276 -A limit-ntp-456 -j ACCEPT -A limit-ntp-458 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-278 -A limit-ntp-458 -j ACCEPT -A limit-ntp-459 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-ntp-279 -A limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-46 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-460 -m recent --name limit-ntp-460 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-461 -m recent --name limit-ntp-461 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-462 -m limit --limit 1/second -j LOG -A limit-ntp-462 -m recent --name limit-ntp-462 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-463 -m recent --name limit-ntp-463 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-464 -j TEE --gateway fc00::2 -A limit-ntp-464 -m recent --name limit-ntp-464 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-465 -m recent --name limit-ntp-465 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-466 -m recent --name limit-ntp-466 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-467 -m recent --name limit-ntp-467 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-468 -m recent --name limit-ntp-468 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-469 -m recent --name limit-ntp-469 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-47 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-470 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-471 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-472 -m limit --limit 1/second -j LOG -A limit-ntp-472 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-473 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-474 -j TEE --gateway fc00::2 -A limit-ntp-474 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-475 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-476 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-477 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-48 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-480 -j ACCEPT -A limit-ntp-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-482 -m limit --limit 1/second -j LOG -A limit-ntp-482 -j ACCEPT -A limit-ntp-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-483 -m limit --limit 1/second -j LOG -A limit-ntp-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-484 -j TEE --gateway fc00::2 -A limit-ntp-484 -j ACCEPT -A limit-ntp-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-485 -j TEE --gateway fc00::2 -A limit-ntp-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-486 -j ACCEPT -A limit-ntp-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-488 -j ACCEPT -A limit-ntp-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-49 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-492 -m limit --limit 1/second -j LOG -A limit-ntp-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-494 -j TEE --gateway fc00::2 -A limit-ntp-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-5 -A limit-ntp-5 -m recent --name limit-ntp-5 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-50 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-50 -j ACCEPT -A limit-ntp-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-500 -j ACCEPT -A limit-ntp-502 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-502 -m limit --limit 1/second -j LOG -A limit-ntp-502 -j ACCEPT -A limit-ntp-503 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-503 -m limit --limit 1/second -j LOG -A limit-ntp-504 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-504 -j TEE --gateway fc00::2 -A limit-ntp-504 -j ACCEPT -A limit-ntp-505 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-505 -j TEE --gateway fc00::2 -A limit-ntp-506 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-506 -j ACCEPT -A limit-ntp-508 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-508 -j ACCEPT -A limit-ntp-509 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-510 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-511 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-512 -m limit --limit 1/second -j LOG -A limit-ntp-512 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-513 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-514 -j TEE --gateway fc00::2 -A limit-ntp-514 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-515 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-516 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-517 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-518 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-519 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-52 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-52 -m limit --limit 1/second -j LOG -A limit-ntp-52 -j ACCEPT -A limit-ntp-520 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-520 -j ACCEPT -A limit-ntp-522 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-522 -m limit --limit 1/second -j LOG -A limit-ntp-522 -j ACCEPT -A limit-ntp-523 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-523 -m limit --limit 1/second -j LOG -A limit-ntp-524 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-524 -j TEE --gateway fc00::2 -A limit-ntp-524 -j ACCEPT -A limit-ntp-525 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-525 -j TEE --gateway fc00::2 -A limit-ntp-526 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-526 -j ACCEPT -A limit-ntp-528 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-528 -j ACCEPT -A limit-ntp-529 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-53 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-53 -m limit --limit 1/second -j LOG -A limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-530 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-531 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-532 -m limit --limit 1/second -j LOG -A limit-ntp-532 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-533 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-534 -j TEE --gateway fc00::2 -A limit-ntp-534 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-535 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-536 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-537 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-538 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-539 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-54 -j TEE --gateway fc00::2 -A limit-ntp-54 -j ACCEPT -A limit-ntp-540 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-540 -j ACCEPT -A limit-ntp-542 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-542 -m limit --limit 1/second -j LOG -A limit-ntp-542 -j ACCEPT -A limit-ntp-543 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-543 -m limit --limit 1/second -j LOG -A limit-ntp-544 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-544 -j TEE --gateway fc00::2 -A limit-ntp-544 -j ACCEPT -A limit-ntp-545 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-545 -j TEE --gateway fc00::2 -A limit-ntp-546 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-546 -j ACCEPT -A limit-ntp-548 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-548 -j ACCEPT -A limit-ntp-549 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-55 -j TEE --gateway fc00::2 -A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-280 -A limit-ntp-550 -m recent --name limit-ntp-550 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-281 -A limit-ntp-551 -m recent --name limit-ntp-551 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-282 -A limit-ntp-552 -m limit --limit 1/second -j LOG -A limit-ntp-552 -m recent --name limit-ntp-552 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-283 -A limit-ntp-553 -m recent --name limit-ntp-553 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-284 -A limit-ntp-554 -j TEE --gateway fc00::2 -A limit-ntp-554 -m recent --name limit-ntp-554 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-285 -A limit-ntp-555 -m recent --name limit-ntp-555 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-286 -A limit-ntp-556 -m recent --name limit-ntp-556 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-287 -A limit-ntp-557 -m recent --name limit-ntp-557 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-288 -A limit-ntp-558 -m recent --name limit-ntp-558 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-559 -m recent --name limit-ntp-559 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-289 -A limit-ntp-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-56 -j ACCEPT -A limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-290 -A limit-ntp-560 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-291 -A limit-ntp-561 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-292 -A limit-ntp-562 -m limit --limit 1/second -j LOG -A limit-ntp-562 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-293 -A limit-ntp-563 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-294 -A limit-ntp-564 -j TEE --gateway fc00::2 -A limit-ntp-564 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-295 -A limit-ntp-565 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-296 -A limit-ntp-566 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-297 -A limit-ntp-567 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-298 -A limit-ntp-568 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-569 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-299 -A limit-ntp-570 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-300 -A limit-ntp-570 -j ACCEPT -A limit-ntp-572 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-302 -A limit-ntp-572 -m limit --limit 1/second -j LOG -A limit-ntp-572 -j ACCEPT -A limit-ntp-573 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-303 -A limit-ntp-573 -m limit --limit 1/second -j LOG -A limit-ntp-574 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-304 -A limit-ntp-574 -j TEE --gateway fc00::2 -A limit-ntp-574 -j ACCEPT -A limit-ntp-575 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-305 -A limit-ntp-575 -j TEE --gateway fc00::2 -A limit-ntp-576 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-306 -A limit-ntp-576 -j ACCEPT -A limit-ntp-578 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-308 -A limit-ntp-578 -j ACCEPT -A limit-ntp-579 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-309 -A limit-ntp-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-58 -j ACCEPT -A limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-310 -A limit-ntp-580 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-311 -A limit-ntp-581 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-312 -A limit-ntp-582 -m limit --limit 1/second -j LOG -A limit-ntp-582 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-313 -A limit-ntp-583 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-314 -A limit-ntp-584 -j TEE --gateway fc00::2 -A limit-ntp-584 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-315 -A limit-ntp-585 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-316 -A limit-ntp-586 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-317 -A limit-ntp-587 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-318 -A limit-ntp-588 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-589 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-319 -A limit-ntp-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-590 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-320 -A limit-ntp-590 -j ACCEPT -A limit-ntp-592 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-322 -A limit-ntp-592 -m limit --limit 1/second -j LOG -A limit-ntp-592 -j ACCEPT -A limit-ntp-593 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-323 -A limit-ntp-593 -m limit --limit 1/second -j LOG -A limit-ntp-594 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-324 -A limit-ntp-594 -j TEE --gateway fc00::2 -A limit-ntp-594 -j ACCEPT -A limit-ntp-595 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-325 -A limit-ntp-595 -j TEE --gateway fc00::2 -A limit-ntp-596 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-326 -A limit-ntp-596 -j ACCEPT -A limit-ntp-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-328 -A limit-ntp-598 -j ACCEPT -A limit-ntp-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-329 -A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-6 -A limit-ntp-6 -m recent --name limit-ntp-6 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-60 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-330 -A limit-ntp-600 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-331 -A limit-ntp-601 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-332 -A limit-ntp-602 -m limit --limit 1/second -j LOG -A limit-ntp-602 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-333 -A limit-ntp-603 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-334 -A limit-ntp-604 -j TEE --gateway fc00::2 -A limit-ntp-604 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-335 -A limit-ntp-605 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-336 -A limit-ntp-606 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-337 -A limit-ntp-607 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-338 -A limit-ntp-608 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-609 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-339 -A limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-61 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-610 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-340 -A limit-ntp-610 -j ACCEPT -A limit-ntp-612 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-342 -A limit-ntp-612 -m limit --limit 1/second -j LOG -A limit-ntp-612 -j ACCEPT -A limit-ntp-613 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-343 -A limit-ntp-613 -m limit --limit 1/second -j LOG -A limit-ntp-614 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-344 -A limit-ntp-614 -j TEE --gateway fc00::2 -A limit-ntp-614 -j ACCEPT -A limit-ntp-615 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-345 -A limit-ntp-615 -j TEE --gateway fc00::2 -A limit-ntp-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-346 -A limit-ntp-616 -j ACCEPT -A limit-ntp-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-348 -A limit-ntp-618 -j ACCEPT -A limit-ntp-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-349 -A limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-62 -m limit --limit 1/second -j LOG -A limit-ntp-62 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-350 -A limit-ntp-620 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-351 -A limit-ntp-621 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-352 -A limit-ntp-622 -m limit --limit 1/second -j LOG -A limit-ntp-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-353 -A limit-ntp-623 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-354 -A limit-ntp-624 -j TEE --gateway fc00::2 -A limit-ntp-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-355 -A limit-ntp-625 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-356 -A limit-ntp-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-357 -A limit-ntp-627 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-358 -A limit-ntp-628 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-629 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-359 -A limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-63 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-360 -A limit-ntp-630 -j ACCEPT -A limit-ntp-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-362 -A limit-ntp-632 -m limit --limit 1/second -j LOG -A limit-ntp-632 -j ACCEPT -A limit-ntp-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-363 -A limit-ntp-633 -m limit --limit 1/second -j LOG -A limit-ntp-634 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-364 -A limit-ntp-634 -j TEE --gateway fc00::2 -A limit-ntp-634 -j ACCEPT -A limit-ntp-635 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-365 -A limit-ntp-635 -j TEE --gateway fc00::2 -A limit-ntp-636 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-366 -A limit-ntp-636 -j ACCEPT -A limit-ntp-638 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-368 -A limit-ntp-638 -j ACCEPT -A limit-ntp-639 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-369 -A limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-64 -j TEE --gateway fc00::2 -A limit-ntp-64 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-370 -A limit-ntp-640 -m recent --name limit-ntp-640 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-371 -A limit-ntp-641 -m recent --name limit-ntp-641 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-372 -A limit-ntp-642 -m limit --limit 1/second -j LOG -A limit-ntp-642 -m recent --name limit-ntp-642 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-373 -A limit-ntp-643 -m recent --name limit-ntp-643 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-374 -A limit-ntp-644 -j TEE --gateway fc00::2 -A limit-ntp-644 -m recent --name limit-ntp-644 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-375 -A limit-ntp-645 -m recent --name limit-ntp-645 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-376 -A limit-ntp-646 -m recent --name limit-ntp-646 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-377 -A limit-ntp-647 -m recent --name limit-ntp-647 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-378 -A limit-ntp-648 -m recent --name limit-ntp-648 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-649 -m recent --name limit-ntp-649 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-379 -A limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-65 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-380 -A limit-ntp-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-381 -A limit-ntp-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-382 -A limit-ntp-652 -m limit --limit 1/second -j LOG -A limit-ntp-652 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-383 -A limit-ntp-653 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-384 -A limit-ntp-654 -j TEE --gateway fc00::2 -A limit-ntp-654 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-385 -A limit-ntp-655 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-386 -A limit-ntp-656 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-387 -A limit-ntp-657 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-388 -A limit-ntp-658 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-659 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-389 -A limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-66 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-660 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-390 -A limit-ntp-660 -j ACCEPT -A limit-ntp-662 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-392 -A limit-ntp-662 -m limit --limit 1/second -j LOG -A limit-ntp-662 -j ACCEPT -A limit-ntp-663 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-393 -A limit-ntp-663 -m limit --limit 1/second -j LOG -A limit-ntp-664 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-394 -A limit-ntp-664 -j TEE --gateway fc00::2 -A limit-ntp-664 -j ACCEPT -A limit-ntp-665 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-395 -A limit-ntp-665 -j TEE --gateway fc00::2 -A limit-ntp-666 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-396 -A limit-ntp-666 -j ACCEPT -A limit-ntp-668 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-398 -A limit-ntp-668 -j ACCEPT -A limit-ntp-669 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-399 -A limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-67 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-400 -A limit-ntp-670 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-401 -A limit-ntp-671 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-402 -A limit-ntp-672 -m limit --limit 1/second -j LOG -A limit-ntp-672 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-403 -A limit-ntp-673 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-404 -A limit-ntp-674 -j TEE --gateway fc00::2 -A limit-ntp-674 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-405 -A limit-ntp-675 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-406 -A limit-ntp-676 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-407 -A limit-ntp-677 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-408 -A limit-ntp-678 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-679 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-409 -A limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-68 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-680 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-410 -A limit-ntp-680 -j ACCEPT -A limit-ntp-682 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-412 -A limit-ntp-682 -m limit --limit 1/second -j LOG -A limit-ntp-682 -j ACCEPT -A limit-ntp-683 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-413 -A limit-ntp-683 -m limit --limit 1/second -j LOG -A limit-ntp-684 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-414 -A limit-ntp-684 -j TEE --gateway fc00::2 -A limit-ntp-684 -j ACCEPT -A limit-ntp-685 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-415 -A limit-ntp-685 -j TEE --gateway fc00::2 -A limit-ntp-686 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-416 -A limit-ntp-686 -j ACCEPT -A limit-ntp-688 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-418 -A limit-ntp-688 -j ACCEPT -A limit-ntp-689 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-419 -A limit-ntp-69 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-420 -A limit-ntp-690 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-421 -A limit-ntp-691 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-422 -A limit-ntp-692 -m limit --limit 1/second -j LOG -A limit-ntp-692 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-423 -A limit-ntp-693 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-424 -A limit-ntp-694 -j TEE --gateway fc00::2 -A limit-ntp-694 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-425 -A limit-ntp-695 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-426 -A limit-ntp-696 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-427 -A limit-ntp-697 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-428 -A limit-ntp-698 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-699 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-429 -A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-7 -A limit-ntp-7 -m recent --name limit-ntp-7 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-70 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-70 -j ACCEPT -A limit-ntp-700 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-430 -A limit-ntp-700 -j ACCEPT -A limit-ntp-702 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-432 -A limit-ntp-702 -m limit --limit 1/second -j LOG -A limit-ntp-702 -j ACCEPT -A limit-ntp-703 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-433 -A limit-ntp-703 -m limit --limit 1/second -j LOG -A limit-ntp-704 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-434 -A limit-ntp-704 -j TEE --gateway fc00::2 -A limit-ntp-704 -j ACCEPT -A limit-ntp-705 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-435 -A limit-ntp-705 -j TEE --gateway fc00::2 -A limit-ntp-706 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-436 -A limit-ntp-706 -j ACCEPT -A limit-ntp-708 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-438 -A limit-ntp-708 -j ACCEPT -A limit-ntp-709 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-439 -A limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-440 -A limit-ntp-710 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-441 -A limit-ntp-711 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-442 -A limit-ntp-712 -m limit --limit 1/second -j LOG -A limit-ntp-712 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-443 -A limit-ntp-713 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-444 -A limit-ntp-714 -j TEE --gateway fc00::2 -A limit-ntp-714 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-445 -A limit-ntp-715 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-446 -A limit-ntp-716 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-447 -A limit-ntp-717 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-448 -A limit-ntp-718 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-719 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-449 -A limit-ntp-72 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-72 -m limit --limit 1/second -j LOG -A limit-ntp-72 -j ACCEPT -A limit-ntp-720 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-450 -A limit-ntp-720 -j ACCEPT -A limit-ntp-722 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-452 -A limit-ntp-722 -m limit --limit 1/second -j LOG -A limit-ntp-722 -j ACCEPT -A limit-ntp-723 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-453 -A limit-ntp-723 -m limit --limit 1/second -j LOG -A limit-ntp-724 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-454 -A limit-ntp-724 -j TEE --gateway fc00::2 -A limit-ntp-724 -j ACCEPT -A limit-ntp-725 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-455 -A limit-ntp-725 -j TEE --gateway fc00::2 -A limit-ntp-726 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-456 -A limit-ntp-726 -j ACCEPT -A limit-ntp-728 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-458 -A limit-ntp-728 -j ACCEPT -A limit-ntp-729 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-459 -A limit-ntp-73 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-73 -m limit --limit 1/second -j LOG -A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-730 -m recent --name limit-ntp-730 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-731 -m recent --name limit-ntp-731 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-732 -m limit --limit 1/second -j LOG -A limit-ntp-732 -m recent --name limit-ntp-732 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-733 -m recent --name limit-ntp-733 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-734 -j TEE --gateway fc00::2 -A limit-ntp-734 -m recent --name limit-ntp-734 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-735 -m recent --name limit-ntp-735 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-736 -m recent --name limit-ntp-736 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-737 -m recent --name limit-ntp-737 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-738 -m recent --name limit-ntp-738 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-739 -m recent --name limit-ntp-739 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-74 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-74 -j TEE --gateway fc00::2 -A limit-ntp-74 -j ACCEPT -A limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-740 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-741 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-742 -m limit --limit 1/second -j LOG -A limit-ntp-742 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-743 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-744 -j TEE --gateway fc00::2 -A limit-ntp-744 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-745 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-746 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-747 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-748 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-749 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-75 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-75 -j TEE --gateway fc00::2 -A limit-ntp-750 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-750 -j ACCEPT -A limit-ntp-752 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-752 -m limit --limit 1/second -j LOG -A limit-ntp-752 -j ACCEPT -A limit-ntp-753 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-753 -m limit --limit 1/second -j LOG -A limit-ntp-754 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-754 -j TEE --gateway fc00::2 -A limit-ntp-754 -j ACCEPT -A limit-ntp-755 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-755 -j TEE --gateway fc00::2 -A limit-ntp-756 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-756 -j ACCEPT -A limit-ntp-758 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-758 -j ACCEPT -A limit-ntp-759 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-76 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-76 -j ACCEPT -A limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-760 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-761 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-762 -m limit --limit 1/second -j LOG -A limit-ntp-762 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-763 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-764 -j TEE --gateway fc00::2 -A limit-ntp-764 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-765 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-766 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-767 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-768 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-769 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-770 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-770 -j ACCEPT -A limit-ntp-772 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-772 -m limit --limit 1/second -j LOG -A limit-ntp-772 -j ACCEPT -A limit-ntp-773 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-773 -m limit --limit 1/second -j LOG -A limit-ntp-774 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-774 -j TEE --gateway fc00::2 -A limit-ntp-774 -j ACCEPT -A limit-ntp-775 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-775 -j TEE --gateway fc00::2 -A limit-ntp-776 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-776 -j ACCEPT -A limit-ntp-778 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-778 -j ACCEPT -A limit-ntp-779 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-78 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-78 -j ACCEPT -A limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-780 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-781 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-782 -m limit --limit 1/second -j LOG -A limit-ntp-782 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-783 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-784 -j TEE --gateway fc00::2 -A limit-ntp-784 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-785 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-786 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-787 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-788 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-789 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-79 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-790 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-790 -j ACCEPT -A limit-ntp-792 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-792 -m limit --limit 1/second -j LOG -A limit-ntp-792 -j ACCEPT -A limit-ntp-793 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-793 -m limit --limit 1/second -j LOG -A limit-ntp-794 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-794 -j TEE --gateway fc00::2 -A limit-ntp-794 -j ACCEPT -A limit-ntp-795 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-795 -j TEE --gateway fc00::2 -A limit-ntp-796 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-796 -j ACCEPT -A limit-ntp-798 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-798 -j ACCEPT -A limit-ntp-799 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-8 -A limit-ntp-8 -m recent --name limit-ntp-8 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-80 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-800 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-801 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-802 -m limit --limit 1/second -j LOG -A limit-ntp-802 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-803 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-804 -j TEE --gateway fc00::2 -A limit-ntp-804 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-805 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-806 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-807 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-808 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-809 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP -A limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-81 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-810 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-810 -j ACCEPT -A limit-ntp-812 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-812 -m limit --limit 1/second -j LOG -A limit-ntp-812 -j ACCEPT -A limit-ntp-813 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-813 -m limit --limit 1/second -j LOG -A limit-ntp-814 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-814 -j TEE --gateway fc00::2 -A limit-ntp-814 -j ACCEPT -A limit-ntp-815 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-815 -j TEE --gateway fc00::2 -A limit-ntp-816 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-816 -j ACCEPT -A limit-ntp-818 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-818 -j ACCEPT -A limit-ntp-819 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -A limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-82 -m limit --limit 1/second -j LOG -A limit-ntp-82 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-460 -A limit-ntp-820 -m recent --name limit-ntp-820 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-461 -A limit-ntp-821 -m recent --name limit-ntp-821 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-462 -A limit-ntp-822 -m limit --limit 1/second -j LOG -A limit-ntp-822 -m recent --name limit-ntp-822 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-463 -A limit-ntp-823 -m recent --name limit-ntp-823 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-464 -A limit-ntp-824 -j TEE --gateway fc00::2 -A limit-ntp-824 -m recent --name limit-ntp-824 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-465 -A limit-ntp-825 -m recent --name limit-ntp-825 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-466 -A limit-ntp-826 -m recent --name limit-ntp-826 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-467 -A limit-ntp-827 -m recent --name limit-ntp-827 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-468 -A limit-ntp-828 -m recent --name limit-ntp-828 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-829 -m recent --name limit-ntp-829 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-469 -A limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-83 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-470 -A limit-ntp-830 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-471 -A limit-ntp-831 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-472 -A limit-ntp-832 -m limit --limit 1/second -j LOG -A limit-ntp-832 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-473 -A limit-ntp-833 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-474 -A limit-ntp-834 -j TEE --gateway fc00::2 -A limit-ntp-834 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-475 -A limit-ntp-835 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-476 -A limit-ntp-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-477 -A limit-ntp-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-478 -A limit-ntp-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-479 -A limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-84 -j TEE --gateway fc00::2 -A limit-ntp-84 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-480 -A limit-ntp-840 -j ACCEPT -A limit-ntp-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-482 -A limit-ntp-842 -m limit --limit 1/second -j LOG -A limit-ntp-842 -j ACCEPT -A limit-ntp-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-483 -A limit-ntp-843 -m limit --limit 1/second -j LOG -A limit-ntp-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-484 -A limit-ntp-844 -j TEE --gateway fc00::2 -A limit-ntp-844 -j ACCEPT -A limit-ntp-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-485 -A limit-ntp-845 -j TEE --gateway fc00::2 -A limit-ntp-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-486 -A limit-ntp-846 -j ACCEPT -A limit-ntp-848 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-488 -A limit-ntp-848 -j ACCEPT -A limit-ntp-849 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-489 -A limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-85 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-490 -A limit-ntp-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-491 -A limit-ntp-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-492 -A limit-ntp-852 -m limit --limit 1/second -j LOG -A limit-ntp-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-493 -A limit-ntp-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -A limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-494 -A limit-ntp-854 -j TEE --gateway fc00::2 -A limit-ntp-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-495 -A limit-ntp-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j TEE --gateway fc00::2 -A limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-496 -A limit-ntp-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-497 -A limit-ntp-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -A limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-498 -A limit-ntp-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -A limit-ntp-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-ntp-499 -A limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-86 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-860 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-500 -A limit-ntp-860 -j ACCEPT -A limit-ntp-862 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-502 -A limit-ntp-862 -m limit --limit 1/second -j LOG -A limit-ntp-862 -j ACCEPT -A limit-ntp-863 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-503 -A limit-ntp-863 -m limit --limit 1/second -j LOG -A limit-ntp-864 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-504 -A limit-ntp-864 -j TEE --gateway fc00::2 -A limit-ntp-864 -j ACCEPT -A limit-ntp-865 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-505 -A limit-ntp-865 -j TEE --gateway fc00::2 -A limit-ntp-866 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-506 -A limit-ntp-866 -j ACCEPT -A limit-ntp-868 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-508 -A limit-ntp-868 -j ACCEPT -A limit-ntp-869 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-509 -A limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-87 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-510 -A limit-ntp-870 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-511 -A limit-ntp-871 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-512 -A limit-ntp-872 -m limit --limit 1/second -j LOG -A limit-ntp-872 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-513 -A limit-ntp-873 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-514 -A limit-ntp-874 -j TEE --gateway fc00::2 -A limit-ntp-874 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-515 -A limit-ntp-875 -m recent --name user:C --rsource --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-516 -A limit-ntp-876 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-517 -A limit-ntp-877 -m recent --name user:C --rsource --mask fe00:: --set -A limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-518 -A limit-ntp-878 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -A limit-ntp-879 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-519 -A limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-88 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-880 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-520 -A limit-ntp-880 -j ACCEPT -A limit-ntp-882 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-522 -A limit-ntp-882 -m limit --limit 1/second -j LOG -A limit-ntp-882 -j ACCEPT -A limit-ntp-883 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-523 -A limit-ntp-883 -m limit --limit 1/second -j LOG -A limit-ntp-884 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-524 -A limit-ntp-884 -j TEE --gateway fc00::2 -A limit-ntp-884 -j ACCEPT -A limit-ntp-885 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-525 -A limit-ntp-885 -j TEE --gateway fc00::2 -A limit-ntp-886 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-526 -A limit-ntp-886 -j ACCEPT -A limit-ntp-888 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-528 -A limit-ntp-888 -j ACCEPT -A limit-ntp-889 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-529 -A limit-ntp-89 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP -A limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-530 -A limit-ntp-890 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-531 -A limit-ntp-891 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-532 -A limit-ntp-892 -m limit --limit 1/second -j LOG -A limit-ntp-892 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-533 -A limit-ntp-893 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -A limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-534 -A limit-ntp-894 -j TEE --gateway fc00::2 -A limit-ntp-894 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-535 -A limit-ntp-895 -m recent --name user:C --rdest --mask fe00:: --set -j TEE --gateway fc00::2 -A limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-536 -A limit-ntp-896 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-537 -A limit-ntp-897 -m recent --name user:C --rdest --mask fe00:: --set -A limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-538 -A limit-ntp-898 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -A limit-ntp-899 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-ntp-539 -A limit-ntp-9 -m recent --name limit-ntp-9 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-ntp-9 -A limit-ntp-90 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-90 -j ACCEPT -A limit-ntp-900 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-540 -A limit-ntp-900 -j ACCEPT -A limit-ntp-902 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-542 -A limit-ntp-902 -m limit --limit 1/second -j LOG -A limit-ntp-902 -j ACCEPT -A limit-ntp-903 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-543 -A limit-ntp-903 -m limit --limit 1/second -j LOG -A limit-ntp-904 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-544 -A limit-ntp-904 -j TEE --gateway fc00::2 -A limit-ntp-904 -j ACCEPT -A limit-ntp-905 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-545 -A limit-ntp-905 -j TEE --gateway fc00::2 -A limit-ntp-906 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-546 -A limit-ntp-906 -j ACCEPT -A limit-ntp-908 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-548 -A limit-ntp-908 -j ACCEPT -A limit-ntp-909 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-ntp-549 -A limit-ntp-910 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-910 -j ACCEPT -A limit-ntp-910 -m limit --limit 1/second -j LOG -A limit-ntp-910 -j DROP -A limit-ntp-911 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-911 -j RETURN -A limit-ntp-911 -m limit --limit 1/second -j LOG -A limit-ntp-911 -j DROP -A limit-ntp-912 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-912 -j logaccept-ntp-0 -A limit-ntp-912 -m limit --limit 1/second -j LOG -A limit-ntp-912 -j DROP -A limit-ntp-913 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-913 -j logaccept-ntp-1 -A limit-ntp-913 -m limit --limit 1/second -j LOG -A limit-ntp-913 -j DROP -A limit-ntp-914 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-914 -j ACCEPT -A limit-ntp-914 -m limit --limit 1/second -j LOG -A limit-ntp-914 -j DROP -A limit-ntp-915 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-915 -j logaccept-ntp-2 -A limit-ntp-915 -m limit --limit 1/second -j LOG -A limit-ntp-915 -j DROP -A limit-ntp-916 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-916 -j ACCEPT -A limit-ntp-916 -j DROP -A limit-ntp-917 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-917 -j RETURN -A limit-ntp-917 -j DROP -A limit-ntp-918 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-918 -j logaccept-ntp-3 -A limit-ntp-918 -j DROP -A limit-ntp-919 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-919 -j logaccept-ntp-4 -A limit-ntp-919 -j DROP -A limit-ntp-92 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-92 -m limit --limit 1/second -j LOG -A limit-ntp-92 -j ACCEPT -A limit-ntp-920 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-920 -j ACCEPT -A limit-ntp-920 -j DROP -A limit-ntp-921 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-921 -j logaccept-ntp-5 -A limit-ntp-921 -j DROP -A limit-ntp-922 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-922 -j ACCEPT -A limit-ntp-922 -m limit --limit 1/second -j LOG -A limit-ntp-922 -j DROP -A limit-ntp-923 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-923 -j RETURN -A limit-ntp-923 -m limit --limit 1/second -j LOG -A limit-ntp-923 -j DROP -A limit-ntp-924 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-924 -j logaccept-ntp-6 -A limit-ntp-924 -m limit --limit 1/second -j LOG -A limit-ntp-924 -j DROP -A limit-ntp-925 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-925 -j logaccept-ntp-7 -A limit-ntp-925 -m limit --limit 1/second -j LOG -A limit-ntp-925 -j DROP -A limit-ntp-926 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-926 -j ACCEPT -A limit-ntp-926 -m limit --limit 1/second -j LOG -A limit-ntp-926 -j DROP -A limit-ntp-927 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-927 -j logaccept-ntp-8 -A limit-ntp-927 -m limit --limit 1/second -j LOG -A limit-ntp-927 -j DROP -A limit-ntp-928 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-928 -j ACCEPT -A limit-ntp-928 -j TEE --gateway fc00::2 -A limit-ntp-928 -j DROP -A limit-ntp-929 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-929 -j RETURN -A limit-ntp-929 -j TEE --gateway fc00::2 -A limit-ntp-929 -j DROP -A limit-ntp-93 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-93 -m limit --limit 1/second -j LOG -A limit-ntp-930 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-930 -j logaccept-ntp-9 -A limit-ntp-930 -j TEE --gateway fc00::2 -A limit-ntp-930 -j DROP -A limit-ntp-931 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-931 -j logaccept-ntp-10 -A limit-ntp-931 -j TEE --gateway fc00::2 -A limit-ntp-931 -j DROP -A limit-ntp-932 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-932 -j ACCEPT -A limit-ntp-932 -j TEE --gateway fc00::2 -A limit-ntp-932 -j DROP -A limit-ntp-933 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-933 -j logaccept-ntp-11 -A limit-ntp-933 -j TEE --gateway fc00::2 -A limit-ntp-933 -j DROP -A limit-ntp-934 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-934 -j ACCEPT -A limit-ntp-934 -j DROP -A limit-ntp-935 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-935 -j RETURN -A limit-ntp-935 -j DROP -A limit-ntp-936 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-936 -j logaccept-ntp-12 -A limit-ntp-936 -j DROP -A limit-ntp-937 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-937 -j logaccept-ntp-13 -A limit-ntp-937 -j DROP -A limit-ntp-938 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-938 -j ACCEPT -A limit-ntp-938 -j DROP -A limit-ntp-939 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-939 -j logaccept-ntp-14 -A limit-ntp-939 -j DROP -A limit-ntp-94 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-94 -j TEE --gateway fc00::2 -A limit-ntp-94 -j ACCEPT -A limit-ntp-940 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-940 -j ACCEPT -A limit-ntp-940 -j DROP -A limit-ntp-941 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-941 -j RETURN -A limit-ntp-941 -j DROP -A limit-ntp-942 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-942 -j logaccept-ntp-15 -A limit-ntp-942 -j DROP -A limit-ntp-943 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-943 -j logaccept-ntp-16 -A limit-ntp-943 -j DROP -A limit-ntp-944 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-944 -j ACCEPT -A limit-ntp-944 -j DROP -A limit-ntp-945 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-945 -j logaccept-ntp-17 -A limit-ntp-945 -j DROP -A limit-ntp-946 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-946 -j ACCEPT -A limit-ntp-946 -j DROP -A limit-ntp-947 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-947 -j RETURN -A limit-ntp-947 -j DROP -A limit-ntp-948 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-948 -j logaccept-ntp-18 -A limit-ntp-948 -j DROP -A limit-ntp-949 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-949 -j logaccept-ntp-19 -A limit-ntp-949 -j DROP -A limit-ntp-95 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-95 -j TEE --gateway fc00::2 -A limit-ntp-950 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-950 -j ACCEPT -A limit-ntp-950 -j DROP -A limit-ntp-951 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-951 -j logaccept-ntp-20 -A limit-ntp-951 -j DROP -A limit-ntp-952 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-952 -j ACCEPT -A limit-ntp-952 -m limit --limit 1/second -j LOG -A limit-ntp-952 -j DROP -A limit-ntp-953 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-953 -j RETURN -A limit-ntp-953 -m limit --limit 1/second -j LOG -A limit-ntp-953 -j DROP -A limit-ntp-954 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-954 -j logaccept-ntp-21 -A limit-ntp-954 -m limit --limit 1/second -j LOG -A limit-ntp-954 -j DROP -A limit-ntp-955 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-955 -j logaccept-ntp-22 -A limit-ntp-955 -m limit --limit 1/second -j LOG -A limit-ntp-955 -j DROP -A limit-ntp-956 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-956 -j ACCEPT -A limit-ntp-956 -m limit --limit 1/second -j LOG -A limit-ntp-956 -j DROP -A limit-ntp-957 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-957 -j logaccept-ntp-23 -A limit-ntp-957 -m limit --limit 1/second -j LOG -A limit-ntp-957 -j DROP -A limit-ntp-958 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-958 -j ACCEPT -A limit-ntp-958 -j TEE --gateway fc00::2 -A limit-ntp-958 -j DROP -A limit-ntp-959 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-959 -j RETURN -A limit-ntp-959 -j TEE --gateway fc00::2 -A limit-ntp-959 -j DROP -A limit-ntp-96 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-96 -j ACCEPT -A limit-ntp-960 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-960 -j logaccept-ntp-24 -A limit-ntp-960 -j TEE --gateway fc00::2 -A limit-ntp-960 -j DROP -A limit-ntp-961 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-961 -j logaccept-ntp-25 -A limit-ntp-961 -j TEE --gateway fc00::2 -A limit-ntp-961 -j DROP -A limit-ntp-962 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-962 -j ACCEPT -A limit-ntp-962 -j TEE --gateway fc00::2 -A limit-ntp-962 -j DROP -A limit-ntp-963 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-963 -j logaccept-ntp-26 -A limit-ntp-963 -j TEE --gateway fc00::2 -A limit-ntp-963 -j DROP -A limit-ntp-964 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-964 -j ACCEPT -A limit-ntp-964 -j DROP -A limit-ntp-965 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-965 -j RETURN -A limit-ntp-965 -j DROP -A limit-ntp-966 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-966 -j logaccept-ntp-27 -A limit-ntp-966 -j DROP -A limit-ntp-967 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-967 -j logaccept-ntp-28 -A limit-ntp-967 -j DROP -A limit-ntp-968 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-968 -j ACCEPT -A limit-ntp-968 -j DROP -A limit-ntp-969 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-969 -j logaccept-ntp-29 -A limit-ntp-969 -j DROP -A limit-ntp-970 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-970 -j ACCEPT -A limit-ntp-970 -j DROP -A limit-ntp-971 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-971 -j RETURN -A limit-ntp-971 -j DROP -A limit-ntp-972 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-972 -j logaccept-ntp-30 -A limit-ntp-972 -j DROP -A limit-ntp-973 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-973 -j logaccept-ntp-31 -A limit-ntp-973 -j DROP -A limit-ntp-974 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-974 -j ACCEPT -A limit-ntp-974 -j DROP -A limit-ntp-975 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-ntp-975 -j logaccept-ntp-32 -A limit-ntp-975 -j DROP -A limit-ntp-98 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A limit-ntp-98 -j ACCEPT -A limit-ntp-99 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -A logaccept-0 -m limit --limit 1/second -j LOG -A logaccept-0 -j ACCEPT -A logaccept-1 -j TEE --gateway fc00::2 -A logaccept-1 -j ACCEPT -A logaccept-10 -j TEE --gateway fc00::2 -A logaccept-10 -j ACCEPT -A logaccept-11 -j ACCEPT -A logaccept-12 -m limit --limit 1/second -j LOG -A logaccept-12 -j ACCEPT -A logaccept-13 -j TEE --gateway fc00::2 -A logaccept-13 -j ACCEPT -A logaccept-14 -j ACCEPT -A logaccept-15 -m limit --limit 1/second -j LOG -A logaccept-15 -j ACCEPT -A logaccept-16 -j TEE --gateway fc00::2 -A logaccept-16 -j ACCEPT -A logaccept-17 -j ACCEPT -A logaccept-18 -m limit --limit 1/second -j LOG -A logaccept-18 -j ACCEPT -A logaccept-19 -j TEE --gateway fc00::2 -A logaccept-19 -j ACCEPT -A logaccept-2 -j ACCEPT -A logaccept-20 -j ACCEPT -A logaccept-21 -m limit --limit 1/second -j LOG -A logaccept-21 -j ACCEPT -A logaccept-22 -j TEE --gateway fc00::2 -A logaccept-22 -j ACCEPT -A logaccept-23 -j ACCEPT -A logaccept-24 -m limit --limit 1/second -j LOG -A logaccept-24 -j ACCEPT -A logaccept-25 -j TEE --gateway fc00::2 -A logaccept-25 -j ACCEPT -A logaccept-26 -j ACCEPT -A logaccept-27 -m limit --limit 1/second -j LOG -A logaccept-27 -j ACCEPT -A logaccept-28 -j TEE --gateway fc00::2 -A logaccept-28 -j ACCEPT -A logaccept-29 -j ACCEPT -A logaccept-3 -m limit --limit 1/second -j LOG -A logaccept-3 -j ACCEPT -A logaccept-30 -m limit --limit 1/second -j LOG -A logaccept-30 -j ACCEPT -A logaccept-31 -j TEE --gateway fc00::2 -A logaccept-31 -j ACCEPT -A logaccept-32 -j ACCEPT -A logaccept-33 -m limit --limit 1/second -j LOG -A logaccept-33 -j ACCEPT -A logaccept-34 -j TEE --gateway fc00::2 -A logaccept-34 -j ACCEPT -A logaccept-35 -j ACCEPT -A logaccept-36 -m limit --limit 1/second -j LOG -A logaccept-36 -j ACCEPT -A logaccept-37 -j TEE --gateway fc00::2 -A logaccept-37 -j ACCEPT -A logaccept-38 -j ACCEPT -A logaccept-39 -m limit --limit 1/second -j LOG -A logaccept-39 -j ACCEPT -A logaccept-4 -j TEE --gateway fc00::2 -A logaccept-4 -j ACCEPT -A logaccept-40 -j TEE --gateway fc00::2 -A logaccept-40 -j ACCEPT -A logaccept-41 -j ACCEPT -A logaccept-42 -m limit --limit 1/second -j LOG -A logaccept-42 -j ACCEPT -A logaccept-43 -j TEE --gateway fc00::2 -A logaccept-43 -j ACCEPT -A logaccept-44 -j ACCEPT -A logaccept-45 -m limit --limit 1/second -j LOG -A logaccept-45 -j ACCEPT -A logaccept-46 -j TEE --gateway fc00::2 -A logaccept-46 -j ACCEPT -A logaccept-47 -j ACCEPT -A logaccept-48 -m limit --limit 1/second -j LOG -A logaccept-48 -j ACCEPT -A logaccept-49 -j TEE --gateway fc00::2 -A logaccept-49 -j ACCEPT -A logaccept-5 -j ACCEPT -A logaccept-50 -j ACCEPT -A logaccept-51 -m limit --limit 1/second -j LOG -A logaccept-51 -j ACCEPT -A logaccept-52 -j TEE --gateway fc00::2 -A logaccept-52 -j ACCEPT -A logaccept-53 -j ACCEPT -A logaccept-54 -m limit --limit 1/second -j LOG -A logaccept-54 -j ACCEPT -A logaccept-55 -j TEE --gateway fc00::2 -A logaccept-55 -j ACCEPT -A logaccept-56 -j ACCEPT -A logaccept-57 -m limit --limit 1/second -j LOG -A logaccept-57 -j ACCEPT -A logaccept-58 -j TEE --gateway fc00::2 -A logaccept-58 -j ACCEPT -A logaccept-59 -j ACCEPT -A logaccept-6 -m limit --limit 1/second -j LOG -A logaccept-6 -j ACCEPT -A logaccept-60 -m limit --limit 1/second -j LOG -A logaccept-60 -j ACCEPT -A logaccept-61 -j TEE --gateway fc00::2 -A logaccept-61 -j ACCEPT -A logaccept-62 -j ACCEPT -A logaccept-63 -m limit --limit 1/second -j LOG -A logaccept-63 -j ACCEPT -A logaccept-64 -j TEE --gateway fc00::2 -A logaccept-64 -j ACCEPT -A logaccept-65 -j ACCEPT -A logaccept-66 -m limit --limit 1/second -j LOG -A logaccept-66 -j ACCEPT -A logaccept-67 -j LOG -A logaccept-67 -j TEE --gateway fc00::1 -A logaccept-67 -j ACCEPT -A logaccept-68 -j TEE --gateway fc00::2 -A logaccept-68 -j ACCEPT -A logaccept-69 -j ACCEPT -A logaccept-7 -j TEE --gateway fc00::2 -A logaccept-7 -j ACCEPT -A logaccept-8 -j ACCEPT -A logaccept-9 -m limit --limit 1/second -j LOG -A logaccept-9 -j ACCEPT -A logaccept-final-0 -m limit --limit 1/second -j LOG -A logaccept-final-0 -j ACCEPT -A logaccept-final-1 -j TEE --gateway fc00::2 -A logaccept-final-1 -j ACCEPT -A logaccept-final-10 -j TEE --gateway fc00::2 -A logaccept-final-10 -j ACCEPT -A logaccept-final-100 -j TEE --gateway fc00::2 -A logaccept-final-100 -j ACCEPT -A logaccept-final-101 -j ACCEPT -A logaccept-final-102 -m limit --limit 1/second -j LOG -A logaccept-final-102 -j ACCEPT -A logaccept-final-103 -j TEE --gateway fc00::2 -A logaccept-final-103 -j ACCEPT -A logaccept-final-104 -j ACCEPT -A logaccept-final-105 -m limit --limit 1/second -j LOG -A logaccept-final-105 -j ACCEPT -A logaccept-final-106 -j TEE --gateway fc00::2 -A logaccept-final-106 -j ACCEPT -A logaccept-final-107 -j ACCEPT -A logaccept-final-108 -m limit --limit 1/second -j LOG -A logaccept-final-108 -j ACCEPT -A logaccept-final-109 -j TEE --gateway fc00::2 -A logaccept-final-109 -j ACCEPT -A logaccept-final-11 -j ACCEPT -A logaccept-final-110 -j ACCEPT -A logaccept-final-111 -m limit --limit 1/second -j LOG -A logaccept-final-111 -j ACCEPT -A logaccept-final-112 -j TEE --gateway fc00::2 -A logaccept-final-112 -j ACCEPT -A logaccept-final-113 -j ACCEPT -A logaccept-final-114 -m limit --limit 1/second -j LOG -A logaccept-final-114 -j ACCEPT -A logaccept-final-115 -j TEE --gateway fc00::2 -A logaccept-final-115 -j ACCEPT -A logaccept-final-116 -j ACCEPT -A logaccept-final-117 -m limit --limit 1/second -j LOG -A logaccept-final-117 -j ACCEPT -A logaccept-final-118 -j TEE --gateway fc00::2 -A logaccept-final-118 -j ACCEPT -A logaccept-final-119 -j ACCEPT -A logaccept-final-12 -m limit --limit 1/second -j LOG -A logaccept-final-12 -j ACCEPT -A logaccept-final-120 -m limit --limit 1/second -j LOG -A logaccept-final-120 -j ACCEPT -A logaccept-final-121 -j TEE --gateway fc00::2 -A logaccept-final-121 -j ACCEPT -A logaccept-final-122 -j ACCEPT -A logaccept-final-123 -m limit --limit 1/second -j LOG -A logaccept-final-123 -j ACCEPT -A logaccept-final-124 -j TEE --gateway fc00::2 -A logaccept-final-124 -j ACCEPT -A logaccept-final-125 -j ACCEPT -A logaccept-final-126 -m limit --limit 1/second -j LOG -A logaccept-final-126 -j ACCEPT -A logaccept-final-127 -j TEE --gateway fc00::2 -A logaccept-final-127 -j ACCEPT -A logaccept-final-128 -j ACCEPT -A logaccept-final-129 -m limit --limit 1/second -j LOG -A logaccept-final-129 -j ACCEPT -A logaccept-final-13 -j TEE --gateway fc00::2 -A logaccept-final-13 -j ACCEPT -A logaccept-final-130 -j TEE --gateway fc00::2 -A logaccept-final-130 -j ACCEPT -A logaccept-final-131 -j ACCEPT -A logaccept-final-132 -m limit --limit 1/second -j LOG -A logaccept-final-132 -j ACCEPT -A logaccept-final-133 -j TEE --gateway fc00::2 -A logaccept-final-133 -j ACCEPT -A logaccept-final-134 -j ACCEPT -A logaccept-final-135 -m limit --limit 1/second -j LOG -A logaccept-final-135 -j ACCEPT -A logaccept-final-136 -j TEE --gateway fc00::2 -A logaccept-final-136 -j ACCEPT -A logaccept-final-137 -j ACCEPT -A logaccept-final-138 -m limit --limit 1/second -j LOG -A logaccept-final-138 -j ACCEPT -A logaccept-final-139 -j TEE --gateway fc00::2 -A logaccept-final-139 -j ACCEPT -A logaccept-final-14 -j ACCEPT -A logaccept-final-140 -j ACCEPT -A logaccept-final-141 -m limit --limit 1/second -j LOG -A logaccept-final-141 -j ACCEPT -A logaccept-final-142 -j TEE --gateway fc00::2 -A logaccept-final-142 -j ACCEPT -A logaccept-final-143 -j ACCEPT -A logaccept-final-144 -m limit --limit 1/second -j LOG -A logaccept-final-144 -j ACCEPT -A logaccept-final-145 -j TEE --gateway fc00::2 -A logaccept-final-145 -j ACCEPT -A logaccept-final-146 -j ACCEPT -A logaccept-final-147 -m limit --limit 1/second -j LOG -A logaccept-final-147 -j ACCEPT -A logaccept-final-148 -j TEE --gateway fc00::2 -A logaccept-final-148 -j ACCEPT -A logaccept-final-149 -j ACCEPT -A logaccept-final-15 -m limit --limit 1/second -j LOG -A logaccept-final-15 -j ACCEPT -A logaccept-final-150 -m limit --limit 1/second -j LOG -A logaccept-final-150 -j ACCEPT -A logaccept-final-151 -j TEE --gateway fc00::2 -A logaccept-final-151 -j ACCEPT -A logaccept-final-152 -j ACCEPT -A logaccept-final-153 -m limit --limit 1/second -j LOG -A logaccept-final-153 -j ACCEPT -A logaccept-final-154 -j TEE --gateway fc00::2 -A logaccept-final-154 -j ACCEPT -A logaccept-final-155 -j ACCEPT -A logaccept-final-156 -m limit --limit 1/second -j LOG -A logaccept-final-156 -j ACCEPT -A logaccept-final-157 -j TEE --gateway fc00::2 -A logaccept-final-157 -j ACCEPT -A logaccept-final-158 -j ACCEPT -A logaccept-final-159 -m limit --limit 1/second -j LOG -A logaccept-final-159 -j ACCEPT -A logaccept-final-16 -j TEE --gateway fc00::2 -A logaccept-final-16 -j ACCEPT -A logaccept-final-160 -j TEE --gateway fc00::2 -A logaccept-final-160 -j ACCEPT -A logaccept-final-161 -j ACCEPT -A logaccept-final-162 -m limit --limit 1/second -j LOG -A logaccept-final-162 -j ACCEPT -A logaccept-final-163 -j TEE --gateway fc00::2 -A logaccept-final-163 -j ACCEPT -A logaccept-final-164 -j ACCEPT -A logaccept-final-165 -m limit --limit 1/second -j LOG -A logaccept-final-165 -j ACCEPT -A logaccept-final-166 -j TEE --gateway fc00::2 -A logaccept-final-166 -j ACCEPT -A logaccept-final-167 -j ACCEPT -A logaccept-final-168 -m limit --limit 1/second -j LOG -A logaccept-final-168 -j ACCEPT -A logaccept-final-169 -j TEE --gateway fc00::2 -A logaccept-final-169 -j ACCEPT -A logaccept-final-17 -j ACCEPT -A logaccept-final-170 -j ACCEPT -A logaccept-final-171 -m limit --limit 1/second -j LOG -A logaccept-final-171 -j ACCEPT -A logaccept-final-172 -j TEE --gateway fc00::2 -A logaccept-final-172 -j ACCEPT -A logaccept-final-173 -j ACCEPT -A logaccept-final-174 -m limit --limit 1/second -j LOG -A logaccept-final-174 -j ACCEPT -A logaccept-final-175 -j TEE --gateway fc00::2 -A logaccept-final-175 -j ACCEPT -A logaccept-final-176 -j ACCEPT -A logaccept-final-177 -m limit --limit 1/second -j LOG -A logaccept-final-177 -j ACCEPT -A logaccept-final-178 -j TEE --gateway fc00::2 -A logaccept-final-178 -j ACCEPT -A logaccept-final-179 -j ACCEPT -A logaccept-final-18 -m limit --limit 1/second -j LOG -A logaccept-final-18 -j ACCEPT -A logaccept-final-180 -m limit --limit 1/second -j LOG -A logaccept-final-180 -j ACCEPT -A logaccept-final-181 -j TEE --gateway fc00::2 -A logaccept-final-181 -j ACCEPT -A logaccept-final-182 -j ACCEPT -A logaccept-final-183 -m limit --limit 1/second -j LOG -A logaccept-final-183 -j ACCEPT -A logaccept-final-184 -j TEE --gateway fc00::2 -A logaccept-final-184 -j ACCEPT -A logaccept-final-185 -j ACCEPT -A logaccept-final-186 -m limit --limit 1/second -j LOG -A logaccept-final-186 -j ACCEPT -A logaccept-final-187 -j TEE --gateway fc00::2 -A logaccept-final-187 -j ACCEPT -A logaccept-final-188 -j ACCEPT -A logaccept-final-189 -m limit --limit 1/second -j LOG -A logaccept-final-189 -j ACCEPT -A logaccept-final-19 -j TEE --gateway fc00::2 -A logaccept-final-19 -j ACCEPT -A logaccept-final-190 -j TEE --gateway fc00::2 -A logaccept-final-190 -j ACCEPT -A logaccept-final-191 -j ACCEPT -A logaccept-final-192 -m limit --limit 1/second -j LOG -A logaccept-final-192 -j ACCEPT -A logaccept-final-193 -j TEE --gateway fc00::2 -A logaccept-final-193 -j ACCEPT -A logaccept-final-194 -j ACCEPT -A logaccept-final-195 -m limit --limit 1/second -j LOG -A logaccept-final-195 -j ACCEPT -A logaccept-final-196 -j TEE --gateway fc00::2 -A logaccept-final-196 -j ACCEPT -A logaccept-final-197 -j ACCEPT -A logaccept-final-198 -m limit --limit 1/second -j LOG -A logaccept-final-198 -j ACCEPT -A logaccept-final-199 -j TEE --gateway fc00::2 -A logaccept-final-199 -j ACCEPT -A logaccept-final-2 -j ACCEPT -A logaccept-final-20 -j ACCEPT -A logaccept-final-200 -j ACCEPT -A logaccept-final-201 -m limit --limit 1/second -j LOG -A logaccept-final-201 -j ACCEPT -A logaccept-final-202 -j TEE --gateway fc00::2 -A logaccept-final-202 -j ACCEPT -A logaccept-final-203 -j ACCEPT -A logaccept-final-204 -m limit --limit 1/second -j LOG -A logaccept-final-204 -j ACCEPT -A logaccept-final-205 -j TEE --gateway fc00::2 -A logaccept-final-205 -j ACCEPT -A logaccept-final-206 -j ACCEPT -A logaccept-final-207 -m limit --limit 1/second -j LOG -A logaccept-final-207 -j ACCEPT -A logaccept-final-208 -j TEE --gateway fc00::2 -A logaccept-final-208 -j ACCEPT -A logaccept-final-209 -j ACCEPT -A logaccept-final-21 -m limit --limit 1/second -j LOG -A logaccept-final-21 -j ACCEPT -A logaccept-final-210 -m limit --limit 1/second -j LOG -A logaccept-final-210 -j ACCEPT -A logaccept-final-211 -j TEE --gateway fc00::2 -A logaccept-final-211 -j ACCEPT -A logaccept-final-212 -j ACCEPT -A logaccept-final-213 -m limit --limit 1/second -j LOG -A logaccept-final-213 -j ACCEPT -A logaccept-final-214 -j TEE --gateway fc00::2 -A logaccept-final-214 -j ACCEPT -A logaccept-final-215 -j ACCEPT -A logaccept-final-216 -m limit --limit 1/second -j LOG -A logaccept-final-216 -j ACCEPT -A logaccept-final-217 -j TEE --gateway fc00::2 -A logaccept-final-217 -j ACCEPT -A logaccept-final-218 -j ACCEPT -A logaccept-final-219 -m limit --limit 1/second -j LOG -A logaccept-final-219 -j ACCEPT -A logaccept-final-22 -j TEE --gateway fc00::2 -A logaccept-final-22 -j ACCEPT -A logaccept-final-220 -j TEE --gateway fc00::2 -A logaccept-final-220 -j ACCEPT -A logaccept-final-221 -j ACCEPT -A logaccept-final-222 -m limit --limit 1/second -j LOG -A logaccept-final-222 -j ACCEPT -A logaccept-final-223 -j TEE --gateway fc00::2 -A logaccept-final-223 -j ACCEPT -A logaccept-final-224 -j ACCEPT -A logaccept-final-225 -m limit --limit 1/second -j LOG -A logaccept-final-225 -j ACCEPT -A logaccept-final-226 -j TEE --gateway fc00::2 -A logaccept-final-226 -j ACCEPT -A logaccept-final-227 -j ACCEPT -A logaccept-final-228 -m limit --limit 1/second -j LOG -A logaccept-final-228 -j ACCEPT -A logaccept-final-229 -j TEE --gateway fc00::2 -A logaccept-final-229 -j ACCEPT -A logaccept-final-23 -j ACCEPT -A logaccept-final-230 -j ACCEPT -A logaccept-final-231 -m limit --limit 1/second -j LOG -A logaccept-final-231 -j ACCEPT -A logaccept-final-232 -j TEE --gateway fc00::2 -A logaccept-final-232 -j ACCEPT -A logaccept-final-233 -j ACCEPT -A logaccept-final-234 -m limit --limit 1/second -j LOG -A logaccept-final-234 -j ACCEPT -A logaccept-final-235 -j TEE --gateway fc00::2 -A logaccept-final-235 -j ACCEPT -A logaccept-final-236 -j ACCEPT -A logaccept-final-237 -m limit --limit 1/second -j LOG -A logaccept-final-237 -j ACCEPT -A logaccept-final-238 -j TEE --gateway fc00::2 -A logaccept-final-238 -j ACCEPT -A logaccept-final-239 -j ACCEPT -A logaccept-final-24 -m limit --limit 1/second -j LOG -A logaccept-final-24 -j ACCEPT -A logaccept-final-240 -m limit --limit 1/second -j LOG -A logaccept-final-240 -j ACCEPT -A logaccept-final-241 -j TEE --gateway fc00::2 -A logaccept-final-241 -j ACCEPT -A logaccept-final-242 -j ACCEPT -A logaccept-final-243 -m limit --limit 1/second -j LOG -A logaccept-final-243 -j ACCEPT -A logaccept-final-244 -j TEE --gateway fc00::2 -A logaccept-final-244 -j ACCEPT -A logaccept-final-245 -j ACCEPT -A logaccept-final-246 -m limit --limit 1/second -j LOG -A logaccept-final-246 -j ACCEPT -A logaccept-final-247 -j TEE --gateway fc00::2 -A logaccept-final-247 -j ACCEPT -A logaccept-final-248 -j ACCEPT -A logaccept-final-249 -m limit --limit 1/second -j LOG -A logaccept-final-249 -j ACCEPT -A logaccept-final-25 -j TEE --gateway fc00::2 -A logaccept-final-25 -j ACCEPT -A logaccept-final-250 -j TEE --gateway fc00::2 -A logaccept-final-250 -j ACCEPT -A logaccept-final-251 -j ACCEPT -A logaccept-final-252 -m limit --limit 1/second -j LOG -A logaccept-final-252 -j ACCEPT -A logaccept-final-253 -j TEE --gateway fc00::2 -A logaccept-final-253 -j ACCEPT -A logaccept-final-254 -j ACCEPT -A logaccept-final-255 -m limit --limit 1/second -j LOG -A logaccept-final-255 -j ACCEPT -A logaccept-final-256 -j TEE --gateway fc00::2 -A logaccept-final-256 -j ACCEPT -A logaccept-final-257 -j ACCEPT -A logaccept-final-258 -m limit --limit 1/second -j LOG -A logaccept-final-258 -j ACCEPT -A logaccept-final-259 -j TEE --gateway fc00::2 -A logaccept-final-259 -j ACCEPT -A logaccept-final-26 -j ACCEPT -A logaccept-final-260 -j ACCEPT -A logaccept-final-261 -m limit --limit 1/second -j LOG -A logaccept-final-261 -j ACCEPT -A logaccept-final-262 -j TEE --gateway fc00::2 -A logaccept-final-262 -j ACCEPT -A logaccept-final-263 -j ACCEPT -A logaccept-final-264 -m limit --limit 1/second -j LOG -A logaccept-final-264 -j ACCEPT -A logaccept-final-265 -j TEE --gateway fc00::2 -A logaccept-final-265 -j ACCEPT -A logaccept-final-266 -j ACCEPT -A logaccept-final-267 -m limit --limit 1/second -j LOG -A logaccept-final-267 -j ACCEPT -A logaccept-final-268 -j TEE --gateway fc00::2 -A logaccept-final-268 -j ACCEPT -A logaccept-final-269 -j ACCEPT -A logaccept-final-27 -m limit --limit 1/second -j LOG -A logaccept-final-27 -j ACCEPT -A logaccept-final-270 -m limit --limit 1/second -j LOG -A logaccept-final-270 -j ACCEPT -A logaccept-final-271 -j TEE --gateway fc00::2 -A logaccept-final-271 -j ACCEPT -A logaccept-final-272 -j ACCEPT -A logaccept-final-273 -m limit --limit 1/second -j LOG -A logaccept-final-273 -j ACCEPT -A logaccept-final-274 -j TEE --gateway fc00::2 -A logaccept-final-274 -j ACCEPT -A logaccept-final-275 -j ACCEPT -A logaccept-final-276 -m limit --limit 1/second -j LOG -A logaccept-final-276 -j ACCEPT -A logaccept-final-277 -j TEE --gateway fc00::2 -A logaccept-final-277 -j ACCEPT -A logaccept-final-278 -j ACCEPT -A logaccept-final-279 -m limit --limit 1/second -j LOG -A logaccept-final-279 -j ACCEPT -A logaccept-final-28 -j TEE --gateway fc00::2 -A logaccept-final-28 -j ACCEPT -A logaccept-final-280 -j TEE --gateway fc00::2 -A logaccept-final-280 -j ACCEPT -A logaccept-final-281 -j ACCEPT -A logaccept-final-282 -m limit --limit 1/second -j LOG -A logaccept-final-282 -j ACCEPT -A logaccept-final-283 -j TEE --gateway fc00::2 -A logaccept-final-283 -j ACCEPT -A logaccept-final-284 -j ACCEPT -A logaccept-final-285 -m limit --limit 1/second -j LOG -A logaccept-final-285 -j ACCEPT -A logaccept-final-286 -j TEE --gateway fc00::2 -A logaccept-final-286 -j ACCEPT -A logaccept-final-287 -j ACCEPT -A logaccept-final-288 -m limit --limit 1/second -j LOG -A logaccept-final-288 -j ACCEPT -A logaccept-final-289 -j TEE --gateway fc00::2 -A logaccept-final-289 -j ACCEPT -A logaccept-final-29 -j ACCEPT -A logaccept-final-290 -j ACCEPT -A logaccept-final-291 -m limit --limit 1/second -j LOG -A logaccept-final-291 -j ACCEPT -A logaccept-final-292 -j TEE --gateway fc00::2 -A logaccept-final-292 -j ACCEPT -A logaccept-final-293 -j ACCEPT -A logaccept-final-294 -m limit --limit 1/second -j LOG -A logaccept-final-294 -j ACCEPT -A logaccept-final-295 -j TEE --gateway fc00::2 -A logaccept-final-295 -j ACCEPT -A logaccept-final-296 -j ACCEPT -A logaccept-final-297 -m limit --limit 1/second -j LOG -A logaccept-final-297 -j ACCEPT -A logaccept-final-298 -j TEE --gateway fc00::2 -A logaccept-final-298 -j ACCEPT -A logaccept-final-299 -j ACCEPT -A logaccept-final-3 -m limit --limit 1/second -j LOG -A logaccept-final-3 -j ACCEPT -A logaccept-final-30 -m limit --limit 1/second -j LOG -A logaccept-final-30 -j ACCEPT -A logaccept-final-300 -m limit --limit 1/second -j LOG -A logaccept-final-300 -j ACCEPT -A logaccept-final-301 -j TEE --gateway fc00::2 -A logaccept-final-301 -j ACCEPT -A logaccept-final-302 -j ACCEPT -A logaccept-final-303 -m limit --limit 1/second -j LOG -A logaccept-final-303 -j ACCEPT -A logaccept-final-304 -j TEE --gateway fc00::2 -A logaccept-final-304 -j ACCEPT -A logaccept-final-305 -j ACCEPT -A logaccept-final-31 -j TEE --gateway fc00::2 -A logaccept-final-31 -j ACCEPT -A logaccept-final-32 -j ACCEPT -A logaccept-final-33 -m limit --limit 1/second -j LOG -A logaccept-final-33 -j ACCEPT -A logaccept-final-34 -j TEE --gateway fc00::2 -A logaccept-final-34 -j ACCEPT -A logaccept-final-35 -j ACCEPT -A logaccept-final-36 -m limit --limit 1/second -j LOG -A logaccept-final-36 -j ACCEPT -A logaccept-final-37 -j TEE --gateway fc00::2 -A logaccept-final-37 -j ACCEPT -A logaccept-final-38 -j ACCEPT -A logaccept-final-39 -m limit --limit 1/second -j LOG -A logaccept-final-39 -j ACCEPT -A logaccept-final-4 -j TEE --gateway fc00::2 -A logaccept-final-4 -j ACCEPT -A logaccept-final-40 -j TEE --gateway fc00::2 -A logaccept-final-40 -j ACCEPT -A logaccept-final-41 -j ACCEPT -A logaccept-final-42 -m limit --limit 1/second -j LOG -A logaccept-final-42 -j ACCEPT -A logaccept-final-43 -j TEE --gateway fc00::2 -A logaccept-final-43 -j ACCEPT -A logaccept-final-44 -j ACCEPT -A logaccept-final-45 -m limit --limit 1/second -j LOG -A logaccept-final-45 -j ACCEPT -A logaccept-final-46 -j TEE --gateway fc00::2 -A logaccept-final-46 -j ACCEPT -A logaccept-final-47 -j ACCEPT -A logaccept-final-48 -m limit --limit 1/second -j LOG -A logaccept-final-48 -j ACCEPT -A logaccept-final-49 -j TEE --gateway fc00::2 -A logaccept-final-49 -j ACCEPT -A logaccept-final-5 -j ACCEPT -A logaccept-final-50 -j ACCEPT -A logaccept-final-51 -m limit --limit 1/second -j LOG -A logaccept-final-51 -j ACCEPT -A logaccept-final-52 -j TEE --gateway fc00::2 -A logaccept-final-52 -j ACCEPT -A logaccept-final-53 -j ACCEPT -A logaccept-final-54 -m limit --limit 1/second -j LOG -A logaccept-final-54 -j ACCEPT -A logaccept-final-55 -j TEE --gateway fc00::2 -A logaccept-final-55 -j ACCEPT -A logaccept-final-56 -j ACCEPT -A logaccept-final-57 -m limit --limit 1/second -j LOG -A logaccept-final-57 -j ACCEPT -A logaccept-final-58 -j TEE --gateway fc00::2 -A logaccept-final-58 -j ACCEPT -A logaccept-final-59 -j ACCEPT -A logaccept-final-6 -m limit --limit 1/second -j LOG -A logaccept-final-6 -j ACCEPT -A logaccept-final-60 -m limit --limit 1/second -j LOG -A logaccept-final-60 -j ACCEPT -A logaccept-final-61 -j TEE --gateway fc00::2 -A logaccept-final-61 -j ACCEPT -A logaccept-final-62 -j ACCEPT -A logaccept-final-63 -m limit --limit 1/second -j LOG -A logaccept-final-63 -j ACCEPT -A logaccept-final-64 -j TEE --gateway fc00::2 -A logaccept-final-64 -j ACCEPT -A logaccept-final-65 -j ACCEPT -A logaccept-final-66 -m limit --limit 1/second -j LOG -A logaccept-final-66 -j ACCEPT -A logaccept-final-67 -j TEE --gateway fc00::2 -A logaccept-final-67 -j ACCEPT -A logaccept-final-68 -j ACCEPT -A logaccept-final-69 -m limit --limit 1/second -j LOG -A logaccept-final-69 -j ACCEPT -A logaccept-final-7 -j TEE --gateway fc00::2 -A logaccept-final-7 -j ACCEPT -A logaccept-final-70 -j TEE --gateway fc00::2 -A logaccept-final-70 -j ACCEPT -A logaccept-final-71 -j ACCEPT -A logaccept-final-72 -m limit --limit 1/second -j LOG -A logaccept-final-72 -j ACCEPT -A logaccept-final-73 -j TEE --gateway fc00::2 -A logaccept-final-73 -j ACCEPT -A logaccept-final-74 -j ACCEPT -A logaccept-final-75 -m limit --limit 1/second -j LOG -A logaccept-final-75 -j ACCEPT -A logaccept-final-76 -j TEE --gateway fc00::2 -A logaccept-final-76 -j ACCEPT -A logaccept-final-77 -j ACCEPT -A logaccept-final-78 -m limit --limit 1/second -j LOG -A logaccept-final-78 -j ACCEPT -A logaccept-final-79 -j TEE --gateway fc00::2 -A logaccept-final-79 -j ACCEPT -A logaccept-final-8 -j ACCEPT -A logaccept-final-80 -j ACCEPT -A logaccept-final-81 -m limit --limit 1/second -j LOG -A logaccept-final-81 -j ACCEPT -A logaccept-final-82 -j TEE --gateway fc00::2 -A logaccept-final-82 -j ACCEPT -A logaccept-final-83 -j ACCEPT -A logaccept-final-84 -m limit --limit 1/second -j LOG -A logaccept-final-84 -j ACCEPT -A logaccept-final-85 -j TEE --gateway fc00::2 -A logaccept-final-85 -j ACCEPT -A logaccept-final-86 -j ACCEPT -A logaccept-final-87 -m limit --limit 1/second -j LOG -A logaccept-final-87 -j ACCEPT -A logaccept-final-88 -j TEE --gateway fc00::2 -A logaccept-final-88 -j ACCEPT -A logaccept-final-89 -j ACCEPT -A logaccept-final-9 -m limit --limit 1/second -j LOG -A logaccept-final-9 -j ACCEPT -A logaccept-final-90 -m limit --limit 1/second -j LOG -A logaccept-final-90 -j ACCEPT -A logaccept-final-91 -j TEE --gateway fc00::2 -A logaccept-final-91 -j ACCEPT -A logaccept-final-92 -j ACCEPT -A logaccept-final-93 -m limit --limit 1/second -j LOG -A logaccept-final-93 -j ACCEPT -A logaccept-final-94 -j TEE --gateway fc00::2 -A logaccept-final-94 -j ACCEPT -A logaccept-final-95 -j ACCEPT -A logaccept-final-96 -m limit --limit 1/second -j LOG -A logaccept-final-96 -j ACCEPT -A logaccept-final-97 -j TEE --gateway fc00::2 -A logaccept-final-97 -j ACCEPT -A logaccept-final-98 -j ACCEPT -A logaccept-final-99 -m limit --limit 1/second -j LOG -A logaccept-final-99 -j ACCEPT -A logaccept-ntp-0 -m limit --limit 1/second -j LOG -A logaccept-ntp-0 -j ACCEPT -A logaccept-ntp-1 -j TEE --gateway fc00::2 -A logaccept-ntp-1 -j ACCEPT -A logaccept-ntp-10 -j TEE --gateway fc00::2 -A logaccept-ntp-10 -j ACCEPT -A logaccept-ntp-11 -j ACCEPT -A logaccept-ntp-12 -m limit --limit 1/second -j LOG -A logaccept-ntp-12 -j ACCEPT -A logaccept-ntp-13 -j TEE --gateway fc00::2 -A logaccept-ntp-13 -j ACCEPT -A logaccept-ntp-14 -j ACCEPT -A logaccept-ntp-15 -m limit --limit 1/second -j LOG -A logaccept-ntp-15 -j ACCEPT -A logaccept-ntp-16 -j TEE --gateway fc00::2 -A logaccept-ntp-16 -j ACCEPT -A logaccept-ntp-17 -j ACCEPT -A logaccept-ntp-18 -m limit --limit 1/second -j LOG -A logaccept-ntp-18 -j ACCEPT -A logaccept-ntp-19 -j TEE --gateway fc00::2 -A logaccept-ntp-19 -j ACCEPT -A logaccept-ntp-2 -j ACCEPT -A logaccept-ntp-20 -j ACCEPT -A logaccept-ntp-21 -m limit --limit 1/second -j LOG -A logaccept-ntp-21 -j ACCEPT -A logaccept-ntp-22 -j TEE --gateway fc00::2 -A logaccept-ntp-22 -j ACCEPT -A logaccept-ntp-23 -j ACCEPT -A logaccept-ntp-24 -m limit --limit 1/second -j LOG -A logaccept-ntp-24 -j ACCEPT -A logaccept-ntp-25 -j TEE --gateway fc00::2 -A logaccept-ntp-25 -j ACCEPT -A logaccept-ntp-26 -j ACCEPT -A logaccept-ntp-27 -m limit --limit 1/second -j LOG -A logaccept-ntp-27 -j ACCEPT -A logaccept-ntp-28 -j TEE --gateway fc00::2 -A logaccept-ntp-28 -j ACCEPT -A logaccept-ntp-29 -j ACCEPT -A logaccept-ntp-3 -m limit --limit 1/second -j LOG -A logaccept-ntp-3 -j ACCEPT -A logaccept-ntp-30 -m limit --limit 1/second -j LOG -A logaccept-ntp-30 -j ACCEPT -A logaccept-ntp-31 -j TEE --gateway fc00::2 -A logaccept-ntp-31 -j ACCEPT -A logaccept-ntp-32 -j ACCEPT -A logaccept-ntp-4 -j TEE --gateway fc00::2 -A logaccept-ntp-4 -j ACCEPT -A logaccept-ntp-5 -j ACCEPT -A logaccept-ntp-6 -m limit --limit 1/second -j LOG -A logaccept-ntp-6 -j ACCEPT -A logaccept-ntp-7 -j TEE --gateway fc00::2 -A logaccept-ntp-7 -j ACCEPT -A logaccept-ntp-8 -j ACCEPT -A logaccept-ntp-9 -m limit --limit 1/second -j LOG -A logaccept-ntp-9 -j ACCEPT -A logdrop-0 -m limit --limit 1/second -j LOG -A logdrop-0 -j DROP -A logdrop-1 -m limit --limit 1/second -j LOG -A logdrop-1 -j DROP -A logdrop-10 -m limit --limit 1/second -j LOG -A logdrop-10 -j DROP -A logdrop-100 -j TEE --gateway fc00::2 -A logdrop-100 -j DROP -A logdrop-1000 -j TEE --gateway fc00::2 -A logdrop-1000 -j DROP -A logdrop-1001 -j TEE --gateway fc00::2 -A logdrop-1001 -j DROP -A logdrop-1002 -j TEE --gateway fc00::2 -A logdrop-1002 -j DROP -A logdrop-1003 -j TEE --gateway fc00::2 -A logdrop-1003 -j DROP -A logdrop-1004 -j TEE --gateway fc00::2 -A logdrop-1004 -j DROP -A logdrop-1005 -j TEE --gateway fc00::2 -A logdrop-1005 -j DROP -A logdrop-1006 -j TEE --gateway fc00::2 -A logdrop-1006 -j DROP -A logdrop-1007 -j TEE --gateway fc00::2 -A logdrop-1007 -j DROP -A logdrop-1008 -j TEE --gateway fc00::2 -A logdrop-1008 -j DROP -A logdrop-1009 -j TEE --gateway fc00::2 -A logdrop-1009 -j DROP -A logdrop-101 -j TEE --gateway fc00::2 -A logdrop-101 -j DROP -A logdrop-1010 -j DROP -A logdrop-1011 -j DROP -A logdrop-1012 -j DROP -A logdrop-1013 -j DROP -A logdrop-1014 -j DROP -A logdrop-1015 -j DROP -A logdrop-1016 -j DROP -A logdrop-1017 -j DROP -A logdrop-1018 -j DROP -A logdrop-1019 -j DROP -A logdrop-102 -j TEE --gateway fc00::2 -A logdrop-102 -j DROP -A logdrop-1020 -j DROP -A logdrop-1021 -j DROP -A logdrop-1022 -j DROP -A logdrop-1023 -j DROP -A logdrop-1024 -j DROP -A logdrop-1025 -j DROP -A logdrop-1026 -j DROP -A logdrop-1027 -j DROP -A logdrop-1028 -j DROP -A logdrop-1029 -j DROP -A logdrop-103 -j TEE --gateway fc00::2 -A logdrop-103 -j DROP -A logdrop-1030 -j DROP -A logdrop-1031 -j DROP -A logdrop-1032 -j DROP -A logdrop-1033 -j DROP -A logdrop-1034 -j DROP -A logdrop-1035 -j DROP -A logdrop-1036 -j DROP -A logdrop-1037 -j DROP -A logdrop-1038 -j DROP -A logdrop-1039 -j DROP -A logdrop-104 -j TEE --gateway fc00::2 -A logdrop-104 -j DROP -A logdrop-1040 -j DROP -A logdrop-1041 -j DROP -A logdrop-1042 -j DROP -A logdrop-1043 -j DROP -A logdrop-1044 -j DROP -A logdrop-1045 -j DROP -A logdrop-1046 -j DROP -A logdrop-1047 -j DROP -A logdrop-1048 -j DROP -A logdrop-1049 -j DROP -A logdrop-105 -j TEE --gateway fc00::2 -A logdrop-105 -j DROP -A logdrop-1050 -j DROP -A logdrop-1051 -j DROP -A logdrop-1052 -j DROP -A logdrop-1053 -j DROP -A logdrop-1054 -j DROP -A logdrop-1055 -j DROP -A logdrop-1056 -j DROP -A logdrop-1057 -j DROP -A logdrop-1058 -j DROP -A logdrop-1059 -j DROP -A logdrop-106 -j TEE --gateway fc00::2 -A logdrop-106 -j DROP -A logdrop-1060 -j DROP -A logdrop-1061 -j DROP -A logdrop-1062 -j DROP -A logdrop-1063 -j DROP -A logdrop-1064 -j DROP -A logdrop-1065 -j DROP -A logdrop-1066 -j DROP -A logdrop-1067 -j DROP -A logdrop-1068 -j DROP -A logdrop-1069 -j DROP -A logdrop-107 -j TEE --gateway fc00::2 -A logdrop-107 -j DROP -A logdrop-1070 -j DROP -A logdrop-1071 -j DROP -A logdrop-1072 -j DROP -A logdrop-1073 -j DROP -A logdrop-1074 -j DROP -A logdrop-1075 -j DROP -A logdrop-1076 -j DROP -A logdrop-1077 -j DROP -A logdrop-1078 -j DROP -A logdrop-1079 -j DROP -A logdrop-108 -j TEE --gateway fc00::2 -A logdrop-108 -j DROP -A logdrop-1080 -j DROP -A logdrop-1081 -j DROP -A logdrop-1082 -j DROP -A logdrop-1083 -j DROP -A logdrop-1084 -j DROP -A logdrop-1085 -j DROP -A logdrop-1086 -j DROP -A logdrop-1087 -j DROP -A logdrop-1088 -j DROP -A logdrop-1089 -j DROP -A logdrop-109 -j TEE --gateway fc00::2 -A logdrop-109 -j DROP -A logdrop-1090 -j DROP -A logdrop-1091 -j DROP -A logdrop-1092 -j DROP -A logdrop-1093 -j DROP -A logdrop-1094 -j DROP -A logdrop-1095 -j DROP -A logdrop-1096 -j DROP -A logdrop-1097 -j DROP -A logdrop-1098 -j DROP -A logdrop-1099 -j DROP -A logdrop-11 -m limit --limit 1/second -j LOG -A logdrop-11 -j DROP -A logdrop-110 -j TEE --gateway fc00::2 -A logdrop-110 -j DROP -A logdrop-1100 -m limit --limit 1/second -j LOG -A logdrop-1100 -j DROP -A logdrop-1101 -m limit --limit 1/second -j LOG -A logdrop-1101 -j DROP -A logdrop-1102 -m limit --limit 1/second -j LOG -A logdrop-1102 -j DROP -A logdrop-1103 -m limit --limit 1/second -j LOG -A logdrop-1103 -j DROP -A logdrop-1104 -m limit --limit 1/second -j LOG -A logdrop-1104 -j DROP -A logdrop-1105 -m limit --limit 1/second -j LOG -A logdrop-1105 -j DROP -A logdrop-1106 -m limit --limit 1/second -j LOG -A logdrop-1106 -j DROP -A logdrop-1107 -m limit --limit 1/second -j LOG -A logdrop-1107 -j DROP -A logdrop-1108 -m limit --limit 1/second -j LOG -A logdrop-1108 -j DROP -A logdrop-1109 -m limit --limit 1/second -j LOG -A logdrop-1109 -j DROP -A logdrop-111 -j TEE --gateway fc00::2 -A logdrop-111 -j DROP -A logdrop-1110 -m limit --limit 1/second -j LOG -A logdrop-1110 -j DROP -A logdrop-1111 -m limit --limit 1/second -j LOG -A logdrop-1111 -j DROP -A logdrop-1112 -m limit --limit 1/second -j LOG -A logdrop-1112 -j DROP -A logdrop-1113 -m limit --limit 1/second -j LOG -A logdrop-1113 -j DROP -A logdrop-1114 -m limit --limit 1/second -j LOG -A logdrop-1114 -j DROP -A logdrop-1115 -m limit --limit 1/second -j LOG -A logdrop-1115 -j DROP -A logdrop-1116 -m limit --limit 1/second -j LOG -A logdrop-1116 -j DROP -A logdrop-1117 -m limit --limit 1/second -j LOG -A logdrop-1117 -j DROP -A logdrop-1118 -m limit --limit 1/second -j LOG -A logdrop-1118 -j DROP -A logdrop-1119 -m limit --limit 1/second -j LOG -A logdrop-1119 -j DROP -A logdrop-112 -j TEE --gateway fc00::2 -A logdrop-112 -j DROP -A logdrop-1120 -m limit --limit 1/second -j LOG -A logdrop-1120 -j DROP -A logdrop-1121 -m limit --limit 1/second -j LOG -A logdrop-1121 -j DROP -A logdrop-1122 -m limit --limit 1/second -j LOG -A logdrop-1122 -j DROP -A logdrop-1123 -m limit --limit 1/second -j LOG -A logdrop-1123 -j DROP -A logdrop-1124 -m limit --limit 1/second -j LOG -A logdrop-1124 -j DROP -A logdrop-1125 -m limit --limit 1/second -j LOG -A logdrop-1125 -j DROP -A logdrop-1126 -m limit --limit 1/second -j LOG -A logdrop-1126 -j DROP -A logdrop-1127 -m limit --limit 1/second -j LOG -A logdrop-1127 -j DROP -A logdrop-1128 -m limit --limit 1/second -j LOG -A logdrop-1128 -j DROP -A logdrop-1129 -m limit --limit 1/second -j LOG -A logdrop-1129 -j DROP -A logdrop-113 -j TEE --gateway fc00::2 -A logdrop-113 -j DROP -A logdrop-1130 -m limit --limit 1/second -j LOG -A logdrop-1130 -j DROP -A logdrop-1131 -m limit --limit 1/second -j LOG -A logdrop-1131 -j DROP -A logdrop-1132 -m limit --limit 1/second -j LOG -A logdrop-1132 -j DROP -A logdrop-1133 -m limit --limit 1/second -j LOG -A logdrop-1133 -j DROP -A logdrop-1134 -m limit --limit 1/second -j LOG -A logdrop-1134 -j DROP -A logdrop-1135 -m limit --limit 1/second -j LOG -A logdrop-1135 -j DROP -A logdrop-1136 -m limit --limit 1/second -j LOG -A logdrop-1136 -j DROP -A logdrop-1137 -m limit --limit 1/second -j LOG -A logdrop-1137 -j DROP -A logdrop-1138 -m limit --limit 1/second -j LOG -A logdrop-1138 -j DROP -A logdrop-1139 -m limit --limit 1/second -j LOG -A logdrop-1139 -j DROP -A logdrop-114 -j TEE --gateway fc00::2 -A logdrop-114 -j DROP -A logdrop-1140 -m limit --limit 1/second -j LOG -A logdrop-1140 -j DROP -A logdrop-1141 -m limit --limit 1/second -j LOG -A logdrop-1141 -j DROP -A logdrop-1142 -m limit --limit 1/second -j LOG -A logdrop-1142 -j DROP -A logdrop-1143 -m limit --limit 1/second -j LOG -A logdrop-1143 -j DROP -A logdrop-1144 -m limit --limit 1/second -j LOG -A logdrop-1144 -j DROP -A logdrop-1145 -m limit --limit 1/second -j LOG -A logdrop-1145 -j DROP -A logdrop-1146 -m limit --limit 1/second -j LOG -A logdrop-1146 -j DROP -A logdrop-1147 -m limit --limit 1/second -j LOG -A logdrop-1147 -j DROP -A logdrop-1148 -m limit --limit 1/second -j LOG -A logdrop-1148 -j DROP -A logdrop-1149 -m limit --limit 1/second -j LOG -A logdrop-1149 -j DROP -A logdrop-115 -j TEE --gateway fc00::2 -A logdrop-115 -j DROP -A logdrop-1150 -m limit --limit 1/second -j LOG -A logdrop-1150 -j DROP -A logdrop-1151 -m limit --limit 1/second -j LOG -A logdrop-1151 -j DROP -A logdrop-1152 -m limit --limit 1/second -j LOG -A logdrop-1152 -j DROP -A logdrop-1153 -m limit --limit 1/second -j LOG -A logdrop-1153 -j DROP -A logdrop-1154 -m limit --limit 1/second -j LOG -A logdrop-1154 -j DROP -A logdrop-1155 -m limit --limit 1/second -j LOG -A logdrop-1155 -j DROP -A logdrop-1156 -m limit --limit 1/second -j LOG -A logdrop-1156 -j DROP -A logdrop-1157 -m limit --limit 1/second -j LOG -A logdrop-1157 -j DROP -A logdrop-1158 -m limit --limit 1/second -j LOG -A logdrop-1158 -j DROP -A logdrop-1159 -m limit --limit 1/second -j LOG -A logdrop-1159 -j DROP -A logdrop-116 -j TEE --gateway fc00::2 -A logdrop-116 -j DROP -A logdrop-1160 -m limit --limit 1/second -j LOG -A logdrop-1160 -j DROP -A logdrop-1161 -m limit --limit 1/second -j LOG -A logdrop-1161 -j DROP -A logdrop-1162 -m limit --limit 1/second -j LOG -A logdrop-1162 -j DROP -A logdrop-1163 -m limit --limit 1/second -j LOG -A logdrop-1163 -j DROP -A logdrop-1164 -m limit --limit 1/second -j LOG -A logdrop-1164 -j DROP -A logdrop-1165 -m limit --limit 1/second -j LOG -A logdrop-1165 -j DROP -A logdrop-1166 -m limit --limit 1/second -j LOG -A logdrop-1166 -j DROP -A logdrop-1167 -m limit --limit 1/second -j LOG -A logdrop-1167 -j DROP -A logdrop-1168 -m limit --limit 1/second -j LOG -A logdrop-1168 -j DROP -A logdrop-1169 -m limit --limit 1/second -j LOG -A logdrop-1169 -j DROP -A logdrop-117 -j TEE --gateway fc00::2 -A logdrop-117 -j DROP -A logdrop-1170 -m limit --limit 1/second -j LOG -A logdrop-1170 -j DROP -A logdrop-1171 -m limit --limit 1/second -j LOG -A logdrop-1171 -j DROP -A logdrop-1172 -m limit --limit 1/second -j LOG -A logdrop-1172 -j DROP -A logdrop-1173 -m limit --limit 1/second -j LOG -A logdrop-1173 -j DROP -A logdrop-1174 -m limit --limit 1/second -j LOG -A logdrop-1174 -j DROP -A logdrop-1175 -m limit --limit 1/second -j LOG -A logdrop-1175 -j DROP -A logdrop-1176 -m limit --limit 1/second -j LOG -A logdrop-1176 -j DROP -A logdrop-1177 -m limit --limit 1/second -j LOG -A logdrop-1177 -j DROP -A logdrop-1178 -m limit --limit 1/second -j LOG -A logdrop-1178 -j DROP -A logdrop-1179 -m limit --limit 1/second -j LOG -A logdrop-1179 -j DROP -A logdrop-118 -j TEE --gateway fc00::2 -A logdrop-118 -j DROP -A logdrop-1180 -m limit --limit 1/second -j LOG -A logdrop-1180 -j DROP -A logdrop-1181 -m limit --limit 1/second -j LOG -A logdrop-1181 -j DROP -A logdrop-1182 -m limit --limit 1/second -j LOG -A logdrop-1182 -j DROP -A logdrop-1183 -m limit --limit 1/second -j LOG -A logdrop-1183 -j DROP -A logdrop-1184 -m limit --limit 1/second -j LOG -A logdrop-1184 -j DROP -A logdrop-1185 -m limit --limit 1/second -j LOG -A logdrop-1185 -j DROP -A logdrop-1186 -m limit --limit 1/second -j LOG -A logdrop-1186 -j DROP -A logdrop-1187 -m limit --limit 1/second -j LOG -A logdrop-1187 -j DROP -A logdrop-1188 -m limit --limit 1/second -j LOG -A logdrop-1188 -j DROP -A logdrop-1189 -m limit --limit 1/second -j LOG -A logdrop-1189 -j DROP -A logdrop-119 -j TEE --gateway fc00::2 -A logdrop-119 -j DROP -A logdrop-1190 -m limit --limit 1/second -j LOG -A logdrop-1190 -j DROP -A logdrop-1191 -m limit --limit 1/second -j LOG -A logdrop-1191 -j DROP -A logdrop-1192 -m limit --limit 1/second -j LOG -A logdrop-1192 -j DROP -A logdrop-1193 -m limit --limit 1/second -j LOG -A logdrop-1193 -j DROP -A logdrop-1194 -m limit --limit 1/second -j LOG -A logdrop-1194 -j DROP -A logdrop-1195 -m limit --limit 1/second -j LOG -A logdrop-1195 -j DROP -A logdrop-1196 -m limit --limit 1/second -j LOG -A logdrop-1196 -j DROP -A logdrop-1197 -m limit --limit 1/second -j LOG -A logdrop-1197 -j DROP -A logdrop-1198 -m limit --limit 1/second -j LOG -A logdrop-1198 -j DROP -A logdrop-1199 -m limit --limit 1/second -j LOG -A logdrop-1199 -j DROP -A logdrop-12 -m limit --limit 1/second -j LOG -A logdrop-12 -j DROP -A logdrop-120 -j TEE --gateway fc00::2 -A logdrop-120 -j DROP -A logdrop-1200 -j TEE --gateway fc00::2 -A logdrop-1200 -j DROP -A logdrop-1201 -j TEE --gateway fc00::2 -A logdrop-1201 -j DROP -A logdrop-1202 -j TEE --gateway fc00::2 -A logdrop-1202 -j DROP -A logdrop-1203 -j TEE --gateway fc00::2 -A logdrop-1203 -j DROP -A logdrop-1204 -j TEE --gateway fc00::2 -A logdrop-1204 -j DROP -A logdrop-1205 -j TEE --gateway fc00::2 -A logdrop-1205 -j DROP -A logdrop-1206 -j TEE --gateway fc00::2 -A logdrop-1206 -j DROP -A logdrop-1207 -j TEE --gateway fc00::2 -A logdrop-1207 -j DROP -A logdrop-1208 -j TEE --gateway fc00::2 -A logdrop-1208 -j DROP -A logdrop-1209 -j TEE --gateway fc00::2 -A logdrop-1209 -j DROP -A logdrop-121 -j TEE --gateway fc00::2 -A logdrop-121 -j DROP -A logdrop-1210 -j TEE --gateway fc00::2 -A logdrop-1210 -j DROP -A logdrop-1211 -j TEE --gateway fc00::2 -A logdrop-1211 -j DROP -A logdrop-1212 -j TEE --gateway fc00::2 -A logdrop-1212 -j DROP -A logdrop-1213 -j TEE --gateway fc00::2 -A logdrop-1213 -j DROP -A logdrop-1214 -j TEE --gateway fc00::2 -A logdrop-1214 -j DROP -A logdrop-1215 -j TEE --gateway fc00::2 -A logdrop-1215 -j DROP -A logdrop-1216 -j TEE --gateway fc00::2 -A logdrop-1216 -j DROP -A logdrop-1217 -j TEE --gateway fc00::2 -A logdrop-1217 -j DROP -A logdrop-1218 -j TEE --gateway fc00::2 -A logdrop-1218 -j DROP -A logdrop-1219 -j TEE --gateway fc00::2 -A logdrop-1219 -j DROP -A logdrop-122 -j TEE --gateway fc00::2 -A logdrop-122 -j DROP -A logdrop-1220 -j TEE --gateway fc00::2 -A logdrop-1220 -j DROP -A logdrop-1221 -j TEE --gateway fc00::2 -A logdrop-1221 -j DROP -A logdrop-1222 -j TEE --gateway fc00::2 -A logdrop-1222 -j DROP -A logdrop-1223 -j TEE --gateway fc00::2 -A logdrop-1223 -j DROP -A logdrop-1224 -j TEE --gateway fc00::2 -A logdrop-1224 -j DROP -A logdrop-1225 -j TEE --gateway fc00::2 -A logdrop-1225 -j DROP -A logdrop-1226 -j TEE --gateway fc00::2 -A logdrop-1226 -j DROP -A logdrop-1227 -j TEE --gateway fc00::2 -A logdrop-1227 -j DROP -A logdrop-1228 -j TEE --gateway fc00::2 -A logdrop-1228 -j DROP -A logdrop-1229 -j TEE --gateway fc00::2 -A logdrop-1229 -j DROP -A logdrop-123 -j TEE --gateway fc00::2 -A logdrop-123 -j DROP -A logdrop-1230 -j TEE --gateway fc00::2 -A logdrop-1230 -j DROP -A logdrop-1231 -j TEE --gateway fc00::2 -A logdrop-1231 -j DROP -A logdrop-1232 -j TEE --gateway fc00::2 -A logdrop-1232 -j DROP -A logdrop-1233 -j TEE --gateway fc00::2 -A logdrop-1233 -j DROP -A logdrop-1234 -j TEE --gateway fc00::2 -A logdrop-1234 -j DROP -A logdrop-1235 -j TEE --gateway fc00::2 -A logdrop-1235 -j DROP -A logdrop-1236 -j TEE --gateway fc00::2 -A logdrop-1236 -j DROP -A logdrop-1237 -j TEE --gateway fc00::2 -A logdrop-1237 -j DROP -A logdrop-1238 -j TEE --gateway fc00::2 -A logdrop-1238 -j DROP -A logdrop-1239 -j TEE --gateway fc00::2 -A logdrop-1239 -j DROP -A logdrop-124 -j TEE --gateway fc00::2 -A logdrop-124 -j DROP -A logdrop-1240 -j TEE --gateway fc00::2 -A logdrop-1240 -j DROP -A logdrop-1241 -j TEE --gateway fc00::2 -A logdrop-1241 -j DROP -A logdrop-1242 -j TEE --gateway fc00::2 -A logdrop-1242 -j DROP -A logdrop-1243 -j TEE --gateway fc00::2 -A logdrop-1243 -j DROP -A logdrop-1244 -j TEE --gateway fc00::2 -A logdrop-1244 -j DROP -A logdrop-1245 -j TEE --gateway fc00::2 -A logdrop-1245 -j DROP -A logdrop-1246 -j TEE --gateway fc00::2 -A logdrop-1246 -j DROP -A logdrop-1247 -j TEE --gateway fc00::2 -A logdrop-1247 -j DROP -A logdrop-1248 -j TEE --gateway fc00::2 -A logdrop-1248 -j DROP -A logdrop-1249 -j TEE --gateway fc00::2 -A logdrop-1249 -j DROP -A logdrop-125 -j TEE --gateway fc00::2 -A logdrop-125 -j DROP -A logdrop-1250 -j TEE --gateway fc00::2 -A logdrop-1250 -j DROP -A logdrop-1251 -j TEE --gateway fc00::2 -A logdrop-1251 -j DROP -A logdrop-1252 -j TEE --gateway fc00::2 -A logdrop-1252 -j DROP -A logdrop-1253 -j TEE --gateway fc00::2 -A logdrop-1253 -j DROP -A logdrop-1254 -j TEE --gateway fc00::2 -A logdrop-1254 -j DROP -A logdrop-1255 -j TEE --gateway fc00::2 -A logdrop-1255 -j DROP -A logdrop-1256 -j TEE --gateway fc00::2 -A logdrop-1256 -j DROP -A logdrop-1257 -j TEE --gateway fc00::2 -A logdrop-1257 -j DROP -A logdrop-1258 -j TEE --gateway fc00::2 -A logdrop-1258 -j DROP -A logdrop-1259 -j TEE --gateway fc00::2 -A logdrop-1259 -j DROP -A logdrop-126 -j TEE --gateway fc00::2 -A logdrop-126 -j DROP -A logdrop-1260 -j TEE --gateway fc00::2 -A logdrop-1260 -j DROP -A logdrop-1261 -j TEE --gateway fc00::2 -A logdrop-1261 -j DROP -A logdrop-1262 -j TEE --gateway fc00::2 -A logdrop-1262 -j DROP -A logdrop-1263 -j TEE --gateway fc00::2 -A logdrop-1263 -j DROP -A logdrop-1264 -j TEE --gateway fc00::2 -A logdrop-1264 -j DROP -A logdrop-1265 -j TEE --gateway fc00::2 -A logdrop-1265 -j DROP -A logdrop-1266 -j TEE --gateway fc00::2 -A logdrop-1266 -j DROP -A logdrop-1267 -j TEE --gateway fc00::2 -A logdrop-1267 -j DROP -A logdrop-1268 -j TEE --gateway fc00::2 -A logdrop-1268 -j DROP -A logdrop-1269 -j TEE --gateway fc00::2 -A logdrop-1269 -j DROP -A logdrop-127 -j TEE --gateway fc00::2 -A logdrop-127 -j DROP -A logdrop-1270 -j TEE --gateway fc00::2 -A logdrop-1270 -j DROP -A logdrop-1271 -j TEE --gateway fc00::2 -A logdrop-1271 -j DROP -A logdrop-1272 -j TEE --gateway fc00::2 -A logdrop-1272 -j DROP -A logdrop-1273 -j TEE --gateway fc00::2 -A logdrop-1273 -j DROP -A logdrop-1274 -j TEE --gateway fc00::2 -A logdrop-1274 -j DROP -A logdrop-1275 -j TEE --gateway fc00::2 -A logdrop-1275 -j DROP -A logdrop-1276 -j TEE --gateway fc00::2 -A logdrop-1276 -j DROP -A logdrop-1277 -j TEE --gateway fc00::2 -A logdrop-1277 -j DROP -A logdrop-1278 -j TEE --gateway fc00::2 -A logdrop-1278 -j DROP -A logdrop-1279 -j TEE --gateway fc00::2 -A logdrop-1279 -j DROP -A logdrop-128 -j TEE --gateway fc00::2 -A logdrop-128 -j DROP -A logdrop-1280 -j TEE --gateway fc00::2 -A logdrop-1280 -j DROP -A logdrop-1281 -j TEE --gateway fc00::2 -A logdrop-1281 -j DROP -A logdrop-1282 -j TEE --gateway fc00::2 -A logdrop-1282 -j DROP -A logdrop-1283 -j TEE --gateway fc00::2 -A logdrop-1283 -j DROP -A logdrop-1284 -j TEE --gateway fc00::2 -A logdrop-1284 -j DROP -A logdrop-1285 -j TEE --gateway fc00::2 -A logdrop-1285 -j DROP -A logdrop-1286 -j TEE --gateway fc00::2 -A logdrop-1286 -j DROP -A logdrop-1287 -j TEE --gateway fc00::2 -A logdrop-1287 -j DROP -A logdrop-1288 -j TEE --gateway fc00::2 -A logdrop-1288 -j DROP -A logdrop-1289 -j TEE --gateway fc00::2 -A logdrop-1289 -j DROP -A logdrop-129 -j TEE --gateway fc00::2 -A logdrop-129 -j DROP -A logdrop-1290 -j DROP -A logdrop-1291 -j DROP -A logdrop-1292 -j DROP -A logdrop-1293 -j DROP -A logdrop-1294 -j DROP -A logdrop-1295 -j DROP -A logdrop-1296 -j DROP -A logdrop-1297 -j DROP -A logdrop-1298 -j DROP -A logdrop-1299 -j DROP -A logdrop-13 -m limit --limit 1/second -j LOG -A logdrop-13 -j DROP -A logdrop-130 -j TEE --gateway fc00::2 -A logdrop-130 -j DROP -A logdrop-1300 -j DROP -A logdrop-1301 -j DROP -A logdrop-1302 -j DROP -A logdrop-1303 -j DROP -A logdrop-1304 -j DROP -A logdrop-1305 -j DROP -A logdrop-1306 -j DROP -A logdrop-1307 -j DROP -A logdrop-1308 -j DROP -A logdrop-1309 -j DROP -A logdrop-131 -j TEE --gateway fc00::2 -A logdrop-131 -j DROP -A logdrop-1310 -j DROP -A logdrop-1311 -j DROP -A logdrop-1312 -j DROP -A logdrop-1313 -j DROP -A logdrop-1314 -j DROP -A logdrop-1315 -j DROP -A logdrop-1316 -j DROP -A logdrop-1317 -j DROP -A logdrop-1318 -j DROP -A logdrop-1319 -j DROP -A logdrop-132 -j TEE --gateway fc00::2 -A logdrop-132 -j DROP -A logdrop-1320 -j DROP -A logdrop-1321 -j DROP -A logdrop-1322 -j DROP -A logdrop-1323 -j DROP -A logdrop-1324 -j DROP -A logdrop-1325 -j DROP -A logdrop-1326 -j DROP -A logdrop-1327 -j DROP -A logdrop-1328 -j DROP -A logdrop-1329 -j DROP -A logdrop-133 -j TEE --gateway fc00::2 -A logdrop-133 -j DROP -A logdrop-1330 -j DROP -A logdrop-1331 -j DROP -A logdrop-1332 -j DROP -A logdrop-1333 -j DROP -A logdrop-1334 -j DROP -A logdrop-1335 -j DROP -A logdrop-1336 -j DROP -A logdrop-1337 -j DROP -A logdrop-1338 -j DROP -A logdrop-1339 -j DROP -A logdrop-134 -j TEE --gateway fc00::2 -A logdrop-134 -j DROP -A logdrop-1340 -j DROP -A logdrop-1341 -j DROP -A logdrop-1342 -j DROP -A logdrop-1343 -j DROP -A logdrop-1344 -j DROP -A logdrop-1345 -j DROP -A logdrop-1346 -j DROP -A logdrop-1347 -j DROP -A logdrop-1348 -j DROP -A logdrop-1349 -j DROP -A logdrop-135 -j TEE --gateway fc00::2 -A logdrop-135 -j DROP -A logdrop-1350 -j DROP -A logdrop-1351 -j DROP -A logdrop-1352 -j DROP -A logdrop-1353 -j DROP -A logdrop-1354 -j DROP -A logdrop-1355 -j DROP -A logdrop-1356 -j DROP -A logdrop-1357 -j DROP -A logdrop-1358 -j DROP -A logdrop-1359 -j DROP -A logdrop-136 -j TEE --gateway fc00::2 -A logdrop-136 -j DROP -A logdrop-1360 -j DROP -A logdrop-1361 -j DROP -A logdrop-1362 -j DROP -A logdrop-1363 -j DROP -A logdrop-1364 -j DROP -A logdrop-1365 -j DROP -A logdrop-1366 -j DROP -A logdrop-1367 -j DROP -A logdrop-1368 -j DROP -A logdrop-1369 -j DROP -A logdrop-137 -j TEE --gateway fc00::2 -A logdrop-137 -j DROP -A logdrop-1370 -j DROP -A logdrop-1371 -j DROP -A logdrop-1372 -j DROP -A logdrop-1373 -j DROP -A logdrop-1374 -j DROP -A logdrop-1375 -j DROP -A logdrop-1376 -j DROP -A logdrop-1377 -j DROP -A logdrop-1378 -j DROP -A logdrop-1379 -j DROP -A logdrop-138 -j TEE --gateway fc00::2 -A logdrop-138 -j DROP -A logdrop-1380 -m limit --limit 1/second -j LOG -A logdrop-1380 -j DROP -A logdrop-1381 -m limit --limit 1/second -j LOG -A logdrop-1381 -j DROP -A logdrop-1382 -m limit --limit 1/second -j LOG -A logdrop-1382 -j DROP -A logdrop-1383 -m limit --limit 1/second -j LOG -A logdrop-1383 -j DROP -A logdrop-1384 -m limit --limit 1/second -j LOG -A logdrop-1384 -j DROP -A logdrop-1385 -m limit --limit 1/second -j LOG -A logdrop-1385 -j DROP -A logdrop-1386 -m limit --limit 1/second -j LOG -A logdrop-1386 -j DROP -A logdrop-1387 -m limit --limit 1/second -j LOG -A logdrop-1387 -j DROP -A logdrop-1388 -m limit --limit 1/second -j LOG -A logdrop-1388 -j DROP -A logdrop-1389 -m limit --limit 1/second -j LOG -A logdrop-1389 -j DROP -A logdrop-139 -j TEE --gateway fc00::2 -A logdrop-139 -j DROP -A logdrop-1390 -m limit --limit 1/second -j LOG -A logdrop-1390 -j DROP -A logdrop-1391 -m limit --limit 1/second -j LOG -A logdrop-1391 -j DROP -A logdrop-1392 -m limit --limit 1/second -j LOG -A logdrop-1392 -j DROP -A logdrop-1393 -m limit --limit 1/second -j LOG -A logdrop-1393 -j DROP -A logdrop-1394 -m limit --limit 1/second -j LOG -A logdrop-1394 -j DROP -A logdrop-1395 -m limit --limit 1/second -j LOG -A logdrop-1395 -j DROP -A logdrop-1396 -m limit --limit 1/second -j LOG -A logdrop-1396 -j DROP -A logdrop-1397 -m limit --limit 1/second -j LOG -A logdrop-1397 -j DROP -A logdrop-1398 -m limit --limit 1/second -j LOG -A logdrop-1398 -j DROP -A logdrop-1399 -m limit --limit 1/second -j LOG -A logdrop-1399 -j DROP -A logdrop-14 -m limit --limit 1/second -j LOG -A logdrop-14 -j DROP -A logdrop-140 -j TEE --gateway fc00::2 -A logdrop-140 -j DROP -A logdrop-1400 -m limit --limit 1/second -j LOG -A logdrop-1400 -j DROP -A logdrop-1401 -m limit --limit 1/second -j LOG -A logdrop-1401 -j DROP -A logdrop-1402 -m limit --limit 1/second -j LOG -A logdrop-1402 -j DROP -A logdrop-1403 -m limit --limit 1/second -j LOG -A logdrop-1403 -j DROP -A logdrop-1404 -m limit --limit 1/second -j LOG -A logdrop-1404 -j DROP -A logdrop-1405 -m limit --limit 1/second -j LOG -A logdrop-1405 -j DROP -A logdrop-1406 -m limit --limit 1/second -j LOG -A logdrop-1406 -j DROP -A logdrop-1407 -m limit --limit 1/second -j LOG -A logdrop-1407 -j DROP -A logdrop-1408 -m limit --limit 1/second -j LOG -A logdrop-1408 -j DROP -A logdrop-1409 -m limit --limit 1/second -j LOG -A logdrop-1409 -j DROP -A logdrop-141 -j TEE --gateway fc00::2 -A logdrop-141 -j DROP -A logdrop-1410 -m limit --limit 1/second -j LOG -A logdrop-1410 -j DROP -A logdrop-1411 -m limit --limit 1/second -j LOG -A logdrop-1411 -j DROP -A logdrop-1412 -m limit --limit 1/second -j LOG -A logdrop-1412 -j DROP -A logdrop-1413 -m limit --limit 1/second -j LOG -A logdrop-1413 -j DROP -A logdrop-1414 -m limit --limit 1/second -j LOG -A logdrop-1414 -j DROP -A logdrop-1415 -m limit --limit 1/second -j LOG -A logdrop-1415 -j DROP -A logdrop-1416 -m limit --limit 1/second -j LOG -A logdrop-1416 -j DROP -A logdrop-1417 -m limit --limit 1/second -j LOG -A logdrop-1417 -j DROP -A logdrop-1418 -m limit --limit 1/second -j LOG -A logdrop-1418 -j DROP -A logdrop-1419 -m limit --limit 1/second -j LOG -A logdrop-1419 -j DROP -A logdrop-142 -j TEE --gateway fc00::2 -A logdrop-142 -j DROP -A logdrop-1420 -m limit --limit 1/second -j LOG -A logdrop-1420 -j DROP -A logdrop-1421 -m limit --limit 1/second -j LOG -A logdrop-1421 -j DROP -A logdrop-1422 -m limit --limit 1/second -j LOG -A logdrop-1422 -j DROP -A logdrop-1423 -m limit --limit 1/second -j LOG -A logdrop-1423 -j DROP -A logdrop-1424 -m limit --limit 1/second -j LOG -A logdrop-1424 -j DROP -A logdrop-1425 -m limit --limit 1/second -j LOG -A logdrop-1425 -j DROP -A logdrop-1426 -m limit --limit 1/second -j LOG -A logdrop-1426 -j DROP -A logdrop-1427 -m limit --limit 1/second -j LOG -A logdrop-1427 -j DROP -A logdrop-1428 -m limit --limit 1/second -j LOG -A logdrop-1428 -j DROP -A logdrop-1429 -m limit --limit 1/second -j LOG -A logdrop-1429 -j DROP -A logdrop-143 -j TEE --gateway fc00::2 -A logdrop-143 -j DROP -A logdrop-1430 -m limit --limit 1/second -j LOG -A logdrop-1430 -j DROP -A logdrop-1431 -m limit --limit 1/second -j LOG -A logdrop-1431 -j DROP -A logdrop-1432 -m limit --limit 1/second -j LOG -A logdrop-1432 -j DROP -A logdrop-1433 -m limit --limit 1/second -j LOG -A logdrop-1433 -j DROP -A logdrop-1434 -m limit --limit 1/second -j LOG -A logdrop-1434 -j DROP -A logdrop-1435 -m limit --limit 1/second -j LOG -A logdrop-1435 -j DROP -A logdrop-1436 -m limit --limit 1/second -j LOG -A logdrop-1436 -j DROP -A logdrop-1437 -m limit --limit 1/second -j LOG -A logdrop-1437 -j DROP -A logdrop-1438 -m limit --limit 1/second -j LOG -A logdrop-1438 -j DROP -A logdrop-1439 -m limit --limit 1/second -j LOG -A logdrop-1439 -j DROP -A logdrop-144 -j TEE --gateway fc00::2 -A logdrop-144 -j DROP -A logdrop-1440 -m limit --limit 1/second -j LOG -A logdrop-1440 -j DROP -A logdrop-1441 -m limit --limit 1/second -j LOG -A logdrop-1441 -j DROP -A logdrop-1442 -m limit --limit 1/second -j LOG -A logdrop-1442 -j DROP -A logdrop-1443 -m limit --limit 1/second -j LOG -A logdrop-1443 -j DROP -A logdrop-1444 -m limit --limit 1/second -j LOG -A logdrop-1444 -j DROP -A logdrop-1445 -m limit --limit 1/second -j LOG -A logdrop-1445 -j DROP -A logdrop-1446 -m limit --limit 1/second -j LOG -A logdrop-1446 -j DROP -A logdrop-1447 -m limit --limit 1/second -j LOG -A logdrop-1447 -j DROP -A logdrop-1448 -m limit --limit 1/second -j LOG -A logdrop-1448 -j DROP -A logdrop-1449 -m limit --limit 1/second -j LOG -A logdrop-1449 -j DROP -A logdrop-145 -j TEE --gateway fc00::2 -A logdrop-145 -j DROP -A logdrop-1450 -m limit --limit 1/second -j LOG -A logdrop-1450 -j DROP -A logdrop-1451 -m limit --limit 1/second -j LOG -A logdrop-1451 -j DROP -A logdrop-1452 -m limit --limit 1/second -j LOG -A logdrop-1452 -j DROP -A logdrop-1453 -m limit --limit 1/second -j LOG -A logdrop-1453 -j DROP -A logdrop-1454 -m limit --limit 1/second -j LOG -A logdrop-1454 -j DROP -A logdrop-1455 -m limit --limit 1/second -j LOG -A logdrop-1455 -j DROP -A logdrop-1456 -m limit --limit 1/second -j LOG -A logdrop-1456 -j DROP -A logdrop-1457 -m limit --limit 1/second -j LOG -A logdrop-1457 -j DROP -A logdrop-1458 -m limit --limit 1/second -j LOG -A logdrop-1458 -j DROP -A logdrop-1459 -m limit --limit 1/second -j LOG -A logdrop-1459 -j DROP -A logdrop-146 -j TEE --gateway fc00::2 -A logdrop-146 -j DROP -A logdrop-1460 -m limit --limit 1/second -j LOG -A logdrop-1460 -j DROP -A logdrop-1461 -m limit --limit 1/second -j LOG -A logdrop-1461 -j DROP -A logdrop-1462 -m limit --limit 1/second -j LOG -A logdrop-1462 -j DROP -A logdrop-1463 -m limit --limit 1/second -j LOG -A logdrop-1463 -j DROP -A logdrop-1464 -m limit --limit 1/second -j LOG -A logdrop-1464 -j DROP -A logdrop-1465 -m limit --limit 1/second -j LOG -A logdrop-1465 -j DROP -A logdrop-1466 -m limit --limit 1/second -j LOG -A logdrop-1466 -j DROP -A logdrop-1467 -m limit --limit 1/second -j LOG -A logdrop-1467 -j DROP -A logdrop-1468 -m limit --limit 1/second -j LOG -A logdrop-1468 -j DROP -A logdrop-1469 -m limit --limit 1/second -j LOG -A logdrop-1469 -j DROP -A logdrop-147 -j TEE --gateway fc00::2 -A logdrop-147 -j DROP -A logdrop-1470 -j TEE --gateway fc00::2 -A logdrop-1470 -j DROP -A logdrop-1471 -j TEE --gateway fc00::2 -A logdrop-1471 -j DROP -A logdrop-1472 -j TEE --gateway fc00::2 -A logdrop-1472 -j DROP -A logdrop-1473 -j TEE --gateway fc00::2 -A logdrop-1473 -j DROP -A logdrop-1474 -j TEE --gateway fc00::2 -A logdrop-1474 -j DROP -A logdrop-1475 -j TEE --gateway fc00::2 -A logdrop-1475 -j DROP -A logdrop-1476 -j TEE --gateway fc00::2 -A logdrop-1476 -j DROP -A logdrop-1477 -j TEE --gateway fc00::2 -A logdrop-1477 -j DROP -A logdrop-1478 -j TEE --gateway fc00::2 -A logdrop-1478 -j DROP -A logdrop-1479 -j TEE --gateway fc00::2 -A logdrop-1479 -j DROP -A logdrop-148 -j TEE --gateway fc00::2 -A logdrop-148 -j DROP -A logdrop-1480 -j TEE --gateway fc00::2 -A logdrop-1480 -j DROP -A logdrop-1481 -j TEE --gateway fc00::2 -A logdrop-1481 -j DROP -A logdrop-1482 -j TEE --gateway fc00::2 -A logdrop-1482 -j DROP -A logdrop-1483 -j TEE --gateway fc00::2 -A logdrop-1483 -j DROP -A logdrop-1484 -j TEE --gateway fc00::2 -A logdrop-1484 -j DROP -A logdrop-1485 -j TEE --gateway fc00::2 -A logdrop-1485 -j DROP -A logdrop-1486 -j TEE --gateway fc00::2 -A logdrop-1486 -j DROP -A logdrop-1487 -j TEE --gateway fc00::2 -A logdrop-1487 -j DROP -A logdrop-1488 -j TEE --gateway fc00::2 -A logdrop-1488 -j DROP -A logdrop-1489 -j TEE --gateway fc00::2 -A logdrop-1489 -j DROP -A logdrop-149 -j TEE --gateway fc00::2 -A logdrop-149 -j DROP -A logdrop-1490 -j TEE --gateway fc00::2 -A logdrop-1490 -j DROP -A logdrop-1491 -j TEE --gateway fc00::2 -A logdrop-1491 -j DROP -A logdrop-1492 -j TEE --gateway fc00::2 -A logdrop-1492 -j DROP -A logdrop-1493 -j TEE --gateway fc00::2 -A logdrop-1493 -j DROP -A logdrop-1494 -j TEE --gateway fc00::2 -A logdrop-1494 -j DROP -A logdrop-1495 -j TEE --gateway fc00::2 -A logdrop-1495 -j DROP -A logdrop-1496 -j TEE --gateway fc00::2 -A logdrop-1496 -j DROP -A logdrop-1497 -j TEE --gateway fc00::2 -A logdrop-1497 -j DROP -A logdrop-1498 -j TEE --gateway fc00::2 -A logdrop-1498 -j DROP -A logdrop-1499 -j TEE --gateway fc00::2 -A logdrop-1499 -j DROP -A logdrop-15 -m limit --limit 1/second -j LOG -A logdrop-15 -j DROP -A logdrop-150 -j TEE --gateway fc00::2 -A logdrop-150 -j DROP -A logdrop-1500 -j TEE --gateway fc00::2 -A logdrop-1500 -j DROP -A logdrop-1501 -j TEE --gateway fc00::2 -A logdrop-1501 -j DROP -A logdrop-1502 -j TEE --gateway fc00::2 -A logdrop-1502 -j DROP -A logdrop-1503 -j TEE --gateway fc00::2 -A logdrop-1503 -j DROP -A logdrop-1504 -j TEE --gateway fc00::2 -A logdrop-1504 -j DROP -A logdrop-1505 -j TEE --gateway fc00::2 -A logdrop-1505 -j DROP -A logdrop-1506 -j TEE --gateway fc00::2 -A logdrop-1506 -j DROP -A logdrop-1507 -j TEE --gateway fc00::2 -A logdrop-1507 -j DROP -A logdrop-1508 -j TEE --gateway fc00::2 -A logdrop-1508 -j DROP -A logdrop-1509 -j TEE --gateway fc00::2 -A logdrop-1509 -j DROP -A logdrop-151 -j TEE --gateway fc00::2 -A logdrop-151 -j DROP -A logdrop-1510 -j TEE --gateway fc00::2 -A logdrop-1510 -j DROP -A logdrop-1511 -j TEE --gateway fc00::2 -A logdrop-1511 -j DROP -A logdrop-1512 -j TEE --gateway fc00::2 -A logdrop-1512 -j DROP -A logdrop-1513 -j TEE --gateway fc00::2 -A logdrop-1513 -j DROP -A logdrop-1514 -j TEE --gateway fc00::2 -A logdrop-1514 -j DROP -A logdrop-1515 -j TEE --gateway fc00::2 -A logdrop-1515 -j DROP -A logdrop-1516 -j TEE --gateway fc00::2 -A logdrop-1516 -j DROP -A logdrop-1517 -j TEE --gateway fc00::2 -A logdrop-1517 -j DROP -A logdrop-1518 -j TEE --gateway fc00::2 -A logdrop-1518 -j DROP -A logdrop-1519 -j TEE --gateway fc00::2 -A logdrop-1519 -j DROP -A logdrop-152 -j TEE --gateway fc00::2 -A logdrop-152 -j DROP -A logdrop-1520 -j TEE --gateway fc00::2 -A logdrop-1520 -j DROP -A logdrop-1521 -j TEE --gateway fc00::2 -A logdrop-1521 -j DROP -A logdrop-1522 -j TEE --gateway fc00::2 -A logdrop-1522 -j DROP -A logdrop-1523 -j TEE --gateway fc00::2 -A logdrop-1523 -j DROP -A logdrop-1524 -j TEE --gateway fc00::2 -A logdrop-1524 -j DROP -A logdrop-1525 -j TEE --gateway fc00::2 -A logdrop-1525 -j DROP -A logdrop-1526 -j TEE --gateway fc00::2 -A logdrop-1526 -j DROP -A logdrop-1527 -j TEE --gateway fc00::2 -A logdrop-1527 -j DROP -A logdrop-1528 -j TEE --gateway fc00::2 -A logdrop-1528 -j DROP -A logdrop-1529 -j TEE --gateway fc00::2 -A logdrop-1529 -j DROP -A logdrop-153 -j TEE --gateway fc00::2 -A logdrop-153 -j DROP -A logdrop-1530 -j TEE --gateway fc00::2 -A logdrop-1530 -j DROP -A logdrop-1531 -j TEE --gateway fc00::2 -A logdrop-1531 -j DROP -A logdrop-1532 -j TEE --gateway fc00::2 -A logdrop-1532 -j DROP -A logdrop-1533 -j TEE --gateway fc00::2 -A logdrop-1533 -j DROP -A logdrop-1534 -j TEE --gateway fc00::2 -A logdrop-1534 -j DROP -A logdrop-1535 -j TEE --gateway fc00::2 -A logdrop-1535 -j DROP -A logdrop-1536 -j TEE --gateway fc00::2 -A logdrop-1536 -j DROP -A logdrop-1537 -j TEE --gateway fc00::2 -A logdrop-1537 -j DROP -A logdrop-1538 -j TEE --gateway fc00::2 -A logdrop-1538 -j DROP -A logdrop-1539 -j TEE --gateway fc00::2 -A logdrop-1539 -j DROP -A logdrop-154 -j TEE --gateway fc00::2 -A logdrop-154 -j DROP -A logdrop-1540 -j TEE --gateway fc00::2 -A logdrop-1540 -j DROP -A logdrop-1541 -j TEE --gateway fc00::2 -A logdrop-1541 -j DROP -A logdrop-1542 -j TEE --gateway fc00::2 -A logdrop-1542 -j DROP -A logdrop-1543 -j TEE --gateway fc00::2 -A logdrop-1543 -j DROP -A logdrop-1544 -j TEE --gateway fc00::2 -A logdrop-1544 -j DROP -A logdrop-1545 -j TEE --gateway fc00::2 -A logdrop-1545 -j DROP -A logdrop-1546 -j TEE --gateway fc00::2 -A logdrop-1546 -j DROP -A logdrop-1547 -j TEE --gateway fc00::2 -A logdrop-1547 -j DROP -A logdrop-1548 -j TEE --gateway fc00::2 -A logdrop-1548 -j DROP -A logdrop-1549 -j TEE --gateway fc00::2 -A logdrop-1549 -j DROP -A logdrop-155 -j TEE --gateway fc00::2 -A logdrop-155 -j DROP -A logdrop-1550 -j TEE --gateway fc00::2 -A logdrop-1550 -j DROP -A logdrop-1551 -j TEE --gateway fc00::2 -A logdrop-1551 -j DROP -A logdrop-1552 -j TEE --gateway fc00::2 -A logdrop-1552 -j DROP -A logdrop-1553 -j TEE --gateway fc00::2 -A logdrop-1553 -j DROP -A logdrop-1554 -j TEE --gateway fc00::2 -A logdrop-1554 -j DROP -A logdrop-1555 -j TEE --gateway fc00::2 -A logdrop-1555 -j DROP -A logdrop-1556 -j TEE --gateway fc00::2 -A logdrop-1556 -j DROP -A logdrop-1557 -j TEE --gateway fc00::2 -A logdrop-1557 -j DROP -A logdrop-1558 -j TEE --gateway fc00::2 -A logdrop-1558 -j DROP -A logdrop-1559 -j TEE --gateway fc00::2 -A logdrop-1559 -j DROP -A logdrop-156 -j TEE --gateway fc00::2 -A logdrop-156 -j DROP -A logdrop-1560 -j DROP -A logdrop-1561 -j DROP -A logdrop-1562 -j DROP -A logdrop-1563 -j DROP -A logdrop-1564 -j DROP -A logdrop-1565 -j DROP -A logdrop-1566 -j DROP -A logdrop-1567 -j DROP -A logdrop-1568 -j DROP -A logdrop-1569 -j DROP -A logdrop-157 -j TEE --gateway fc00::2 -A logdrop-157 -j DROP -A logdrop-1570 -j DROP -A logdrop-1571 -j DROP -A logdrop-1572 -j DROP -A logdrop-1573 -j DROP -A logdrop-1574 -j DROP -A logdrop-1575 -j DROP -A logdrop-1576 -j DROP -A logdrop-1577 -j DROP -A logdrop-1578 -j DROP -A logdrop-1579 -j DROP -A logdrop-158 -j TEE --gateway fc00::2 -A logdrop-158 -j DROP -A logdrop-1580 -j DROP -A logdrop-1581 -j DROP -A logdrop-1582 -j DROP -A logdrop-1583 -j DROP -A logdrop-1584 -j DROP -A logdrop-1585 -j DROP -A logdrop-1586 -j DROP -A logdrop-1587 -j DROP -A logdrop-1588 -j DROP -A logdrop-1589 -j DROP -A logdrop-159 -j TEE --gateway fc00::2 -A logdrop-159 -j DROP -A logdrop-1590 -j DROP -A logdrop-1591 -j DROP -A logdrop-1592 -j DROP -A logdrop-1593 -j DROP -A logdrop-1594 -j DROP -A logdrop-1595 -j DROP -A logdrop-1596 -j DROP -A logdrop-1597 -j DROP -A logdrop-1598 -j DROP -A logdrop-1599 -j DROP -A logdrop-16 -m limit --limit 1/second -j LOG -A logdrop-16 -j DROP -A logdrop-160 -j TEE --gateway fc00::2 -A logdrop-160 -j DROP -A logdrop-1600 -j DROP -A logdrop-1601 -j DROP -A logdrop-1602 -j DROP -A logdrop-1603 -j DROP -A logdrop-1604 -j DROP -A logdrop-1605 -j DROP -A logdrop-1606 -j DROP -A logdrop-1607 -j DROP -A logdrop-1608 -j DROP -A logdrop-1609 -j DROP -A logdrop-161 -j TEE --gateway fc00::2 -A logdrop-161 -j DROP -A logdrop-1610 -j DROP -A logdrop-1611 -j DROP -A logdrop-1612 -j DROP -A logdrop-1613 -j DROP -A logdrop-1614 -j DROP -A logdrop-1615 -j DROP -A logdrop-1616 -j DROP -A logdrop-1617 -j DROP -A logdrop-1618 -j DROP -A logdrop-1619 -j DROP -A logdrop-162 -j TEE --gateway fc00::2 -A logdrop-162 -j DROP -A logdrop-1620 -j DROP -A logdrop-1621 -j DROP -A logdrop-1622 -j DROP -A logdrop-1623 -j DROP -A logdrop-1624 -j DROP -A logdrop-1625 -j DROP -A logdrop-1626 -j DROP -A logdrop-1627 -j DROP -A logdrop-1628 -j DROP -A logdrop-1629 -j DROP -A logdrop-163 -j TEE --gateway fc00::2 -A logdrop-163 -j DROP -A logdrop-1630 -j DROP -A logdrop-1631 -j DROP -A logdrop-1632 -j DROP -A logdrop-1633 -j DROP -A logdrop-1634 -j DROP -A logdrop-1635 -j DROP -A logdrop-1636 -j DROP -A logdrop-1637 -j DROP -A logdrop-1638 -j DROP -A logdrop-1639 -j DROP -A logdrop-164 -j TEE --gateway fc00::2 -A logdrop-164 -j DROP -A logdrop-1640 -j DROP -A logdrop-1641 -j DROP -A logdrop-1642 -j DROP -A logdrop-1643 -j DROP -A logdrop-1644 -j DROP -A logdrop-1645 -j DROP -A logdrop-1646 -j DROP -A logdrop-1647 -j DROP -A logdrop-1648 -j DROP -A logdrop-1649 -j DROP -A logdrop-165 -j TEE --gateway fc00::2 -A logdrop-165 -j DROP -A logdrop-1650 -m limit --limit 1/second -j LOG -A logdrop-1650 -j DROP -A logdrop-1651 -m limit --limit 1/second -j LOG -A logdrop-1651 -j DROP -A logdrop-1652 -j LOG -A logdrop-1652 -j TEE --gateway fc00::1 -A logdrop-1652 -j DROP -A logdrop-1653 -j TEE --gateway fc00::2 -A logdrop-1653 -j DROP -A logdrop-1654 -j DROP -A logdrop-166 -j TEE --gateway fc00::2 -A logdrop-166 -j DROP -A logdrop-167 -j TEE --gateway fc00::2 -A logdrop-167 -j DROP -A logdrop-168 -j TEE --gateway fc00::2 -A logdrop-168 -j DROP -A logdrop-169 -j TEE --gateway fc00::2 -A logdrop-169 -j DROP -A logdrop-17 -m limit --limit 1/second -j LOG -A logdrop-17 -j DROP -A logdrop-170 -j TEE --gateway fc00::2 -A logdrop-170 -j DROP -A logdrop-171 -j TEE --gateway fc00::2 -A logdrop-171 -j DROP -A logdrop-172 -j TEE --gateway fc00::2 -A logdrop-172 -j DROP -A logdrop-173 -j TEE --gateway fc00::2 -A logdrop-173 -j DROP -A logdrop-174 -j TEE --gateway fc00::2 -A logdrop-174 -j DROP -A logdrop-175 -j TEE --gateway fc00::2 -A logdrop-175 -j DROP -A logdrop-176 -j TEE --gateway fc00::2 -A logdrop-176 -j DROP -A logdrop-177 -j TEE --gateway fc00::2 -A logdrop-177 -j DROP -A logdrop-178 -j TEE --gateway fc00::2 -A logdrop-178 -j DROP -A logdrop-179 -j TEE --gateway fc00::2 -A logdrop-179 -j DROP -A logdrop-18 -m limit --limit 1/second -j LOG -A logdrop-18 -j DROP -A logdrop-180 -j TEE --gateway fc00::2 -A logdrop-180 -j DROP -A logdrop-181 -j TEE --gateway fc00::2 -A logdrop-181 -j DROP -A logdrop-182 -j TEE --gateway fc00::2 -A logdrop-182 -j DROP -A logdrop-183 -j TEE --gateway fc00::2 -A logdrop-183 -j DROP -A logdrop-184 -j TEE --gateway fc00::2 -A logdrop-184 -j DROP -A logdrop-185 -j TEE --gateway fc00::2 -A logdrop-185 -j DROP -A logdrop-186 -j TEE --gateway fc00::2 -A logdrop-186 -j DROP -A logdrop-187 -j TEE --gateway fc00::2 -A logdrop-187 -j DROP -A logdrop-188 -j TEE --gateway fc00::2 -A logdrop-188 -j DROP -A logdrop-189 -j TEE --gateway fc00::2 -A logdrop-189 -j DROP -A logdrop-19 -m limit --limit 1/second -j LOG -A logdrop-19 -j DROP -A logdrop-190 -j DROP -A logdrop-191 -j DROP -A logdrop-192 -j DROP -A logdrop-193 -j DROP -A logdrop-194 -j DROP -A logdrop-195 -j DROP -A logdrop-196 -j DROP -A logdrop-197 -j DROP -A logdrop-198 -j DROP -A logdrop-199 -j DROP -A logdrop-2 -m limit --limit 1/second -j LOG -A logdrop-2 -j DROP -A logdrop-20 -m limit --limit 1/second -j LOG -A logdrop-20 -j DROP -A logdrop-200 -j DROP -A logdrop-201 -j DROP -A logdrop-202 -j DROP -A logdrop-203 -j DROP -A logdrop-204 -j DROP -A logdrop-205 -j DROP -A logdrop-206 -j DROP -A logdrop-207 -j DROP -A logdrop-208 -j DROP -A logdrop-209 -j DROP -A logdrop-21 -m limit --limit 1/second -j LOG -A logdrop-21 -j DROP -A logdrop-210 -j DROP -A logdrop-211 -j DROP -A logdrop-212 -j DROP -A logdrop-213 -j DROP -A logdrop-214 -j DROP -A logdrop-215 -j DROP -A logdrop-216 -j DROP -A logdrop-217 -j DROP -A logdrop-218 -j DROP -A logdrop-219 -j DROP -A logdrop-22 -m limit --limit 1/second -j LOG -A logdrop-22 -j DROP -A logdrop-220 -j DROP -A logdrop-221 -j DROP -A logdrop-222 -j DROP -A logdrop-223 -j DROP -A logdrop-224 -j DROP -A logdrop-225 -j DROP -A logdrop-226 -j DROP -A logdrop-227 -j DROP -A logdrop-228 -j DROP -A logdrop-229 -j DROP -A logdrop-23 -m limit --limit 1/second -j LOG -A logdrop-23 -j DROP -A logdrop-230 -j DROP -A logdrop-231 -j DROP -A logdrop-232 -j DROP -A logdrop-233 -j DROP -A logdrop-234 -j DROP -A logdrop-235 -j DROP -A logdrop-236 -j DROP -A logdrop-237 -j DROP -A logdrop-238 -j DROP -A logdrop-239 -j DROP -A logdrop-24 -m limit --limit 1/second -j LOG -A logdrop-24 -j DROP -A logdrop-240 -j DROP -A logdrop-241 -j DROP -A logdrop-242 -j DROP -A logdrop-243 -j DROP -A logdrop-244 -j DROP -A logdrop-245 -j DROP -A logdrop-246 -j DROP -A logdrop-247 -j DROP -A logdrop-248 -j DROP -A logdrop-249 -j DROP -A logdrop-25 -m limit --limit 1/second -j LOG -A logdrop-25 -j DROP -A logdrop-250 -j DROP -A logdrop-251 -j DROP -A logdrop-252 -j DROP -A logdrop-253 -j DROP -A logdrop-254 -j DROP -A logdrop-255 -j DROP -A logdrop-256 -j DROP -A logdrop-257 -j DROP -A logdrop-258 -j DROP -A logdrop-259 -j DROP -A logdrop-26 -m limit --limit 1/second -j LOG -A logdrop-26 -j DROP -A logdrop-260 -j DROP -A logdrop-261 -j DROP -A logdrop-262 -j DROP -A logdrop-263 -j DROP -A logdrop-264 -j DROP -A logdrop-265 -j DROP -A logdrop-266 -j DROP -A logdrop-267 -j DROP -A logdrop-268 -j DROP -A logdrop-269 -j DROP -A logdrop-27 -m limit --limit 1/second -j LOG -A logdrop-27 -j DROP -A logdrop-270 -j DROP -A logdrop-271 -j DROP -A logdrop-272 -j DROP -A logdrop-273 -j DROP -A logdrop-274 -j DROP -A logdrop-275 -j DROP -A logdrop-276 -j DROP -A logdrop-277 -j DROP -A logdrop-278 -j DROP -A logdrop-279 -j DROP -A logdrop-28 -m limit --limit 1/second -j LOG -A logdrop-28 -j DROP -A logdrop-280 -m limit --limit 1/second -j LOG -A logdrop-280 -j DROP -A logdrop-281 -m limit --limit 1/second -j LOG -A logdrop-281 -j DROP -A logdrop-282 -m limit --limit 1/second -j LOG -A logdrop-282 -j DROP -A logdrop-283 -m limit --limit 1/second -j LOG -A logdrop-283 -j DROP -A logdrop-284 -m limit --limit 1/second -j LOG -A logdrop-284 -j DROP -A logdrop-285 -m limit --limit 1/second -j LOG -A logdrop-285 -j DROP -A logdrop-286 -m limit --limit 1/second -j LOG -A logdrop-286 -j DROP -A logdrop-287 -m limit --limit 1/second -j LOG -A logdrop-287 -j DROP -A logdrop-288 -m limit --limit 1/second -j LOG -A logdrop-288 -j DROP -A logdrop-289 -m limit --limit 1/second -j LOG -A logdrop-289 -j DROP -A logdrop-29 -m limit --limit 1/second -j LOG -A logdrop-29 -j DROP -A logdrop-290 -m limit --limit 1/second -j LOG -A logdrop-290 -j DROP -A logdrop-291 -m limit --limit 1/second -j LOG -A logdrop-291 -j DROP -A logdrop-292 -m limit --limit 1/second -j LOG -A logdrop-292 -j DROP -A logdrop-293 -m limit --limit 1/second -j LOG -A logdrop-293 -j DROP -A logdrop-294 -m limit --limit 1/second -j LOG -A logdrop-294 -j DROP -A logdrop-295 -m limit --limit 1/second -j LOG -A logdrop-295 -j DROP -A logdrop-296 -m limit --limit 1/second -j LOG -A logdrop-296 -j DROP -A logdrop-297 -m limit --limit 1/second -j LOG -A logdrop-297 -j DROP -A logdrop-298 -m limit --limit 1/second -j LOG -A logdrop-298 -j DROP -A logdrop-299 -m limit --limit 1/second -j LOG -A logdrop-299 -j DROP -A logdrop-3 -m limit --limit 1/second -j LOG -A logdrop-3 -j DROP -A logdrop-30 -m limit --limit 1/second -j LOG -A logdrop-30 -j DROP -A logdrop-300 -m limit --limit 1/second -j LOG -A logdrop-300 -j DROP -A logdrop-301 -m limit --limit 1/second -j LOG -A logdrop-301 -j DROP -A logdrop-302 -m limit --limit 1/second -j LOG -A logdrop-302 -j DROP -A logdrop-303 -m limit --limit 1/second -j LOG -A logdrop-303 -j DROP -A logdrop-304 -m limit --limit 1/second -j LOG -A logdrop-304 -j DROP -A logdrop-305 -m limit --limit 1/second -j LOG -A logdrop-305 -j DROP -A logdrop-306 -m limit --limit 1/second -j LOG -A logdrop-306 -j DROP -A logdrop-307 -m limit --limit 1/second -j LOG -A logdrop-307 -j DROP -A logdrop-308 -m limit --limit 1/second -j LOG -A logdrop-308 -j DROP -A logdrop-309 -m limit --limit 1/second -j LOG -A logdrop-309 -j DROP -A logdrop-31 -m limit --limit 1/second -j LOG -A logdrop-31 -j DROP -A logdrop-310 -m limit --limit 1/second -j LOG -A logdrop-310 -j DROP -A logdrop-311 -m limit --limit 1/second -j LOG -A logdrop-311 -j DROP -A logdrop-312 -m limit --limit 1/second -j LOG -A logdrop-312 -j DROP -A logdrop-313 -m limit --limit 1/second -j LOG -A logdrop-313 -j DROP -A logdrop-314 -m limit --limit 1/second -j LOG -A logdrop-314 -j DROP -A logdrop-315 -m limit --limit 1/second -j LOG -A logdrop-315 -j DROP -A logdrop-316 -m limit --limit 1/second -j LOG -A logdrop-316 -j DROP -A logdrop-317 -m limit --limit 1/second -j LOG -A logdrop-317 -j DROP -A logdrop-318 -m limit --limit 1/second -j LOG -A logdrop-318 -j DROP -A logdrop-319 -m limit --limit 1/second -j LOG -A logdrop-319 -j DROP -A logdrop-32 -m limit --limit 1/second -j LOG -A logdrop-32 -j DROP -A logdrop-320 -m limit --limit 1/second -j LOG -A logdrop-320 -j DROP -A logdrop-321 -m limit --limit 1/second -j LOG -A logdrop-321 -j DROP -A logdrop-322 -m limit --limit 1/second -j LOG -A logdrop-322 -j DROP -A logdrop-323 -m limit --limit 1/second -j LOG -A logdrop-323 -j DROP -A logdrop-324 -m limit --limit 1/second -j LOG -A logdrop-324 -j DROP -A logdrop-325 -m limit --limit 1/second -j LOG -A logdrop-325 -j DROP -A logdrop-326 -m limit --limit 1/second -j LOG -A logdrop-326 -j DROP -A logdrop-327 -m limit --limit 1/second -j LOG -A logdrop-327 -j DROP -A logdrop-328 -m limit --limit 1/second -j LOG -A logdrop-328 -j DROP -A logdrop-329 -m limit --limit 1/second -j LOG -A logdrop-329 -j DROP -A logdrop-33 -m limit --limit 1/second -j LOG -A logdrop-33 -j DROP -A logdrop-330 -m limit --limit 1/second -j LOG -A logdrop-330 -j DROP -A logdrop-331 -m limit --limit 1/second -j LOG -A logdrop-331 -j DROP -A logdrop-332 -m limit --limit 1/second -j LOG -A logdrop-332 -j DROP -A logdrop-333 -m limit --limit 1/second -j LOG -A logdrop-333 -j DROP -A logdrop-334 -m limit --limit 1/second -j LOG -A logdrop-334 -j DROP -A logdrop-335 -m limit --limit 1/second -j LOG -A logdrop-335 -j DROP -A logdrop-336 -m limit --limit 1/second -j LOG -A logdrop-336 -j DROP -A logdrop-337 -m limit --limit 1/second -j LOG -A logdrop-337 -j DROP -A logdrop-338 -m limit --limit 1/second -j LOG -A logdrop-338 -j DROP -A logdrop-339 -m limit --limit 1/second -j LOG -A logdrop-339 -j DROP -A logdrop-34 -m limit --limit 1/second -j LOG -A logdrop-34 -j DROP -A logdrop-340 -m limit --limit 1/second -j LOG -A logdrop-340 -j DROP -A logdrop-341 -m limit --limit 1/second -j LOG -A logdrop-341 -j DROP -A logdrop-342 -m limit --limit 1/second -j LOG -A logdrop-342 -j DROP -A logdrop-343 -m limit --limit 1/second -j LOG -A logdrop-343 -j DROP -A logdrop-344 -m limit --limit 1/second -j LOG -A logdrop-344 -j DROP -A logdrop-345 -m limit --limit 1/second -j LOG -A logdrop-345 -j DROP -A logdrop-346 -m limit --limit 1/second -j LOG -A logdrop-346 -j DROP -A logdrop-347 -m limit --limit 1/second -j LOG -A logdrop-347 -j DROP -A logdrop-348 -m limit --limit 1/second -j LOG -A logdrop-348 -j DROP -A logdrop-349 -m limit --limit 1/second -j LOG -A logdrop-349 -j DROP -A logdrop-35 -m limit --limit 1/second -j LOG -A logdrop-35 -j DROP -A logdrop-350 -m limit --limit 1/second -j LOG -A logdrop-350 -j DROP -A logdrop-351 -m limit --limit 1/second -j LOG -A logdrop-351 -j DROP -A logdrop-352 -m limit --limit 1/second -j LOG -A logdrop-352 -j DROP -A logdrop-353 -m limit --limit 1/second -j LOG -A logdrop-353 -j DROP -A logdrop-354 -m limit --limit 1/second -j LOG -A logdrop-354 -j DROP -A logdrop-355 -m limit --limit 1/second -j LOG -A logdrop-355 -j DROP -A logdrop-356 -m limit --limit 1/second -j LOG -A logdrop-356 -j DROP -A logdrop-357 -m limit --limit 1/second -j LOG -A logdrop-357 -j DROP -A logdrop-358 -m limit --limit 1/second -j LOG -A logdrop-358 -j DROP -A logdrop-359 -m limit --limit 1/second -j LOG -A logdrop-359 -j DROP -A logdrop-36 -m limit --limit 1/second -j LOG -A logdrop-36 -j DROP -A logdrop-360 -m limit --limit 1/second -j LOG -A logdrop-360 -j DROP -A logdrop-361 -m limit --limit 1/second -j LOG -A logdrop-361 -j DROP -A logdrop-362 -m limit --limit 1/second -j LOG -A logdrop-362 -j DROP -A logdrop-363 -m limit --limit 1/second -j LOG -A logdrop-363 -j DROP -A logdrop-364 -m limit --limit 1/second -j LOG -A logdrop-364 -j DROP -A logdrop-365 -m limit --limit 1/second -j LOG -A logdrop-365 -j DROP -A logdrop-366 -m limit --limit 1/second -j LOG -A logdrop-366 -j DROP -A logdrop-367 -m limit --limit 1/second -j LOG -A logdrop-367 -j DROP -A logdrop-368 -m limit --limit 1/second -j LOG -A logdrop-368 -j DROP -A logdrop-369 -m limit --limit 1/second -j LOG -A logdrop-369 -j DROP -A logdrop-37 -m limit --limit 1/second -j LOG -A logdrop-37 -j DROP -A logdrop-370 -j TEE --gateway fc00::2 -A logdrop-370 -j DROP -A logdrop-371 -j TEE --gateway fc00::2 -A logdrop-371 -j DROP -A logdrop-372 -j TEE --gateway fc00::2 -A logdrop-372 -j DROP -A logdrop-373 -j TEE --gateway fc00::2 -A logdrop-373 -j DROP -A logdrop-374 -j TEE --gateway fc00::2 -A logdrop-374 -j DROP -A logdrop-375 -j TEE --gateway fc00::2 -A logdrop-375 -j DROP -A logdrop-376 -j TEE --gateway fc00::2 -A logdrop-376 -j DROP -A logdrop-377 -j TEE --gateway fc00::2 -A logdrop-377 -j DROP -A logdrop-378 -j TEE --gateway fc00::2 -A logdrop-378 -j DROP -A logdrop-379 -j TEE --gateway fc00::2 -A logdrop-379 -j DROP -A logdrop-38 -m limit --limit 1/second -j LOG -A logdrop-38 -j DROP -A logdrop-380 -j TEE --gateway fc00::2 -A logdrop-380 -j DROP -A logdrop-381 -j TEE --gateway fc00::2 -A logdrop-381 -j DROP -A logdrop-382 -j TEE --gateway fc00::2 -A logdrop-382 -j DROP -A logdrop-383 -j TEE --gateway fc00::2 -A logdrop-383 -j DROP -A logdrop-384 -j TEE --gateway fc00::2 -A logdrop-384 -j DROP -A logdrop-385 -j TEE --gateway fc00::2 -A logdrop-385 -j DROP -A logdrop-386 -j TEE --gateway fc00::2 -A logdrop-386 -j DROP -A logdrop-387 -j TEE --gateway fc00::2 -A logdrop-387 -j DROP -A logdrop-388 -j TEE --gateway fc00::2 -A logdrop-388 -j DROP -A logdrop-389 -j TEE --gateway fc00::2 -A logdrop-389 -j DROP -A logdrop-39 -m limit --limit 1/second -j LOG -A logdrop-39 -j DROP -A logdrop-390 -j TEE --gateway fc00::2 -A logdrop-390 -j DROP -A logdrop-391 -j TEE --gateway fc00::2 -A logdrop-391 -j DROP -A logdrop-392 -j TEE --gateway fc00::2 -A logdrop-392 -j DROP -A logdrop-393 -j TEE --gateway fc00::2 -A logdrop-393 -j DROP -A logdrop-394 -j TEE --gateway fc00::2 -A logdrop-394 -j DROP -A logdrop-395 -j TEE --gateway fc00::2 -A logdrop-395 -j DROP -A logdrop-396 -j TEE --gateway fc00::2 -A logdrop-396 -j DROP -A logdrop-397 -j TEE --gateway fc00::2 -A logdrop-397 -j DROP -A logdrop-398 -j TEE --gateway fc00::2 -A logdrop-398 -j DROP -A logdrop-399 -j TEE --gateway fc00::2 -A logdrop-399 -j DROP -A logdrop-4 -m limit --limit 1/second -j LOG -A logdrop-4 -j DROP -A logdrop-40 -m limit --limit 1/second -j LOG -A logdrop-40 -j DROP -A logdrop-400 -j TEE --gateway fc00::2 -A logdrop-400 -j DROP -A logdrop-401 -j TEE --gateway fc00::2 -A logdrop-401 -j DROP -A logdrop-402 -j TEE --gateway fc00::2 -A logdrop-402 -j DROP -A logdrop-403 -j TEE --gateway fc00::2 -A logdrop-403 -j DROP -A logdrop-404 -j TEE --gateway fc00::2 -A logdrop-404 -j DROP -A logdrop-405 -j TEE --gateway fc00::2 -A logdrop-405 -j DROP -A logdrop-406 -j TEE --gateway fc00::2 -A logdrop-406 -j DROP -A logdrop-407 -j TEE --gateway fc00::2 -A logdrop-407 -j DROP -A logdrop-408 -j TEE --gateway fc00::2 -A logdrop-408 -j DROP -A logdrop-409 -j TEE --gateway fc00::2 -A logdrop-409 -j DROP -A logdrop-41 -m limit --limit 1/second -j LOG -A logdrop-41 -j DROP -A logdrop-410 -j TEE --gateway fc00::2 -A logdrop-410 -j DROP -A logdrop-411 -j TEE --gateway fc00::2 -A logdrop-411 -j DROP -A logdrop-412 -j TEE --gateway fc00::2 -A logdrop-412 -j DROP -A logdrop-413 -j TEE --gateway fc00::2 -A logdrop-413 -j DROP -A logdrop-414 -j TEE --gateway fc00::2 -A logdrop-414 -j DROP -A logdrop-415 -j TEE --gateway fc00::2 -A logdrop-415 -j DROP -A logdrop-416 -j TEE --gateway fc00::2 -A logdrop-416 -j DROP -A logdrop-417 -j TEE --gateway fc00::2 -A logdrop-417 -j DROP -A logdrop-418 -j TEE --gateway fc00::2 -A logdrop-418 -j DROP -A logdrop-419 -j TEE --gateway fc00::2 -A logdrop-419 -j DROP -A logdrop-42 -m limit --limit 1/second -j LOG -A logdrop-42 -j DROP -A logdrop-420 -j TEE --gateway fc00::2 -A logdrop-420 -j DROP -A logdrop-421 -j TEE --gateway fc00::2 -A logdrop-421 -j DROP -A logdrop-422 -j TEE --gateway fc00::2 -A logdrop-422 -j DROP -A logdrop-423 -j TEE --gateway fc00::2 -A logdrop-423 -j DROP -A logdrop-424 -j TEE --gateway fc00::2 -A logdrop-424 -j DROP -A logdrop-425 -j TEE --gateway fc00::2 -A logdrop-425 -j DROP -A logdrop-426 -j TEE --gateway fc00::2 -A logdrop-426 -j DROP -A logdrop-427 -j TEE --gateway fc00::2 -A logdrop-427 -j DROP -A logdrop-428 -j TEE --gateway fc00::2 -A logdrop-428 -j DROP -A logdrop-429 -j TEE --gateway fc00::2 -A logdrop-429 -j DROP -A logdrop-43 -m limit --limit 1/second -j LOG -A logdrop-43 -j DROP -A logdrop-430 -j TEE --gateway fc00::2 -A logdrop-430 -j DROP -A logdrop-431 -j TEE --gateway fc00::2 -A logdrop-431 -j DROP -A logdrop-432 -j TEE --gateway fc00::2 -A logdrop-432 -j DROP -A logdrop-433 -j TEE --gateway fc00::2 -A logdrop-433 -j DROP -A logdrop-434 -j TEE --gateway fc00::2 -A logdrop-434 -j DROP -A logdrop-435 -j TEE --gateway fc00::2 -A logdrop-435 -j DROP -A logdrop-436 -j TEE --gateway fc00::2 -A logdrop-436 -j DROP -A logdrop-437 -j TEE --gateway fc00::2 -A logdrop-437 -j DROP -A logdrop-438 -j TEE --gateway fc00::2 -A logdrop-438 -j DROP -A logdrop-439 -j TEE --gateway fc00::2 -A logdrop-439 -j DROP -A logdrop-44 -m limit --limit 1/second -j LOG -A logdrop-44 -j DROP -A logdrop-440 -j TEE --gateway fc00::2 -A logdrop-440 -j DROP -A logdrop-441 -j TEE --gateway fc00::2 -A logdrop-441 -j DROP -A logdrop-442 -j TEE --gateway fc00::2 -A logdrop-442 -j DROP -A logdrop-443 -j TEE --gateway fc00::2 -A logdrop-443 -j DROP -A logdrop-444 -j TEE --gateway fc00::2 -A logdrop-444 -j DROP -A logdrop-445 -j TEE --gateway fc00::2 -A logdrop-445 -j DROP -A logdrop-446 -j TEE --gateway fc00::2 -A logdrop-446 -j DROP -A logdrop-447 -j TEE --gateway fc00::2 -A logdrop-447 -j DROP -A logdrop-448 -j TEE --gateway fc00::2 -A logdrop-448 -j DROP -A logdrop-449 -j TEE --gateway fc00::2 -A logdrop-449 -j DROP -A logdrop-45 -m limit --limit 1/second -j LOG -A logdrop-45 -j DROP -A logdrop-450 -j TEE --gateway fc00::2 -A logdrop-450 -j DROP -A logdrop-451 -j TEE --gateway fc00::2 -A logdrop-451 -j DROP -A logdrop-452 -j TEE --gateway fc00::2 -A logdrop-452 -j DROP -A logdrop-453 -j TEE --gateway fc00::2 -A logdrop-453 -j DROP -A logdrop-454 -j TEE --gateway fc00::2 -A logdrop-454 -j DROP -A logdrop-455 -j TEE --gateway fc00::2 -A logdrop-455 -j DROP -A logdrop-456 -j TEE --gateway fc00::2 -A logdrop-456 -j DROP -A logdrop-457 -j TEE --gateway fc00::2 -A logdrop-457 -j DROP -A logdrop-458 -j TEE --gateway fc00::2 -A logdrop-458 -j DROP -A logdrop-459 -j TEE --gateway fc00::2 -A logdrop-459 -j DROP -A logdrop-46 -m limit --limit 1/second -j LOG -A logdrop-46 -j DROP -A logdrop-460 -j DROP -A logdrop-461 -j DROP -A logdrop-462 -j DROP -A logdrop-463 -j DROP -A logdrop-464 -j DROP -A logdrop-465 -j DROP -A logdrop-466 -j DROP -A logdrop-467 -j DROP -A logdrop-468 -j DROP -A logdrop-469 -j DROP -A logdrop-47 -m limit --limit 1/second -j LOG -A logdrop-47 -j DROP -A logdrop-470 -j DROP -A logdrop-471 -j DROP -A logdrop-472 -j DROP -A logdrop-473 -j DROP -A logdrop-474 -j DROP -A logdrop-475 -j DROP -A logdrop-476 -j DROP -A logdrop-477 -j DROP -A logdrop-478 -j DROP -A logdrop-479 -j DROP -A logdrop-48 -m limit --limit 1/second -j LOG -A logdrop-48 -j DROP -A logdrop-480 -j DROP -A logdrop-481 -j DROP -A logdrop-482 -j DROP -A logdrop-483 -j DROP -A logdrop-484 -j DROP -A logdrop-485 -j DROP -A logdrop-486 -j DROP -A logdrop-487 -j DROP -A logdrop-488 -j DROP -A logdrop-489 -j DROP -A logdrop-49 -m limit --limit 1/second -j LOG -A logdrop-49 -j DROP -A logdrop-490 -j DROP -A logdrop-491 -j DROP -A logdrop-492 -j DROP -A logdrop-493 -j DROP -A logdrop-494 -j DROP -A logdrop-495 -j DROP -A logdrop-496 -j DROP -A logdrop-497 -j DROP -A logdrop-498 -j DROP -A logdrop-499 -j DROP -A logdrop-5 -m limit --limit 1/second -j LOG -A logdrop-5 -j DROP -A logdrop-50 -m limit --limit 1/second -j LOG -A logdrop-50 -j DROP -A logdrop-500 -j DROP -A logdrop-501 -j DROP -A logdrop-502 -j DROP -A logdrop-503 -j DROP -A logdrop-504 -j DROP -A logdrop-505 -j DROP -A logdrop-506 -j DROP -A logdrop-507 -j DROP -A logdrop-508 -j DROP -A logdrop-509 -j DROP -A logdrop-51 -m limit --limit 1/second -j LOG -A logdrop-51 -j DROP -A logdrop-510 -j DROP -A logdrop-511 -j DROP -A logdrop-512 -j DROP -A logdrop-513 -j DROP -A logdrop-514 -j DROP -A logdrop-515 -j DROP -A logdrop-516 -j DROP -A logdrop-517 -j DROP -A logdrop-518 -j DROP -A logdrop-519 -j DROP -A logdrop-52 -m limit --limit 1/second -j LOG -A logdrop-52 -j DROP -A logdrop-520 -j DROP -A logdrop-521 -j DROP -A logdrop-522 -j DROP -A logdrop-523 -j DROP -A logdrop-524 -j DROP -A logdrop-525 -j DROP -A logdrop-526 -j DROP -A logdrop-527 -j DROP -A logdrop-528 -j DROP -A logdrop-529 -j DROP -A logdrop-53 -m limit --limit 1/second -j LOG -A logdrop-53 -j DROP -A logdrop-530 -j DROP -A logdrop-531 -j DROP -A logdrop-532 -j DROP -A logdrop-533 -j DROP -A logdrop-534 -j DROP -A logdrop-535 -j DROP -A logdrop-536 -j DROP -A logdrop-537 -j DROP -A logdrop-538 -j DROP -A logdrop-539 -j DROP -A logdrop-54 -m limit --limit 1/second -j LOG -A logdrop-54 -j DROP -A logdrop-540 -j DROP -A logdrop-541 -j DROP -A logdrop-542 -j DROP -A logdrop-543 -j DROP -A logdrop-544 -j DROP -A logdrop-545 -j DROP -A logdrop-546 -j DROP -A logdrop-547 -j DROP -A logdrop-548 -j DROP -A logdrop-549 -j DROP -A logdrop-55 -m limit --limit 1/second -j LOG -A logdrop-55 -j DROP -A logdrop-550 -m limit --limit 1/second -j LOG -A logdrop-550 -j DROP -A logdrop-551 -m limit --limit 1/second -j LOG -A logdrop-551 -j DROP -A logdrop-552 -m limit --limit 1/second -j LOG -A logdrop-552 -j DROP -A logdrop-553 -m limit --limit 1/second -j LOG -A logdrop-553 -j DROP -A logdrop-554 -m limit --limit 1/second -j LOG -A logdrop-554 -j DROP -A logdrop-555 -m limit --limit 1/second -j LOG -A logdrop-555 -j DROP -A logdrop-556 -m limit --limit 1/second -j LOG -A logdrop-556 -j DROP -A logdrop-557 -m limit --limit 1/second -j LOG -A logdrop-557 -j DROP -A logdrop-558 -m limit --limit 1/second -j LOG -A logdrop-558 -j DROP -A logdrop-559 -m limit --limit 1/second -j LOG -A logdrop-559 -j DROP -A logdrop-56 -m limit --limit 1/second -j LOG -A logdrop-56 -j DROP -A logdrop-560 -m limit --limit 1/second -j LOG -A logdrop-560 -j DROP -A logdrop-561 -m limit --limit 1/second -j LOG -A logdrop-561 -j DROP -A logdrop-562 -m limit --limit 1/second -j LOG -A logdrop-562 -j DROP -A logdrop-563 -m limit --limit 1/second -j LOG -A logdrop-563 -j DROP -A logdrop-564 -m limit --limit 1/second -j LOG -A logdrop-564 -j DROP -A logdrop-565 -m limit --limit 1/second -j LOG -A logdrop-565 -j DROP -A logdrop-566 -m limit --limit 1/second -j LOG -A logdrop-566 -j DROP -A logdrop-567 -m limit --limit 1/second -j LOG -A logdrop-567 -j DROP -A logdrop-568 -m limit --limit 1/second -j LOG -A logdrop-568 -j DROP -A logdrop-569 -m limit --limit 1/second -j LOG -A logdrop-569 -j DROP -A logdrop-57 -m limit --limit 1/second -j LOG -A logdrop-57 -j DROP -A logdrop-570 -m limit --limit 1/second -j LOG -A logdrop-570 -j DROP -A logdrop-571 -m limit --limit 1/second -j LOG -A logdrop-571 -j DROP -A logdrop-572 -m limit --limit 1/second -j LOG -A logdrop-572 -j DROP -A logdrop-573 -m limit --limit 1/second -j LOG -A logdrop-573 -j DROP -A logdrop-574 -m limit --limit 1/second -j LOG -A logdrop-574 -j DROP -A logdrop-575 -m limit --limit 1/second -j LOG -A logdrop-575 -j DROP -A logdrop-576 -m limit --limit 1/second -j LOG -A logdrop-576 -j DROP -A logdrop-577 -m limit --limit 1/second -j LOG -A logdrop-577 -j DROP -A logdrop-578 -m limit --limit 1/second -j LOG -A logdrop-578 -j DROP -A logdrop-579 -m limit --limit 1/second -j LOG -A logdrop-579 -j DROP -A logdrop-58 -m limit --limit 1/second -j LOG -A logdrop-58 -j DROP -A logdrop-580 -m limit --limit 1/second -j LOG -A logdrop-580 -j DROP -A logdrop-581 -m limit --limit 1/second -j LOG -A logdrop-581 -j DROP -A logdrop-582 -m limit --limit 1/second -j LOG -A logdrop-582 -j DROP -A logdrop-583 -m limit --limit 1/second -j LOG -A logdrop-583 -j DROP -A logdrop-584 -m limit --limit 1/second -j LOG -A logdrop-584 -j DROP -A logdrop-585 -m limit --limit 1/second -j LOG -A logdrop-585 -j DROP -A logdrop-586 -m limit --limit 1/second -j LOG -A logdrop-586 -j DROP -A logdrop-587 -m limit --limit 1/second -j LOG -A logdrop-587 -j DROP -A logdrop-588 -m limit --limit 1/second -j LOG -A logdrop-588 -j DROP -A logdrop-589 -m limit --limit 1/second -j LOG -A logdrop-589 -j DROP -A logdrop-59 -m limit --limit 1/second -j LOG -A logdrop-59 -j DROP -A logdrop-590 -m limit --limit 1/second -j LOG -A logdrop-590 -j DROP -A logdrop-591 -m limit --limit 1/second -j LOG -A logdrop-591 -j DROP -A logdrop-592 -m limit --limit 1/second -j LOG -A logdrop-592 -j DROP -A logdrop-593 -m limit --limit 1/second -j LOG -A logdrop-593 -j DROP -A logdrop-594 -m limit --limit 1/second -j LOG -A logdrop-594 -j DROP -A logdrop-595 -m limit --limit 1/second -j LOG -A logdrop-595 -j DROP -A logdrop-596 -m limit --limit 1/second -j LOG -A logdrop-596 -j DROP -A logdrop-597 -m limit --limit 1/second -j LOG -A logdrop-597 -j DROP -A logdrop-598 -m limit --limit 1/second -j LOG -A logdrop-598 -j DROP -A logdrop-599 -m limit --limit 1/second -j LOG -A logdrop-599 -j DROP -A logdrop-6 -m limit --limit 1/second -j LOG -A logdrop-6 -j DROP -A logdrop-60 -m limit --limit 1/second -j LOG -A logdrop-60 -j DROP -A logdrop-600 -m limit --limit 1/second -j LOG -A logdrop-600 -j DROP -A logdrop-601 -m limit --limit 1/second -j LOG -A logdrop-601 -j DROP -A logdrop-602 -m limit --limit 1/second -j LOG -A logdrop-602 -j DROP -A logdrop-603 -m limit --limit 1/second -j LOG -A logdrop-603 -j DROP -A logdrop-604 -m limit --limit 1/second -j LOG -A logdrop-604 -j DROP -A logdrop-605 -m limit --limit 1/second -j LOG -A logdrop-605 -j DROP -A logdrop-606 -m limit --limit 1/second -j LOG -A logdrop-606 -j DROP -A logdrop-607 -m limit --limit 1/second -j LOG -A logdrop-607 -j DROP -A logdrop-608 -m limit --limit 1/second -j LOG -A logdrop-608 -j DROP -A logdrop-609 -m limit --limit 1/second -j LOG -A logdrop-609 -j DROP -A logdrop-61 -m limit --limit 1/second -j LOG -A logdrop-61 -j DROP -A logdrop-610 -m limit --limit 1/second -j LOG -A logdrop-610 -j DROP -A logdrop-611 -m limit --limit 1/second -j LOG -A logdrop-611 -j DROP -A logdrop-612 -m limit --limit 1/second -j LOG -A logdrop-612 -j DROP -A logdrop-613 -m limit --limit 1/second -j LOG -A logdrop-613 -j DROP -A logdrop-614 -m limit --limit 1/second -j LOG -A logdrop-614 -j DROP -A logdrop-615 -m limit --limit 1/second -j LOG -A logdrop-615 -j DROP -A logdrop-616 -m limit --limit 1/second -j LOG -A logdrop-616 -j DROP -A logdrop-617 -m limit --limit 1/second -j LOG -A logdrop-617 -j DROP -A logdrop-618 -m limit --limit 1/second -j LOG -A logdrop-618 -j DROP -A logdrop-619 -m limit --limit 1/second -j LOG -A logdrop-619 -j DROP -A logdrop-62 -m limit --limit 1/second -j LOG -A logdrop-62 -j DROP -A logdrop-620 -m limit --limit 1/second -j LOG -A logdrop-620 -j DROP -A logdrop-621 -m limit --limit 1/second -j LOG -A logdrop-621 -j DROP -A logdrop-622 -m limit --limit 1/second -j LOG -A logdrop-622 -j DROP -A logdrop-623 -m limit --limit 1/second -j LOG -A logdrop-623 -j DROP -A logdrop-624 -m limit --limit 1/second -j LOG -A logdrop-624 -j DROP -A logdrop-625 -m limit --limit 1/second -j LOG -A logdrop-625 -j DROP -A logdrop-626 -m limit --limit 1/second -j LOG -A logdrop-626 -j DROP -A logdrop-627 -m limit --limit 1/second -j LOG -A logdrop-627 -j DROP -A logdrop-628 -m limit --limit 1/second -j LOG -A logdrop-628 -j DROP -A logdrop-629 -m limit --limit 1/second -j LOG -A logdrop-629 -j DROP -A logdrop-63 -m limit --limit 1/second -j LOG -A logdrop-63 -j DROP -A logdrop-630 -m limit --limit 1/second -j LOG -A logdrop-630 -j DROP -A logdrop-631 -m limit --limit 1/second -j LOG -A logdrop-631 -j DROP -A logdrop-632 -m limit --limit 1/second -j LOG -A logdrop-632 -j DROP -A logdrop-633 -m limit --limit 1/second -j LOG -A logdrop-633 -j DROP -A logdrop-634 -m limit --limit 1/second -j LOG -A logdrop-634 -j DROP -A logdrop-635 -m limit --limit 1/second -j LOG -A logdrop-635 -j DROP -A logdrop-636 -m limit --limit 1/second -j LOG -A logdrop-636 -j DROP -A logdrop-637 -m limit --limit 1/second -j LOG -A logdrop-637 -j DROP -A logdrop-638 -m limit --limit 1/second -j LOG -A logdrop-638 -j DROP -A logdrop-639 -m limit --limit 1/second -j LOG -A logdrop-639 -j DROP -A logdrop-64 -m limit --limit 1/second -j LOG -A logdrop-64 -j DROP -A logdrop-640 -m limit --limit 1/second -j LOG -A logdrop-640 -j DROP -A logdrop-641 -m limit --limit 1/second -j LOG -A logdrop-641 -j DROP -A logdrop-642 -m limit --limit 1/second -j LOG -A logdrop-642 -j DROP -A logdrop-643 -m limit --limit 1/second -j LOG -A logdrop-643 -j DROP -A logdrop-644 -m limit --limit 1/second -j LOG -A logdrop-644 -j DROP -A logdrop-645 -m limit --limit 1/second -j LOG -A logdrop-645 -j DROP -A logdrop-646 -m limit --limit 1/second -j LOG -A logdrop-646 -j DROP -A logdrop-647 -m limit --limit 1/second -j LOG -A logdrop-647 -j DROP -A logdrop-648 -m limit --limit 1/second -j LOG -A logdrop-648 -j DROP -A logdrop-649 -m limit --limit 1/second -j LOG -A logdrop-649 -j DROP -A logdrop-65 -m limit --limit 1/second -j LOG -A logdrop-65 -j DROP -A logdrop-650 -j TEE --gateway fc00::2 -A logdrop-650 -j DROP -A logdrop-651 -j TEE --gateway fc00::2 -A logdrop-651 -j DROP -A logdrop-652 -j TEE --gateway fc00::2 -A logdrop-652 -j DROP -A logdrop-653 -j TEE --gateway fc00::2 -A logdrop-653 -j DROP -A logdrop-654 -j TEE --gateway fc00::2 -A logdrop-654 -j DROP -A logdrop-655 -j TEE --gateway fc00::2 -A logdrop-655 -j DROP -A logdrop-656 -j TEE --gateway fc00::2 -A logdrop-656 -j DROP -A logdrop-657 -j TEE --gateway fc00::2 -A logdrop-657 -j DROP -A logdrop-658 -j TEE --gateway fc00::2 -A logdrop-658 -j DROP -A logdrop-659 -j TEE --gateway fc00::2 -A logdrop-659 -j DROP -A logdrop-66 -m limit --limit 1/second -j LOG -A logdrop-66 -j DROP -A logdrop-660 -j TEE --gateway fc00::2 -A logdrop-660 -j DROP -A logdrop-661 -j TEE --gateway fc00::2 -A logdrop-661 -j DROP -A logdrop-662 -j TEE --gateway fc00::2 -A logdrop-662 -j DROP -A logdrop-663 -j TEE --gateway fc00::2 -A logdrop-663 -j DROP -A logdrop-664 -j TEE --gateway fc00::2 -A logdrop-664 -j DROP -A logdrop-665 -j TEE --gateway fc00::2 -A logdrop-665 -j DROP -A logdrop-666 -j TEE --gateway fc00::2 -A logdrop-666 -j DROP -A logdrop-667 -j TEE --gateway fc00::2 -A logdrop-667 -j DROP -A logdrop-668 -j TEE --gateway fc00::2 -A logdrop-668 -j DROP -A logdrop-669 -j TEE --gateway fc00::2 -A logdrop-669 -j DROP -A logdrop-67 -m limit --limit 1/second -j LOG -A logdrop-67 -j DROP -A logdrop-670 -j TEE --gateway fc00::2 -A logdrop-670 -j DROP -A logdrop-671 -j TEE --gateway fc00::2 -A logdrop-671 -j DROP -A logdrop-672 -j TEE --gateway fc00::2 -A logdrop-672 -j DROP -A logdrop-673 -j TEE --gateway fc00::2 -A logdrop-673 -j DROP -A logdrop-674 -j TEE --gateway fc00::2 -A logdrop-674 -j DROP -A logdrop-675 -j TEE --gateway fc00::2 -A logdrop-675 -j DROP -A logdrop-676 -j TEE --gateway fc00::2 -A logdrop-676 -j DROP -A logdrop-677 -j TEE --gateway fc00::2 -A logdrop-677 -j DROP -A logdrop-678 -j TEE --gateway fc00::2 -A logdrop-678 -j DROP -A logdrop-679 -j TEE --gateway fc00::2 -A logdrop-679 -j DROP -A logdrop-68 -m limit --limit 1/second -j LOG -A logdrop-68 -j DROP -A logdrop-680 -j TEE --gateway fc00::2 -A logdrop-680 -j DROP -A logdrop-681 -j TEE --gateway fc00::2 -A logdrop-681 -j DROP -A logdrop-682 -j TEE --gateway fc00::2 -A logdrop-682 -j DROP -A logdrop-683 -j TEE --gateway fc00::2 -A logdrop-683 -j DROP -A logdrop-684 -j TEE --gateway fc00::2 -A logdrop-684 -j DROP -A logdrop-685 -j TEE --gateway fc00::2 -A logdrop-685 -j DROP -A logdrop-686 -j TEE --gateway fc00::2 -A logdrop-686 -j DROP -A logdrop-687 -j TEE --gateway fc00::2 -A logdrop-687 -j DROP -A logdrop-688 -j TEE --gateway fc00::2 -A logdrop-688 -j DROP -A logdrop-689 -j TEE --gateway fc00::2 -A logdrop-689 -j DROP -A logdrop-69 -m limit --limit 1/second -j LOG -A logdrop-69 -j DROP -A logdrop-690 -j TEE --gateway fc00::2 -A logdrop-690 -j DROP -A logdrop-691 -j TEE --gateway fc00::2 -A logdrop-691 -j DROP -A logdrop-692 -j TEE --gateway fc00::2 -A logdrop-692 -j DROP -A logdrop-693 -j TEE --gateway fc00::2 -A logdrop-693 -j DROP -A logdrop-694 -j TEE --gateway fc00::2 -A logdrop-694 -j DROP -A logdrop-695 -j TEE --gateway fc00::2 -A logdrop-695 -j DROP -A logdrop-696 -j TEE --gateway fc00::2 -A logdrop-696 -j DROP -A logdrop-697 -j TEE --gateway fc00::2 -A logdrop-697 -j DROP -A logdrop-698 -j TEE --gateway fc00::2 -A logdrop-698 -j DROP -A logdrop-699 -j TEE --gateway fc00::2 -A logdrop-699 -j DROP -A logdrop-7 -m limit --limit 1/second -j LOG -A logdrop-7 -j DROP -A logdrop-70 -m limit --limit 1/second -j LOG -A logdrop-70 -j DROP -A logdrop-700 -j TEE --gateway fc00::2 -A logdrop-700 -j DROP -A logdrop-701 -j TEE --gateway fc00::2 -A logdrop-701 -j DROP -A logdrop-702 -j TEE --gateway fc00::2 -A logdrop-702 -j DROP -A logdrop-703 -j TEE --gateway fc00::2 -A logdrop-703 -j DROP -A logdrop-704 -j TEE --gateway fc00::2 -A logdrop-704 -j DROP -A logdrop-705 -j TEE --gateway fc00::2 -A logdrop-705 -j DROP -A logdrop-706 -j TEE --gateway fc00::2 -A logdrop-706 -j DROP -A logdrop-707 -j TEE --gateway fc00::2 -A logdrop-707 -j DROP -A logdrop-708 -j TEE --gateway fc00::2 -A logdrop-708 -j DROP -A logdrop-709 -j TEE --gateway fc00::2 -A logdrop-709 -j DROP -A logdrop-71 -m limit --limit 1/second -j LOG -A logdrop-71 -j DROP -A logdrop-710 -j TEE --gateway fc00::2 -A logdrop-710 -j DROP -A logdrop-711 -j TEE --gateway fc00::2 -A logdrop-711 -j DROP -A logdrop-712 -j TEE --gateway fc00::2 -A logdrop-712 -j DROP -A logdrop-713 -j TEE --gateway fc00::2 -A logdrop-713 -j DROP -A logdrop-714 -j TEE --gateway fc00::2 -A logdrop-714 -j DROP -A logdrop-715 -j TEE --gateway fc00::2 -A logdrop-715 -j DROP -A logdrop-716 -j TEE --gateway fc00::2 -A logdrop-716 -j DROP -A logdrop-717 -j TEE --gateway fc00::2 -A logdrop-717 -j DROP -A logdrop-718 -j TEE --gateway fc00::2 -A logdrop-718 -j DROP -A logdrop-719 -j TEE --gateway fc00::2 -A logdrop-719 -j DROP -A logdrop-72 -m limit --limit 1/second -j LOG -A logdrop-72 -j DROP -A logdrop-720 -j TEE --gateway fc00::2 -A logdrop-720 -j DROP -A logdrop-721 -j TEE --gateway fc00::2 -A logdrop-721 -j DROP -A logdrop-722 -j TEE --gateway fc00::2 -A logdrop-722 -j DROP -A logdrop-723 -j TEE --gateway fc00::2 -A logdrop-723 -j DROP -A logdrop-724 -j TEE --gateway fc00::2 -A logdrop-724 -j DROP -A logdrop-725 -j TEE --gateway fc00::2 -A logdrop-725 -j DROP -A logdrop-726 -j TEE --gateway fc00::2 -A logdrop-726 -j DROP -A logdrop-727 -j TEE --gateway fc00::2 -A logdrop-727 -j DROP -A logdrop-728 -j TEE --gateway fc00::2 -A logdrop-728 -j DROP -A logdrop-729 -j TEE --gateway fc00::2 -A logdrop-729 -j DROP -A logdrop-73 -m limit --limit 1/second -j LOG -A logdrop-73 -j DROP -A logdrop-730 -j TEE --gateway fc00::2 -A logdrop-730 -j DROP -A logdrop-731 -j TEE --gateway fc00::2 -A logdrop-731 -j DROP -A logdrop-732 -j TEE --gateway fc00::2 -A logdrop-732 -j DROP -A logdrop-733 -j TEE --gateway fc00::2 -A logdrop-733 -j DROP -A logdrop-734 -j TEE --gateway fc00::2 -A logdrop-734 -j DROP -A logdrop-735 -j TEE --gateway fc00::2 -A logdrop-735 -j DROP -A logdrop-736 -j TEE --gateway fc00::2 -A logdrop-736 -j DROP -A logdrop-737 -j TEE --gateway fc00::2 -A logdrop-737 -j DROP -A logdrop-738 -j TEE --gateway fc00::2 -A logdrop-738 -j DROP -A logdrop-739 -j TEE --gateway fc00::2 -A logdrop-739 -j DROP -A logdrop-74 -m limit --limit 1/second -j LOG -A logdrop-74 -j DROP -A logdrop-740 -j DROP -A logdrop-741 -j DROP -A logdrop-742 -j DROP -A logdrop-743 -j DROP -A logdrop-744 -j DROP -A logdrop-745 -j DROP -A logdrop-746 -j DROP -A logdrop-747 -j DROP -A logdrop-748 -j DROP -A logdrop-749 -j DROP -A logdrop-75 -m limit --limit 1/second -j LOG -A logdrop-75 -j DROP -A logdrop-750 -j DROP -A logdrop-751 -j DROP -A logdrop-752 -j DROP -A logdrop-753 -j DROP -A logdrop-754 -j DROP -A logdrop-755 -j DROP -A logdrop-756 -j DROP -A logdrop-757 -j DROP -A logdrop-758 -j DROP -A logdrop-759 -j DROP -A logdrop-76 -m limit --limit 1/second -j LOG -A logdrop-76 -j DROP -A logdrop-760 -j DROP -A logdrop-761 -j DROP -A logdrop-762 -j DROP -A logdrop-763 -j DROP -A logdrop-764 -j DROP -A logdrop-765 -j DROP -A logdrop-766 -j DROP -A logdrop-767 -j DROP -A logdrop-768 -j DROP -A logdrop-769 -j DROP -A logdrop-77 -m limit --limit 1/second -j LOG -A logdrop-77 -j DROP -A logdrop-770 -j DROP -A logdrop-771 -j DROP -A logdrop-772 -j DROP -A logdrop-773 -j DROP -A logdrop-774 -j DROP -A logdrop-775 -j DROP -A logdrop-776 -j DROP -A logdrop-777 -j DROP -A logdrop-778 -j DROP -A logdrop-779 -j DROP -A logdrop-78 -m limit --limit 1/second -j LOG -A logdrop-78 -j DROP -A logdrop-780 -j DROP -A logdrop-781 -j DROP -A logdrop-782 -j DROP -A logdrop-783 -j DROP -A logdrop-784 -j DROP -A logdrop-785 -j DROP -A logdrop-786 -j DROP -A logdrop-787 -j DROP -A logdrop-788 -j DROP -A logdrop-789 -j DROP -A logdrop-79 -m limit --limit 1/second -j LOG -A logdrop-79 -j DROP -A logdrop-790 -j DROP -A logdrop-791 -j DROP -A logdrop-792 -j DROP -A logdrop-793 -j DROP -A logdrop-794 -j DROP -A logdrop-795 -j DROP -A logdrop-796 -j DROP -A logdrop-797 -j DROP -A logdrop-798 -j DROP -A logdrop-799 -j DROP -A logdrop-8 -m limit --limit 1/second -j LOG -A logdrop-8 -j DROP -A logdrop-80 -m limit --limit 1/second -j LOG -A logdrop-80 -j DROP -A logdrop-800 -j DROP -A logdrop-801 -j DROP -A logdrop-802 -j DROP -A logdrop-803 -j DROP -A logdrop-804 -j DROP -A logdrop-805 -j DROP -A logdrop-806 -j DROP -A logdrop-807 -j DROP -A logdrop-808 -j DROP -A logdrop-809 -j DROP -A logdrop-81 -m limit --limit 1/second -j LOG -A logdrop-81 -j DROP -A logdrop-810 -j DROP -A logdrop-811 -j DROP -A logdrop-812 -j DROP -A logdrop-813 -j DROP -A logdrop-814 -j DROP -A logdrop-815 -j DROP -A logdrop-816 -j DROP -A logdrop-817 -j DROP -A logdrop-818 -j DROP -A logdrop-819 -j DROP -A logdrop-82 -m limit --limit 1/second -j LOG -A logdrop-82 -j DROP -A logdrop-820 -j DROP -A logdrop-821 -j DROP -A logdrop-822 -j DROP -A logdrop-823 -j DROP -A logdrop-824 -j DROP -A logdrop-825 -j DROP -A logdrop-826 -j DROP -A logdrop-827 -j DROP -A logdrop-828 -j DROP -A logdrop-829 -j DROP -A logdrop-83 -m limit --limit 1/second -j LOG -A logdrop-83 -j DROP -A logdrop-830 -m limit --limit 1/second -j LOG -A logdrop-830 -j DROP -A logdrop-831 -m limit --limit 1/second -j LOG -A logdrop-831 -j DROP -A logdrop-832 -m limit --limit 1/second -j LOG -A logdrop-832 -j DROP -A logdrop-833 -m limit --limit 1/second -j LOG -A logdrop-833 -j DROP -A logdrop-834 -m limit --limit 1/second -j LOG -A logdrop-834 -j DROP -A logdrop-835 -m limit --limit 1/second -j LOG -A logdrop-835 -j DROP -A logdrop-836 -m limit --limit 1/second -j LOG -A logdrop-836 -j DROP -A logdrop-837 -m limit --limit 1/second -j LOG -A logdrop-837 -j DROP -A logdrop-838 -m limit --limit 1/second -j LOG -A logdrop-838 -j DROP -A logdrop-839 -m limit --limit 1/second -j LOG -A logdrop-839 -j DROP -A logdrop-84 -m limit --limit 1/second -j LOG -A logdrop-84 -j DROP -A logdrop-840 -m limit --limit 1/second -j LOG -A logdrop-840 -j DROP -A logdrop-841 -m limit --limit 1/second -j LOG -A logdrop-841 -j DROP -A logdrop-842 -m limit --limit 1/second -j LOG -A logdrop-842 -j DROP -A logdrop-843 -m limit --limit 1/second -j LOG -A logdrop-843 -j DROP -A logdrop-844 -m limit --limit 1/second -j LOG -A logdrop-844 -j DROP -A logdrop-845 -m limit --limit 1/second -j LOG -A logdrop-845 -j DROP -A logdrop-846 -m limit --limit 1/second -j LOG -A logdrop-846 -j DROP -A logdrop-847 -m limit --limit 1/second -j LOG -A logdrop-847 -j DROP -A logdrop-848 -m limit --limit 1/second -j LOG -A logdrop-848 -j DROP -A logdrop-849 -m limit --limit 1/second -j LOG -A logdrop-849 -j DROP -A logdrop-85 -m limit --limit 1/second -j LOG -A logdrop-85 -j DROP -A logdrop-850 -m limit --limit 1/second -j LOG -A logdrop-850 -j DROP -A logdrop-851 -m limit --limit 1/second -j LOG -A logdrop-851 -j DROP -A logdrop-852 -m limit --limit 1/second -j LOG -A logdrop-852 -j DROP -A logdrop-853 -m limit --limit 1/second -j LOG -A logdrop-853 -j DROP -A logdrop-854 -m limit --limit 1/second -j LOG -A logdrop-854 -j DROP -A logdrop-855 -m limit --limit 1/second -j LOG -A logdrop-855 -j DROP -A logdrop-856 -m limit --limit 1/second -j LOG -A logdrop-856 -j DROP -A logdrop-857 -m limit --limit 1/second -j LOG -A logdrop-857 -j DROP -A logdrop-858 -m limit --limit 1/second -j LOG -A logdrop-858 -j DROP -A logdrop-859 -m limit --limit 1/second -j LOG -A logdrop-859 -j DROP -A logdrop-86 -m limit --limit 1/second -j LOG -A logdrop-86 -j DROP -A logdrop-860 -m limit --limit 1/second -j LOG -A logdrop-860 -j DROP -A logdrop-861 -m limit --limit 1/second -j LOG -A logdrop-861 -j DROP -A logdrop-862 -m limit --limit 1/second -j LOG -A logdrop-862 -j DROP -A logdrop-863 -m limit --limit 1/second -j LOG -A logdrop-863 -j DROP -A logdrop-864 -m limit --limit 1/second -j LOG -A logdrop-864 -j DROP -A logdrop-865 -m limit --limit 1/second -j LOG -A logdrop-865 -j DROP -A logdrop-866 -m limit --limit 1/second -j LOG -A logdrop-866 -j DROP -A logdrop-867 -m limit --limit 1/second -j LOG -A logdrop-867 -j DROP -A logdrop-868 -m limit --limit 1/second -j LOG -A logdrop-868 -j DROP -A logdrop-869 -m limit --limit 1/second -j LOG -A logdrop-869 -j DROP -A logdrop-87 -m limit --limit 1/second -j LOG -A logdrop-87 -j DROP -A logdrop-870 -m limit --limit 1/second -j LOG -A logdrop-870 -j DROP -A logdrop-871 -m limit --limit 1/second -j LOG -A logdrop-871 -j DROP -A logdrop-872 -m limit --limit 1/second -j LOG -A logdrop-872 -j DROP -A logdrop-873 -m limit --limit 1/second -j LOG -A logdrop-873 -j DROP -A logdrop-874 -m limit --limit 1/second -j LOG -A logdrop-874 -j DROP -A logdrop-875 -m limit --limit 1/second -j LOG -A logdrop-875 -j DROP -A logdrop-876 -m limit --limit 1/second -j LOG -A logdrop-876 -j DROP -A logdrop-877 -m limit --limit 1/second -j LOG -A logdrop-877 -j DROP -A logdrop-878 -m limit --limit 1/second -j LOG -A logdrop-878 -j DROP -A logdrop-879 -m limit --limit 1/second -j LOG -A logdrop-879 -j DROP -A logdrop-88 -m limit --limit 1/second -j LOG -A logdrop-88 -j DROP -A logdrop-880 -m limit --limit 1/second -j LOG -A logdrop-880 -j DROP -A logdrop-881 -m limit --limit 1/second -j LOG -A logdrop-881 -j DROP -A logdrop-882 -m limit --limit 1/second -j LOG -A logdrop-882 -j DROP -A logdrop-883 -m limit --limit 1/second -j LOG -A logdrop-883 -j DROP -A logdrop-884 -m limit --limit 1/second -j LOG -A logdrop-884 -j DROP -A logdrop-885 -m limit --limit 1/second -j LOG -A logdrop-885 -j DROP -A logdrop-886 -m limit --limit 1/second -j LOG -A logdrop-886 -j DROP -A logdrop-887 -m limit --limit 1/second -j LOG -A logdrop-887 -j DROP -A logdrop-888 -m limit --limit 1/second -j LOG -A logdrop-888 -j DROP -A logdrop-889 -m limit --limit 1/second -j LOG -A logdrop-889 -j DROP -A logdrop-89 -m limit --limit 1/second -j LOG -A logdrop-89 -j DROP -A logdrop-890 -m limit --limit 1/second -j LOG -A logdrop-890 -j DROP -A logdrop-891 -m limit --limit 1/second -j LOG -A logdrop-891 -j DROP -A logdrop-892 -m limit --limit 1/second -j LOG -A logdrop-892 -j DROP -A logdrop-893 -m limit --limit 1/second -j LOG -A logdrop-893 -j DROP -A logdrop-894 -m limit --limit 1/second -j LOG -A logdrop-894 -j DROP -A logdrop-895 -m limit --limit 1/second -j LOG -A logdrop-895 -j DROP -A logdrop-896 -m limit --limit 1/second -j LOG -A logdrop-896 -j DROP -A logdrop-897 -m limit --limit 1/second -j LOG -A logdrop-897 -j DROP -A logdrop-898 -m limit --limit 1/second -j LOG -A logdrop-898 -j DROP -A logdrop-899 -m limit --limit 1/second -j LOG -A logdrop-899 -j DROP -A logdrop-9 -m limit --limit 1/second -j LOG -A logdrop-9 -j DROP -A logdrop-90 -m limit --limit 1/second -j LOG -A logdrop-90 -j DROP -A logdrop-900 -m limit --limit 1/second -j LOG -A logdrop-900 -j DROP -A logdrop-901 -m limit --limit 1/second -j LOG -A logdrop-901 -j DROP -A logdrop-902 -m limit --limit 1/second -j LOG -A logdrop-902 -j DROP -A logdrop-903 -m limit --limit 1/second -j LOG -A logdrop-903 -j DROP -A logdrop-904 -m limit --limit 1/second -j LOG -A logdrop-904 -j DROP -A logdrop-905 -m limit --limit 1/second -j LOG -A logdrop-905 -j DROP -A logdrop-906 -m limit --limit 1/second -j LOG -A logdrop-906 -j DROP -A logdrop-907 -m limit --limit 1/second -j LOG -A logdrop-907 -j DROP -A logdrop-908 -m limit --limit 1/second -j LOG -A logdrop-908 -j DROP -A logdrop-909 -m limit --limit 1/second -j LOG -A logdrop-909 -j DROP -A logdrop-91 -m limit --limit 1/second -j LOG -A logdrop-91 -j DROP -A logdrop-910 -m limit --limit 1/second -j LOG -A logdrop-910 -j DROP -A logdrop-911 -m limit --limit 1/second -j LOG -A logdrop-911 -j DROP -A logdrop-912 -m limit --limit 1/second -j LOG -A logdrop-912 -j DROP -A logdrop-913 -m limit --limit 1/second -j LOG -A logdrop-913 -j DROP -A logdrop-914 -m limit --limit 1/second -j LOG -A logdrop-914 -j DROP -A logdrop-915 -m limit --limit 1/second -j LOG -A logdrop-915 -j DROP -A logdrop-916 -m limit --limit 1/second -j LOG -A logdrop-916 -j DROP -A logdrop-917 -m limit --limit 1/second -j LOG -A logdrop-917 -j DROP -A logdrop-918 -m limit --limit 1/second -j LOG -A logdrop-918 -j DROP -A logdrop-919 -m limit --limit 1/second -j LOG -A logdrop-919 -j DROP -A logdrop-92 -m limit --limit 1/second -j LOG -A logdrop-92 -j DROP -A logdrop-920 -j TEE --gateway fc00::2 -A logdrop-920 -j DROP -A logdrop-921 -j TEE --gateway fc00::2 -A logdrop-921 -j DROP -A logdrop-922 -j TEE --gateway fc00::2 -A logdrop-922 -j DROP -A logdrop-923 -j TEE --gateway fc00::2 -A logdrop-923 -j DROP -A logdrop-924 -j TEE --gateway fc00::2 -A logdrop-924 -j DROP -A logdrop-925 -j TEE --gateway fc00::2 -A logdrop-925 -j DROP -A logdrop-926 -j TEE --gateway fc00::2 -A logdrop-926 -j DROP -A logdrop-927 -j TEE --gateway fc00::2 -A logdrop-927 -j DROP -A logdrop-928 -j TEE --gateway fc00::2 -A logdrop-928 -j DROP -A logdrop-929 -j TEE --gateway fc00::2 -A logdrop-929 -j DROP -A logdrop-93 -m limit --limit 1/second -j LOG -A logdrop-93 -j DROP -A logdrop-930 -j TEE --gateway fc00::2 -A logdrop-930 -j DROP -A logdrop-931 -j TEE --gateway fc00::2 -A logdrop-931 -j DROP -A logdrop-932 -j TEE --gateway fc00::2 -A logdrop-932 -j DROP -A logdrop-933 -j TEE --gateway fc00::2 -A logdrop-933 -j DROP -A logdrop-934 -j TEE --gateway fc00::2 -A logdrop-934 -j DROP -A logdrop-935 -j TEE --gateway fc00::2 -A logdrop-935 -j DROP -A logdrop-936 -j TEE --gateway fc00::2 -A logdrop-936 -j DROP -A logdrop-937 -j TEE --gateway fc00::2 -A logdrop-937 -j DROP -A logdrop-938 -j TEE --gateway fc00::2 -A logdrop-938 -j DROP -A logdrop-939 -j TEE --gateway fc00::2 -A logdrop-939 -j DROP -A logdrop-94 -m limit --limit 1/second -j LOG -A logdrop-94 -j DROP -A logdrop-940 -j TEE --gateway fc00::2 -A logdrop-940 -j DROP -A logdrop-941 -j TEE --gateway fc00::2 -A logdrop-941 -j DROP -A logdrop-942 -j TEE --gateway fc00::2 -A logdrop-942 -j DROP -A logdrop-943 -j TEE --gateway fc00::2 -A logdrop-943 -j DROP -A logdrop-944 -j TEE --gateway fc00::2 -A logdrop-944 -j DROP -A logdrop-945 -j TEE --gateway fc00::2 -A logdrop-945 -j DROP -A logdrop-946 -j TEE --gateway fc00::2 -A logdrop-946 -j DROP -A logdrop-947 -j TEE --gateway fc00::2 -A logdrop-947 -j DROP -A logdrop-948 -j TEE --gateway fc00::2 -A logdrop-948 -j DROP -A logdrop-949 -j TEE --gateway fc00::2 -A logdrop-949 -j DROP -A logdrop-95 -m limit --limit 1/second -j LOG -A logdrop-95 -j DROP -A logdrop-950 -j TEE --gateway fc00::2 -A logdrop-950 -j DROP -A logdrop-951 -j TEE --gateway fc00::2 -A logdrop-951 -j DROP -A logdrop-952 -j TEE --gateway fc00::2 -A logdrop-952 -j DROP -A logdrop-953 -j TEE --gateway fc00::2 -A logdrop-953 -j DROP -A logdrop-954 -j TEE --gateway fc00::2 -A logdrop-954 -j DROP -A logdrop-955 -j TEE --gateway fc00::2 -A logdrop-955 -j DROP -A logdrop-956 -j TEE --gateway fc00::2 -A logdrop-956 -j DROP -A logdrop-957 -j TEE --gateway fc00::2 -A logdrop-957 -j DROP -A logdrop-958 -j TEE --gateway fc00::2 -A logdrop-958 -j DROP -A logdrop-959 -j TEE --gateway fc00::2 -A logdrop-959 -j DROP -A logdrop-96 -m limit --limit 1/second -j LOG -A logdrop-96 -j DROP -A logdrop-960 -j TEE --gateway fc00::2 -A logdrop-960 -j DROP -A logdrop-961 -j TEE --gateway fc00::2 -A logdrop-961 -j DROP -A logdrop-962 -j TEE --gateway fc00::2 -A logdrop-962 -j DROP -A logdrop-963 -j TEE --gateway fc00::2 -A logdrop-963 -j DROP -A logdrop-964 -j TEE --gateway fc00::2 -A logdrop-964 -j DROP -A logdrop-965 -j TEE --gateway fc00::2 -A logdrop-965 -j DROP -A logdrop-966 -j TEE --gateway fc00::2 -A logdrop-966 -j DROP -A logdrop-967 -j TEE --gateway fc00::2 -A logdrop-967 -j DROP -A logdrop-968 -j TEE --gateway fc00::2 -A logdrop-968 -j DROP -A logdrop-969 -j TEE --gateway fc00::2 -A logdrop-969 -j DROP -A logdrop-97 -m limit --limit 1/second -j LOG -A logdrop-97 -j DROP -A logdrop-970 -j TEE --gateway fc00::2 -A logdrop-970 -j DROP -A logdrop-971 -j TEE --gateway fc00::2 -A logdrop-971 -j DROP -A logdrop-972 -j TEE --gateway fc00::2 -A logdrop-972 -j DROP -A logdrop-973 -j TEE --gateway fc00::2 -A logdrop-973 -j DROP -A logdrop-974 -j TEE --gateway fc00::2 -A logdrop-974 -j DROP -A logdrop-975 -j TEE --gateway fc00::2 -A logdrop-975 -j DROP -A logdrop-976 -j TEE --gateway fc00::2 -A logdrop-976 -j DROP -A logdrop-977 -j TEE --gateway fc00::2 -A logdrop-977 -j DROP -A logdrop-978 -j TEE --gateway fc00::2 -A logdrop-978 -j DROP -A logdrop-979 -j TEE --gateway fc00::2 -A logdrop-979 -j DROP -A logdrop-98 -m limit --limit 1/second -j LOG -A logdrop-98 -j DROP -A logdrop-980 -j TEE --gateway fc00::2 -A logdrop-980 -j DROP -A logdrop-981 -j TEE --gateway fc00::2 -A logdrop-981 -j DROP -A logdrop-982 -j TEE --gateway fc00::2 -A logdrop-982 -j DROP -A logdrop-983 -j TEE --gateway fc00::2 -A logdrop-983 -j DROP -A logdrop-984 -j TEE --gateway fc00::2 -A logdrop-984 -j DROP -A logdrop-985 -j TEE --gateway fc00::2 -A logdrop-985 -j DROP -A logdrop-986 -j TEE --gateway fc00::2 -A logdrop-986 -j DROP -A logdrop-987 -j TEE --gateway fc00::2 -A logdrop-987 -j DROP -A logdrop-988 -j TEE --gateway fc00::2 -A logdrop-988 -j DROP -A logdrop-989 -j TEE --gateway fc00::2 -A logdrop-989 -j DROP -A logdrop-99 -m limit --limit 1/second -j LOG -A logdrop-99 -j DROP -A logdrop-990 -j TEE --gateway fc00::2 -A logdrop-990 -j DROP -A logdrop-991 -j TEE --gateway fc00::2 -A logdrop-991 -j DROP -A logdrop-992 -j TEE --gateway fc00::2 -A logdrop-992 -j DROP -A logdrop-993 -j TEE --gateway fc00::2 -A logdrop-993 -j DROP -A logdrop-994 -j TEE --gateway fc00::2 -A logdrop-994 -j DROP -A logdrop-995 -j TEE --gateway fc00::2 -A logdrop-995 -j DROP -A logdrop-996 -j TEE --gateway fc00::2 -A logdrop-996 -j DROP -A logdrop-997 -j TEE --gateway fc00::2 -A logdrop-997 -j DROP -A logdrop-998 -j TEE --gateway fc00::2 -A logdrop-998 -j DROP -A logdrop-999 -j TEE --gateway fc00::2 -A logdrop-999 -j DROP -A logdrop-ntp-0 -m limit --limit 1/second -j LOG -A logdrop-ntp-0 -j DROP -A logdrop-ntp-1 -m limit --limit 1/second -j LOG -A logdrop-ntp-1 -j DROP -A logdrop-ntp-10 -m limit --limit 1/second -j LOG -A logdrop-ntp-10 -j DROP -A logdrop-ntp-100 -j TEE --gateway fc00::2 -A logdrop-ntp-100 -j DROP -A logdrop-ntp-101 -j TEE --gateway fc00::2 -A logdrop-ntp-101 -j DROP -A logdrop-ntp-102 -j TEE --gateway fc00::2 -A logdrop-ntp-102 -j DROP -A logdrop-ntp-103 -j TEE --gateway fc00::2 -A logdrop-ntp-103 -j DROP -A logdrop-ntp-104 -j TEE --gateway fc00::2 -A logdrop-ntp-104 -j DROP -A logdrop-ntp-105 -j TEE --gateway fc00::2 -A logdrop-ntp-105 -j DROP -A logdrop-ntp-106 -j TEE --gateway fc00::2 -A logdrop-ntp-106 -j DROP -A logdrop-ntp-107 -j TEE --gateway fc00::2 -A logdrop-ntp-107 -j DROP -A logdrop-ntp-108 -j TEE --gateway fc00::2 -A logdrop-ntp-108 -j DROP -A logdrop-ntp-109 -j TEE --gateway fc00::2 -A logdrop-ntp-109 -j DROP -A logdrop-ntp-11 -m limit --limit 1/second -j LOG -A logdrop-ntp-11 -j DROP -A logdrop-ntp-110 -j TEE --gateway fc00::2 -A logdrop-ntp-110 -j DROP -A logdrop-ntp-111 -j TEE --gateway fc00::2 -A logdrop-ntp-111 -j DROP -A logdrop-ntp-112 -j TEE --gateway fc00::2 -A logdrop-ntp-112 -j DROP -A logdrop-ntp-113 -j TEE --gateway fc00::2 -A logdrop-ntp-113 -j DROP -A logdrop-ntp-114 -j TEE --gateway fc00::2 -A logdrop-ntp-114 -j DROP -A logdrop-ntp-115 -j TEE --gateway fc00::2 -A logdrop-ntp-115 -j DROP -A logdrop-ntp-116 -j TEE --gateway fc00::2 -A logdrop-ntp-116 -j DROP -A logdrop-ntp-117 -j TEE --gateway fc00::2 -A logdrop-ntp-117 -j DROP -A logdrop-ntp-118 -j TEE --gateway fc00::2 -A logdrop-ntp-118 -j DROP -A logdrop-ntp-119 -j TEE --gateway fc00::2 -A logdrop-ntp-119 -j DROP -A logdrop-ntp-12 -m limit --limit 1/second -j LOG -A logdrop-ntp-12 -j DROP -A logdrop-ntp-120 -j TEE --gateway fc00::2 -A logdrop-ntp-120 -j DROP -A logdrop-ntp-121 -j TEE --gateway fc00::2 -A logdrop-ntp-121 -j DROP -A logdrop-ntp-122 -j TEE --gateway fc00::2 -A logdrop-ntp-122 -j DROP -A logdrop-ntp-123 -j TEE --gateway fc00::2 -A logdrop-ntp-123 -j DROP -A logdrop-ntp-124 -j TEE --gateway fc00::2 -A logdrop-ntp-124 -j DROP -A logdrop-ntp-125 -j TEE --gateway fc00::2 -A logdrop-ntp-125 -j DROP -A logdrop-ntp-126 -j TEE --gateway fc00::2 -A logdrop-ntp-126 -j DROP -A logdrop-ntp-127 -j TEE --gateway fc00::2 -A logdrop-ntp-127 -j DROP -A logdrop-ntp-128 -j TEE --gateway fc00::2 -A logdrop-ntp-128 -j DROP -A logdrop-ntp-129 -j TEE --gateway fc00::2 -A logdrop-ntp-129 -j DROP -A logdrop-ntp-13 -m limit --limit 1/second -j LOG -A logdrop-ntp-13 -j DROP -A logdrop-ntp-130 -j TEE --gateway fc00::2 -A logdrop-ntp-130 -j DROP -A logdrop-ntp-131 -j TEE --gateway fc00::2 -A logdrop-ntp-131 -j DROP -A logdrop-ntp-132 -j TEE --gateway fc00::2 -A logdrop-ntp-132 -j DROP -A logdrop-ntp-133 -j TEE --gateway fc00::2 -A logdrop-ntp-133 -j DROP -A logdrop-ntp-134 -j TEE --gateway fc00::2 -A logdrop-ntp-134 -j DROP -A logdrop-ntp-135 -j TEE --gateway fc00::2 -A logdrop-ntp-135 -j DROP -A logdrop-ntp-136 -j TEE --gateway fc00::2 -A logdrop-ntp-136 -j DROP -A logdrop-ntp-137 -j TEE --gateway fc00::2 -A logdrop-ntp-137 -j DROP -A logdrop-ntp-138 -j TEE --gateway fc00::2 -A logdrop-ntp-138 -j DROP -A logdrop-ntp-139 -j TEE --gateway fc00::2 -A logdrop-ntp-139 -j DROP -A logdrop-ntp-14 -m limit --limit 1/second -j LOG -A logdrop-ntp-14 -j DROP -A logdrop-ntp-140 -j TEE --gateway fc00::2 -A logdrop-ntp-140 -j DROP -A logdrop-ntp-141 -j TEE --gateway fc00::2 -A logdrop-ntp-141 -j DROP -A logdrop-ntp-142 -j TEE --gateway fc00::2 -A logdrop-ntp-142 -j DROP -A logdrop-ntp-143 -j TEE --gateway fc00::2 -A logdrop-ntp-143 -j DROP -A logdrop-ntp-144 -j TEE --gateway fc00::2 -A logdrop-ntp-144 -j DROP -A logdrop-ntp-145 -j TEE --gateway fc00::2 -A logdrop-ntp-145 -j DROP -A logdrop-ntp-146 -j TEE --gateway fc00::2 -A logdrop-ntp-146 -j DROP -A logdrop-ntp-147 -j TEE --gateway fc00::2 -A logdrop-ntp-147 -j DROP -A logdrop-ntp-148 -j TEE --gateway fc00::2 -A logdrop-ntp-148 -j DROP -A logdrop-ntp-149 -j TEE --gateway fc00::2 -A logdrop-ntp-149 -j DROP -A logdrop-ntp-15 -m limit --limit 1/second -j LOG -A logdrop-ntp-15 -j DROP -A logdrop-ntp-150 -j TEE --gateway fc00::2 -A logdrop-ntp-150 -j DROP -A logdrop-ntp-151 -j TEE --gateway fc00::2 -A logdrop-ntp-151 -j DROP -A logdrop-ntp-152 -j TEE --gateway fc00::2 -A logdrop-ntp-152 -j DROP -A logdrop-ntp-153 -j TEE --gateway fc00::2 -A logdrop-ntp-153 -j DROP -A logdrop-ntp-154 -j TEE --gateway fc00::2 -A logdrop-ntp-154 -j DROP -A logdrop-ntp-155 -j TEE --gateway fc00::2 -A logdrop-ntp-155 -j DROP -A logdrop-ntp-156 -j TEE --gateway fc00::2 -A logdrop-ntp-156 -j DROP -A logdrop-ntp-157 -j TEE --gateway fc00::2 -A logdrop-ntp-157 -j DROP -A logdrop-ntp-158 -j TEE --gateway fc00::2 -A logdrop-ntp-158 -j DROP -A logdrop-ntp-159 -j TEE --gateway fc00::2 -A logdrop-ntp-159 -j DROP -A logdrop-ntp-16 -m limit --limit 1/second -j LOG -A logdrop-ntp-16 -j DROP -A logdrop-ntp-160 -j TEE --gateway fc00::2 -A logdrop-ntp-160 -j DROP -A logdrop-ntp-161 -j TEE --gateway fc00::2 -A logdrop-ntp-161 -j DROP -A logdrop-ntp-162 -j TEE --gateway fc00::2 -A logdrop-ntp-162 -j DROP -A logdrop-ntp-163 -j TEE --gateway fc00::2 -A logdrop-ntp-163 -j DROP -A logdrop-ntp-164 -j TEE --gateway fc00::2 -A logdrop-ntp-164 -j DROP -A logdrop-ntp-165 -j TEE --gateway fc00::2 -A logdrop-ntp-165 -j DROP -A logdrop-ntp-166 -j TEE --gateway fc00::2 -A logdrop-ntp-166 -j DROP -A logdrop-ntp-167 -j TEE --gateway fc00::2 -A logdrop-ntp-167 -j DROP -A logdrop-ntp-168 -j TEE --gateway fc00::2 -A logdrop-ntp-168 -j DROP -A logdrop-ntp-169 -j TEE --gateway fc00::2 -A logdrop-ntp-169 -j DROP -A logdrop-ntp-17 -m limit --limit 1/second -j LOG -A logdrop-ntp-17 -j DROP -A logdrop-ntp-170 -j TEE --gateway fc00::2 -A logdrop-ntp-170 -j DROP -A logdrop-ntp-171 -j TEE --gateway fc00::2 -A logdrop-ntp-171 -j DROP -A logdrop-ntp-172 -j TEE --gateway fc00::2 -A logdrop-ntp-172 -j DROP -A logdrop-ntp-173 -j TEE --gateway fc00::2 -A logdrop-ntp-173 -j DROP -A logdrop-ntp-174 -j TEE --gateway fc00::2 -A logdrop-ntp-174 -j DROP -A logdrop-ntp-175 -j TEE --gateway fc00::2 -A logdrop-ntp-175 -j DROP -A logdrop-ntp-176 -j TEE --gateway fc00::2 -A logdrop-ntp-176 -j DROP -A logdrop-ntp-177 -j TEE --gateway fc00::2 -A logdrop-ntp-177 -j DROP -A logdrop-ntp-178 -j TEE --gateway fc00::2 -A logdrop-ntp-178 -j DROP -A logdrop-ntp-179 -j TEE --gateway fc00::2 -A logdrop-ntp-179 -j DROP -A logdrop-ntp-18 -m limit --limit 1/second -j LOG -A logdrop-ntp-18 -j DROP -A logdrop-ntp-180 -j TEE --gateway fc00::2 -A logdrop-ntp-180 -j DROP -A logdrop-ntp-181 -j TEE --gateway fc00::2 -A logdrop-ntp-181 -j DROP -A logdrop-ntp-182 -j TEE --gateway fc00::2 -A logdrop-ntp-182 -j DROP -A logdrop-ntp-183 -j TEE --gateway fc00::2 -A logdrop-ntp-183 -j DROP -A logdrop-ntp-184 -j TEE --gateway fc00::2 -A logdrop-ntp-184 -j DROP -A logdrop-ntp-185 -j TEE --gateway fc00::2 -A logdrop-ntp-185 -j DROP -A logdrop-ntp-186 -j TEE --gateway fc00::2 -A logdrop-ntp-186 -j DROP -A logdrop-ntp-187 -j TEE --gateway fc00::2 -A logdrop-ntp-187 -j DROP -A logdrop-ntp-188 -j TEE --gateway fc00::2 -A logdrop-ntp-188 -j DROP -A logdrop-ntp-189 -j TEE --gateway fc00::2 -A logdrop-ntp-189 -j DROP -A logdrop-ntp-19 -m limit --limit 1/second -j LOG -A logdrop-ntp-19 -j DROP -A logdrop-ntp-190 -j DROP -A logdrop-ntp-191 -j DROP -A logdrop-ntp-192 -j DROP -A logdrop-ntp-193 -j DROP -A logdrop-ntp-194 -j DROP -A logdrop-ntp-195 -j DROP -A logdrop-ntp-196 -j DROP -A logdrop-ntp-197 -j DROP -A logdrop-ntp-198 -j DROP -A logdrop-ntp-199 -j DROP -A logdrop-ntp-2 -m limit --limit 1/second -j LOG -A logdrop-ntp-2 -j DROP -A logdrop-ntp-20 -m limit --limit 1/second -j LOG -A logdrop-ntp-20 -j DROP -A logdrop-ntp-200 -j DROP -A logdrop-ntp-201 -j DROP -A logdrop-ntp-202 -j DROP -A logdrop-ntp-203 -j DROP -A logdrop-ntp-204 -j DROP -A logdrop-ntp-205 -j DROP -A logdrop-ntp-206 -j DROP -A logdrop-ntp-207 -j DROP -A logdrop-ntp-208 -j DROP -A logdrop-ntp-209 -j DROP -A logdrop-ntp-21 -m limit --limit 1/second -j LOG -A logdrop-ntp-21 -j DROP -A logdrop-ntp-210 -j DROP -A logdrop-ntp-211 -j DROP -A logdrop-ntp-212 -j DROP -A logdrop-ntp-213 -j DROP -A logdrop-ntp-214 -j DROP -A logdrop-ntp-215 -j DROP -A logdrop-ntp-216 -j DROP -A logdrop-ntp-217 -j DROP -A logdrop-ntp-218 -j DROP -A logdrop-ntp-219 -j DROP -A logdrop-ntp-22 -m limit --limit 1/second -j LOG -A logdrop-ntp-22 -j DROP -A logdrop-ntp-220 -j DROP -A logdrop-ntp-221 -j DROP -A logdrop-ntp-222 -j DROP -A logdrop-ntp-223 -j DROP -A logdrop-ntp-224 -j DROP -A logdrop-ntp-225 -j DROP -A logdrop-ntp-226 -j DROP -A logdrop-ntp-227 -j DROP -A logdrop-ntp-228 -j DROP -A logdrop-ntp-229 -j DROP -A logdrop-ntp-23 -m limit --limit 1/second -j LOG -A logdrop-ntp-23 -j DROP -A logdrop-ntp-230 -j DROP -A logdrop-ntp-231 -j DROP -A logdrop-ntp-232 -j DROP -A logdrop-ntp-233 -j DROP -A logdrop-ntp-234 -j DROP -A logdrop-ntp-235 -j DROP -A logdrop-ntp-236 -j DROP -A logdrop-ntp-237 -j DROP -A logdrop-ntp-238 -j DROP -A logdrop-ntp-239 -j DROP -A logdrop-ntp-24 -m limit --limit 1/second -j LOG -A logdrop-ntp-24 -j DROP -A logdrop-ntp-240 -j DROP -A logdrop-ntp-241 -j DROP -A logdrop-ntp-242 -j DROP -A logdrop-ntp-243 -j DROP -A logdrop-ntp-244 -j DROP -A logdrop-ntp-245 -j DROP -A logdrop-ntp-246 -j DROP -A logdrop-ntp-247 -j DROP -A logdrop-ntp-248 -j DROP -A logdrop-ntp-249 -j DROP -A logdrop-ntp-25 -m limit --limit 1/second -j LOG -A logdrop-ntp-25 -j DROP -A logdrop-ntp-250 -j DROP -A logdrop-ntp-251 -j DROP -A logdrop-ntp-252 -j DROP -A logdrop-ntp-253 -j DROP -A logdrop-ntp-254 -j DROP -A logdrop-ntp-255 -j DROP -A logdrop-ntp-256 -j DROP -A logdrop-ntp-257 -j DROP -A logdrop-ntp-258 -j DROP -A logdrop-ntp-259 -j DROP -A logdrop-ntp-26 -m limit --limit 1/second -j LOG -A logdrop-ntp-26 -j DROP -A logdrop-ntp-260 -j DROP -A logdrop-ntp-261 -j DROP -A logdrop-ntp-262 -j DROP -A logdrop-ntp-263 -j DROP -A logdrop-ntp-264 -j DROP -A logdrop-ntp-265 -j DROP -A logdrop-ntp-266 -j DROP -A logdrop-ntp-267 -j DROP -A logdrop-ntp-268 -j DROP -A logdrop-ntp-269 -j DROP -A logdrop-ntp-27 -m limit --limit 1/second -j LOG -A logdrop-ntp-27 -j DROP -A logdrop-ntp-270 -j DROP -A logdrop-ntp-271 -j DROP -A logdrop-ntp-272 -j DROP -A logdrop-ntp-273 -j DROP -A logdrop-ntp-274 -j DROP -A logdrop-ntp-275 -j DROP -A logdrop-ntp-276 -j DROP -A logdrop-ntp-277 -j DROP -A logdrop-ntp-278 -j DROP -A logdrop-ntp-279 -j DROP -A logdrop-ntp-28 -m limit --limit 1/second -j LOG -A logdrop-ntp-28 -j DROP -A logdrop-ntp-280 -m limit --limit 1/second -j LOG -A logdrop-ntp-280 -j DROP -A logdrop-ntp-281 -m limit --limit 1/second -j LOG -A logdrop-ntp-281 -j DROP -A logdrop-ntp-282 -m limit --limit 1/second -j LOG -A logdrop-ntp-282 -j DROP -A logdrop-ntp-283 -m limit --limit 1/second -j LOG -A logdrop-ntp-283 -j DROP -A logdrop-ntp-284 -m limit --limit 1/second -j LOG -A logdrop-ntp-284 -j DROP -A logdrop-ntp-285 -m limit --limit 1/second -j LOG -A logdrop-ntp-285 -j DROP -A logdrop-ntp-286 -m limit --limit 1/second -j LOG -A logdrop-ntp-286 -j DROP -A logdrop-ntp-287 -m limit --limit 1/second -j LOG -A logdrop-ntp-287 -j DROP -A logdrop-ntp-288 -m limit --limit 1/second -j LOG -A logdrop-ntp-288 -j DROP -A logdrop-ntp-289 -m limit --limit 1/second -j LOG -A logdrop-ntp-289 -j DROP -A logdrop-ntp-29 -m limit --limit 1/second -j LOG -A logdrop-ntp-29 -j DROP -A logdrop-ntp-290 -m limit --limit 1/second -j LOG -A logdrop-ntp-290 -j DROP -A logdrop-ntp-291 -m limit --limit 1/second -j LOG -A logdrop-ntp-291 -j DROP -A logdrop-ntp-292 -m limit --limit 1/second -j LOG -A logdrop-ntp-292 -j DROP -A logdrop-ntp-293 -m limit --limit 1/second -j LOG -A logdrop-ntp-293 -j DROP -A logdrop-ntp-294 -m limit --limit 1/second -j LOG -A logdrop-ntp-294 -j DROP -A logdrop-ntp-295 -m limit --limit 1/second -j LOG -A logdrop-ntp-295 -j DROP -A logdrop-ntp-296 -m limit --limit 1/second -j LOG -A logdrop-ntp-296 -j DROP -A logdrop-ntp-297 -m limit --limit 1/second -j LOG -A logdrop-ntp-297 -j DROP -A logdrop-ntp-298 -m limit --limit 1/second -j LOG -A logdrop-ntp-298 -j DROP -A logdrop-ntp-299 -m limit --limit 1/second -j LOG -A logdrop-ntp-299 -j DROP -A logdrop-ntp-3 -m limit --limit 1/second -j LOG -A logdrop-ntp-3 -j DROP -A logdrop-ntp-30 -m limit --limit 1/second -j LOG -A logdrop-ntp-30 -j DROP -A logdrop-ntp-300 -m limit --limit 1/second -j LOG -A logdrop-ntp-300 -j DROP -A logdrop-ntp-301 -m limit --limit 1/second -j LOG -A logdrop-ntp-301 -j DROP -A logdrop-ntp-302 -m limit --limit 1/second -j LOG -A logdrop-ntp-302 -j DROP -A logdrop-ntp-303 -m limit --limit 1/second -j LOG -A logdrop-ntp-303 -j DROP -A logdrop-ntp-304 -m limit --limit 1/second -j LOG -A logdrop-ntp-304 -j DROP -A logdrop-ntp-305 -m limit --limit 1/second -j LOG -A logdrop-ntp-305 -j DROP -A logdrop-ntp-306 -m limit --limit 1/second -j LOG -A logdrop-ntp-306 -j DROP -A logdrop-ntp-307 -m limit --limit 1/second -j LOG -A logdrop-ntp-307 -j DROP -A logdrop-ntp-308 -m limit --limit 1/second -j LOG -A logdrop-ntp-308 -j DROP -A logdrop-ntp-309 -m limit --limit 1/second -j LOG -A logdrop-ntp-309 -j DROP -A logdrop-ntp-31 -m limit --limit 1/second -j LOG -A logdrop-ntp-31 -j DROP -A logdrop-ntp-310 -m limit --limit 1/second -j LOG -A logdrop-ntp-310 -j DROP -A logdrop-ntp-311 -m limit --limit 1/second -j LOG -A logdrop-ntp-311 -j DROP -A logdrop-ntp-312 -m limit --limit 1/second -j LOG -A logdrop-ntp-312 -j DROP -A logdrop-ntp-313 -m limit --limit 1/second -j LOG -A logdrop-ntp-313 -j DROP -A logdrop-ntp-314 -m limit --limit 1/second -j LOG -A logdrop-ntp-314 -j DROP -A logdrop-ntp-315 -m limit --limit 1/second -j LOG -A logdrop-ntp-315 -j DROP -A logdrop-ntp-316 -m limit --limit 1/second -j LOG -A logdrop-ntp-316 -j DROP -A logdrop-ntp-317 -m limit --limit 1/second -j LOG -A logdrop-ntp-317 -j DROP -A logdrop-ntp-318 -m limit --limit 1/second -j LOG -A logdrop-ntp-318 -j DROP -A logdrop-ntp-319 -m limit --limit 1/second -j LOG -A logdrop-ntp-319 -j DROP -A logdrop-ntp-32 -m limit --limit 1/second -j LOG -A logdrop-ntp-32 -j DROP -A logdrop-ntp-320 -m limit --limit 1/second -j LOG -A logdrop-ntp-320 -j DROP -A logdrop-ntp-321 -m limit --limit 1/second -j LOG -A logdrop-ntp-321 -j DROP -A logdrop-ntp-322 -m limit --limit 1/second -j LOG -A logdrop-ntp-322 -j DROP -A logdrop-ntp-323 -m limit --limit 1/second -j LOG -A logdrop-ntp-323 -j DROP -A logdrop-ntp-324 -m limit --limit 1/second -j LOG -A logdrop-ntp-324 -j DROP -A logdrop-ntp-325 -m limit --limit 1/second -j LOG -A logdrop-ntp-325 -j DROP -A logdrop-ntp-326 -m limit --limit 1/second -j LOG -A logdrop-ntp-326 -j DROP -A logdrop-ntp-327 -m limit --limit 1/second -j LOG -A logdrop-ntp-327 -j DROP -A logdrop-ntp-328 -m limit --limit 1/second -j LOG -A logdrop-ntp-328 -j DROP -A logdrop-ntp-329 -m limit --limit 1/second -j LOG -A logdrop-ntp-329 -j DROP -A logdrop-ntp-33 -m limit --limit 1/second -j LOG -A logdrop-ntp-33 -j DROP -A logdrop-ntp-330 -m limit --limit 1/second -j LOG -A logdrop-ntp-330 -j DROP -A logdrop-ntp-331 -m limit --limit 1/second -j LOG -A logdrop-ntp-331 -j DROP -A logdrop-ntp-332 -m limit --limit 1/second -j LOG -A logdrop-ntp-332 -j DROP -A logdrop-ntp-333 -m limit --limit 1/second -j LOG -A logdrop-ntp-333 -j DROP -A logdrop-ntp-334 -m limit --limit 1/second -j LOG -A logdrop-ntp-334 -j DROP -A logdrop-ntp-335 -m limit --limit 1/second -j LOG -A logdrop-ntp-335 -j DROP -A logdrop-ntp-336 -m limit --limit 1/second -j LOG -A logdrop-ntp-336 -j DROP -A logdrop-ntp-337 -m limit --limit 1/second -j LOG -A logdrop-ntp-337 -j DROP -A logdrop-ntp-338 -m limit --limit 1/second -j LOG -A logdrop-ntp-338 -j DROP -A logdrop-ntp-339 -m limit --limit 1/second -j LOG -A logdrop-ntp-339 -j DROP -A logdrop-ntp-34 -m limit --limit 1/second -j LOG -A logdrop-ntp-34 -j DROP -A logdrop-ntp-340 -m limit --limit 1/second -j LOG -A logdrop-ntp-340 -j DROP -A logdrop-ntp-341 -m limit --limit 1/second -j LOG -A logdrop-ntp-341 -j DROP -A logdrop-ntp-342 -m limit --limit 1/second -j LOG -A logdrop-ntp-342 -j DROP -A logdrop-ntp-343 -m limit --limit 1/second -j LOG -A logdrop-ntp-343 -j DROP -A logdrop-ntp-344 -m limit --limit 1/second -j LOG -A logdrop-ntp-344 -j DROP -A logdrop-ntp-345 -m limit --limit 1/second -j LOG -A logdrop-ntp-345 -j DROP -A logdrop-ntp-346 -m limit --limit 1/second -j LOG -A logdrop-ntp-346 -j DROP -A logdrop-ntp-347 -m limit --limit 1/second -j LOG -A logdrop-ntp-347 -j DROP -A logdrop-ntp-348 -m limit --limit 1/second -j LOG -A logdrop-ntp-348 -j DROP -A logdrop-ntp-349 -m limit --limit 1/second -j LOG -A logdrop-ntp-349 -j DROP -A logdrop-ntp-35 -m limit --limit 1/second -j LOG -A logdrop-ntp-35 -j DROP -A logdrop-ntp-350 -m limit --limit 1/second -j LOG -A logdrop-ntp-350 -j DROP -A logdrop-ntp-351 -m limit --limit 1/second -j LOG -A logdrop-ntp-351 -j DROP -A logdrop-ntp-352 -m limit --limit 1/second -j LOG -A logdrop-ntp-352 -j DROP -A logdrop-ntp-353 -m limit --limit 1/second -j LOG -A logdrop-ntp-353 -j DROP -A logdrop-ntp-354 -m limit --limit 1/second -j LOG -A logdrop-ntp-354 -j DROP -A logdrop-ntp-355 -m limit --limit 1/second -j LOG -A logdrop-ntp-355 -j DROP -A logdrop-ntp-356 -m limit --limit 1/second -j LOG -A logdrop-ntp-356 -j DROP -A logdrop-ntp-357 -m limit --limit 1/second -j LOG -A logdrop-ntp-357 -j DROP -A logdrop-ntp-358 -m limit --limit 1/second -j LOG -A logdrop-ntp-358 -j DROP -A logdrop-ntp-359 -m limit --limit 1/second -j LOG -A logdrop-ntp-359 -j DROP -A logdrop-ntp-36 -m limit --limit 1/second -j LOG -A logdrop-ntp-36 -j DROP -A logdrop-ntp-360 -m limit --limit 1/second -j LOG -A logdrop-ntp-360 -j DROP -A logdrop-ntp-361 -m limit --limit 1/second -j LOG -A logdrop-ntp-361 -j DROP -A logdrop-ntp-362 -m limit --limit 1/second -j LOG -A logdrop-ntp-362 -j DROP -A logdrop-ntp-363 -m limit --limit 1/second -j LOG -A logdrop-ntp-363 -j DROP -A logdrop-ntp-364 -m limit --limit 1/second -j LOG -A logdrop-ntp-364 -j DROP -A logdrop-ntp-365 -m limit --limit 1/second -j LOG -A logdrop-ntp-365 -j DROP -A logdrop-ntp-366 -m limit --limit 1/second -j LOG -A logdrop-ntp-366 -j DROP -A logdrop-ntp-367 -m limit --limit 1/second -j LOG -A logdrop-ntp-367 -j DROP -A logdrop-ntp-368 -m limit --limit 1/second -j LOG -A logdrop-ntp-368 -j DROP -A logdrop-ntp-369 -m limit --limit 1/second -j LOG -A logdrop-ntp-369 -j DROP -A logdrop-ntp-37 -m limit --limit 1/second -j LOG -A logdrop-ntp-37 -j DROP -A logdrop-ntp-370 -j TEE --gateway fc00::2 -A logdrop-ntp-370 -j DROP -A logdrop-ntp-371 -j TEE --gateway fc00::2 -A logdrop-ntp-371 -j DROP -A logdrop-ntp-372 -j TEE --gateway fc00::2 -A logdrop-ntp-372 -j DROP -A logdrop-ntp-373 -j TEE --gateway fc00::2 -A logdrop-ntp-373 -j DROP -A logdrop-ntp-374 -j TEE --gateway fc00::2 -A logdrop-ntp-374 -j DROP -A logdrop-ntp-375 -j TEE --gateway fc00::2 -A logdrop-ntp-375 -j DROP -A logdrop-ntp-376 -j TEE --gateway fc00::2 -A logdrop-ntp-376 -j DROP -A logdrop-ntp-377 -j TEE --gateway fc00::2 -A logdrop-ntp-377 -j DROP -A logdrop-ntp-378 -j TEE --gateway fc00::2 -A logdrop-ntp-378 -j DROP -A logdrop-ntp-379 -j TEE --gateway fc00::2 -A logdrop-ntp-379 -j DROP -A logdrop-ntp-38 -m limit --limit 1/second -j LOG -A logdrop-ntp-38 -j DROP -A logdrop-ntp-380 -j TEE --gateway fc00::2 -A logdrop-ntp-380 -j DROP -A logdrop-ntp-381 -j TEE --gateway fc00::2 -A logdrop-ntp-381 -j DROP -A logdrop-ntp-382 -j TEE --gateway fc00::2 -A logdrop-ntp-382 -j DROP -A logdrop-ntp-383 -j TEE --gateway fc00::2 -A logdrop-ntp-383 -j DROP -A logdrop-ntp-384 -j TEE --gateway fc00::2 -A logdrop-ntp-384 -j DROP -A logdrop-ntp-385 -j TEE --gateway fc00::2 -A logdrop-ntp-385 -j DROP -A logdrop-ntp-386 -j TEE --gateway fc00::2 -A logdrop-ntp-386 -j DROP -A logdrop-ntp-387 -j TEE --gateway fc00::2 -A logdrop-ntp-387 -j DROP -A logdrop-ntp-388 -j TEE --gateway fc00::2 -A logdrop-ntp-388 -j DROP -A logdrop-ntp-389 -j TEE --gateway fc00::2 -A logdrop-ntp-389 -j DROP -A logdrop-ntp-39 -m limit --limit 1/second -j LOG -A logdrop-ntp-39 -j DROP -A logdrop-ntp-390 -j TEE --gateway fc00::2 -A logdrop-ntp-390 -j DROP -A logdrop-ntp-391 -j TEE --gateway fc00::2 -A logdrop-ntp-391 -j DROP -A logdrop-ntp-392 -j TEE --gateway fc00::2 -A logdrop-ntp-392 -j DROP -A logdrop-ntp-393 -j TEE --gateway fc00::2 -A logdrop-ntp-393 -j DROP -A logdrop-ntp-394 -j TEE --gateway fc00::2 -A logdrop-ntp-394 -j DROP -A logdrop-ntp-395 -j TEE --gateway fc00::2 -A logdrop-ntp-395 -j DROP -A logdrop-ntp-396 -j TEE --gateway fc00::2 -A logdrop-ntp-396 -j DROP -A logdrop-ntp-397 -j TEE --gateway fc00::2 -A logdrop-ntp-397 -j DROP -A logdrop-ntp-398 -j TEE --gateway fc00::2 -A logdrop-ntp-398 -j DROP -A logdrop-ntp-399 -j TEE --gateway fc00::2 -A logdrop-ntp-399 -j DROP -A logdrop-ntp-4 -m limit --limit 1/second -j LOG -A logdrop-ntp-4 -j DROP -A logdrop-ntp-40 -m limit --limit 1/second -j LOG -A logdrop-ntp-40 -j DROP -A logdrop-ntp-400 -j TEE --gateway fc00::2 -A logdrop-ntp-400 -j DROP -A logdrop-ntp-401 -j TEE --gateway fc00::2 -A logdrop-ntp-401 -j DROP -A logdrop-ntp-402 -j TEE --gateway fc00::2 -A logdrop-ntp-402 -j DROP -A logdrop-ntp-403 -j TEE --gateway fc00::2 -A logdrop-ntp-403 -j DROP -A logdrop-ntp-404 -j TEE --gateway fc00::2 -A logdrop-ntp-404 -j DROP -A logdrop-ntp-405 -j TEE --gateway fc00::2 -A logdrop-ntp-405 -j DROP -A logdrop-ntp-406 -j TEE --gateway fc00::2 -A logdrop-ntp-406 -j DROP -A logdrop-ntp-407 -j TEE --gateway fc00::2 -A logdrop-ntp-407 -j DROP -A logdrop-ntp-408 -j TEE --gateway fc00::2 -A logdrop-ntp-408 -j DROP -A logdrop-ntp-409 -j TEE --gateway fc00::2 -A logdrop-ntp-409 -j DROP -A logdrop-ntp-41 -m limit --limit 1/second -j LOG -A logdrop-ntp-41 -j DROP -A logdrop-ntp-410 -j TEE --gateway fc00::2 -A logdrop-ntp-410 -j DROP -A logdrop-ntp-411 -j TEE --gateway fc00::2 -A logdrop-ntp-411 -j DROP -A logdrop-ntp-412 -j TEE --gateway fc00::2 -A logdrop-ntp-412 -j DROP -A logdrop-ntp-413 -j TEE --gateway fc00::2 -A logdrop-ntp-413 -j DROP -A logdrop-ntp-414 -j TEE --gateway fc00::2 -A logdrop-ntp-414 -j DROP -A logdrop-ntp-415 -j TEE --gateway fc00::2 -A logdrop-ntp-415 -j DROP -A logdrop-ntp-416 -j TEE --gateway fc00::2 -A logdrop-ntp-416 -j DROP -A logdrop-ntp-417 -j TEE --gateway fc00::2 -A logdrop-ntp-417 -j DROP -A logdrop-ntp-418 -j TEE --gateway fc00::2 -A logdrop-ntp-418 -j DROP -A logdrop-ntp-419 -j TEE --gateway fc00::2 -A logdrop-ntp-419 -j DROP -A logdrop-ntp-42 -m limit --limit 1/second -j LOG -A logdrop-ntp-42 -j DROP -A logdrop-ntp-420 -j TEE --gateway fc00::2 -A logdrop-ntp-420 -j DROP -A logdrop-ntp-421 -j TEE --gateway fc00::2 -A logdrop-ntp-421 -j DROP -A logdrop-ntp-422 -j TEE --gateway fc00::2 -A logdrop-ntp-422 -j DROP -A logdrop-ntp-423 -j TEE --gateway fc00::2 -A logdrop-ntp-423 -j DROP -A logdrop-ntp-424 -j TEE --gateway fc00::2 -A logdrop-ntp-424 -j DROP -A logdrop-ntp-425 -j TEE --gateway fc00::2 -A logdrop-ntp-425 -j DROP -A logdrop-ntp-426 -j TEE --gateway fc00::2 -A logdrop-ntp-426 -j DROP -A logdrop-ntp-427 -j TEE --gateway fc00::2 -A logdrop-ntp-427 -j DROP -A logdrop-ntp-428 -j TEE --gateway fc00::2 -A logdrop-ntp-428 -j DROP -A logdrop-ntp-429 -j TEE --gateway fc00::2 -A logdrop-ntp-429 -j DROP -A logdrop-ntp-43 -m limit --limit 1/second -j LOG -A logdrop-ntp-43 -j DROP -A logdrop-ntp-430 -j TEE --gateway fc00::2 -A logdrop-ntp-430 -j DROP -A logdrop-ntp-431 -j TEE --gateway fc00::2 -A logdrop-ntp-431 -j DROP -A logdrop-ntp-432 -j TEE --gateway fc00::2 -A logdrop-ntp-432 -j DROP -A logdrop-ntp-433 -j TEE --gateway fc00::2 -A logdrop-ntp-433 -j DROP -A logdrop-ntp-434 -j TEE --gateway fc00::2 -A logdrop-ntp-434 -j DROP -A logdrop-ntp-435 -j TEE --gateway fc00::2 -A logdrop-ntp-435 -j DROP -A logdrop-ntp-436 -j TEE --gateway fc00::2 -A logdrop-ntp-436 -j DROP -A logdrop-ntp-437 -j TEE --gateway fc00::2 -A logdrop-ntp-437 -j DROP -A logdrop-ntp-438 -j TEE --gateway fc00::2 -A logdrop-ntp-438 -j DROP -A logdrop-ntp-439 -j TEE --gateway fc00::2 -A logdrop-ntp-439 -j DROP -A logdrop-ntp-44 -m limit --limit 1/second -j LOG -A logdrop-ntp-44 -j DROP -A logdrop-ntp-440 -j TEE --gateway fc00::2 -A logdrop-ntp-440 -j DROP -A logdrop-ntp-441 -j TEE --gateway fc00::2 -A logdrop-ntp-441 -j DROP -A logdrop-ntp-442 -j TEE --gateway fc00::2 -A logdrop-ntp-442 -j DROP -A logdrop-ntp-443 -j TEE --gateway fc00::2 -A logdrop-ntp-443 -j DROP -A logdrop-ntp-444 -j TEE --gateway fc00::2 -A logdrop-ntp-444 -j DROP -A logdrop-ntp-445 -j TEE --gateway fc00::2 -A logdrop-ntp-445 -j DROP -A logdrop-ntp-446 -j TEE --gateway fc00::2 -A logdrop-ntp-446 -j DROP -A logdrop-ntp-447 -j TEE --gateway fc00::2 -A logdrop-ntp-447 -j DROP -A logdrop-ntp-448 -j TEE --gateway fc00::2 -A logdrop-ntp-448 -j DROP -A logdrop-ntp-449 -j TEE --gateway fc00::2 -A logdrop-ntp-449 -j DROP -A logdrop-ntp-45 -m limit --limit 1/second -j LOG -A logdrop-ntp-45 -j DROP -A logdrop-ntp-450 -j TEE --gateway fc00::2 -A logdrop-ntp-450 -j DROP -A logdrop-ntp-451 -j TEE --gateway fc00::2 -A logdrop-ntp-451 -j DROP -A logdrop-ntp-452 -j TEE --gateway fc00::2 -A logdrop-ntp-452 -j DROP -A logdrop-ntp-453 -j TEE --gateway fc00::2 -A logdrop-ntp-453 -j DROP -A logdrop-ntp-454 -j TEE --gateway fc00::2 -A logdrop-ntp-454 -j DROP -A logdrop-ntp-455 -j TEE --gateway fc00::2 -A logdrop-ntp-455 -j DROP -A logdrop-ntp-456 -j TEE --gateway fc00::2 -A logdrop-ntp-456 -j DROP -A logdrop-ntp-457 -j TEE --gateway fc00::2 -A logdrop-ntp-457 -j DROP -A logdrop-ntp-458 -j TEE --gateway fc00::2 -A logdrop-ntp-458 -j DROP -A logdrop-ntp-459 -j TEE --gateway fc00::2 -A logdrop-ntp-459 -j DROP -A logdrop-ntp-46 -m limit --limit 1/second -j LOG -A logdrop-ntp-46 -j DROP -A logdrop-ntp-460 -j DROP -A logdrop-ntp-461 -j DROP -A logdrop-ntp-462 -j DROP -A logdrop-ntp-463 -j DROP -A logdrop-ntp-464 -j DROP -A logdrop-ntp-465 -j DROP -A logdrop-ntp-466 -j DROP -A logdrop-ntp-467 -j DROP -A logdrop-ntp-468 -j DROP -A logdrop-ntp-469 -j DROP -A logdrop-ntp-47 -m limit --limit 1/second -j LOG -A logdrop-ntp-47 -j DROP -A logdrop-ntp-470 -j DROP -A logdrop-ntp-471 -j DROP -A logdrop-ntp-472 -j DROP -A logdrop-ntp-473 -j DROP -A logdrop-ntp-474 -j DROP -A logdrop-ntp-475 -j DROP -A logdrop-ntp-476 -j DROP -A logdrop-ntp-477 -j DROP -A logdrop-ntp-478 -j DROP -A logdrop-ntp-479 -j DROP -A logdrop-ntp-48 -m limit --limit 1/second -j LOG -A logdrop-ntp-48 -j DROP -A logdrop-ntp-480 -j DROP -A logdrop-ntp-481 -j DROP -A logdrop-ntp-482 -j DROP -A logdrop-ntp-483 -j DROP -A logdrop-ntp-484 -j DROP -A logdrop-ntp-485 -j DROP -A logdrop-ntp-486 -j DROP -A logdrop-ntp-487 -j DROP -A logdrop-ntp-488 -j DROP -A logdrop-ntp-489 -j DROP -A logdrop-ntp-49 -m limit --limit 1/second -j LOG -A logdrop-ntp-49 -j DROP -A logdrop-ntp-490 -j DROP -A logdrop-ntp-491 -j DROP -A logdrop-ntp-492 -j DROP -A logdrop-ntp-493 -j DROP -A logdrop-ntp-494 -j DROP -A logdrop-ntp-495 -j DROP -A logdrop-ntp-496 -j DROP -A logdrop-ntp-497 -j DROP -A logdrop-ntp-498 -j DROP -A logdrop-ntp-499 -j DROP -A logdrop-ntp-5 -m limit --limit 1/second -j LOG -A logdrop-ntp-5 -j DROP -A logdrop-ntp-50 -m limit --limit 1/second -j LOG -A logdrop-ntp-50 -j DROP -A logdrop-ntp-500 -j DROP -A logdrop-ntp-501 -j DROP -A logdrop-ntp-502 -j DROP -A logdrop-ntp-503 -j DROP -A logdrop-ntp-504 -j DROP -A logdrop-ntp-505 -j DROP -A logdrop-ntp-506 -j DROP -A logdrop-ntp-507 -j DROP -A logdrop-ntp-508 -j DROP -A logdrop-ntp-509 -j DROP -A logdrop-ntp-51 -m limit --limit 1/second -j LOG -A logdrop-ntp-51 -j DROP -A logdrop-ntp-510 -j DROP -A logdrop-ntp-511 -j DROP -A logdrop-ntp-512 -j DROP -A logdrop-ntp-513 -j DROP -A logdrop-ntp-514 -j DROP -A logdrop-ntp-515 -j DROP -A logdrop-ntp-516 -j DROP -A logdrop-ntp-517 -j DROP -A logdrop-ntp-518 -j DROP -A logdrop-ntp-519 -j DROP -A logdrop-ntp-52 -m limit --limit 1/second -j LOG -A logdrop-ntp-52 -j DROP -A logdrop-ntp-520 -j DROP -A logdrop-ntp-521 -j DROP -A logdrop-ntp-522 -j DROP -A logdrop-ntp-523 -j DROP -A logdrop-ntp-524 -j DROP -A logdrop-ntp-525 -j DROP -A logdrop-ntp-526 -j DROP -A logdrop-ntp-527 -j DROP -A logdrop-ntp-528 -j DROP -A logdrop-ntp-529 -j DROP -A logdrop-ntp-53 -m limit --limit 1/second -j LOG -A logdrop-ntp-53 -j DROP -A logdrop-ntp-530 -j DROP -A logdrop-ntp-531 -j DROP -A logdrop-ntp-532 -j DROP -A logdrop-ntp-533 -j DROP -A logdrop-ntp-534 -j DROP -A logdrop-ntp-535 -j DROP -A logdrop-ntp-536 -j DROP -A logdrop-ntp-537 -j DROP -A logdrop-ntp-538 -j DROP -A logdrop-ntp-539 -j DROP -A logdrop-ntp-54 -m limit --limit 1/second -j LOG -A logdrop-ntp-54 -j DROP -A logdrop-ntp-540 -j DROP -A logdrop-ntp-541 -j DROP -A logdrop-ntp-542 -j DROP -A logdrop-ntp-543 -j DROP -A logdrop-ntp-544 -j DROP -A logdrop-ntp-545 -j DROP -A logdrop-ntp-546 -j DROP -A logdrop-ntp-547 -j DROP -A logdrop-ntp-548 -j DROP -A logdrop-ntp-549 -j DROP -A logdrop-ntp-55 -m limit --limit 1/second -j LOG -A logdrop-ntp-55 -j DROP -A logdrop-ntp-56 -m limit --limit 1/second -j LOG -A logdrop-ntp-56 -j DROP -A logdrop-ntp-57 -m limit --limit 1/second -j LOG -A logdrop-ntp-57 -j DROP -A logdrop-ntp-58 -m limit --limit 1/second -j LOG -A logdrop-ntp-58 -j DROP -A logdrop-ntp-59 -m limit --limit 1/second -j LOG -A logdrop-ntp-59 -j DROP -A logdrop-ntp-6 -m limit --limit 1/second -j LOG -A logdrop-ntp-6 -j DROP -A logdrop-ntp-60 -m limit --limit 1/second -j LOG -A logdrop-ntp-60 -j DROP -A logdrop-ntp-61 -m limit --limit 1/second -j LOG -A logdrop-ntp-61 -j DROP -A logdrop-ntp-62 -m limit --limit 1/second -j LOG -A logdrop-ntp-62 -j DROP -A logdrop-ntp-63 -m limit --limit 1/second -j LOG -A logdrop-ntp-63 -j DROP -A logdrop-ntp-64 -m limit --limit 1/second -j LOG -A logdrop-ntp-64 -j DROP -A logdrop-ntp-65 -m limit --limit 1/second -j LOG -A logdrop-ntp-65 -j DROP -A logdrop-ntp-66 -m limit --limit 1/second -j LOG -A logdrop-ntp-66 -j DROP -A logdrop-ntp-67 -m limit --limit 1/second -j LOG -A logdrop-ntp-67 -j DROP -A logdrop-ntp-68 -m limit --limit 1/second -j LOG -A logdrop-ntp-68 -j DROP -A logdrop-ntp-69 -m limit --limit 1/second -j LOG -A logdrop-ntp-69 -j DROP -A logdrop-ntp-7 -m limit --limit 1/second -j LOG -A logdrop-ntp-7 -j DROP -A logdrop-ntp-70 -m limit --limit 1/second -j LOG -A logdrop-ntp-70 -j DROP -A logdrop-ntp-71 -m limit --limit 1/second -j LOG -A logdrop-ntp-71 -j DROP -A logdrop-ntp-72 -m limit --limit 1/second -j LOG -A logdrop-ntp-72 -j DROP -A logdrop-ntp-73 -m limit --limit 1/second -j LOG -A logdrop-ntp-73 -j DROP -A logdrop-ntp-74 -m limit --limit 1/second -j LOG -A logdrop-ntp-74 -j DROP -A logdrop-ntp-75 -m limit --limit 1/second -j LOG -A logdrop-ntp-75 -j DROP -A logdrop-ntp-76 -m limit --limit 1/second -j LOG -A logdrop-ntp-76 -j DROP -A logdrop-ntp-77 -m limit --limit 1/second -j LOG -A logdrop-ntp-77 -j DROP -A logdrop-ntp-78 -m limit --limit 1/second -j LOG -A logdrop-ntp-78 -j DROP -A logdrop-ntp-79 -m limit --limit 1/second -j LOG -A logdrop-ntp-79 -j DROP -A logdrop-ntp-8 -m limit --limit 1/second -j LOG -A logdrop-ntp-8 -j DROP -A logdrop-ntp-80 -m limit --limit 1/second -j LOG -A logdrop-ntp-80 -j DROP -A logdrop-ntp-81 -m limit --limit 1/second -j LOG -A logdrop-ntp-81 -j DROP -A logdrop-ntp-82 -m limit --limit 1/second -j LOG -A logdrop-ntp-82 -j DROP -A logdrop-ntp-83 -m limit --limit 1/second -j LOG -A logdrop-ntp-83 -j DROP -A logdrop-ntp-84 -m limit --limit 1/second -j LOG -A logdrop-ntp-84 -j DROP -A logdrop-ntp-85 -m limit --limit 1/second -j LOG -A logdrop-ntp-85 -j DROP -A logdrop-ntp-86 -m limit --limit 1/second -j LOG -A logdrop-ntp-86 -j DROP -A logdrop-ntp-87 -m limit --limit 1/second -j LOG -A logdrop-ntp-87 -j DROP -A logdrop-ntp-88 -m limit --limit 1/second -j LOG -A logdrop-ntp-88 -j DROP -A logdrop-ntp-89 -m limit --limit 1/second -j LOG -A logdrop-ntp-89 -j DROP -A logdrop-ntp-9 -m limit --limit 1/second -j LOG -A logdrop-ntp-9 -j DROP -A logdrop-ntp-90 -m limit --limit 1/second -j LOG -A logdrop-ntp-90 -j DROP -A logdrop-ntp-91 -m limit --limit 1/second -j LOG -A logdrop-ntp-91 -j DROP -A logdrop-ntp-92 -m limit --limit 1/second -j LOG -A logdrop-ntp-92 -j DROP -A logdrop-ntp-93 -m limit --limit 1/second -j LOG -A logdrop-ntp-93 -j DROP -A logdrop-ntp-94 -m limit --limit 1/second -j LOG -A logdrop-ntp-94 -j DROP -A logdrop-ntp-95 -m limit --limit 1/second -j LOG -A logdrop-ntp-95 -j DROP -A logdrop-ntp-96 -m limit --limit 1/second -j LOG -A logdrop-ntp-96 -j DROP -A logdrop-ntp-97 -m limit --limit 1/second -j LOG -A logdrop-ntp-97 -j DROP -A logdrop-ntp-98 -m limit --limit 1/second -j LOG -A logdrop-ntp-98 -j DROP -A logdrop-ntp-99 -m limit --limit 1/second -j LOG -A logdrop-ntp-99 -j DROP -A logpass-0 -m limit --limit 1/second -j LOG -A logpass-1 -j LOG -A logpass-1 -j TEE --gateway fc00::1 -A logpass-2 -j TEE --gateway fc00::2 COMMIT *mangle :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :PREROUTING ACCEPT [0:0] -A INPUT -j MARK --set-mark 3 -A OUTPUT -j MARK --set-mark 1 -A POSTROUTING -o eth1 -d fc00::/7 -j MARK --set-mark 3 -A PREROUTING -i eth0 -j MARK --set-mark 1 COMMIT *raw :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -o eth0 -p udp --sport 123 -j CT --notrack -A OUTPUT -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -i eth0 -p udp --dport 123 -j CT --notrack -A PREROUTING -i eth0 -j CT --notrack -A PREROUTING -i eth1 -s fc00::/7 -j CT --notrack -A PREROUTING -m addrtype --dst-type LOCAL -j CT --notrack COMMIT