Commit b5f332c6 authored by Kaarle Ritvanen's avatar Kaarle Ritvanen

test: split to 4 cases

parent c12fcf17
......@@ -9,13 +9,29 @@ cd "$(dirname "$0")"
export LUA_PATH="./?.lua;;"
LUA=lua${LUA_VERSION}
AWALL="$LUA ./awall-cli"
for cls in mandatory optional private; do
eval "export AWALL_PATH_$(echo $cls | tr a-z A-Z)=test/$cls"
mkdir -p test/$cls
for script in test/$cls/*.lua; do
[ -f "$script" ] && $LUA "$script" > "${script%.lua}.json"
[ -f $script ] && $LUA $script > ${script%.lua}.json
done
done
exec $LUA ./awall-cli ${1:-diff} -o test/output
POLICIES=$(ls test/optional/*.json | sed -E 's:^.*/([^/]+).json$:\1:')
for pol in $POLICIES; do
$AWALL disable $pol 2>/dev/null
done
RC=0
for pol in $POLICIES; do
dir=test/output/$pol
mkdir -p $dir
$AWALL enable $pol
$AWALL ${1:-diff} -o $dir || RC=1
$AWALL disable $pol
done
exit $RC
This source diff could not be displayed because it is too large. You can view the blob instead.
# rules-save generated by awall
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT DROP [0:0]
:address-0 - [0:0]
:address-1 - [0:0]
:address-10 - [0:0]
:address-100 - [0:0]
:address-101 - [0:0]
:address-102 - [0:0]
:address-103 - [0:0]
:address-104 - [0:0]
:address-105 - [0:0]
:address-106 - [0:0]
:address-107 - [0:0]
:address-108 - [0:0]
:address-109 - [0:0]
:address-11 - [0:0]
:address-110 - [0:0]
:address-111 - [0:0]
:address-112 - [0:0]
:address-113 - [0:0]
:address-114 - [0:0]
:address-115 - [0:0]
:address-116 - [0:0]
:address-117 - [0:0]
:address-118 - [0:0]
:address-119 - [0:0]
:address-12 - [0:0]
:address-120 - [0:0]
:address-121 - [0:0]
:address-122 - [0:0]
:address-123 - [0:0]
:address-124 - [0:0]
:address-125 - [0:0]
:address-126 - [0:0]
:address-127 - [0:0]
:address-13 - [0:0]
:address-14 - [0:0]
:address-15 - [0:0]
:address-16 - [0:0]
:address-17 - [0:0]
:address-18 - [0:0]
:address-19 - [0:0]
:address-2 - [0:0]
:address-20 - [0:0]
:address-21 - [0:0]
:address-22 - [0:0]
:address-23 - [0:0]
:address-24 - [0:0]
:address-25 - [0:0]
:address-26 - [0:0]
:address-27 - [0:0]
:address-28 - [0:0]
:address-29 - [0:0]
:address-3 - [0:0]
:address-30 - [0:0]
:address-31 - [0:0]
:address-32 - [0:0]
:address-33 - [0:0]
:address-34 - [0:0]
:address-35 - [0:0]
:address-36 - [0:0]
:address-37 - [0:0]
:address-38 - [0:0]
:address-39 - [0:0]
:address-4 - [0:0]
:address-40 - [0:0]
:address-41 - [0:0]
:address-42 - [0:0]
:address-43 - [0:0]
:address-44 - [0:0]
:address-45 - [0:0]
:address-46 - [0:0]
:address-47 - [0:0]
:address-48 - [0:0]
:address-49 - [0:0]
:address-5 - [0:0]
:address-50 - [0:0]
:address-51 - [0:0]
:address-52 - [0:0]
:address-53 - [0:0]
:address-54 - [0:0]
:address-55 - [0:0]
:address-56 - [0:0]
:address-57 - [0:0]
:address-58 - [0:0]
:address-59 - [0:0]
:address-6 - [0:0]
:address-60 - [0:0]
:address-61 - [0:0]
:address-62 - [0:0]
:address-63 - [0:0]
:address-64 - [0:0]
:address-65 - [0:0]
:address-66 - [0:0]
:address-67 - [0:0]
:address-68 - [0:0]
:address-69 - [0:0]
:address-7 - [0:0]
:address-70 - [0:0]
:address-71 - [0:0]
:address-72 - [0:0]
:address-73 - [0:0]
:address-74 - [0:0]
:address-75 - [0:0]
:address-76 - [0:0]
:address-77 - [0:0]
:address-78 - [0:0]
:address-79 - [0:0]
:address-8 - [0:0]
:address-80 - [0:0]
:address-81 - [0:0]
:address-82 - [0:0]
:address-83 - [0:0]
:address-84 - [0:0]
:address-85 - [0:0]
:address-86 - [0:0]
:address-87 - [0:0]
:address-88 - [0:0]
:address-89 - [0:0]
:address-9 - [0:0]
:address-90 - [0:0]
:address-91 - [0:0]
:address-92 - [0:0]
:address-93 - [0:0]
:address-94 - [0:0]
:address-95 - [0:0]
:address-96 - [0:0]
:address-97 - [0:0]
:address-98 - [0:0]
:address-99 - [0:0]
:icmp-routing - [0:0]
:logaccept-0 - [0:0]
:logaccept-1 - [0:0]
:logaccept-10 - [0:0]
:logaccept-11 - [0:0]
:logaccept-12 - [0:0]
:logaccept-13 - [0:0]
:logaccept-14 - [0:0]
:logaccept-15 - [0:0]
:logaccept-16 - [0:0]
:logaccept-17 - [0:0]
:logaccept-18 - [0:0]
:logaccept-19 - [0:0]
:logaccept-2 - [0:0]
:logaccept-20 - [0:0]
:logaccept-21 - [0:0]
:logaccept-22 - [0:0]
:logaccept-23 - [0:0]
:logaccept-24 - [0:0]
:logaccept-25 - [0:0]
:logaccept-26 - [0:0]
:logaccept-27 - [0:0]
:logaccept-28 - [0:0]
:logaccept-29 - [0:0]
:logaccept-3 - [0:0]
:logaccept-30 - [0:0]
:logaccept-31 - [0:0]
:logaccept-32 - [0:0]
:logaccept-33 - [0:0]
:logaccept-34 - [0:0]
:logaccept-35 - [0:0]
:logaccept-36 - [0:0]
:logaccept-37 - [0:0]
:logaccept-38 - [0:0]
:logaccept-39 - [0:0]
:logaccept-4 - [0:0]
:logaccept-40 - [0:0]
:logaccept-41 - [0:0]
:logaccept-42 - [0:0]
:logaccept-43 - [0:0]
:logaccept-44 - [0:0]
:logaccept-45 - [0:0]
:logaccept-46 - [0:0]
:logaccept-47 - [0:0]
:logaccept-48 - [0:0]
:logaccept-49 - [0:0]
:logaccept-5 - [0:0]
:logaccept-50 - [0:0]
:logaccept-51 - [0:0]
:logaccept-52 - [0:0]
:logaccept-53 - [0:0]
:logaccept-54 - [0:0]
:logaccept-55 - [0:0]
:logaccept-56 - [0:0]
:logaccept-57 - [0:0]
:logaccept-58 - [0:0]
:logaccept-59 - [0:0]
:logaccept-6 - [0:0]
:logaccept-60 - [0:0]
:logaccept-61 - [0:0]
:logaccept-62 - [0:0]
:logaccept-63 - [0:0]
:logaccept-7 - [0:0]
:logaccept-8 - [0:0]
:logaccept-9 - [0:0]
:logdrop-0 - [0:0]
:logdrop-1 - [0:0]
:logpass-0 - [0:0]
:logpass-1 - [0:0]
:logpass-10 - [0:0]
:logpass-11 - [0:0]
:logpass-12 - [0:0]
:logpass-13 - [0:0]
:logpass-14 - [0:0]
:logpass-15 - [0:0]
:logpass-16 - [0:0]
:logpass-17 - [0:0]
:logpass-18 - [0:0]
:logpass-19 - [0:0]
:logpass-2 - [0:0]
:logpass-20 - [0:0]
:logpass-21 - [0:0]
:logpass-22 - [0:0]
:logpass-23 - [0:0]
:logpass-24 - [0:0]
:logpass-25 - [0:0]
:logpass-26 - [0:0]
:logpass-27 - [0:0]
:logpass-28 - [0:0]
:logpass-29 - [0:0]
:logpass-3 - [0:0]
:logpass-30 - [0:0]
:logpass-31 - [0:0]
:logpass-32 - [0:0]
:logpass-33 - [0:0]
:logpass-34 - [0:0]
:logpass-35 - [0:0]
:logpass-36 - [0:0]
:logpass-37 - [0:0]
:logpass-38 - [0:0]
:logpass-39 - [0:0]
:logpass-4 - [0:0]
:logpass-40 - [0:0]
:logpass-41 - [0:0]
:logpass-42 - [0:0]
:logpass-43 - [0:0]
:logpass-44 - [0:0]
:logpass-45 - [0:0]
:logpass-46 - [0:0]
:logpass-47 - [0:0]
:logpass-48 - [0:0]
:logpass-49 - [0:0]
:logpass-5 - [0:0]
:logpass-50 - [0:0]
:logpass-6 - [0:0]
:logpass-7 - [0:0]
:logpass-8 - [0:0]
:logpass-9 - [0:0]
-A FORWARD -m conntrack --ctstate ESTABLISHED -j ACCEPT
-A FORWARD -j ACCEPT
-A FORWARD
-A FORWARD -j logaccept-0
-A FORWARD -j logpass-0
-A FORWARD -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -d 172.16.0.0/16
-A FORWARD -d 172.16.0.0/16 -j logaccept-1
-A FORWARD -d 172.16.0.0/16 -j logpass-1
-A FORWARD -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -d 172.16.0.0/16
-A FORWARD -d 172.16.2.0/16
-A FORWARD -d 172.16.0.0/16 -j logaccept-2
-A FORWARD -d 172.16.2.0/16 -j logaccept-2
-A FORWARD -d 172.16.0.0/16 -j logpass-2
-A FORWARD -d 172.16.2.0/16 -j logpass-2
-A FORWARD -s 10.0.0.1 -j ACCEPT
-A FORWARD -s 10.0.0.1
-A FORWARD -s 10.0.0.1 -j logaccept-3
-A FORWARD -s 10.0.0.1 -j logpass-3
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-4
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-4
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-5
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-5
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-5
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-5
-A FORWARD -s 10.0.0.1 -j ACCEPT
-A FORWARD -s 10.0.0.2 -j ACCEPT
-A FORWARD -s 10.0.0.1
-A FORWARD -s 10.0.0.2
-A FORWARD -s 10.0.0.1 -j logaccept-6
-A FORWARD -s 10.0.0.2 -j logaccept-6
-A FORWARD -s 10.0.0.1 -j logpass-6
-A FORWARD -s 10.0.0.2 -j logpass-6
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-7
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-7
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-7
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-7
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16
-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-8
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-8
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-8
-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-8
-A FORWARD -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-8
-A FORWARD -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-8
-A FORWARD -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-8
-A FORWARD -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-8
-A FORWARD -o eth1 -d 10.0.0.0/12 -j ACCEPT
-A FORWARD -o eth1 -d 10.0.0.0/12
-A FORWARD -o eth1 -d 10.0.0.0/12 -j logaccept-9
-A FORWARD -o eth1 -d 10.0.0.0/12 -j logpass-9
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-0
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-1
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-2
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-3
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-4
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-5
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-6
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-7
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-12
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-11
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-8
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-9
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-10
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-11
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-12
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-13
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-14
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-15
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-15
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-15
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-13
-A FORWARD -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-13
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-16
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-17
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-18
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-19
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-20
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-21
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-22
-A FORWARD -o eth1 -d 10.0.0.0/12 -j address-23
-A FORWARD -i eth0 -j ACCEPT
-A FORWARD -i eth0
-A FORWARD -i eth0 -j logaccept-18
-A FORWARD -i eth0 -j logpass-16
-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -d 172.16.0.0/16
-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-19
-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-17
-A FORWARD -i eth0 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth0 -d 172.16.0.0/16
-A FORWARD -i eth0 -d 172.16.2.0/16
-A FORWARD -i eth0 -d 172.16.0.0/16 -j logaccept-20
-A FORWARD -i eth0 -d 172.16.2.0/16 -j logaccept-20
-A FORWARD -i eth0 -d 172.16.0.0/16 -j logpass-18
-A FORWARD -i eth0 -d 172.16.2.0/16 -j logpass-18
-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1
-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-21
-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-19
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-22
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-20
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-23
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-23
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-21
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-21
-A FORWARD -i eth0 -s 10.0.0.1 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.2 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1
-A FORWARD -i eth0 -s 10.0.0.2
-A FORWARD -i eth0 -s 10.0.0.1 -j logaccept-24
-A FORWARD -i eth0 -s 10.0.0.2 -j logaccept-24
-A FORWARD -i eth0 -s 10.0.0.1 -j logpass-22
-A FORWARD -i eth0 -s 10.0.0.2 -j logpass-22
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-25
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-25
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-23
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-23
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logaccept-26
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logaccept-26
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logaccept-26
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logaccept-26
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.0.0/16 -j logpass-24
-A FORWARD -i eth0 -s 10.0.0.1 -d 172.16.2.0/16 -j logpass-24
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.0.0/16 -j logpass-24
-A FORWARD -i eth0 -s 10.0.0.2 -d 172.16.2.0/16 -j logpass-24
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j logaccept-27
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -m limit --limit 1/second -j LOG
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-24
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-25
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-26
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-27
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-28
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-29
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-30
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-31
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-30
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -m limit --limit 1/second -j LOG
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-32
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-33
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-34
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-35
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-36
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-37
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-38
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-39
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logaccept-33
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logaccept-33
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.1 -j logpass-27
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -s 10.0.0.2 -j logpass-27
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-40
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-41
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-42
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-43
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-44
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-45
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-46
-A FORWARD -i eth0 -o eth1 -d 10.0.0.0/12 -j address-47
-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12
-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-36
-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-30
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-37
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-31
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-38
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-38
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-32
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-32
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-48
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-49
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-50
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-51
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-52
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-53
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-54
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-55
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-56
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-57
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-58
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-59
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-60
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-61
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-62
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-63
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-64
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-65
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-66
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-67
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-68
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-69
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-70
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-71
-A FORWARD -i eth1 -s 10.0.0.0/12 -j ACCEPT
-A FORWARD -i eth2 -s 10.1.0.0/12 -j ACCEPT
-A FORWARD -i eth3 -s 10.1.0.0/12 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12
-A FORWARD -i eth2 -s 10.1.0.0/12
-A FORWARD -i eth3 -s 10.1.0.0/12
-A FORWARD -i eth1 -s 10.0.0.0/12 -j logaccept-45
-A FORWARD -i eth2 -s 10.1.0.0/12 -j logaccept-45
-A FORWARD -i eth3 -s 10.1.0.0/12 -j logaccept-45
-A FORWARD -i eth1 -s 10.0.0.0/12 -j logpass-37
-A FORWARD -i eth2 -s 10.1.0.0/12 -j logpass-37
-A FORWARD -i eth3 -s 10.1.0.0/12 -j logpass-37
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-46
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-46
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-38
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-38
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j ACCEPT
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j ACCEPT
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logaccept-47
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logaccept-47
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logaccept-47
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logaccept-47
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.0.0/16 -j logpass-39
-A FORWARD -i eth1 -s 10.0.0.0/12 -d 172.16.2.0/16 -j logpass-39
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39
-A FORWARD -i eth2 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.0.0/16 -j logpass-39
-A FORWARD -i eth3 -s 10.1.0.0/12 -d 172.16.2.0/16 -j logpass-39
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-72
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-72
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-72
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-73
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-73
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-73
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-74
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-74
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-74
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-75
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-75
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-75
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-76
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-76
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-76
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-77
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-77
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-77
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-78
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-78
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-78
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-79
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-79
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-79
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-80
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-80
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-80
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-81
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-81
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-81
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-82
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-82
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-82
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-83
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-83
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-83
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-84
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-84
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-84
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-85
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-85
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-85
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-86
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-86
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-86
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-87
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-87
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-87
-A FORWARD -i eth1 -s 10.0.0.0/12 -j address-88
-A FORWARD -i eth2 -s 10.1.0.0/12 -j address-88
-A FORWARD -i eth3 -s 10.1.0.0/12 -j address-88