diff --git a/test/mandatory/filter-limit.lua b/test/mandatory/filter-limit.lua index c35915ab88235fba55c6ced249a2eff14de98529..a0bfc0beca552146f8438d80e3ec33340025d2ff 100644 --- a/test/mandatory/filter-limit.lua +++ b/test/mandatory/filter-limit.lua @@ -65,6 +65,7 @@ function add(limit_type, filter) end add('conn', {out='B'}) +add('conn', {['in']='_fw', out='B'}) add('flow') add('flow', {['in']='A', out='_fw', ['no-track']=true}) diff --git a/test/output/dump b/test/output/dump index 1020bfc85d64bc18ea063b8a8329680df545d785..57eccbb3e5dd4dedbe0e783b0c67439230036927 100644 --- a/test/output/dump +++ b/test/output/dump @@ -6727,37 +6727,23 @@ Filter 652 {"conn-limit":{"count":150,"interval":5,"log" inet/filter/limit-357 -j DROP inet6/filter/limit-357 -j DROP -Filter 653 {"flow-limit":1} -(filter-limit) - inet/filter/FORWARD -j limit-358 - inet6/filter/FORWARD -j limit-358 - inet/filter/INPUT -j limit-358 - inet6/filter/INPUT -j limit-358 - inet/filter/OUTPUT -j limit-358 - inet6/filter/OUTPUT -j limit-358 +Filter 653 {"conn-limit":1,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-358 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-358 inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 inet/filter/logdrop-115 -m limit --limit 1/second -j LOG inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG inet/filter/logdrop-115 -j DROP inet6/filter/logdrop-115 -j DROP - inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 654 {"action":"pass","flow-limit":1} +Filter 654 {"action":"pass","conn-limit":1,"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-359 - inet6/filter/FORWARD -j limit-359 - inet/filter/INPUT -j limit-359 - inet6/filter/INPUT -j limit-359 - inet/filter/OUTPUT -j limit-359 - inet6/filter/OUTPUT -j limit-359 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-359 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-359 inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 inet/filter/logdrop-116 -m limit --limit 1/second -j LOG @@ -6767,41 +6753,25 @@ Filter 654 {"action":"pass","flow-limit":1} inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 655 {"flow-limit":1,"log":true} +Filter 655 {"conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-360 - inet6/filter/FORWARD -j limit-360 - inet/filter/INPUT -j limit-360 - inet6/filter/INPUT -j limit-360 - inet/filter/OUTPUT -j limit-360 - inet6/filter/OUTPUT -j limit-360 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-360 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-360 inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 inet/filter/logdrop-117 -m limit --limit 1/second -j LOG inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG inet/filter/logdrop-117 -j DROP inet6/filter/logdrop-117 -j DROP - inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-0 - inet6/filter/FORWARD -j logaccept-final-0 - inet/filter/INPUT -j logaccept-final-0 - inet6/filter/INPUT -j logaccept-final-0 - inet/filter/OUTPUT -j logaccept-final-0 - inet6/filter/OUTPUT -j logaccept-final-0 - inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-0 -j ACCEPT - inet6/filter/logaccept-final-0 -j ACCEPT + inet/filter/limit-360 -m limit --limit 1/second -j LOG + inet6/filter/limit-360 -m limit --limit 1/second -j LOG + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 656 {"action":"pass","flow-limit":1,"log":true} +Filter 656 {"action":"pass","conn-limit":1,"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-361 - inet6/filter/FORWARD -j limit-361 - inet/filter/INPUT -j limit-361 - inet6/filter/INPUT -j limit-361 - inet/filter/OUTPUT -j limit-361 - inet6/filter/OUTPUT -j limit-361 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-361 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-361 inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 inet/filter/logdrop-118 -m limit --limit 1/second -j LOG @@ -6811,37 +6781,23 @@ Filter 656 {"action":"pass","flow-limit":1,"log":true} inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 657 {"flow-limit":1,"log":"none"} +Filter 657 {"conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-362 - inet6/filter/FORWARD -j limit-362 - inet/filter/INPUT -j limit-362 - inet6/filter/INPUT -j limit-362 - inet/filter/OUTPUT -j limit-362 - inet6/filter/OUTPUT -j limit-362 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-362 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-362 inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 inet/filter/logdrop-119 -m limit --limit 1/second -j LOG inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG inet/filter/logdrop-119 -j DROP inet6/filter/logdrop-119 -j DROP - inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 658 {"action":"pass","flow-limit":1,"log":"none"} +Filter 658 {"action":"pass","conn-limit":1,"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-363 - inet6/filter/FORWARD -j limit-363 - inet/filter/INPUT -j limit-363 - inet6/filter/INPUT -j limit-363 - inet/filter/OUTPUT -j limit-363 - inet6/filter/OUTPUT -j limit-363 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-363 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-363 inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 inet/filter/logdrop-120 -m limit --limit 1/second -j LOG @@ -6851,37 +6807,23 @@ Filter 658 {"action":"pass","flow-limit":1,"log":"none"} inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 659 {"flow-limit":{}} +Filter 659 {"conn-limit":{},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-364 - inet6/filter/FORWARD -j limit-364 - inet/filter/INPUT -j limit-364 - inet6/filter/INPUT -j limit-364 - inet/filter/OUTPUT -j limit-364 - inet6/filter/OUTPUT -j limit-364 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-364 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-364 inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 inet/filter/logdrop-121 -m limit --limit 1/second -j LOG inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG inet/filter/logdrop-121 -j DROP inet6/filter/logdrop-121 -j DROP - inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 660 {"action":"pass","flow-limit":{}} +Filter 660 {"action":"pass","conn-limit":{},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-365 - inet6/filter/FORWARD -j limit-365 - inet/filter/INPUT -j limit-365 - inet6/filter/INPUT -j limit-365 - inet/filter/OUTPUT -j limit-365 - inet6/filter/OUTPUT -j limit-365 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-365 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-365 inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 inet/filter/logdrop-122 -m limit --limit 1/second -j LOG @@ -6891,41 +6833,25 @@ Filter 660 {"action":"pass","flow-limit":{}} inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 661 {"flow-limit":{},"log":true} +Filter 661 {"conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-366 - inet6/filter/FORWARD -j limit-366 - inet/filter/INPUT -j limit-366 - inet6/filter/INPUT -j limit-366 - inet/filter/OUTPUT -j limit-366 - inet6/filter/OUTPUT -j limit-366 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-366 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-366 inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 inet/filter/logdrop-123 -m limit --limit 1/second -j LOG inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG inet/filter/logdrop-123 -j DROP inet6/filter/logdrop-123 -j DROP - inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-1 - inet6/filter/FORWARD -j logaccept-final-1 - inet/filter/INPUT -j logaccept-final-1 - inet6/filter/INPUT -j logaccept-final-1 - inet/filter/OUTPUT -j logaccept-final-1 - inet6/filter/OUTPUT -j logaccept-final-1 - inet/filter/logaccept-final-1 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-1 -j ACCEPT - inet6/filter/logaccept-final-1 -j ACCEPT + inet/filter/limit-366 -m limit --limit 1/second -j LOG + inet6/filter/limit-366 -m limit --limit 1/second -j LOG + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 662 {"action":"pass","flow-limit":{},"log":true} +Filter 662 {"action":"pass","conn-limit":{},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-367 - inet6/filter/FORWARD -j limit-367 - inet/filter/INPUT -j limit-367 - inet6/filter/INPUT -j limit-367 - inet/filter/OUTPUT -j limit-367 - inet6/filter/OUTPUT -j limit-367 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-367 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-367 inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 inet/filter/logdrop-124 -m limit --limit 1/second -j LOG @@ -6935,37 +6861,23 @@ Filter 662 {"action":"pass","flow-limit":{},"log":true} inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 663 {"flow-limit":{},"log":"none"} +Filter 663 {"conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-368 - inet6/filter/FORWARD -j limit-368 - inet/filter/INPUT -j limit-368 - inet6/filter/INPUT -j limit-368 - inet/filter/OUTPUT -j limit-368 - inet6/filter/OUTPUT -j limit-368 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-368 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-368 inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 inet/filter/logdrop-125 -m limit --limit 1/second -j LOG inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG inet/filter/logdrop-125 -j DROP inet6/filter/logdrop-125 -j DROP - inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 664 {"action":"pass","flow-limit":{},"log":"none"} +Filter 664 {"action":"pass","conn-limit":{},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-369 - inet6/filter/FORWARD -j limit-369 - inet/filter/INPUT -j limit-369 - inet6/filter/INPUT -j limit-369 - inet/filter/OUTPUT -j limit-369 - inet6/filter/OUTPUT -j limit-369 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-369 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-369 inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 inet/filter/logdrop-126 -m limit --limit 1/second -j LOG @@ -6975,37 +6887,23 @@ Filter 664 {"action":"pass","flow-limit":{},"log":"none" inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 665 {"flow-limit":{"name":"A"}} +Filter 665 {"conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-370 - inet6/filter/FORWARD -j limit-370 - inet/filter/INPUT -j limit-370 - inet6/filter/INPUT -j limit-370 - inet/filter/OUTPUT -j limit-370 - inet6/filter/OUTPUT -j limit-370 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-370 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-370 inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 inet/filter/logdrop-127 -m limit --limit 1/second -j LOG inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG inet/filter/logdrop-127 -j DROP inet6/filter/logdrop-127 -j DROP - inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 666 {"action":"pass","flow-limit":{"name":"A"}} +Filter 666 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-371 - inet6/filter/FORWARD -j limit-371 - inet/filter/INPUT -j limit-371 - inet6/filter/INPUT -j limit-371 - inet/filter/OUTPUT -j limit-371 - inet6/filter/OUTPUT -j limit-371 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-371 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-371 inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 inet/filter/logdrop-128 -m limit --limit 1/second -j LOG @@ -7015,41 +6913,25 @@ Filter 666 {"action":"pass","flow-limit":{"name":"A"}} inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 667 {"flow-limit":{"name":"A"},"log":true} +Filter 667 {"conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-372 - inet6/filter/FORWARD -j limit-372 - inet/filter/INPUT -j limit-372 - inet6/filter/INPUT -j limit-372 - inet/filter/OUTPUT -j limit-372 - inet6/filter/OUTPUT -j limit-372 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-372 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-372 inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 inet/filter/logdrop-129 -m limit --limit 1/second -j LOG inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG inet/filter/logdrop-129 -j DROP inet6/filter/logdrop-129 -j DROP - inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-2 - inet6/filter/FORWARD -j logaccept-final-2 - inet/filter/INPUT -j logaccept-final-2 - inet6/filter/INPUT -j logaccept-final-2 - inet/filter/OUTPUT -j logaccept-final-2 - inet6/filter/OUTPUT -j logaccept-final-2 - inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-2 -j ACCEPT - inet6/filter/logaccept-final-2 -j ACCEPT + inet/filter/limit-372 -m limit --limit 1/second -j LOG + inet6/filter/limit-372 -m limit --limit 1/second -j LOG + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 668 {"action":"pass","flow-limit":{"name":"A"},"log":true} +Filter 668 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-373 - inet6/filter/FORWARD -j limit-373 - inet/filter/INPUT -j limit-373 - inet6/filter/INPUT -j limit-373 - inet/filter/OUTPUT -j limit-373 - inet6/filter/OUTPUT -j limit-373 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-373 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-373 inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 inet/filter/logdrop-130 -m limit --limit 1/second -j LOG @@ -7059,37 +6941,23 @@ Filter 668 {"action":"pass","flow-limit":{"name":"A"},"l inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 669 {"flow-limit":{"name":"A"},"log":"none"} +Filter 669 {"conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-374 - inet6/filter/FORWARD -j limit-374 - inet/filter/INPUT -j limit-374 - inet6/filter/INPUT -j limit-374 - inet/filter/OUTPUT -j limit-374 - inet6/filter/OUTPUT -j limit-374 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-374 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-374 inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 inet/filter/logdrop-131 -m limit --limit 1/second -j LOG inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG inet/filter/logdrop-131 -j DROP inet6/filter/logdrop-131 -j DROP - inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 670 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +Filter 670 {"action":"pass","conn-limit":{"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-375 - inet6/filter/FORWARD -j limit-375 - inet/filter/INPUT -j limit-375 - inet6/filter/INPUT -j limit-375 - inet/filter/OUTPUT -j limit-375 - inet6/filter/OUTPUT -j limit-375 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-375 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-375 inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 inet/filter/logdrop-132 -m limit --limit 1/second -j LOG @@ -7099,75 +6967,47 @@ Filter 670 {"action":"pass","flow-limit":{"name":"A"},"l inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 671 {"flow-limit":{"name":"A","update":false}} +Filter 671 {"conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-376 - inet6/filter/FORWARD -j limit-376 - inet/filter/INPUT -j limit-376 - inet6/filter/INPUT -j limit-376 - inet/filter/OUTPUT -j limit-376 - inet6/filter/OUTPUT -j limit-376 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-376 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-376 inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 inet/filter/logdrop-133 -m limit --limit 1/second -j LOG inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG inet/filter/logdrop-133 -j DROP inet6/filter/logdrop-133 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-376 -j ACCEPT + inet6/filter/limit-376 -j ACCEPT -Filter 672 {"action":"pass","flow-limit":{"name":"A","update":false}} +Filter 672 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-377 - inet6/filter/FORWARD -j limit-377 - inet/filter/INPUT -j limit-377 - inet6/filter/INPUT -j limit-377 - inet/filter/OUTPUT -j limit-377 - inet6/filter/OUTPUT -j limit-377 - inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 - inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 inet/filter/logdrop-134 -m limit --limit 1/second -j LOG inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG inet/filter/logdrop-134 -j DROP inet6/filter/logdrop-134 -j DROP -Filter 673 {"flow-limit":{"name":"A","update":false},"log":true} +Filter 673 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-378 - inet6/filter/FORWARD -j limit-378 - inet/filter/INPUT -j limit-378 - inet6/filter/INPUT -j limit-378 - inet/filter/OUTPUT -j limit-378 - inet6/filter/OUTPUT -j limit-378 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-378 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-378 inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 inet/filter/logdrop-135 -m limit --limit 1/second -j LOG inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG inet/filter/logdrop-135 -j DROP inet6/filter/logdrop-135 -j DROP - inet/filter/FORWARD -j logaccept-final-3 - inet6/filter/FORWARD -j logaccept-final-3 - inet/filter/INPUT -j logaccept-final-3 - inet6/filter/INPUT -j logaccept-final-3 - inet/filter/OUTPUT -j logaccept-final-3 - inet6/filter/OUTPUT -j logaccept-final-3 - inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-3 -j ACCEPT - inet6/filter/logaccept-final-3 -j ACCEPT + inet/filter/limit-378 -m limit --limit 1/second -j LOG + inet6/filter/limit-378 -m limit --limit 1/second -j LOG + inet/filter/limit-378 -j ACCEPT + inet6/filter/limit-378 -j ACCEPT -Filter 674 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +Filter 674 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-379 - inet6/filter/FORWARD -j limit-379 - inet/filter/INPUT -j limit-379 - inet6/filter/INPUT -j limit-379 - inet/filter/OUTPUT -j limit-379 - inet6/filter/OUTPUT -j limit-379 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-379 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-379 inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 inet/filter/logdrop-136 -m limit --limit 1/second -j LOG @@ -7177,73 +7017,45 @@ Filter 674 {"action":"pass","flow-limit":{"name":"A","up inet/filter/limit-379 -m limit --limit 1/second -j LOG inet6/filter/limit-379 -m limit --limit 1/second -j LOG -Filter 675 {"flow-limit":{"name":"A","update":false},"log":"none"} +Filter 675 {"conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-380 - inet6/filter/FORWARD -j limit-380 - inet/filter/INPUT -j limit-380 - inet6/filter/INPUT -j limit-380 - inet/filter/OUTPUT -j limit-380 - inet6/filter/OUTPUT -j limit-380 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-380 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-380 inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 inet/filter/logdrop-137 -m limit --limit 1/second -j LOG inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG inet/filter/logdrop-137 -j DROP inet6/filter/logdrop-137 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-380 -j ACCEPT + inet6/filter/limit-380 -j ACCEPT -Filter 676 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +Filter 676 {"action":"pass","conn-limit":{"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-381 - inet6/filter/FORWARD -j limit-381 - inet/filter/INPUT -j limit-381 - inet6/filter/INPUT -j limit-381 - inet/filter/OUTPUT -j limit-381 - inet6/filter/OUTPUT -j limit-381 - inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 - inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 inet/filter/logdrop-138 -m limit --limit 1/second -j LOG inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG inet/filter/logdrop-138 -j DROP inet6/filter/logdrop-138 -j DROP -Filter 677 {"flow-limit":{"addr":"dest","name":"A"}} +Filter 677 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-382 - inet6/filter/FORWARD -j limit-382 - inet/filter/INPUT -j limit-382 - inet6/filter/INPUT -j limit-382 - inet/filter/OUTPUT -j limit-382 - inet6/filter/OUTPUT -j limit-382 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-382 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-382 inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 inet/filter/logdrop-139 -m limit --limit 1/second -j LOG inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG inet/filter/logdrop-139 -j DROP inet6/filter/logdrop-139 -j DROP - inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 678 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +Filter 678 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-383 - inet6/filter/FORWARD -j limit-383 - inet/filter/INPUT -j limit-383 - inet6/filter/INPUT -j limit-383 - inet/filter/OUTPUT -j limit-383 - inet6/filter/OUTPUT -j limit-383 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-383 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-383 inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 inet/filter/logdrop-140 -m limit --limit 1/second -j LOG @@ -7253,41 +7065,25 @@ Filter 678 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 679 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 679 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-384 - inet6/filter/FORWARD -j limit-384 - inet/filter/INPUT -j limit-384 - inet6/filter/INPUT -j limit-384 - inet/filter/OUTPUT -j limit-384 - inet6/filter/OUTPUT -j limit-384 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-384 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-384 inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 inet/filter/logdrop-141 -m limit --limit 1/second -j LOG inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG inet/filter/logdrop-141 -j DROP inet6/filter/logdrop-141 -j DROP - inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-4 - inet6/filter/FORWARD -j logaccept-final-4 - inet/filter/INPUT -j logaccept-final-4 - inet6/filter/INPUT -j logaccept-final-4 - inet/filter/OUTPUT -j logaccept-final-4 - inet6/filter/OUTPUT -j logaccept-final-4 - inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-4 -j ACCEPT - inet6/filter/logaccept-final-4 -j ACCEPT + inet/filter/limit-384 -m limit --limit 1/second -j LOG + inet6/filter/limit-384 -m limit --limit 1/second -j LOG + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 680 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 680 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-385 - inet6/filter/FORWARD -j limit-385 - inet/filter/INPUT -j limit-385 - inet6/filter/INPUT -j limit-385 - inet/filter/OUTPUT -j limit-385 - inet6/filter/OUTPUT -j limit-385 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-385 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-385 inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 inet/filter/logdrop-142 -m limit --limit 1/second -j LOG @@ -7297,37 +7093,23 @@ Filter 680 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 681 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 681 {"conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-386 - inet6/filter/FORWARD -j limit-386 - inet/filter/INPUT -j limit-386 - inet6/filter/INPUT -j limit-386 - inet/filter/OUTPUT -j limit-386 - inet6/filter/OUTPUT -j limit-386 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-386 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-386 inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 inet/filter/logdrop-143 -m limit --limit 1/second -j LOG inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG inet/filter/logdrop-143 -j DROP inet6/filter/logdrop-143 -j DROP - inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 682 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 682 {"action":"pass","conn-limit":{"addr":"dest","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-387 - inet6/filter/FORWARD -j limit-387 - inet/filter/INPUT -j limit-387 - inet6/filter/INPUT -j limit-387 - inet/filter/OUTPUT -j limit-387 - inet6/filter/OUTPUT -j limit-387 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-387 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-387 inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 inet/filter/logdrop-144 -m limit --limit 1/second -j LOG @@ -7337,75 +7119,47 @@ Filter 682 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 683 {"flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 683 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-388 - inet6/filter/FORWARD -j limit-388 - inet/filter/INPUT -j limit-388 - inet6/filter/INPUT -j limit-388 - inet/filter/OUTPUT -j limit-388 - inet6/filter/OUTPUT -j limit-388 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-388 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-388 inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 inet/filter/logdrop-145 -m limit --limit 1/second -j LOG inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG inet/filter/logdrop-145 -j DROP inet6/filter/logdrop-145 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-388 -j ACCEPT + inet6/filter/limit-388 -j ACCEPT -Filter 684 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +Filter 684 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-389 - inet6/filter/FORWARD -j limit-389 - inet/filter/INPUT -j limit-389 - inet6/filter/INPUT -j limit-389 - inet/filter/OUTPUT -j limit-389 - inet6/filter/OUTPUT -j limit-389 - inet/filter/limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 - inet6/filter/limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 inet/filter/logdrop-146 -m limit --limit 1/second -j LOG inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG inet/filter/logdrop-146 -j DROP inet6/filter/logdrop-146 -j DROP -Filter 685 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 685 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-390 - inet6/filter/FORWARD -j limit-390 - inet/filter/INPUT -j limit-390 - inet6/filter/INPUT -j limit-390 - inet/filter/OUTPUT -j limit-390 - inet6/filter/OUTPUT -j limit-390 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-390 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-390 inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 inet/filter/logdrop-147 -m limit --limit 1/second -j LOG inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG inet/filter/logdrop-147 -j DROP inet6/filter/logdrop-147 -j DROP - inet/filter/FORWARD -j logaccept-final-5 - inet6/filter/FORWARD -j logaccept-final-5 - inet/filter/INPUT -j logaccept-final-5 - inet6/filter/INPUT -j logaccept-final-5 - inet/filter/OUTPUT -j logaccept-final-5 - inet6/filter/OUTPUT -j logaccept-final-5 - inet/filter/logaccept-final-5 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-5 -j ACCEPT - inet6/filter/logaccept-final-5 -j ACCEPT + inet/filter/limit-390 -m limit --limit 1/second -j LOG + inet6/filter/limit-390 -m limit --limit 1/second -j LOG + inet/filter/limit-390 -j ACCEPT + inet6/filter/limit-390 -j ACCEPT -Filter 686 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 686 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-391 - inet6/filter/FORWARD -j limit-391 - inet/filter/INPUT -j limit-391 - inet6/filter/INPUT -j limit-391 - inet/filter/OUTPUT -j limit-391 - inet6/filter/OUTPUT -j limit-391 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-391 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-391 inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 inet/filter/logdrop-148 -m limit --limit 1/second -j LOG @@ -7415,73 +7169,45 @@ Filter 686 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-391 -m limit --limit 1/second -j LOG inet6/filter/limit-391 -m limit --limit 1/second -j LOG -Filter 687 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 687 {"conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-392 - inet6/filter/FORWARD -j limit-392 - inet/filter/INPUT -j limit-392 - inet6/filter/INPUT -j limit-392 - inet/filter/OUTPUT -j limit-392 - inet6/filter/OUTPUT -j limit-392 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-392 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-392 inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 inet/filter/logdrop-149 -m limit --limit 1/second -j LOG inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG inet/filter/logdrop-149 -j DROP inet6/filter/logdrop-149 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-392 -j ACCEPT + inet6/filter/limit-392 -j ACCEPT -Filter 688 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +Filter 688 {"action":"pass","conn-limit":{"addr":"dest","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-393 - inet6/filter/FORWARD -j limit-393 - inet/filter/INPUT -j limit-393 - inet6/filter/INPUT -j limit-393 - inet/filter/OUTPUT -j limit-393 - inet6/filter/OUTPUT -j limit-393 - inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 - inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 inet/filter/logdrop-150 -m limit --limit 1/second -j LOG inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG inet/filter/logdrop-150 -j DROP inet6/filter/logdrop-150 -j DROP -Filter 689 {"flow-limit":{"name":"C"}} +Filter 689 {"conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-394 - inet6/filter/FORWARD -j limit-394 - inet/filter/INPUT -j limit-394 - inet6/filter/INPUT -j limit-394 - inet/filter/OUTPUT -j limit-394 - inet6/filter/OUTPUT -j limit-394 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-394 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-394 inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 inet/filter/logdrop-151 -m limit --limit 1/second -j LOG inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG inet/filter/logdrop-151 -j DROP inet6/filter/logdrop-151 -j DROP - inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 690 {"action":"pass","flow-limit":{"name":"C"}} +Filter 690 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-395 - inet6/filter/FORWARD -j limit-395 - inet/filter/INPUT -j limit-395 - inet6/filter/INPUT -j limit-395 - inet/filter/OUTPUT -j limit-395 - inet6/filter/OUTPUT -j limit-395 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-395 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-395 inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 inet/filter/logdrop-152 -m limit --limit 1/second -j LOG @@ -7491,41 +7217,25 @@ Filter 690 {"action":"pass","flow-limit":{"name":"C"}} inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set -Filter 691 {"flow-limit":{"name":"C"},"log":true} +Filter 691 {"conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-396 - inet6/filter/FORWARD -j limit-396 - inet/filter/INPUT -j limit-396 - inet6/filter/INPUT -j limit-396 - inet/filter/OUTPUT -j limit-396 - inet6/filter/OUTPUT -j limit-396 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-396 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-396 inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 inet/filter/logdrop-153 -m limit --limit 1/second -j LOG inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG inet/filter/logdrop-153 -j DROP inet6/filter/logdrop-153 -j DROP - inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-6 - inet6/filter/FORWARD -j logaccept-final-6 - inet/filter/INPUT -j logaccept-final-6 - inet6/filter/INPUT -j logaccept-final-6 - inet/filter/OUTPUT -j logaccept-final-6 - inet6/filter/OUTPUT -j logaccept-final-6 - inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-6 -j ACCEPT - inet6/filter/logaccept-final-6 -j ACCEPT + inet/filter/limit-396 -m limit --limit 1/second -j LOG + inet6/filter/limit-396 -m limit --limit 1/second -j LOG + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 692 {"action":"pass","flow-limit":{"name":"C"},"log":true} +Filter 692 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-397 - inet6/filter/FORWARD -j limit-397 - inet/filter/INPUT -j limit-397 - inet6/filter/INPUT -j limit-397 - inet/filter/OUTPUT -j limit-397 - inet6/filter/OUTPUT -j limit-397 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-397 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-397 inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 inet/filter/logdrop-154 -m limit --limit 1/second -j LOG @@ -7535,37 +7245,23 @@ Filter 692 {"action":"pass","flow-limit":{"name":"C"},"l inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 693 {"flow-limit":{"name":"C"},"log":"none"} +Filter 693 {"conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-398 - inet6/filter/FORWARD -j limit-398 - inet/filter/INPUT -j limit-398 - inet6/filter/INPUT -j limit-398 - inet/filter/OUTPUT -j limit-398 - inet6/filter/OUTPUT -j limit-398 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-398 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-398 inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 inet/filter/logdrop-155 -m limit --limit 1/second -j LOG inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG inet/filter/logdrop-155 -j DROP inet6/filter/logdrop-155 -j DROP - inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 694 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +Filter 694 {"action":"pass","conn-limit":{"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-399 - inet6/filter/FORWARD -j limit-399 - inet/filter/INPUT -j limit-399 - inet6/filter/INPUT -j limit-399 - inet/filter/OUTPUT -j limit-399 - inet6/filter/OUTPUT -j limit-399 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-399 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-399 inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 inet/filter/logdrop-156 -m limit --limit 1/second -j LOG @@ -7575,75 +7271,47 @@ Filter 694 {"action":"pass","flow-limit":{"name":"C"},"l inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set -Filter 695 {"flow-limit":{"name":"C","update":false}} +Filter 695 {"conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-400 - inet6/filter/FORWARD -j limit-400 - inet/filter/INPUT -j limit-400 - inet6/filter/INPUT -j limit-400 - inet/filter/OUTPUT -j limit-400 - inet6/filter/OUTPUT -j limit-400 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-400 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-400 inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 inet/filter/logdrop-157 -m limit --limit 1/second -j LOG inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG inet/filter/logdrop-157 -j DROP inet6/filter/logdrop-157 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-400 -j ACCEPT + inet6/filter/limit-400 -j ACCEPT -Filter 696 {"action":"pass","flow-limit":{"name":"C","update":false}} +Filter 696 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-401 - inet6/filter/FORWARD -j limit-401 - inet/filter/INPUT -j limit-401 - inet6/filter/INPUT -j limit-401 - inet/filter/OUTPUT -j limit-401 - inet6/filter/OUTPUT -j limit-401 - inet/filter/limit-401 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 - inet6/filter/limit-401 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 inet/filter/logdrop-158 -m limit --limit 1/second -j LOG inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG inet/filter/logdrop-158 -j DROP inet6/filter/logdrop-158 -j DROP -Filter 697 {"flow-limit":{"name":"C","update":false},"log":true} +Filter 697 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-402 - inet6/filter/FORWARD -j limit-402 - inet/filter/INPUT -j limit-402 - inet6/filter/INPUT -j limit-402 - inet/filter/OUTPUT -j limit-402 - inet6/filter/OUTPUT -j limit-402 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-402 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-402 inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 inet/filter/logdrop-159 -m limit --limit 1/second -j LOG inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG inet/filter/logdrop-159 -j DROP inet6/filter/logdrop-159 -j DROP - inet/filter/FORWARD -j logaccept-final-7 - inet6/filter/FORWARD -j logaccept-final-7 - inet/filter/INPUT -j logaccept-final-7 - inet6/filter/INPUT -j logaccept-final-7 - inet/filter/OUTPUT -j logaccept-final-7 - inet6/filter/OUTPUT -j logaccept-final-7 - inet/filter/logaccept-final-7 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-7 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-7 -j ACCEPT - inet6/filter/logaccept-final-7 -j ACCEPT + inet/filter/limit-402 -m limit --limit 1/second -j LOG + inet6/filter/limit-402 -m limit --limit 1/second -j LOG + inet/filter/limit-402 -j ACCEPT + inet6/filter/limit-402 -j ACCEPT -Filter 698 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +Filter 698 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-403 - inet6/filter/FORWARD -j limit-403 - inet/filter/INPUT -j limit-403 - inet6/filter/INPUT -j limit-403 - inet/filter/OUTPUT -j limit-403 - inet6/filter/OUTPUT -j limit-403 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-403 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-403 inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 inet/filter/logdrop-160 -m limit --limit 1/second -j LOG @@ -7653,73 +7321,45 @@ Filter 698 {"action":"pass","flow-limit":{"name":"C","up inet/filter/limit-403 -m limit --limit 1/second -j LOG inet6/filter/limit-403 -m limit --limit 1/second -j LOG -Filter 699 {"flow-limit":{"name":"C","update":false},"log":"none"} +Filter 699 {"conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-404 - inet6/filter/FORWARD -j limit-404 - inet/filter/INPUT -j limit-404 - inet6/filter/INPUT -j limit-404 - inet/filter/OUTPUT -j limit-404 - inet6/filter/OUTPUT -j limit-404 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-404 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-404 inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 inet/filter/logdrop-161 -m limit --limit 1/second -j LOG inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG inet/filter/logdrop-161 -j DROP inet6/filter/logdrop-161 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-404 -j ACCEPT + inet6/filter/limit-404 -j ACCEPT -Filter 700 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +Filter 700 {"action":"pass","conn-limit":{"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-405 - inet6/filter/FORWARD -j limit-405 - inet/filter/INPUT -j limit-405 - inet6/filter/INPUT -j limit-405 - inet/filter/OUTPUT -j limit-405 - inet6/filter/OUTPUT -j limit-405 - inet/filter/limit-405 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 - inet6/filter/limit-405 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 inet/filter/logdrop-162 -m limit --limit 1/second -j LOG inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG inet/filter/logdrop-162 -j DROP inet6/filter/logdrop-162 -j DROP -Filter 701 {"flow-limit":{"addr":"dest","name":"C"}} +Filter 701 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-406 - inet6/filter/FORWARD -j limit-406 - inet/filter/INPUT -j limit-406 - inet6/filter/INPUT -j limit-406 - inet/filter/OUTPUT -j limit-406 - inet6/filter/OUTPUT -j limit-406 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-406 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-406 inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 inet/filter/logdrop-163 -m limit --limit 1/second -j LOG inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG inet/filter/logdrop-163 -j DROP inet6/filter/logdrop-163 -j DROP - inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 702 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +Filter 702 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-407 - inet6/filter/FORWARD -j limit-407 - inet/filter/INPUT -j limit-407 - inet6/filter/INPUT -j limit-407 - inet/filter/OUTPUT -j limit-407 - inet6/filter/OUTPUT -j limit-407 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-407 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-407 inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 inet/filter/logdrop-164 -m limit --limit 1/second -j LOG @@ -7729,41 +7369,25 @@ Filter 702 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set -Filter 703 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 703 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-408 - inet6/filter/FORWARD -j limit-408 - inet/filter/INPUT -j limit-408 - inet6/filter/INPUT -j limit-408 - inet/filter/OUTPUT -j limit-408 - inet6/filter/OUTPUT -j limit-408 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-408 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-408 inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 inet/filter/logdrop-165 -m limit --limit 1/second -j LOG inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG inet/filter/logdrop-165 -j DROP inet6/filter/logdrop-165 -j DROP - inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-8 - inet6/filter/FORWARD -j logaccept-final-8 - inet/filter/INPUT -j logaccept-final-8 - inet6/filter/INPUT -j logaccept-final-8 - inet/filter/OUTPUT -j logaccept-final-8 - inet6/filter/OUTPUT -j logaccept-final-8 - inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-8 -j ACCEPT - inet6/filter/logaccept-final-8 -j ACCEPT + inet/filter/limit-408 -m limit --limit 1/second -j LOG + inet6/filter/limit-408 -m limit --limit 1/second -j LOG + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 704 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +Filter 704 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-409 - inet6/filter/FORWARD -j limit-409 - inet/filter/INPUT -j limit-409 - inet6/filter/INPUT -j limit-409 - inet/filter/OUTPUT -j limit-409 - inet6/filter/OUTPUT -j limit-409 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-409 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-409 inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 inet/filter/logdrop-166 -m limit --limit 1/second -j LOG @@ -7773,37 +7397,23 @@ Filter 704 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 705 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 705 {"conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-410 - inet6/filter/FORWARD -j limit-410 - inet/filter/INPUT -j limit-410 - inet6/filter/INPUT -j limit-410 - inet/filter/OUTPUT -j limit-410 - inet6/filter/OUTPUT -j limit-410 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-410 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-410 inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 inet/filter/logdrop-167 -m limit --limit 1/second -j LOG inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG inet/filter/logdrop-167 -j DROP inet6/filter/logdrop-167 -j DROP - inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 706 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +Filter 706 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-411 - inet6/filter/FORWARD -j limit-411 - inet/filter/INPUT -j limit-411 - inet6/filter/INPUT -j limit-411 - inet/filter/OUTPUT -j limit-411 - inet6/filter/OUTPUT -j limit-411 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-411 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-411 inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 inet/filter/logdrop-168 -m limit --limit 1/second -j LOG @@ -7813,75 +7423,47 @@ Filter 706 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set -Filter 707 {"flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 707 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-412 - inet6/filter/FORWARD -j limit-412 - inet/filter/INPUT -j limit-412 - inet6/filter/INPUT -j limit-412 - inet/filter/OUTPUT -j limit-412 - inet6/filter/OUTPUT -j limit-412 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-412 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-412 inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 inet/filter/logdrop-169 -m limit --limit 1/second -j LOG inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG inet/filter/logdrop-169 -j DROP inet6/filter/logdrop-169 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-412 -j ACCEPT + inet6/filter/limit-412 -j ACCEPT -Filter 708 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +Filter 708 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-413 - inet6/filter/FORWARD -j limit-413 - inet/filter/INPUT -j limit-413 - inet6/filter/INPUT -j limit-413 - inet/filter/OUTPUT -j limit-413 - inet6/filter/OUTPUT -j limit-413 - inet/filter/limit-413 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 - inet6/filter/limit-413 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 inet/filter/logdrop-170 -m limit --limit 1/second -j LOG inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG inet/filter/logdrop-170 -j DROP inet6/filter/logdrop-170 -j DROP -Filter 709 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 709 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-414 - inet6/filter/FORWARD -j limit-414 - inet/filter/INPUT -j limit-414 - inet6/filter/INPUT -j limit-414 - inet/filter/OUTPUT -j limit-414 - inet6/filter/OUTPUT -j limit-414 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-414 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-414 inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 inet/filter/logdrop-171 -m limit --limit 1/second -j LOG inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG inet/filter/logdrop-171 -j DROP inet6/filter/logdrop-171 -j DROP - inet/filter/FORWARD -j logaccept-final-9 - inet6/filter/FORWARD -j logaccept-final-9 - inet/filter/INPUT -j logaccept-final-9 - inet6/filter/INPUT -j logaccept-final-9 - inet/filter/OUTPUT -j logaccept-final-9 - inet6/filter/OUTPUT -j logaccept-final-9 - inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-9 -j ACCEPT - inet6/filter/logaccept-final-9 -j ACCEPT + inet/filter/limit-414 -m limit --limit 1/second -j LOG + inet6/filter/limit-414 -m limit --limit 1/second -j LOG + inet/filter/limit-414 -j ACCEPT + inet6/filter/limit-414 -j ACCEPT -Filter 710 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +Filter 710 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-415 - inet6/filter/FORWARD -j limit-415 - inet/filter/INPUT -j limit-415 - inet6/filter/INPUT -j limit-415 - inet/filter/OUTPUT -j limit-415 - inet6/filter/OUTPUT -j limit-415 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-415 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-415 inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 inet/filter/logdrop-172 -m limit --limit 1/second -j LOG @@ -7891,1793 +7473,989 @@ Filter 710 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-415 -m limit --limit 1/second -j LOG inet6/filter/limit-415 -m limit --limit 1/second -j LOG -Filter 711 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 711 {"conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-416 - inet6/filter/FORWARD -j limit-416 - inet/filter/INPUT -j limit-416 - inet6/filter/INPUT -j limit-416 - inet/filter/OUTPUT -j limit-416 - inet6/filter/OUTPUT -j limit-416 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-416 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-416 inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 inet/filter/logdrop-173 -m limit --limit 1/second -j LOG inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG inet/filter/logdrop-173 -j DROP inet6/filter/logdrop-173 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-416 -j ACCEPT + inet6/filter/limit-416 -j ACCEPT -Filter 712 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +Filter 712 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-417 - inet6/filter/FORWARD -j limit-417 - inet/filter/INPUT -j limit-417 - inet6/filter/INPUT -j limit-417 - inet/filter/OUTPUT -j limit-417 - inet6/filter/OUTPUT -j limit-417 - inet/filter/limit-417 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 - inet6/filter/limit-417 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 inet/filter/logdrop-174 -m limit --limit 1/second -j LOG inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG inet/filter/logdrop-174 -j DROP inet6/filter/logdrop-174 -j DROP -Filter 713 {"flow-limit":{"log":false}} +Filter 713 {"conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-418 - inet6/filter/FORWARD -j limit-418 - inet/filter/INPUT -j limit-418 - inet6/filter/INPUT -j limit-418 - inet/filter/OUTPUT -j limit-418 - inet6/filter/OUTPUT -j limit-418 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-418 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-418 inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 714 {"action":"pass","flow-limit":{"log":false}} +Filter 714 {"action":"pass","conn-limit":{"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-419 - inet6/filter/FORWARD -j limit-419 - inet/filter/INPUT -j limit-419 - inet6/filter/INPUT -j limit-419 - inet/filter/OUTPUT -j limit-419 - inet6/filter/OUTPUT -j limit-419 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-419 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-419 inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 715 {"flow-limit":{"log":false},"log":true} +Filter 715 {"conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-420 - inet6/filter/FORWARD -j limit-420 - inet/filter/INPUT -j limit-420 - inet6/filter/INPUT -j limit-420 - inet/filter/OUTPUT -j limit-420 - inet6/filter/OUTPUT -j limit-420 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-420 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-420 inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-10 - inet6/filter/FORWARD -j logaccept-final-10 - inet/filter/INPUT -j logaccept-final-10 - inet6/filter/INPUT -j logaccept-final-10 - inet/filter/OUTPUT -j logaccept-final-10 - inet6/filter/OUTPUT -j logaccept-final-10 - inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-10 -j ACCEPT - inet6/filter/logaccept-final-10 -j ACCEPT + inet/filter/limit-420 -m limit --limit 1/second -j LOG + inet6/filter/limit-420 -m limit --limit 1/second -j LOG + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 716 {"action":"pass","flow-limit":{"log":false},"log":true} +Filter 716 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-421 - inet6/filter/FORWARD -j limit-421 - inet/filter/INPUT -j limit-421 - inet6/filter/INPUT -j limit-421 - inet/filter/OUTPUT -j limit-421 - inet6/filter/OUTPUT -j limit-421 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-421 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-421 inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 717 {"flow-limit":{"log":false},"log":"none"} +Filter 717 {"conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-422 - inet6/filter/FORWARD -j limit-422 - inet/filter/INPUT -j limit-422 - inet6/filter/INPUT -j limit-422 - inet/filter/OUTPUT -j limit-422 - inet6/filter/OUTPUT -j limit-422 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-422 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-422 inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 718 {"action":"pass","flow-limit":{"log":false},"log":"none"} +Filter 718 {"action":"pass","conn-limit":{"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-423 - inet6/filter/FORWARD -j limit-423 - inet/filter/INPUT -j limit-423 - inet6/filter/INPUT -j limit-423 - inet/filter/OUTPUT -j limit-423 - inet6/filter/OUTPUT -j limit-423 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-423 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-423 inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 719 {"flow-limit":{"log":false,"name":"A"}} +Filter 719 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-424 - inet6/filter/FORWARD -j limit-424 - inet/filter/INPUT -j limit-424 - inet6/filter/INPUT -j limit-424 - inet/filter/OUTPUT -j limit-424 - inet6/filter/OUTPUT -j limit-424 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-424 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-424 inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 720 {"action":"pass","flow-limit":{"log":false,"name":"A"}} +Filter 720 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-425 - inet6/filter/FORWARD -j limit-425 - inet/filter/INPUT -j limit-425 - inet6/filter/INPUT -j limit-425 - inet/filter/OUTPUT -j limit-425 - inet6/filter/OUTPUT -j limit-425 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-425 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-425 inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 721 {"flow-limit":{"log":false,"name":"A"},"log":true} +Filter 721 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-426 - inet6/filter/FORWARD -j limit-426 - inet/filter/INPUT -j limit-426 - inet6/filter/INPUT -j limit-426 - inet/filter/OUTPUT -j limit-426 - inet6/filter/OUTPUT -j limit-426 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-426 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-426 inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-11 - inet6/filter/FORWARD -j logaccept-final-11 - inet/filter/INPUT -j logaccept-final-11 - inet6/filter/INPUT -j logaccept-final-11 - inet/filter/OUTPUT -j logaccept-final-11 - inet6/filter/OUTPUT -j logaccept-final-11 - inet/filter/logaccept-final-11 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-11 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-11 -j ACCEPT - inet6/filter/logaccept-final-11 -j ACCEPT + inet/filter/limit-426 -m limit --limit 1/second -j LOG + inet6/filter/limit-426 -m limit --limit 1/second -j LOG + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 722 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +Filter 722 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-427 - inet6/filter/FORWARD -j limit-427 - inet/filter/INPUT -j limit-427 - inet6/filter/INPUT -j limit-427 - inet/filter/OUTPUT -j limit-427 - inet6/filter/OUTPUT -j limit-427 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-427 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-427 inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 723 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +Filter 723 {"conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-428 - inet6/filter/FORWARD -j limit-428 - inet/filter/INPUT -j limit-428 - inet6/filter/INPUT -j limit-428 - inet/filter/OUTPUT -j limit-428 - inet6/filter/OUTPUT -j limit-428 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-428 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-428 inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 724 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +Filter 724 {"action":"pass","conn-limit":{"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-429 - inet6/filter/FORWARD -j limit-429 - inet/filter/INPUT -j limit-429 - inet6/filter/INPUT -j limit-429 - inet/filter/OUTPUT -j limit-429 - inet6/filter/OUTPUT -j limit-429 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-429 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-429 inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 725 {"flow-limit":{"log":false,"name":"A","update":false}} +Filter 725 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-430 - inet6/filter/FORWARD -j limit-430 - inet/filter/INPUT -j limit-430 - inet6/filter/INPUT -j limit-430 - inet/filter/OUTPUT -j limit-430 - inet6/filter/OUTPUT -j limit-430 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-430 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-430 inet/filter/limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-430 -j ACCEPT + inet6/filter/limit-430 -j ACCEPT + +Filter 726 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 726 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-431 - inet6/filter/FORWARD -j limit-431 - inet/filter/INPUT -j limit-431 - inet6/filter/INPUT -j limit-431 - inet/filter/OUTPUT -j limit-431 - inet6/filter/OUTPUT -j limit-431 - inet/filter/limit-431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 727 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-432 - inet6/filter/FORWARD -j limit-432 - inet/filter/INPUT -j limit-432 - inet6/filter/INPUT -j limit-432 - inet/filter/OUTPUT -j limit-432 - inet6/filter/OUTPUT -j limit-432 +Filter 727 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-432 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-432 inet/filter/limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-12 - inet6/filter/FORWARD -j logaccept-final-12 - inet/filter/INPUT -j logaccept-final-12 - inet6/filter/INPUT -j logaccept-final-12 - inet/filter/OUTPUT -j logaccept-final-12 - inet6/filter/OUTPUT -j logaccept-final-12 - inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-12 -j ACCEPT - inet6/filter/logaccept-final-12 -j ACCEPT + inet/filter/limit-432 -m limit --limit 1/second -j LOG + inet6/filter/limit-432 -m limit --limit 1/second -j LOG + inet/filter/limit-432 -j ACCEPT + inet6/filter/limit-432 -j ACCEPT -Filter 728 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +Filter 728 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-433 - inet6/filter/FORWARD -j limit-433 - inet/filter/INPUT -j limit-433 - inet6/filter/INPUT -j limit-433 - inet/filter/OUTPUT -j limit-433 - inet6/filter/OUTPUT -j limit-433 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-433 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-433 inet/filter/limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-433 -m limit --limit 1/second -j LOG inet6/filter/limit-433 -m limit --limit 1/second -j LOG -Filter 729 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +Filter 729 {"conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-434 - inet6/filter/FORWARD -j limit-434 - inet/filter/INPUT -j limit-434 - inet6/filter/INPUT -j limit-434 - inet/filter/OUTPUT -j limit-434 - inet6/filter/OUTPUT -j limit-434 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-434 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-434 inet/filter/limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-434 -j ACCEPT + inet6/filter/limit-434 -j ACCEPT + +Filter 730 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 730 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-435 - inet6/filter/FORWARD -j limit-435 - inet/filter/INPUT -j limit-435 - inet6/filter/INPUT -j limit-435 - inet/filter/OUTPUT -j limit-435 - inet6/filter/OUTPUT -j limit-435 - inet/filter/limit-435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 731 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-436 - inet6/filter/FORWARD -j limit-436 - inet/filter/INPUT -j limit-436 - inet6/filter/INPUT -j limit-436 - inet/filter/OUTPUT -j limit-436 - inet6/filter/OUTPUT -j limit-436 +Filter 731 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-436 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-436 inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 732 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +Filter 732 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-437 - inet6/filter/FORWARD -j limit-437 - inet/filter/INPUT -j limit-437 - inet6/filter/INPUT -j limit-437 - inet/filter/OUTPUT -j limit-437 - inet6/filter/OUTPUT -j limit-437 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-437 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-437 inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 733 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 733 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-438 - inet6/filter/FORWARD -j limit-438 - inet/filter/INPUT -j limit-438 - inet6/filter/INPUT -j limit-438 - inet/filter/OUTPUT -j limit-438 - inet6/filter/OUTPUT -j limit-438 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-438 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-438 inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-13 - inet6/filter/FORWARD -j logaccept-final-13 - inet/filter/INPUT -j logaccept-final-13 - inet6/filter/INPUT -j logaccept-final-13 - inet/filter/OUTPUT -j logaccept-final-13 - inet6/filter/OUTPUT -j logaccept-final-13 - inet/filter/logaccept-final-13 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-13 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-13 -j ACCEPT - inet6/filter/logaccept-final-13 -j ACCEPT + inet/filter/limit-438 -m limit --limit 1/second -j LOG + inet6/filter/limit-438 -m limit --limit 1/second -j LOG + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 734 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +Filter 734 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-439 - inet6/filter/FORWARD -j limit-439 - inet/filter/INPUT -j limit-439 - inet6/filter/INPUT -j limit-439 - inet/filter/OUTPUT -j limit-439 - inet6/filter/OUTPUT -j limit-439 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-439 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-439 inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 735 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 735 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-440 - inet6/filter/FORWARD -j limit-440 - inet/filter/INPUT -j limit-440 - inet6/filter/INPUT -j limit-440 - inet/filter/OUTPUT -j limit-440 - inet6/filter/OUTPUT -j limit-440 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-440 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-440 inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 736 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +Filter 736 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-441 - inet6/filter/FORWARD -j limit-441 - inet/filter/INPUT -j limit-441 - inet6/filter/INPUT -j limit-441 - inet/filter/OUTPUT -j limit-441 - inet6/filter/OUTPUT -j limit-441 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-441 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-441 inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 737 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +Filter 737 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-442 - inet6/filter/FORWARD -j limit-442 - inet/filter/INPUT -j limit-442 - inet6/filter/INPUT -j limit-442 - inet/filter/OUTPUT -j limit-442 - inet6/filter/OUTPUT -j limit-442 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-442 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-442 inet/filter/limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-442 -j ACCEPT + inet6/filter/limit-442 -j ACCEPT + +Filter 738 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 738 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-443 - inet6/filter/FORWARD -j limit-443 - inet/filter/INPUT -j limit-443 - inet6/filter/INPUT -j limit-443 - inet/filter/OUTPUT -j limit-443 - inet6/filter/OUTPUT -j limit-443 - inet/filter/limit-443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 739 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-444 - inet6/filter/FORWARD -j limit-444 - inet/filter/INPUT -j limit-444 - inet6/filter/INPUT -j limit-444 - inet/filter/OUTPUT -j limit-444 - inet6/filter/OUTPUT -j limit-444 +Filter 739 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-444 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-444 inet/filter/limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-14 - inet6/filter/FORWARD -j logaccept-final-14 - inet/filter/INPUT -j logaccept-final-14 - inet6/filter/INPUT -j logaccept-final-14 - inet/filter/OUTPUT -j logaccept-final-14 - inet6/filter/OUTPUT -j logaccept-final-14 - inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-14 -j ACCEPT - inet6/filter/logaccept-final-14 -j ACCEPT + inet/filter/limit-444 -m limit --limit 1/second -j LOG + inet6/filter/limit-444 -m limit --limit 1/second -j LOG + inet/filter/limit-444 -j ACCEPT + inet6/filter/limit-444 -j ACCEPT -Filter 740 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +Filter 740 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-445 - inet6/filter/FORWARD -j limit-445 - inet/filter/INPUT -j limit-445 - inet6/filter/INPUT -j limit-445 - inet/filter/OUTPUT -j limit-445 - inet6/filter/OUTPUT -j limit-445 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-445 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-445 inet/filter/limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-445 -m limit --limit 1/second -j LOG inet6/filter/limit-445 -m limit --limit 1/second -j LOG -Filter 741 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +Filter 741 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-446 - inet6/filter/FORWARD -j limit-446 - inet/filter/INPUT -j limit-446 - inet6/filter/INPUT -j limit-446 - inet/filter/OUTPUT -j limit-446 - inet6/filter/OUTPUT -j limit-446 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-446 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-446 inet/filter/limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-446 -j ACCEPT + inet6/filter/limit-446 -j ACCEPT -Filter 742 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-447 - inet6/filter/FORWARD -j limit-447 - inet/filter/INPUT -j limit-447 - inet6/filter/INPUT -j limit-447 - inet/filter/OUTPUT -j limit-447 - inet6/filter/OUTPUT -j limit-447 - inet/filter/limit-447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 743 {"flow-limit":{"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-448 - inet6/filter/FORWARD -j limit-448 - inet/filter/INPUT -j limit-448 - inet6/filter/INPUT -j limit-448 - inet/filter/OUTPUT -j limit-448 - inet6/filter/OUTPUT -j limit-448 +Filter 742 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 743 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-448 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-448 inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 744 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +Filter 744 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-449 - inet6/filter/FORWARD -j limit-449 - inet/filter/INPUT -j limit-449 - inet6/filter/INPUT -j limit-449 - inet/filter/OUTPUT -j limit-449 - inet6/filter/OUTPUT -j limit-449 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-449 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-449 inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set -Filter 745 {"flow-limit":{"log":false,"name":"C"},"log":true} +Filter 745 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-450 - inet6/filter/FORWARD -j limit-450 - inet/filter/INPUT -j limit-450 - inet6/filter/INPUT -j limit-450 - inet/filter/OUTPUT -j limit-450 - inet6/filter/OUTPUT -j limit-450 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-450 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-450 inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-15 - inet6/filter/FORWARD -j logaccept-final-15 - inet/filter/INPUT -j logaccept-final-15 - inet6/filter/INPUT -j logaccept-final-15 - inet/filter/OUTPUT -j logaccept-final-15 - inet6/filter/OUTPUT -j logaccept-final-15 - inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-15 -j ACCEPT - inet6/filter/logaccept-final-15 -j ACCEPT + inet/filter/limit-450 -m limit --limit 1/second -j LOG + inet6/filter/limit-450 -m limit --limit 1/second -j LOG + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 746 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +Filter 746 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-451 - inet6/filter/FORWARD -j limit-451 - inet/filter/INPUT -j limit-451 - inet6/filter/INPUT -j limit-451 - inet/filter/OUTPUT -j limit-451 - inet6/filter/OUTPUT -j limit-451 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-451 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-451 inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 747 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 747 {"conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-452 - inet6/filter/FORWARD -j limit-452 - inet/filter/INPUT -j limit-452 - inet6/filter/INPUT -j limit-452 - inet/filter/OUTPUT -j limit-452 - inet6/filter/OUTPUT -j limit-452 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-452 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-452 inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 748 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +Filter 748 {"action":"pass","conn-limit":{"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-453 - inet6/filter/FORWARD -j limit-453 - inet/filter/INPUT -j limit-453 - inet6/filter/INPUT -j limit-453 - inet/filter/OUTPUT -j limit-453 - inet6/filter/OUTPUT -j limit-453 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-453 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-453 inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set -Filter 749 {"flow-limit":{"log":false,"name":"C","update":false}} +Filter 749 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-454 - inet6/filter/FORWARD -j limit-454 - inet/filter/INPUT -j limit-454 - inet6/filter/INPUT -j limit-454 - inet/filter/OUTPUT -j limit-454 - inet6/filter/OUTPUT -j limit-454 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-454 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-454 inet/filter/limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-454 -j ACCEPT + inet6/filter/limit-454 -j ACCEPT + +Filter 750 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 750 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-455 - inet6/filter/FORWARD -j limit-455 - inet/filter/INPUT -j limit-455 - inet6/filter/INPUT -j limit-455 - inet/filter/OUTPUT -j limit-455 - inet6/filter/OUTPUT -j limit-455 - inet/filter/limit-455 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-455 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 751 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-456 - inet6/filter/FORWARD -j limit-456 - inet/filter/INPUT -j limit-456 - inet6/filter/INPUT -j limit-456 - inet/filter/OUTPUT -j limit-456 - inet6/filter/OUTPUT -j limit-456 +Filter 751 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-456 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-456 inet/filter/limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-16 - inet6/filter/FORWARD -j logaccept-final-16 - inet/filter/INPUT -j logaccept-final-16 - inet6/filter/INPUT -j logaccept-final-16 - inet/filter/OUTPUT -j logaccept-final-16 - inet6/filter/OUTPUT -j logaccept-final-16 - inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-16 -j ACCEPT - inet6/filter/logaccept-final-16 -j ACCEPT + inet/filter/limit-456 -m limit --limit 1/second -j LOG + inet6/filter/limit-456 -m limit --limit 1/second -j LOG + inet/filter/limit-456 -j ACCEPT + inet6/filter/limit-456 -j ACCEPT -Filter 752 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +Filter 752 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-457 - inet6/filter/FORWARD -j limit-457 - inet/filter/INPUT -j limit-457 - inet6/filter/INPUT -j limit-457 - inet/filter/OUTPUT -j limit-457 - inet6/filter/OUTPUT -j limit-457 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-457 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-457 inet/filter/limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-457 -m limit --limit 1/second -j LOG inet6/filter/limit-457 -m limit --limit 1/second -j LOG -Filter 753 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +Filter 753 {"conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-458 - inet6/filter/FORWARD -j limit-458 - inet/filter/INPUT -j limit-458 - inet6/filter/INPUT -j limit-458 - inet/filter/OUTPUT -j limit-458 - inet6/filter/OUTPUT -j limit-458 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-458 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-458 inet/filter/limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-458 -j ACCEPT + inet6/filter/limit-458 -j ACCEPT + +Filter 754 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 754 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-459 - inet6/filter/FORWARD -j limit-459 - inet/filter/INPUT -j limit-459 - inet6/filter/INPUT -j limit-459 - inet/filter/OUTPUT -j limit-459 - inet6/filter/OUTPUT -j limit-459 - inet/filter/limit-459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 755 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-460 - inet6/filter/FORWARD -j limit-460 - inet/filter/INPUT -j limit-460 - inet6/filter/INPUT -j limit-460 - inet/filter/OUTPUT -j limit-460 - inet6/filter/OUTPUT -j limit-460 +Filter 755 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-460 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-460 inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 756 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +Filter 756 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-461 - inet6/filter/FORWARD -j limit-461 - inet/filter/INPUT -j limit-461 - inet6/filter/INPUT -j limit-461 - inet/filter/OUTPUT -j limit-461 - inet6/filter/OUTPUT -j limit-461 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-461 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-461 inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set -Filter 757 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 757 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-462 - inet6/filter/FORWARD -j limit-462 - inet/filter/INPUT -j limit-462 - inet6/filter/INPUT -j limit-462 - inet/filter/OUTPUT -j limit-462 - inet6/filter/OUTPUT -j limit-462 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-462 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-462 inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-17 - inet6/filter/FORWARD -j logaccept-final-17 - inet/filter/INPUT -j logaccept-final-17 - inet6/filter/INPUT -j logaccept-final-17 - inet/filter/OUTPUT -j logaccept-final-17 - inet6/filter/OUTPUT -j logaccept-final-17 - inet/filter/logaccept-final-17 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-17 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-17 -j ACCEPT - inet6/filter/logaccept-final-17 -j ACCEPT + inet/filter/limit-462 -m limit --limit 1/second -j LOG + inet6/filter/limit-462 -m limit --limit 1/second -j LOG + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 758 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +Filter 758 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-463 - inet6/filter/FORWARD -j limit-463 - inet/filter/INPUT -j limit-463 - inet6/filter/INPUT -j limit-463 - inet/filter/OUTPUT -j limit-463 - inet6/filter/OUTPUT -j limit-463 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-463 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-463 inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 759 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 759 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-464 - inet6/filter/FORWARD -j limit-464 - inet/filter/INPUT -j limit-464 - inet6/filter/INPUT -j limit-464 - inet/filter/OUTPUT -j limit-464 - inet6/filter/OUTPUT -j limit-464 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-464 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-464 inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 760 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +Filter 760 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-465 - inet6/filter/FORWARD -j limit-465 - inet/filter/INPUT -j limit-465 - inet6/filter/INPUT -j limit-465 - inet/filter/OUTPUT -j limit-465 - inet6/filter/OUTPUT -j limit-465 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-465 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-465 inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set -Filter 761 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +Filter 761 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-466 - inet6/filter/FORWARD -j limit-466 - inet/filter/INPUT -j limit-466 - inet6/filter/INPUT -j limit-466 - inet/filter/OUTPUT -j limit-466 - inet6/filter/OUTPUT -j limit-466 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-466 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-466 inet/filter/limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-466 -j ACCEPT + inet6/filter/limit-466 -j ACCEPT + +Filter 762 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 762 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-467 - inet6/filter/FORWARD -j limit-467 - inet/filter/INPUT -j limit-467 - inet6/filter/INPUT -j limit-467 - inet/filter/OUTPUT -j limit-467 - inet6/filter/OUTPUT -j limit-467 - inet/filter/limit-467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 763 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-468 - inet6/filter/FORWARD -j limit-468 - inet/filter/INPUT -j limit-468 - inet6/filter/INPUT -j limit-468 - inet/filter/OUTPUT -j limit-468 - inet6/filter/OUTPUT -j limit-468 +Filter 763 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-468 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-468 inet/filter/limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-18 - inet6/filter/FORWARD -j logaccept-final-18 - inet/filter/INPUT -j logaccept-final-18 - inet6/filter/INPUT -j logaccept-final-18 - inet/filter/OUTPUT -j logaccept-final-18 - inet6/filter/OUTPUT -j logaccept-final-18 - inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-18 -j ACCEPT - inet6/filter/logaccept-final-18 -j ACCEPT + inet/filter/limit-468 -m limit --limit 1/second -j LOG + inet6/filter/limit-468 -m limit --limit 1/second -j LOG + inet/filter/limit-468 -j ACCEPT + inet6/filter/limit-468 -j ACCEPT -Filter 764 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +Filter 764 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-469 - inet6/filter/FORWARD -j limit-469 - inet/filter/INPUT -j limit-469 - inet6/filter/INPUT -j limit-469 - inet/filter/OUTPUT -j limit-469 - inet6/filter/OUTPUT -j limit-469 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-469 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-469 inet/filter/limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-469 -m limit --limit 1/second -j LOG inet6/filter/limit-469 -m limit --limit 1/second -j LOG -Filter 765 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +Filter 765 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-470 - inet6/filter/FORWARD -j limit-470 - inet/filter/INPUT -j limit-470 - inet6/filter/INPUT -j limit-470 - inet/filter/OUTPUT -j limit-470 - inet6/filter/OUTPUT -j limit-470 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-470 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-470 inet/filter/limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-470 -j ACCEPT + inet6/filter/limit-470 -j ACCEPT -Filter 766 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-471 - inet6/filter/FORWARD -j limit-471 - inet/filter/INPUT -j limit-471 - inet6/filter/INPUT -j limit-471 - inet/filter/OUTPUT -j limit-471 - inet6/filter/OUTPUT -j limit-471 - inet/filter/limit-471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 767 {"flow-limit":{"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-472 - inet6/filter/FORWARD -j limit-472 - inet/filter/INPUT -j limit-472 - inet6/filter/INPUT -j limit-472 - inet/filter/OUTPUT -j limit-472 - inet6/filter/OUTPUT -j limit-472 +Filter 766 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 767 {"conn-limit":{"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-472 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-472 inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 768 {"action":"pass","flow-limit":{"log":"none"}} +Filter 768 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-473 - inet6/filter/FORWARD -j limit-473 - inet/filter/INPUT -j limit-473 - inet6/filter/INPUT -j limit-473 - inet/filter/OUTPUT -j limit-473 - inet6/filter/OUTPUT -j limit-473 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-473 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-473 inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 769 {"flow-limit":{"log":"none"},"log":true} +Filter 769 {"conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-474 - inet6/filter/FORWARD -j limit-474 - inet/filter/INPUT -j limit-474 - inet6/filter/INPUT -j limit-474 - inet/filter/OUTPUT -j limit-474 - inet6/filter/OUTPUT -j limit-474 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-474 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-474 inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-19 - inet6/filter/FORWARD -j logaccept-final-19 - inet/filter/INPUT -j logaccept-final-19 - inet6/filter/INPUT -j logaccept-final-19 - inet/filter/OUTPUT -j logaccept-final-19 - inet6/filter/OUTPUT -j logaccept-final-19 - inet/filter/logaccept-final-19 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-19 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-19 -j ACCEPT - inet6/filter/logaccept-final-19 -j ACCEPT + inet/filter/limit-474 -m limit --limit 1/second -j LOG + inet6/filter/limit-474 -m limit --limit 1/second -j LOG + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 770 {"action":"pass","flow-limit":{"log":"none"},"log":true} +Filter 770 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-475 - inet6/filter/FORWARD -j limit-475 - inet/filter/INPUT -j limit-475 - inet6/filter/INPUT -j limit-475 - inet/filter/OUTPUT -j limit-475 - inet6/filter/OUTPUT -j limit-475 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-475 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-475 inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 771 {"flow-limit":{"log":"none"},"log":"none"} +Filter 771 {"conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-476 - inet6/filter/FORWARD -j limit-476 - inet/filter/INPUT -j limit-476 - inet6/filter/INPUT -j limit-476 - inet/filter/OUTPUT -j limit-476 - inet6/filter/OUTPUT -j limit-476 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-476 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-476 inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 772 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +Filter 772 {"action":"pass","conn-limit":{"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-477 - inet6/filter/FORWARD -j limit-477 - inet/filter/INPUT -j limit-477 - inet6/filter/INPUT -j limit-477 - inet/filter/OUTPUT -j limit-477 - inet6/filter/OUTPUT -j limit-477 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-477 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-477 inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 773 {"flow-limit":{"log":"none","name":"A"}} +Filter 773 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-478 - inet6/filter/FORWARD -j limit-478 - inet/filter/INPUT -j limit-478 - inet6/filter/INPUT -j limit-478 - inet/filter/OUTPUT -j limit-478 - inet6/filter/OUTPUT -j limit-478 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-478 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-478 inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 774 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +Filter 774 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-479 - inet6/filter/FORWARD -j limit-479 - inet/filter/INPUT -j limit-479 - inet6/filter/INPUT -j limit-479 - inet/filter/OUTPUT -j limit-479 - inet6/filter/OUTPUT -j limit-479 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-479 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-479 inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 775 {"flow-limit":{"log":"none","name":"A"},"log":true} +Filter 775 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-480 - inet6/filter/FORWARD -j limit-480 - inet/filter/INPUT -j limit-480 - inet6/filter/INPUT -j limit-480 - inet/filter/OUTPUT -j limit-480 - inet6/filter/OUTPUT -j limit-480 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-480 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-480 inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-20 - inet6/filter/FORWARD -j logaccept-final-20 - inet/filter/INPUT -j logaccept-final-20 - inet6/filter/INPUT -j logaccept-final-20 - inet/filter/OUTPUT -j logaccept-final-20 - inet6/filter/OUTPUT -j logaccept-final-20 - inet/filter/logaccept-final-20 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-20 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-20 -j ACCEPT - inet6/filter/logaccept-final-20 -j ACCEPT + inet/filter/limit-480 -m limit --limit 1/second -j LOG + inet6/filter/limit-480 -m limit --limit 1/second -j LOG + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 776 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +Filter 776 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-481 - inet6/filter/FORWARD -j limit-481 - inet/filter/INPUT -j limit-481 - inet6/filter/INPUT -j limit-481 - inet/filter/OUTPUT -j limit-481 - inet6/filter/OUTPUT -j limit-481 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-481 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-481 inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 777 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 777 {"conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-482 - inet6/filter/FORWARD -j limit-482 - inet/filter/INPUT -j limit-482 - inet6/filter/INPUT -j limit-482 - inet/filter/OUTPUT -j limit-482 - inet6/filter/OUTPUT -j limit-482 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-482 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-482 inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 778 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +Filter 778 {"action":"pass","conn-limit":{"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-483 - inet6/filter/FORWARD -j limit-483 - inet/filter/INPUT -j limit-483 - inet6/filter/INPUT -j limit-483 - inet/filter/OUTPUT -j limit-483 - inet6/filter/OUTPUT -j limit-483 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-483 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-483 inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 779 {"flow-limit":{"log":"none","name":"A","update":false}} +Filter 779 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-484 - inet6/filter/FORWARD -j limit-484 - inet/filter/INPUT -j limit-484 - inet6/filter/INPUT -j limit-484 - inet/filter/OUTPUT -j limit-484 - inet6/filter/OUTPUT -j limit-484 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-484 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-484 inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-484 -j ACCEPT + inet6/filter/limit-484 -j ACCEPT + +Filter 780 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 780 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-485 - inet6/filter/FORWARD -j limit-485 - inet/filter/INPUT -j limit-485 - inet6/filter/INPUT -j limit-485 - inet/filter/OUTPUT -j limit-485 - inet6/filter/OUTPUT -j limit-485 - inet/filter/limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 781 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-486 - inet6/filter/FORWARD -j limit-486 - inet/filter/INPUT -j limit-486 - inet6/filter/INPUT -j limit-486 - inet/filter/OUTPUT -j limit-486 - inet6/filter/OUTPUT -j limit-486 +Filter 781 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-486 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-486 inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-21 - inet6/filter/FORWARD -j logaccept-final-21 - inet/filter/INPUT -j logaccept-final-21 - inet6/filter/INPUT -j logaccept-final-21 - inet/filter/OUTPUT -j logaccept-final-21 - inet6/filter/OUTPUT -j logaccept-final-21 - inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-21 -j ACCEPT - inet6/filter/logaccept-final-21 -j ACCEPT + inet/filter/limit-486 -m limit --limit 1/second -j LOG + inet6/filter/limit-486 -m limit --limit 1/second -j LOG + inet/filter/limit-486 -j ACCEPT + inet6/filter/limit-486 -j ACCEPT -Filter 782 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +Filter 782 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-487 - inet6/filter/FORWARD -j limit-487 - inet/filter/INPUT -j limit-487 - inet6/filter/INPUT -j limit-487 - inet/filter/OUTPUT -j limit-487 - inet6/filter/OUTPUT -j limit-487 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-487 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-487 inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-487 -m limit --limit 1/second -j LOG inet6/filter/limit-487 -m limit --limit 1/second -j LOG -Filter 783 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +Filter 783 {"conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-488 - inet6/filter/FORWARD -j limit-488 - inet/filter/INPUT -j limit-488 - inet6/filter/INPUT -j limit-488 - inet/filter/OUTPUT -j limit-488 - inet6/filter/OUTPUT -j limit-488 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-488 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-488 inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-488 -j ACCEPT + inet6/filter/limit-488 -j ACCEPT -Filter 784 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-489 - inet6/filter/FORWARD -j limit-489 - inet/filter/INPUT -j limit-489 - inet6/filter/INPUT -j limit-489 - inet/filter/OUTPUT -j limit-489 - inet6/filter/OUTPUT -j limit-489 - inet/filter/limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 785 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-490 - inet6/filter/FORWARD -j limit-490 - inet/filter/INPUT -j limit-490 - inet6/filter/INPUT -j limit-490 - inet/filter/OUTPUT -j limit-490 - inet6/filter/OUTPUT -j limit-490 +Filter 784 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 785 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-490 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-490 inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 786 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 786 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-491 - inet6/filter/FORWARD -j limit-491 - inet/filter/INPUT -j limit-491 - inet6/filter/INPUT -j limit-491 - inet/filter/OUTPUT -j limit-491 - inet6/filter/OUTPUT -j limit-491 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-491 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-491 inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 787 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 787 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-492 - inet6/filter/FORWARD -j limit-492 - inet/filter/INPUT -j limit-492 - inet6/filter/INPUT -j limit-492 - inet/filter/OUTPUT -j limit-492 - inet6/filter/OUTPUT -j limit-492 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-492 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-492 inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-22 - inet6/filter/FORWARD -j logaccept-final-22 - inet/filter/INPUT -j logaccept-final-22 - inet6/filter/INPUT -j logaccept-final-22 - inet/filter/OUTPUT -j logaccept-final-22 - inet6/filter/OUTPUT -j logaccept-final-22 - inet/filter/logaccept-final-22 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-22 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-22 -j ACCEPT - inet6/filter/logaccept-final-22 -j ACCEPT + inet/filter/limit-492 -m limit --limit 1/second -j LOG + inet6/filter/limit-492 -m limit --limit 1/second -j LOG + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 788 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +Filter 788 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-493 - inet6/filter/FORWARD -j limit-493 - inet/filter/INPUT -j limit-493 - inet6/filter/INPUT -j limit-493 - inet/filter/OUTPUT -j limit-493 - inet6/filter/OUTPUT -j limit-493 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-493 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-493 inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 789 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 789 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-494 - inet6/filter/FORWARD -j limit-494 - inet/filter/INPUT -j limit-494 - inet6/filter/INPUT -j limit-494 - inet/filter/OUTPUT -j limit-494 - inet6/filter/OUTPUT -j limit-494 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-494 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-494 inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 790 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +Filter 790 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-495 - inet6/filter/FORWARD -j limit-495 - inet/filter/INPUT -j limit-495 - inet6/filter/INPUT -j limit-495 - inet/filter/OUTPUT -j limit-495 - inet6/filter/OUTPUT -j limit-495 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-495 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-495 inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 791 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +Filter 791 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-496 - inet6/filter/FORWARD -j limit-496 - inet/filter/INPUT -j limit-496 - inet6/filter/INPUT -j limit-496 - inet/filter/OUTPUT -j limit-496 - inet6/filter/OUTPUT -j limit-496 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-496 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-496 inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-496 -j ACCEPT + inet6/filter/limit-496 -j ACCEPT + +Filter 792 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 792 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-497 - inet6/filter/FORWARD -j limit-497 - inet/filter/INPUT -j limit-497 - inet6/filter/INPUT -j limit-497 - inet/filter/OUTPUT -j limit-497 - inet6/filter/OUTPUT -j limit-497 - inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 793 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-498 - inet6/filter/FORWARD -j limit-498 - inet/filter/INPUT -j limit-498 - inet6/filter/INPUT -j limit-498 - inet/filter/OUTPUT -j limit-498 - inet6/filter/OUTPUT -j limit-498 +Filter 793 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-498 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-498 inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-23 - inet6/filter/FORWARD -j logaccept-final-23 - inet/filter/INPUT -j logaccept-final-23 - inet6/filter/INPUT -j logaccept-final-23 - inet/filter/OUTPUT -j logaccept-final-23 - inet6/filter/OUTPUT -j logaccept-final-23 - inet/filter/logaccept-final-23 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-23 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-23 -j ACCEPT - inet6/filter/logaccept-final-23 -j ACCEPT + inet/filter/limit-498 -m limit --limit 1/second -j LOG + inet6/filter/limit-498 -m limit --limit 1/second -j LOG + inet/filter/limit-498 -j ACCEPT + inet6/filter/limit-498 -j ACCEPT -Filter 794 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +Filter 794 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-499 - inet6/filter/FORWARD -j limit-499 - inet/filter/INPUT -j limit-499 - inet6/filter/INPUT -j limit-499 - inet/filter/OUTPUT -j limit-499 - inet6/filter/OUTPUT -j limit-499 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-499 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-499 inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-499 -m limit --limit 1/second -j LOG inet6/filter/limit-499 -m limit --limit 1/second -j LOG -Filter 795 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +Filter 795 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-500 - inet6/filter/FORWARD -j limit-500 - inet/filter/INPUT -j limit-500 - inet6/filter/INPUT -j limit-500 - inet/filter/OUTPUT -j limit-500 - inet6/filter/OUTPUT -j limit-500 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-500 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-500 inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-500 -j ACCEPT + inet6/filter/limit-500 -j ACCEPT + +Filter 796 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 796 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-501 - inet6/filter/FORWARD -j limit-501 - inet/filter/INPUT -j limit-501 - inet6/filter/INPUT -j limit-501 - inet/filter/OUTPUT -j limit-501 - inet6/filter/OUTPUT -j limit-501 - inet/filter/limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 797 {"flow-limit":{"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-502 - inet6/filter/FORWARD -j limit-502 - inet/filter/INPUT -j limit-502 - inet6/filter/INPUT -j limit-502 - inet/filter/OUTPUT -j limit-502 - inet6/filter/OUTPUT -j limit-502 +Filter 797 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-502 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-502 inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 798 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +Filter 798 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-503 - inet6/filter/FORWARD -j limit-503 - inet/filter/INPUT -j limit-503 - inet6/filter/INPUT -j limit-503 - inet/filter/OUTPUT -j limit-503 - inet6/filter/OUTPUT -j limit-503 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-503 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-503 inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set -Filter 799 {"flow-limit":{"log":"none","name":"C"},"log":true} +Filter 799 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-504 - inet6/filter/FORWARD -j limit-504 - inet/filter/INPUT -j limit-504 - inet6/filter/INPUT -j limit-504 - inet/filter/OUTPUT -j limit-504 - inet6/filter/OUTPUT -j limit-504 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-504 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-504 inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-24 - inet6/filter/FORWARD -j logaccept-final-24 - inet/filter/INPUT -j logaccept-final-24 - inet6/filter/INPUT -j logaccept-final-24 - inet/filter/OUTPUT -j logaccept-final-24 - inet6/filter/OUTPUT -j logaccept-final-24 - inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-24 -j ACCEPT - inet6/filter/logaccept-final-24 -j ACCEPT + inet/filter/limit-504 -m limit --limit 1/second -j LOG + inet6/filter/limit-504 -m limit --limit 1/second -j LOG + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 800 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +Filter 800 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-505 - inet6/filter/FORWARD -j limit-505 - inet/filter/INPUT -j limit-505 - inet6/filter/INPUT -j limit-505 - inet/filter/OUTPUT -j limit-505 - inet6/filter/OUTPUT -j limit-505 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-505 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-505 inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 801 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 801 {"conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-506 - inet6/filter/FORWARD -j limit-506 - inet/filter/INPUT -j limit-506 - inet6/filter/INPUT -j limit-506 - inet/filter/OUTPUT -j limit-506 - inet6/filter/OUTPUT -j limit-506 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-506 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-506 inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 802 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +Filter 802 {"action":"pass","conn-limit":{"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-507 - inet6/filter/FORWARD -j limit-507 - inet/filter/INPUT -j limit-507 - inet6/filter/INPUT -j limit-507 - inet/filter/OUTPUT -j limit-507 - inet6/filter/OUTPUT -j limit-507 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-507 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-507 inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set -Filter 803 {"flow-limit":{"log":"none","name":"C","update":false}} +Filter 803 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-508 - inet6/filter/FORWARD -j limit-508 - inet/filter/INPUT -j limit-508 - inet6/filter/INPUT -j limit-508 - inet/filter/OUTPUT -j limit-508 - inet6/filter/OUTPUT -j limit-508 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-508 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-508 inet/filter/limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-508 -j ACCEPT + inet6/filter/limit-508 -j ACCEPT + +Filter 804 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 804 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-509 - inet6/filter/FORWARD -j limit-509 - inet/filter/INPUT -j limit-509 - inet6/filter/INPUT -j limit-509 - inet/filter/OUTPUT -j limit-509 - inet6/filter/OUTPUT -j limit-509 - inet/filter/limit-509 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-509 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 805 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-510 - inet6/filter/FORWARD -j limit-510 - inet/filter/INPUT -j limit-510 - inet6/filter/INPUT -j limit-510 - inet/filter/OUTPUT -j limit-510 - inet6/filter/OUTPUT -j limit-510 +Filter 805 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-510 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-510 inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-25 - inet6/filter/FORWARD -j logaccept-final-25 - inet/filter/INPUT -j logaccept-final-25 - inet6/filter/INPUT -j logaccept-final-25 - inet/filter/OUTPUT -j logaccept-final-25 - inet6/filter/OUTPUT -j logaccept-final-25 - inet/filter/logaccept-final-25 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-25 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-25 -j ACCEPT - inet6/filter/logaccept-final-25 -j ACCEPT + inet/filter/limit-510 -m limit --limit 1/second -j LOG + inet6/filter/limit-510 -m limit --limit 1/second -j LOG + inet/filter/limit-510 -j ACCEPT + inet6/filter/limit-510 -j ACCEPT -Filter 806 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +Filter 806 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-511 - inet6/filter/FORWARD -j limit-511 - inet/filter/INPUT -j limit-511 - inet6/filter/INPUT -j limit-511 - inet/filter/OUTPUT -j limit-511 - inet6/filter/OUTPUT -j limit-511 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-511 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-511 inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-511 -m limit --limit 1/second -j LOG inet6/filter/limit-511 -m limit --limit 1/second -j LOG -Filter 807 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +Filter 807 {"conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-512 - inet6/filter/FORWARD -j limit-512 - inet/filter/INPUT -j limit-512 - inet6/filter/INPUT -j limit-512 - inet/filter/OUTPUT -j limit-512 - inet6/filter/OUTPUT -j limit-512 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-512 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-512 inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-512 -j ACCEPT + inet6/filter/limit-512 -j ACCEPT -Filter 808 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-513 - inet6/filter/FORWARD -j limit-513 - inet/filter/INPUT -j limit-513 - inet6/filter/INPUT -j limit-513 - inet/filter/OUTPUT -j limit-513 - inet6/filter/OUTPUT -j limit-513 - inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 809 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-514 - inet6/filter/FORWARD -j limit-514 - inet/filter/INPUT -j limit-514 - inet6/filter/INPUT -j limit-514 - inet/filter/OUTPUT -j limit-514 - inet6/filter/OUTPUT -j limit-514 +Filter 808 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 809 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-514 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-514 inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 810 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +Filter 810 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-515 - inet6/filter/FORWARD -j limit-515 - inet/filter/INPUT -j limit-515 - inet6/filter/INPUT -j limit-515 - inet/filter/OUTPUT -j limit-515 - inet6/filter/OUTPUT -j limit-515 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-515 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-515 inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set -Filter 811 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 811 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-516 - inet6/filter/FORWARD -j limit-516 - inet/filter/INPUT -j limit-516 - inet6/filter/INPUT -j limit-516 - inet/filter/OUTPUT -j limit-516 - inet6/filter/OUTPUT -j limit-516 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-516 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-516 inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-26 - inet6/filter/FORWARD -j logaccept-final-26 - inet/filter/INPUT -j logaccept-final-26 - inet6/filter/INPUT -j logaccept-final-26 - inet/filter/OUTPUT -j logaccept-final-26 - inet6/filter/OUTPUT -j logaccept-final-26 - inet/filter/logaccept-final-26 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-26 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-26 -j ACCEPT - inet6/filter/logaccept-final-26 -j ACCEPT + inet/filter/limit-516 -m limit --limit 1/second -j LOG + inet6/filter/limit-516 -m limit --limit 1/second -j LOG + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 812 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +Filter 812 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-517 - inet6/filter/FORWARD -j limit-517 - inet/filter/INPUT -j limit-517 - inet6/filter/INPUT -j limit-517 - inet/filter/OUTPUT -j limit-517 - inet6/filter/OUTPUT -j limit-517 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-517 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-517 inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 813 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 813 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-518 - inet6/filter/FORWARD -j limit-518 - inet/filter/INPUT -j limit-518 - inet6/filter/INPUT -j limit-518 - inet/filter/OUTPUT -j limit-518 - inet6/filter/OUTPUT -j limit-518 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-518 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-518 inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 814 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +Filter 814 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-519 - inet6/filter/FORWARD -j limit-519 - inet/filter/INPUT -j limit-519 - inet6/filter/INPUT -j limit-519 - inet/filter/OUTPUT -j limit-519 - inet6/filter/OUTPUT -j limit-519 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-519 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-519 inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set -Filter 815 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +Filter 815 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-520 - inet6/filter/FORWARD -j limit-520 - inet/filter/INPUT -j limit-520 - inet6/filter/INPUT -j limit-520 - inet/filter/OUTPUT -j limit-520 - inet6/filter/OUTPUT -j limit-520 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-520 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-520 inet/filter/limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-520 -j ACCEPT + inet6/filter/limit-520 -j ACCEPT + +Filter 816 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 816 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-521 - inet6/filter/FORWARD -j limit-521 - inet/filter/INPUT -j limit-521 - inet6/filter/INPUT -j limit-521 - inet/filter/OUTPUT -j limit-521 - inet6/filter/OUTPUT -j limit-521 - inet/filter/limit-521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 817 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-522 - inet6/filter/FORWARD -j limit-522 - inet/filter/INPUT -j limit-522 - inet6/filter/INPUT -j limit-522 - inet/filter/OUTPUT -j limit-522 - inet6/filter/OUTPUT -j limit-522 +Filter 817 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-522 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-522 inet/filter/limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-27 - inet6/filter/FORWARD -j logaccept-final-27 - inet/filter/INPUT -j logaccept-final-27 - inet6/filter/INPUT -j logaccept-final-27 - inet/filter/OUTPUT -j logaccept-final-27 - inet6/filter/OUTPUT -j logaccept-final-27 - inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-27 -j ACCEPT - inet6/filter/logaccept-final-27 -j ACCEPT + inet/filter/limit-522 -m limit --limit 1/second -j LOG + inet6/filter/limit-522 -m limit --limit 1/second -j LOG + inet/filter/limit-522 -j ACCEPT + inet6/filter/limit-522 -j ACCEPT -Filter 818 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +Filter 818 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-523 - inet6/filter/FORWARD -j limit-523 - inet/filter/INPUT -j limit-523 - inet6/filter/INPUT -j limit-523 - inet/filter/OUTPUT -j limit-523 - inet6/filter/OUTPUT -j limit-523 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-523 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-523 inet/filter/limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-523 -m limit --limit 1/second -j LOG inet6/filter/limit-523 -m limit --limit 1/second -j LOG -Filter 819 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +Filter 819 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-524 - inet6/filter/FORWARD -j limit-524 - inet/filter/INPUT -j limit-524 - inet6/filter/INPUT -j limit-524 - inet/filter/OUTPUT -j limit-524 - inet6/filter/OUTPUT -j limit-524 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-524 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-524 inet/filter/limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP inet6/filter/limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-524 -j ACCEPT + inet6/filter/limit-524 -j ACCEPT + +Filter 820 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 820 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-525 - inet6/filter/FORWARD -j limit-525 - inet/filter/INPUT -j limit-525 - inet6/filter/INPUT -j limit-525 - inet/filter/OUTPUT -j limit-525 - inet6/filter/OUTPUT -j limit-525 - inet/filter/limit-525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 821 {"flow-limit":{"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-526 - inet6/filter/FORWARD -j limit-526 - inet/filter/INPUT -j limit-526 - inet6/filter/INPUT -j limit-526 - inet/filter/OUTPUT -j limit-526 - inet6/filter/OUTPUT -j limit-526 +Filter 821 {"conn-limit":{"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-526 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-526 inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 inet/filter/logdrop-175 -m limit --limit 1/second -j LOG inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG inet/filter/logdrop-175 -j DROP inet6/filter/logdrop-175 -j DROP - inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 822 {"action":"pass","flow-limit":{"interval":5}} +Filter 822 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-527 - inet6/filter/FORWARD -j limit-527 - inet/filter/INPUT -j limit-527 - inet6/filter/INPUT -j limit-527 - inet/filter/OUTPUT -j limit-527 - inet6/filter/OUTPUT -j limit-527 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-527 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-527 inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 inet/filter/logdrop-176 -m limit --limit 1/second -j LOG @@ -9687,41 +8465,25 @@ Filter 822 {"action":"pass","flow-limit":{"interval":5}} inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 823 {"flow-limit":{"interval":5},"log":true} +Filter 823 {"conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-528 - inet6/filter/FORWARD -j limit-528 - inet/filter/INPUT -j limit-528 - inet6/filter/INPUT -j limit-528 - inet/filter/OUTPUT -j limit-528 - inet6/filter/OUTPUT -j limit-528 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-528 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-528 inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 inet/filter/logdrop-177 -m limit --limit 1/second -j LOG inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG inet/filter/logdrop-177 -j DROP inet6/filter/logdrop-177 -j DROP - inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-28 - inet6/filter/FORWARD -j logaccept-final-28 - inet/filter/INPUT -j logaccept-final-28 - inet6/filter/INPUT -j logaccept-final-28 - inet/filter/OUTPUT -j logaccept-final-28 - inet6/filter/OUTPUT -j logaccept-final-28 - inet/filter/logaccept-final-28 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-28 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-28 -j ACCEPT - inet6/filter/logaccept-final-28 -j ACCEPT + inet/filter/limit-528 -m limit --limit 1/second -j LOG + inet6/filter/limit-528 -m limit --limit 1/second -j LOG + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 824 {"action":"pass","flow-limit":{"interval":5},"log":true} +Filter 824 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-529 - inet6/filter/FORWARD -j limit-529 - inet/filter/INPUT -j limit-529 - inet6/filter/INPUT -j limit-529 - inet/filter/OUTPUT -j limit-529 - inet6/filter/OUTPUT -j limit-529 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-529 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-529 inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 inet/filter/logdrop-178 -m limit --limit 1/second -j LOG @@ -9731,37 +8493,23 @@ Filter 824 {"action":"pass","flow-limit":{"interval":5}, inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 825 {"flow-limit":{"interval":5},"log":"none"} +Filter 825 {"conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-530 - inet6/filter/FORWARD -j limit-530 - inet/filter/INPUT -j limit-530 - inet6/filter/INPUT -j limit-530 - inet/filter/OUTPUT -j limit-530 - inet6/filter/OUTPUT -j limit-530 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-530 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-530 inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 inet/filter/logdrop-179 -m limit --limit 1/second -j LOG inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG inet/filter/logdrop-179 -j DROP inet6/filter/logdrop-179 -j DROP - inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 826 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +Filter 826 {"action":"pass","conn-limit":{"interval":5},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-531 - inet6/filter/FORWARD -j limit-531 - inet/filter/INPUT -j limit-531 - inet6/filter/INPUT -j limit-531 - inet/filter/OUTPUT -j limit-531 - inet6/filter/OUTPUT -j limit-531 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-531 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-531 inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 inet/filter/logdrop-180 -m limit --limit 1/second -j LOG @@ -9771,37 +8519,23 @@ Filter 826 {"action":"pass","flow-limit":{"interval":5}, inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 827 {"flow-limit":{"interval":5,"name":"A"}} +Filter 827 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-532 - inet6/filter/FORWARD -j limit-532 - inet/filter/INPUT -j limit-532 - inet6/filter/INPUT -j limit-532 - inet/filter/OUTPUT -j limit-532 - inet6/filter/OUTPUT -j limit-532 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-532 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-532 inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 inet/filter/logdrop-181 -m limit --limit 1/second -j LOG inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG inet/filter/logdrop-181 -j DROP inet6/filter/logdrop-181 -j DROP - inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 828 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +Filter 828 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-533 - inet6/filter/FORWARD -j limit-533 - inet/filter/INPUT -j limit-533 - inet6/filter/INPUT -j limit-533 - inet/filter/OUTPUT -j limit-533 - inet6/filter/OUTPUT -j limit-533 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-533 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-533 inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 inet/filter/logdrop-182 -m limit --limit 1/second -j LOG @@ -9811,41 +8545,25 @@ Filter 828 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 829 {"flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 829 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-534 - inet6/filter/FORWARD -j limit-534 - inet/filter/INPUT -j limit-534 - inet6/filter/INPUT -j limit-534 - inet/filter/OUTPUT -j limit-534 - inet6/filter/OUTPUT -j limit-534 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-534 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-534 inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 inet/filter/logdrop-183 -m limit --limit 1/second -j LOG inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG inet/filter/logdrop-183 -j DROP inet6/filter/logdrop-183 -j DROP - inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-29 - inet6/filter/FORWARD -j logaccept-final-29 - inet/filter/INPUT -j logaccept-final-29 - inet6/filter/INPUT -j logaccept-final-29 - inet/filter/OUTPUT -j logaccept-final-29 - inet6/filter/OUTPUT -j logaccept-final-29 - inet/filter/logaccept-final-29 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-29 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-29 -j ACCEPT - inet6/filter/logaccept-final-29 -j ACCEPT + inet/filter/limit-534 -m limit --limit 1/second -j LOG + inet6/filter/limit-534 -m limit --limit 1/second -j LOG + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 830 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +Filter 830 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-535 - inet6/filter/FORWARD -j limit-535 - inet/filter/INPUT -j limit-535 - inet6/filter/INPUT -j limit-535 - inet/filter/OUTPUT -j limit-535 - inet6/filter/OUTPUT -j limit-535 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-535 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-535 inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 inet/filter/logdrop-184 -m limit --limit 1/second -j LOG @@ -9855,37 +8573,23 @@ Filter 830 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 831 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 831 {"conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-536 - inet6/filter/FORWARD -j limit-536 - inet/filter/INPUT -j limit-536 - inet6/filter/INPUT -j limit-536 - inet/filter/OUTPUT -j limit-536 - inet6/filter/OUTPUT -j limit-536 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-536 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-536 inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 inet/filter/logdrop-185 -m limit --limit 1/second -j LOG inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG inet/filter/logdrop-185 -j DROP inet6/filter/logdrop-185 -j DROP - inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 832 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +Filter 832 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-537 - inet6/filter/FORWARD -j limit-537 - inet/filter/INPUT -j limit-537 - inet6/filter/INPUT -j limit-537 - inet/filter/OUTPUT -j limit-537 - inet6/filter/OUTPUT -j limit-537 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-537 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-537 inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 inet/filter/logdrop-186 -m limit --limit 1/second -j LOG @@ -9895,75 +8599,47 @@ Filter 832 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 833 {"flow-limit":{"interval":5,"name":"A","update":false}} +Filter 833 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-538 - inet6/filter/FORWARD -j limit-538 - inet/filter/INPUT -j limit-538 - inet6/filter/INPUT -j limit-538 - inet/filter/OUTPUT -j limit-538 - inet6/filter/OUTPUT -j limit-538 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-538 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-538 inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 inet/filter/logdrop-187 -m limit --limit 1/second -j LOG inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG inet/filter/logdrop-187 -j DROP inet6/filter/logdrop-187 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-538 -j ACCEPT + inet6/filter/limit-538 -j ACCEPT -Filter 834 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +Filter 834 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-539 - inet6/filter/FORWARD -j limit-539 - inet/filter/INPUT -j limit-539 - inet6/filter/INPUT -j limit-539 - inet/filter/OUTPUT -j limit-539 - inet6/filter/OUTPUT -j limit-539 - inet/filter/limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 - inet6/filter/limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 inet/filter/logdrop-188 -m limit --limit 1/second -j LOG inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG inet/filter/logdrop-188 -j DROP inet6/filter/logdrop-188 -j DROP -Filter 835 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 835 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-540 - inet6/filter/FORWARD -j limit-540 - inet/filter/INPUT -j limit-540 - inet6/filter/INPUT -j limit-540 - inet/filter/OUTPUT -j limit-540 - inet6/filter/OUTPUT -j limit-540 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-540 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-540 inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 inet/filter/logdrop-189 -m limit --limit 1/second -j LOG inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG inet/filter/logdrop-189 -j DROP inet6/filter/logdrop-189 -j DROP - inet/filter/FORWARD -j logaccept-final-30 - inet6/filter/FORWARD -j logaccept-final-30 - inet/filter/INPUT -j logaccept-final-30 - inet6/filter/INPUT -j logaccept-final-30 - inet/filter/OUTPUT -j logaccept-final-30 - inet6/filter/OUTPUT -j logaccept-final-30 - inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-30 -j ACCEPT - inet6/filter/logaccept-final-30 -j ACCEPT + inet/filter/limit-540 -m limit --limit 1/second -j LOG + inet6/filter/limit-540 -m limit --limit 1/second -j LOG + inet/filter/limit-540 -j ACCEPT + inet6/filter/limit-540 -j ACCEPT -Filter 836 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +Filter 836 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-541 - inet6/filter/FORWARD -j limit-541 - inet/filter/INPUT -j limit-541 - inet6/filter/INPUT -j limit-541 - inet/filter/OUTPUT -j limit-541 - inet6/filter/OUTPUT -j limit-541 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-541 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-541 inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 inet/filter/logdrop-190 -m limit --limit 1/second -j LOG @@ -9973,73 +8649,45 @@ Filter 836 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-541 -m limit --limit 1/second -j LOG inet6/filter/limit-541 -m limit --limit 1/second -j LOG -Filter 837 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 837 {"conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-542 - inet6/filter/FORWARD -j limit-542 - inet/filter/INPUT -j limit-542 - inet6/filter/INPUT -j limit-542 - inet/filter/OUTPUT -j limit-542 - inet6/filter/OUTPUT -j limit-542 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-542 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-542 inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 inet/filter/logdrop-191 -m limit --limit 1/second -j LOG inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG inet/filter/logdrop-191 -j DROP inet6/filter/logdrop-191 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-542 -j ACCEPT + inet6/filter/limit-542 -j ACCEPT -Filter 838 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +Filter 838 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-543 - inet6/filter/FORWARD -j limit-543 - inet/filter/INPUT -j limit-543 - inet6/filter/INPUT -j limit-543 - inet/filter/OUTPUT -j limit-543 - inet6/filter/OUTPUT -j limit-543 - inet/filter/limit-543 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 - inet6/filter/limit-543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 inet/filter/logdrop-192 -m limit --limit 1/second -j LOG inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG inet/filter/logdrop-192 -j DROP inet6/filter/logdrop-192 -j DROP -Filter 839 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 839 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-544 - inet6/filter/FORWARD -j limit-544 - inet/filter/INPUT -j limit-544 - inet6/filter/INPUT -j limit-544 - inet/filter/OUTPUT -j limit-544 - inet6/filter/OUTPUT -j limit-544 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-544 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-544 inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 inet/filter/logdrop-193 -m limit --limit 1/second -j LOG inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG inet/filter/logdrop-193 -j DROP inet6/filter/logdrop-193 -j DROP - inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 840 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +Filter 840 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-545 - inet6/filter/FORWARD -j limit-545 - inet/filter/INPUT -j limit-545 - inet6/filter/INPUT -j limit-545 - inet/filter/OUTPUT -j limit-545 - inet6/filter/OUTPUT -j limit-545 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-545 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-545 inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 inet/filter/logdrop-194 -m limit --limit 1/second -j LOG @@ -10049,41 +8697,25 @@ Filter 840 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 841 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 841 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-546 - inet6/filter/FORWARD -j limit-546 - inet/filter/INPUT -j limit-546 - inet6/filter/INPUT -j limit-546 - inet/filter/OUTPUT -j limit-546 - inet6/filter/OUTPUT -j limit-546 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-546 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-546 inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 inet/filter/logdrop-195 -m limit --limit 1/second -j LOG inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG inet/filter/logdrop-195 -j DROP inet6/filter/logdrop-195 -j DROP - inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-31 - inet6/filter/FORWARD -j logaccept-final-31 - inet/filter/INPUT -j logaccept-final-31 - inet6/filter/INPUT -j logaccept-final-31 - inet/filter/OUTPUT -j logaccept-final-31 - inet6/filter/OUTPUT -j logaccept-final-31 - inet/filter/logaccept-final-31 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-31 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-31 -j ACCEPT - inet6/filter/logaccept-final-31 -j ACCEPT + inet/filter/limit-546 -m limit --limit 1/second -j LOG + inet6/filter/limit-546 -m limit --limit 1/second -j LOG + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 842 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +Filter 842 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-547 - inet6/filter/FORWARD -j limit-547 - inet/filter/INPUT -j limit-547 - inet6/filter/INPUT -j limit-547 - inet/filter/OUTPUT -j limit-547 - inet6/filter/OUTPUT -j limit-547 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-547 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-547 inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 inet/filter/logdrop-196 -m limit --limit 1/second -j LOG @@ -10093,37 +8725,23 @@ Filter 842 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 843 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 843 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-548 - inet6/filter/FORWARD -j limit-548 - inet/filter/INPUT -j limit-548 - inet6/filter/INPUT -j limit-548 - inet/filter/OUTPUT -j limit-548 - inet6/filter/OUTPUT -j limit-548 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-548 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-548 inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 inet/filter/logdrop-197 -m limit --limit 1/second -j LOG inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG inet/filter/logdrop-197 -j DROP inet6/filter/logdrop-197 -j DROP - inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 844 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +Filter 844 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-549 - inet6/filter/FORWARD -j limit-549 - inet/filter/INPUT -j limit-549 - inet6/filter/INPUT -j limit-549 - inet/filter/OUTPUT -j limit-549 - inet6/filter/OUTPUT -j limit-549 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-549 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-549 inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 inet/filter/logdrop-198 -m limit --limit 1/second -j LOG @@ -10133,75 +8751,47 @@ Filter 844 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 845 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 845 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-550 - inet6/filter/FORWARD -j limit-550 - inet/filter/INPUT -j limit-550 - inet6/filter/INPUT -j limit-550 - inet/filter/OUTPUT -j limit-550 - inet6/filter/OUTPUT -j limit-550 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-550 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-550 inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 inet/filter/logdrop-199 -m limit --limit 1/second -j LOG inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG inet/filter/logdrop-199 -j DROP inet6/filter/logdrop-199 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-550 -j ACCEPT + inet6/filter/limit-550 -j ACCEPT -Filter 846 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +Filter 846 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-551 - inet6/filter/FORWARD -j limit-551 - inet/filter/INPUT -j limit-551 - inet6/filter/INPUT -j limit-551 - inet/filter/OUTPUT -j limit-551 - inet6/filter/OUTPUT -j limit-551 - inet/filter/limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 - inet6/filter/limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 inet/filter/logdrop-200 -m limit --limit 1/second -j LOG inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG inet/filter/logdrop-200 -j DROP inet6/filter/logdrop-200 -j DROP -Filter 847 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 847 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-552 - inet6/filter/FORWARD -j limit-552 - inet/filter/INPUT -j limit-552 - inet6/filter/INPUT -j limit-552 - inet/filter/OUTPUT -j limit-552 - inet6/filter/OUTPUT -j limit-552 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-552 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-552 inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 inet/filter/logdrop-201 -m limit --limit 1/second -j LOG inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG inet/filter/logdrop-201 -j DROP inet6/filter/logdrop-201 -j DROP - inet/filter/FORWARD -j logaccept-final-32 - inet6/filter/FORWARD -j logaccept-final-32 - inet/filter/INPUT -j logaccept-final-32 - inet6/filter/INPUT -j logaccept-final-32 - inet/filter/OUTPUT -j logaccept-final-32 - inet6/filter/OUTPUT -j logaccept-final-32 - inet/filter/logaccept-final-32 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-32 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-32 -j ACCEPT - inet6/filter/logaccept-final-32 -j ACCEPT + inet/filter/limit-552 -m limit --limit 1/second -j LOG + inet6/filter/limit-552 -m limit --limit 1/second -j LOG + inet/filter/limit-552 -j ACCEPT + inet6/filter/limit-552 -j ACCEPT -Filter 848 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 848 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-553 - inet6/filter/FORWARD -j limit-553 - inet/filter/INPUT -j limit-553 - inet6/filter/INPUT -j limit-553 - inet/filter/OUTPUT -j limit-553 - inet6/filter/OUTPUT -j limit-553 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-553 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-553 inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 inet/filter/logdrop-202 -m limit --limit 1/second -j LOG @@ -10211,73 +8801,45 @@ Filter 848 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-553 -m limit --limit 1/second -j LOG inet6/filter/limit-553 -m limit --limit 1/second -j LOG -Filter 849 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 849 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-554 - inet6/filter/FORWARD -j limit-554 - inet/filter/INPUT -j limit-554 - inet6/filter/INPUT -j limit-554 - inet/filter/OUTPUT -j limit-554 - inet6/filter/OUTPUT -j limit-554 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-554 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-554 inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 inet/filter/logdrop-203 -m limit --limit 1/second -j LOG inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG inet/filter/logdrop-203 -j DROP inet6/filter/logdrop-203 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-554 -j ACCEPT + inet6/filter/limit-554 -j ACCEPT -Filter 850 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +Filter 850 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-555 - inet6/filter/FORWARD -j limit-555 - inet/filter/INPUT -j limit-555 - inet6/filter/INPUT -j limit-555 - inet/filter/OUTPUT -j limit-555 - inet6/filter/OUTPUT -j limit-555 - inet/filter/limit-555 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 - inet6/filter/limit-555 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 inet/filter/logdrop-204 -m limit --limit 1/second -j LOG inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG inet/filter/logdrop-204 -j DROP inet6/filter/logdrop-204 -j DROP -Filter 851 {"flow-limit":{"interval":5,"name":"C"}} +Filter 851 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-556 - inet6/filter/FORWARD -j limit-556 - inet/filter/INPUT -j limit-556 - inet6/filter/INPUT -j limit-556 - inet/filter/OUTPUT -j limit-556 - inet6/filter/OUTPUT -j limit-556 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-556 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-556 inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 inet/filter/logdrop-205 -m limit --limit 1/second -j LOG inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG inet/filter/logdrop-205 -j DROP inet6/filter/logdrop-205 -j DROP - inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 852 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +Filter 852 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-557 - inet6/filter/FORWARD -j limit-557 - inet/filter/INPUT -j limit-557 - inet6/filter/INPUT -j limit-557 - inet/filter/OUTPUT -j limit-557 - inet6/filter/OUTPUT -j limit-557 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-557 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-557 inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 inet/filter/logdrop-206 -m limit --limit 1/second -j LOG @@ -10287,41 +8849,25 @@ Filter 852 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set -Filter 853 {"flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 853 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-558 - inet6/filter/FORWARD -j limit-558 - inet/filter/INPUT -j limit-558 - inet6/filter/INPUT -j limit-558 - inet/filter/OUTPUT -j limit-558 - inet6/filter/OUTPUT -j limit-558 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-558 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-558 inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 inet/filter/logdrop-207 -m limit --limit 1/second -j LOG inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG inet/filter/logdrop-207 -j DROP inet6/filter/logdrop-207 -j DROP - inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-33 - inet6/filter/FORWARD -j logaccept-final-33 - inet/filter/INPUT -j logaccept-final-33 - inet6/filter/INPUT -j logaccept-final-33 - inet/filter/OUTPUT -j logaccept-final-33 - inet6/filter/OUTPUT -j logaccept-final-33 - inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-33 -j ACCEPT - inet6/filter/logaccept-final-33 -j ACCEPT + inet/filter/limit-558 -m limit --limit 1/second -j LOG + inet6/filter/limit-558 -m limit --limit 1/second -j LOG + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 854 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +Filter 854 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-559 - inet6/filter/FORWARD -j limit-559 - inet/filter/INPUT -j limit-559 - inet6/filter/INPUT -j limit-559 - inet/filter/OUTPUT -j limit-559 - inet6/filter/OUTPUT -j limit-559 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-559 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-559 inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 inet/filter/logdrop-208 -m limit --limit 1/second -j LOG @@ -10331,37 +8877,23 @@ Filter 854 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 855 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 855 {"conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-560 - inet6/filter/FORWARD -j limit-560 - inet/filter/INPUT -j limit-560 - inet6/filter/INPUT -j limit-560 - inet/filter/OUTPUT -j limit-560 - inet6/filter/OUTPUT -j limit-560 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-560 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-560 inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 inet/filter/logdrop-209 -m limit --limit 1/second -j LOG inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG inet/filter/logdrop-209 -j DROP inet6/filter/logdrop-209 -j DROP - inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 856 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +Filter 856 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-561 - inet6/filter/FORWARD -j limit-561 - inet/filter/INPUT -j limit-561 - inet6/filter/INPUT -j limit-561 - inet/filter/OUTPUT -j limit-561 - inet6/filter/OUTPUT -j limit-561 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-561 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-561 inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 inet/filter/logdrop-210 -m limit --limit 1/second -j LOG @@ -10371,75 +8903,47 @@ Filter 856 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set -Filter 857 {"flow-limit":{"interval":5,"name":"C","update":false}} +Filter 857 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-562 - inet6/filter/FORWARD -j limit-562 - inet/filter/INPUT -j limit-562 - inet6/filter/INPUT -j limit-562 - inet/filter/OUTPUT -j limit-562 - inet6/filter/OUTPUT -j limit-562 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-562 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-562 inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 inet/filter/logdrop-211 -m limit --limit 1/second -j LOG inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG inet/filter/logdrop-211 -j DROP inet6/filter/logdrop-211 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-562 -j ACCEPT + inet6/filter/limit-562 -j ACCEPT -Filter 858 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +Filter 858 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-563 - inet6/filter/FORWARD -j limit-563 - inet/filter/INPUT -j limit-563 - inet6/filter/INPUT -j limit-563 - inet/filter/OUTPUT -j limit-563 - inet6/filter/OUTPUT -j limit-563 - inet/filter/limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 - inet6/filter/limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 inet/filter/logdrop-212 -m limit --limit 1/second -j LOG inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG inet/filter/logdrop-212 -j DROP inet6/filter/logdrop-212 -j DROP -Filter 859 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 859 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-564 - inet6/filter/FORWARD -j limit-564 - inet/filter/INPUT -j limit-564 - inet6/filter/INPUT -j limit-564 - inet/filter/OUTPUT -j limit-564 - inet6/filter/OUTPUT -j limit-564 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-564 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-564 inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 inet/filter/logdrop-213 -m limit --limit 1/second -j LOG inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG inet/filter/logdrop-213 -j DROP inet6/filter/logdrop-213 -j DROP - inet/filter/FORWARD -j logaccept-final-34 - inet6/filter/FORWARD -j logaccept-final-34 - inet/filter/INPUT -j logaccept-final-34 - inet6/filter/INPUT -j logaccept-final-34 - inet/filter/OUTPUT -j logaccept-final-34 - inet6/filter/OUTPUT -j logaccept-final-34 - inet/filter/logaccept-final-34 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-34 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-34 -j ACCEPT - inet6/filter/logaccept-final-34 -j ACCEPT + inet/filter/limit-564 -m limit --limit 1/second -j LOG + inet6/filter/limit-564 -m limit --limit 1/second -j LOG + inet/filter/limit-564 -j ACCEPT + inet6/filter/limit-564 -j ACCEPT -Filter 860 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +Filter 860 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-565 - inet6/filter/FORWARD -j limit-565 - inet/filter/INPUT -j limit-565 - inet6/filter/INPUT -j limit-565 - inet/filter/OUTPUT -j limit-565 - inet6/filter/OUTPUT -j limit-565 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-565 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-565 inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 inet/filter/logdrop-214 -m limit --limit 1/second -j LOG @@ -10449,73 +8953,45 @@ Filter 860 {"action":"pass","flow-limit":{"interval":5," inet/filter/limit-565 -m limit --limit 1/second -j LOG inet6/filter/limit-565 -m limit --limit 1/second -j LOG -Filter 861 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 861 {"conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-566 - inet6/filter/FORWARD -j limit-566 - inet/filter/INPUT -j limit-566 - inet6/filter/INPUT -j limit-566 - inet/filter/OUTPUT -j limit-566 - inet6/filter/OUTPUT -j limit-566 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-566 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-566 inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 inet/filter/logdrop-215 -m limit --limit 1/second -j LOG inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG inet/filter/logdrop-215 -j DROP inet6/filter/logdrop-215 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-566 -j ACCEPT + inet6/filter/limit-566 -j ACCEPT -Filter 862 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +Filter 862 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-567 - inet6/filter/FORWARD -j limit-567 - inet/filter/INPUT -j limit-567 - inet6/filter/INPUT -j limit-567 - inet/filter/OUTPUT -j limit-567 - inet6/filter/OUTPUT -j limit-567 - inet/filter/limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 - inet6/filter/limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 inet/filter/logdrop-216 -m limit --limit 1/second -j LOG inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG inet/filter/logdrop-216 -j DROP inet6/filter/logdrop-216 -j DROP -Filter 863 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 863 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-568 - inet6/filter/FORWARD -j limit-568 - inet/filter/INPUT -j limit-568 - inet6/filter/INPUT -j limit-568 - inet/filter/OUTPUT -j limit-568 - inet6/filter/OUTPUT -j limit-568 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-568 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-568 inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 inet/filter/logdrop-217 -m limit --limit 1/second -j LOG inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG inet/filter/logdrop-217 -j DROP inet6/filter/logdrop-217 -j DROP - inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 864 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +Filter 864 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-569 - inet6/filter/FORWARD -j limit-569 - inet/filter/INPUT -j limit-569 - inet6/filter/INPUT -j limit-569 - inet/filter/OUTPUT -j limit-569 - inet6/filter/OUTPUT -j limit-569 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-569 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-569 inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 inet/filter/logdrop-218 -m limit --limit 1/second -j LOG @@ -10525,41 +9001,25 @@ Filter 864 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set -Filter 865 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 865 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-570 - inet6/filter/FORWARD -j limit-570 - inet/filter/INPUT -j limit-570 - inet6/filter/INPUT -j limit-570 - inet/filter/OUTPUT -j limit-570 - inet6/filter/OUTPUT -j limit-570 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-570 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-570 inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 inet/filter/logdrop-219 -m limit --limit 1/second -j LOG inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG inet/filter/logdrop-219 -j DROP inet6/filter/logdrop-219 -j DROP - inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-35 - inet6/filter/FORWARD -j logaccept-final-35 - inet/filter/INPUT -j logaccept-final-35 - inet6/filter/INPUT -j logaccept-final-35 - inet/filter/OUTPUT -j logaccept-final-35 - inet6/filter/OUTPUT -j logaccept-final-35 - inet/filter/logaccept-final-35 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-35 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-35 -j ACCEPT - inet6/filter/logaccept-final-35 -j ACCEPT + inet/filter/limit-570 -m limit --limit 1/second -j LOG + inet6/filter/limit-570 -m limit --limit 1/second -j LOG + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 866 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +Filter 866 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-571 - inet6/filter/FORWARD -j limit-571 - inet/filter/INPUT -j limit-571 - inet6/filter/INPUT -j limit-571 - inet/filter/OUTPUT -j limit-571 - inet6/filter/OUTPUT -j limit-571 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-571 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-571 inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 inet/filter/logdrop-220 -m limit --limit 1/second -j LOG @@ -10569,37 +9029,23 @@ Filter 866 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 867 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 867 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-572 - inet6/filter/FORWARD -j limit-572 - inet/filter/INPUT -j limit-572 - inet6/filter/INPUT -j limit-572 - inet/filter/OUTPUT -j limit-572 - inet6/filter/OUTPUT -j limit-572 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-572 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-572 inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 inet/filter/logdrop-221 -m limit --limit 1/second -j LOG inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG inet/filter/logdrop-221 -j DROP inet6/filter/logdrop-221 -j DROP - inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 868 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +Filter 868 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-573 - inet6/filter/FORWARD -j limit-573 - inet/filter/INPUT -j limit-573 - inet6/filter/INPUT -j limit-573 - inet/filter/OUTPUT -j limit-573 - inet6/filter/OUTPUT -j limit-573 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-573 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-573 inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 inet/filter/logdrop-222 -m limit --limit 1/second -j LOG @@ -10609,75 +9055,47 @@ Filter 868 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set -Filter 869 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 869 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-574 - inet6/filter/FORWARD -j limit-574 - inet/filter/INPUT -j limit-574 - inet6/filter/INPUT -j limit-574 - inet/filter/OUTPUT -j limit-574 - inet6/filter/OUTPUT -j limit-574 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-574 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-574 inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 inet/filter/logdrop-223 -m limit --limit 1/second -j LOG inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG inet/filter/logdrop-223 -j DROP inet6/filter/logdrop-223 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-574 -j ACCEPT + inet6/filter/limit-574 -j ACCEPT -Filter 870 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +Filter 870 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-575 - inet6/filter/FORWARD -j limit-575 - inet/filter/INPUT -j limit-575 - inet6/filter/INPUT -j limit-575 - inet/filter/OUTPUT -j limit-575 - inet6/filter/OUTPUT -j limit-575 - inet/filter/limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 - inet6/filter/limit-575 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 inet/filter/logdrop-224 -m limit --limit 1/second -j LOG inet6/filter/logdrop-224 -m limit --limit 1/second -j LOG inet/filter/logdrop-224 -j DROP inet6/filter/logdrop-224 -j DROP -Filter 871 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 871 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-576 - inet6/filter/FORWARD -j limit-576 - inet/filter/INPUT -j limit-576 - inet6/filter/INPUT -j limit-576 - inet/filter/OUTPUT -j limit-576 - inet6/filter/OUTPUT -j limit-576 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-576 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-576 inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 inet/filter/logdrop-225 -m limit --limit 1/second -j LOG inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG inet/filter/logdrop-225 -j DROP inet6/filter/logdrop-225 -j DROP - inet/filter/FORWARD -j logaccept-final-36 - inet6/filter/FORWARD -j logaccept-final-36 - inet/filter/INPUT -j logaccept-final-36 - inet6/filter/INPUT -j logaccept-final-36 - inet/filter/OUTPUT -j logaccept-final-36 - inet6/filter/OUTPUT -j logaccept-final-36 - inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-36 -j ACCEPT - inet6/filter/logaccept-final-36 -j ACCEPT + inet/filter/limit-576 -m limit --limit 1/second -j LOG + inet6/filter/limit-576 -m limit --limit 1/second -j LOG + inet/filter/limit-576 -j ACCEPT + inet6/filter/limit-576 -j ACCEPT -Filter 872 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +Filter 872 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-577 - inet6/filter/FORWARD -j limit-577 - inet/filter/INPUT -j limit-577 - inet6/filter/INPUT -j limit-577 - inet/filter/OUTPUT -j limit-577 - inet6/filter/OUTPUT -j limit-577 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-577 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-577 inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 inet/filter/logdrop-226 -m limit --limit 1/second -j LOG @@ -10687,1710 +9105,6940 @@ Filter 872 {"action":"pass","flow-limit":{"addr":"dest", inet/filter/limit-577 -m limit --limit 1/second -j LOG inet6/filter/limit-577 -m limit --limit 1/second -j LOG -Filter 873 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 873 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-578 - inet6/filter/FORWARD -j limit-578 - inet/filter/INPUT -j limit-578 - inet6/filter/INPUT -j limit-578 - inet/filter/OUTPUT -j limit-578 - inet6/filter/OUTPUT -j limit-578 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-578 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-578 inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 inet/filter/logdrop-227 -m limit --limit 1/second -j LOG inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG inet/filter/logdrop-227 -j DROP inet6/filter/logdrop-227 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-578 -j ACCEPT + inet6/filter/limit-578 -j ACCEPT -Filter 874 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +Filter 874 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-579 - inet6/filter/FORWARD -j limit-579 - inet/filter/INPUT -j limit-579 - inet6/filter/INPUT -j limit-579 - inet/filter/OUTPUT -j limit-579 - inet6/filter/OUTPUT -j limit-579 - inet/filter/limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 - inet6/filter/limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 inet/filter/logdrop-228 -m limit --limit 1/second -j LOG inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG inet/filter/logdrop-228 -j DROP inet6/filter/logdrop-228 -j DROP -Filter 875 {"flow-limit":{"interval":5,"log":false}} +Filter 875 {"conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-580 - inet6/filter/FORWARD -j limit-580 - inet/filter/INPUT -j limit-580 - inet6/filter/INPUT -j limit-580 - inet/filter/OUTPUT -j limit-580 - inet6/filter/OUTPUT -j limit-580 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-580 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-580 inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 876 {"action":"pass","flow-limit":{"interval":5,"log":false}} +Filter 876 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-581 - inet6/filter/FORWARD -j limit-581 - inet/filter/INPUT -j limit-581 - inet6/filter/INPUT -j limit-581 - inet/filter/OUTPUT -j limit-581 - inet6/filter/OUTPUT -j limit-581 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-581 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-581 inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 877 {"flow-limit":{"interval":5,"log":false},"log":true} +Filter 877 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-582 - inet6/filter/FORWARD -j limit-582 - inet/filter/INPUT -j limit-582 - inet6/filter/INPUT -j limit-582 - inet/filter/OUTPUT -j limit-582 - inet6/filter/OUTPUT -j limit-582 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-582 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-582 inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-37 - inet6/filter/FORWARD -j logaccept-final-37 - inet/filter/INPUT -j logaccept-final-37 - inet6/filter/INPUT -j logaccept-final-37 - inet/filter/OUTPUT -j logaccept-final-37 - inet6/filter/OUTPUT -j logaccept-final-37 - inet/filter/logaccept-final-37 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-37 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-37 -j ACCEPT - inet6/filter/logaccept-final-37 -j ACCEPT + inet/filter/limit-582 -m limit --limit 1/second -j LOG + inet6/filter/limit-582 -m limit --limit 1/second -j LOG + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 878 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +Filter 878 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-583 - inet6/filter/FORWARD -j limit-583 - inet/filter/INPUT -j limit-583 - inet6/filter/INPUT -j limit-583 - inet/filter/OUTPUT -j limit-583 - inet6/filter/OUTPUT -j limit-583 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-583 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-583 inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 879 {"flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 879 {"conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-584 - inet6/filter/FORWARD -j limit-584 - inet/filter/INPUT -j limit-584 - inet6/filter/INPUT -j limit-584 - inet/filter/OUTPUT -j limit-584 - inet6/filter/OUTPUT -j limit-584 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-584 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-584 inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 880 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +Filter 880 {"action":"pass","conn-limit":{"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-585 - inet6/filter/FORWARD -j limit-585 - inet/filter/INPUT -j limit-585 - inet6/filter/INPUT -j limit-585 - inet/filter/OUTPUT -j limit-585 - inet6/filter/OUTPUT -j limit-585 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-585 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-585 inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 881 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 881 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-586 - inet6/filter/FORWARD -j limit-586 - inet/filter/INPUT -j limit-586 - inet6/filter/INPUT -j limit-586 - inet/filter/OUTPUT -j limit-586 - inet6/filter/OUTPUT -j limit-586 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-586 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-586 inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 882 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +Filter 882 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-587 - inet6/filter/FORWARD -j limit-587 - inet/filter/INPUT -j limit-587 - inet6/filter/INPUT -j limit-587 - inet/filter/OUTPUT -j limit-587 - inet6/filter/OUTPUT -j limit-587 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-587 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-587 inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 883 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 883 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-588 - inet6/filter/FORWARD -j limit-588 - inet/filter/INPUT -j limit-588 - inet6/filter/INPUT -j limit-588 - inet/filter/OUTPUT -j limit-588 - inet6/filter/OUTPUT -j limit-588 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-588 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-588 inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-38 - inet6/filter/FORWARD -j logaccept-final-38 - inet/filter/INPUT -j logaccept-final-38 - inet6/filter/INPUT -j logaccept-final-38 - inet/filter/OUTPUT -j logaccept-final-38 - inet6/filter/OUTPUT -j logaccept-final-38 - inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-38 -j ACCEPT - inet6/filter/logaccept-final-38 -j ACCEPT + inet/filter/limit-588 -m limit --limit 1/second -j LOG + inet6/filter/limit-588 -m limit --limit 1/second -j LOG + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 884 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +Filter 884 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-589 - inet6/filter/FORWARD -j limit-589 - inet/filter/INPUT -j limit-589 - inet6/filter/INPUT -j limit-589 - inet/filter/OUTPUT -j limit-589 - inet6/filter/OUTPUT -j limit-589 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-589 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-589 inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 885 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 885 {"conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-590 - inet6/filter/FORWARD -j limit-590 - inet/filter/INPUT -j limit-590 - inet6/filter/INPUT -j limit-590 - inet/filter/OUTPUT -j limit-590 - inet6/filter/OUTPUT -j limit-590 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-590 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-590 inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 886 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +Filter 886 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-591 - inet6/filter/FORWARD -j limit-591 - inet/filter/INPUT -j limit-591 - inet6/filter/INPUT -j limit-591 - inet/filter/OUTPUT -j limit-591 - inet6/filter/OUTPUT -j limit-591 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-591 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-591 inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 887 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +Filter 887 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-592 - inet6/filter/FORWARD -j limit-592 - inet/filter/INPUT -j limit-592 - inet6/filter/INPUT -j limit-592 - inet/filter/OUTPUT -j limit-592 - inet6/filter/OUTPUT -j limit-592 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-592 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-592 inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-592 -j ACCEPT + inet6/filter/limit-592 -j ACCEPT + +Filter 888 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 888 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-593 - inet6/filter/FORWARD -j limit-593 - inet/filter/INPUT -j limit-593 - inet6/filter/INPUT -j limit-593 - inet/filter/OUTPUT -j limit-593 - inet6/filter/OUTPUT -j limit-593 - inet/filter/limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 889 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-594 - inet6/filter/FORWARD -j limit-594 - inet/filter/INPUT -j limit-594 - inet6/filter/INPUT -j limit-594 - inet/filter/OUTPUT -j limit-594 - inet6/filter/OUTPUT -j limit-594 +Filter 889 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-594 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-594 inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-39 - inet6/filter/FORWARD -j logaccept-final-39 - inet/filter/INPUT -j logaccept-final-39 - inet6/filter/INPUT -j logaccept-final-39 - inet/filter/OUTPUT -j logaccept-final-39 - inet6/filter/OUTPUT -j logaccept-final-39 - inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-39 -j ACCEPT - inet6/filter/logaccept-final-39 -j ACCEPT + inet/filter/limit-594 -m limit --limit 1/second -j LOG + inet6/filter/limit-594 -m limit --limit 1/second -j LOG + inet/filter/limit-594 -j ACCEPT + inet6/filter/limit-594 -j ACCEPT -Filter 890 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 890 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-595 - inet6/filter/FORWARD -j limit-595 - inet/filter/INPUT -j limit-595 - inet6/filter/INPUT -j limit-595 - inet/filter/OUTPUT -j limit-595 - inet6/filter/OUTPUT -j limit-595 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-595 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-595 inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-595 -m limit --limit 1/second -j LOG inet6/filter/limit-595 -m limit --limit 1/second -j LOG -Filter 891 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 891 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-596 - inet6/filter/FORWARD -j limit-596 - inet/filter/INPUT -j limit-596 - inet6/filter/INPUT -j limit-596 - inet/filter/OUTPUT -j limit-596 - inet6/filter/OUTPUT -j limit-596 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-596 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-596 inet/filter/limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-596 -j ACCEPT + inet6/filter/limit-596 -j ACCEPT -Filter 892 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-597 - inet6/filter/FORWARD -j limit-597 - inet/filter/INPUT -j limit-597 - inet6/filter/INPUT -j limit-597 - inet/filter/OUTPUT -j limit-597 - inet6/filter/OUTPUT -j limit-597 - inet/filter/limit-597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 893 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-598 - inet6/filter/FORWARD -j limit-598 - inet/filter/INPUT -j limit-598 - inet6/filter/INPUT -j limit-598 - inet/filter/OUTPUT -j limit-598 - inet6/filter/OUTPUT -j limit-598 +Filter 892 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 893 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-598 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-598 inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 894 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +Filter 894 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-599 - inet6/filter/FORWARD -j limit-599 - inet/filter/INPUT -j limit-599 - inet6/filter/INPUT -j limit-599 - inet/filter/OUTPUT -j limit-599 - inet6/filter/OUTPUT -j limit-599 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-599 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-599 inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 895 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 895 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-600 - inet6/filter/FORWARD -j limit-600 - inet/filter/INPUT -j limit-600 - inet6/filter/INPUT -j limit-600 - inet/filter/OUTPUT -j limit-600 - inet6/filter/OUTPUT -j limit-600 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-600 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-600 inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-40 - inet6/filter/FORWARD -j logaccept-final-40 - inet/filter/INPUT -j logaccept-final-40 - inet6/filter/INPUT -j logaccept-final-40 - inet/filter/OUTPUT -j logaccept-final-40 - inet6/filter/OUTPUT -j logaccept-final-40 - inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-40 -j ACCEPT - inet6/filter/logaccept-final-40 -j ACCEPT + inet/filter/limit-600 -m limit --limit 1/second -j LOG + inet6/filter/limit-600 -m limit --limit 1/second -j LOG + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 896 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +Filter 896 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-601 - inet6/filter/FORWARD -j limit-601 - inet/filter/INPUT -j limit-601 - inet6/filter/INPUT -j limit-601 - inet/filter/OUTPUT -j limit-601 - inet6/filter/OUTPUT -j limit-601 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-601 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-601 inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 897 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 897 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-602 - inet6/filter/FORWARD -j limit-602 - inet/filter/INPUT -j limit-602 - inet6/filter/INPUT -j limit-602 - inet/filter/OUTPUT -j limit-602 - inet6/filter/OUTPUT -j limit-602 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-602 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-602 inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 898 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +Filter 898 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-603 - inet6/filter/FORWARD -j limit-603 - inet/filter/INPUT -j limit-603 - inet6/filter/INPUT -j limit-603 - inet/filter/OUTPUT -j limit-603 - inet6/filter/OUTPUT -j limit-603 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-603 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-603 inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 899 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +Filter 899 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-604 - inet6/filter/FORWARD -j limit-604 - inet/filter/INPUT -j limit-604 - inet6/filter/INPUT -j limit-604 - inet/filter/OUTPUT -j limit-604 - inet6/filter/OUTPUT -j limit-604 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-604 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-604 inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-604 -j ACCEPT + inet6/filter/limit-604 -j ACCEPT + +Filter 900 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 900 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-605 - inet6/filter/FORWARD -j limit-605 - inet/filter/INPUT -j limit-605 - inet6/filter/INPUT -j limit-605 - inet/filter/OUTPUT -j limit-605 - inet6/filter/OUTPUT -j limit-605 - inet/filter/limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 901 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-606 - inet6/filter/FORWARD -j limit-606 - inet/filter/INPUT -j limit-606 - inet6/filter/INPUT -j limit-606 - inet/filter/OUTPUT -j limit-606 - inet6/filter/OUTPUT -j limit-606 +Filter 901 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-606 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-606 inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-41 - inet6/filter/FORWARD -j logaccept-final-41 - inet/filter/INPUT -j logaccept-final-41 - inet6/filter/INPUT -j logaccept-final-41 - inet/filter/OUTPUT -j logaccept-final-41 - inet6/filter/OUTPUT -j logaccept-final-41 - inet/filter/logaccept-final-41 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-41 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-41 -j ACCEPT - inet6/filter/logaccept-final-41 -j ACCEPT + inet/filter/limit-606 -m limit --limit 1/second -j LOG + inet6/filter/limit-606 -m limit --limit 1/second -j LOG + inet/filter/limit-606 -j ACCEPT + inet6/filter/limit-606 -j ACCEPT -Filter 902 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +Filter 902 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-607 - inet6/filter/FORWARD -j limit-607 - inet/filter/INPUT -j limit-607 - inet6/filter/INPUT -j limit-607 - inet/filter/OUTPUT -j limit-607 - inet6/filter/OUTPUT -j limit-607 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-607 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-607 inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-607 -m limit --limit 1/second -j LOG inet6/filter/limit-607 -m limit --limit 1/second -j LOG -Filter 903 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +Filter 903 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-608 - inet6/filter/FORWARD -j limit-608 - inet/filter/INPUT -j limit-608 - inet6/filter/INPUT -j limit-608 - inet/filter/OUTPUT -j limit-608 - inet6/filter/OUTPUT -j limit-608 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-608 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-608 inet/filter/limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-608 -j ACCEPT + inet6/filter/limit-608 -j ACCEPT + +Filter 904 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 904 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-609 - inet6/filter/FORWARD -j limit-609 - inet/filter/INPUT -j limit-609 - inet6/filter/INPUT -j limit-609 - inet/filter/OUTPUT -j limit-609 - inet6/filter/OUTPUT -j limit-609 - inet/filter/limit-609 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-609 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 905 {"flow-limit":{"interval":5,"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-610 - inet6/filter/FORWARD -j limit-610 - inet/filter/INPUT -j limit-610 - inet6/filter/INPUT -j limit-610 - inet/filter/OUTPUT -j limit-610 - inet6/filter/OUTPUT -j limit-610 +Filter 905 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-610 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-610 inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 906 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +Filter 906 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-611 - inet6/filter/FORWARD -j limit-611 - inet/filter/INPUT -j limit-611 - inet6/filter/INPUT -j limit-611 - inet/filter/OUTPUT -j limit-611 - inet6/filter/OUTPUT -j limit-611 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-611 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-611 inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set -Filter 907 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 907 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-612 - inet6/filter/FORWARD -j limit-612 - inet/filter/INPUT -j limit-612 - inet6/filter/INPUT -j limit-612 - inet/filter/OUTPUT -j limit-612 - inet6/filter/OUTPUT -j limit-612 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-612 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-612 inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-42 - inet6/filter/FORWARD -j logaccept-final-42 - inet/filter/INPUT -j logaccept-final-42 - inet6/filter/INPUT -j logaccept-final-42 - inet/filter/OUTPUT -j logaccept-final-42 - inet6/filter/OUTPUT -j logaccept-final-42 - inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-42 -j ACCEPT - inet6/filter/logaccept-final-42 -j ACCEPT + inet/filter/limit-612 -m limit --limit 1/second -j LOG + inet6/filter/limit-612 -m limit --limit 1/second -j LOG + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 908 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +Filter 908 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-613 - inet6/filter/FORWARD -j limit-613 - inet/filter/INPUT -j limit-613 - inet6/filter/INPUT -j limit-613 - inet/filter/OUTPUT -j limit-613 - inet6/filter/OUTPUT -j limit-613 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-613 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-613 inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 909 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 909 {"conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-614 - inet6/filter/FORWARD -j limit-614 - inet/filter/INPUT -j limit-614 - inet6/filter/INPUT -j limit-614 - inet/filter/OUTPUT -j limit-614 - inet6/filter/OUTPUT -j limit-614 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-614 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-614 inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 910 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +Filter 910 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-615 - inet6/filter/FORWARD -j limit-615 - inet/filter/INPUT -j limit-615 - inet6/filter/INPUT -j limit-615 - inet/filter/OUTPUT -j limit-615 - inet6/filter/OUTPUT -j limit-615 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-615 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-615 inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set -Filter 911 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +Filter 911 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-616 - inet6/filter/FORWARD -j limit-616 - inet/filter/INPUT -j limit-616 - inet6/filter/INPUT -j limit-616 - inet/filter/OUTPUT -j limit-616 - inet6/filter/OUTPUT -j limit-616 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-616 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-616 inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-616 -j ACCEPT + inet6/filter/limit-616 -j ACCEPT + +Filter 912 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 912 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-617 - inet6/filter/FORWARD -j limit-617 - inet/filter/INPUT -j limit-617 - inet6/filter/INPUT -j limit-617 - inet/filter/OUTPUT -j limit-617 - inet6/filter/OUTPUT -j limit-617 - inet/filter/limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 913 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-618 - inet6/filter/FORWARD -j limit-618 - inet/filter/INPUT -j limit-618 - inet6/filter/INPUT -j limit-618 - inet/filter/OUTPUT -j limit-618 - inet6/filter/OUTPUT -j limit-618 +Filter 913 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-618 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-618 inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-43 - inet6/filter/FORWARD -j logaccept-final-43 - inet/filter/INPUT -j logaccept-final-43 - inet6/filter/INPUT -j logaccept-final-43 - inet/filter/OUTPUT -j logaccept-final-43 - inet6/filter/OUTPUT -j logaccept-final-43 - inet/filter/logaccept-final-43 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-43 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-43 -j ACCEPT - inet6/filter/logaccept-final-43 -j ACCEPT + inet/filter/limit-618 -m limit --limit 1/second -j LOG + inet6/filter/limit-618 -m limit --limit 1/second -j LOG + inet/filter/limit-618 -j ACCEPT + inet6/filter/limit-618 -j ACCEPT -Filter 914 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 914 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-619 - inet6/filter/FORWARD -j limit-619 - inet/filter/INPUT -j limit-619 - inet6/filter/INPUT -j limit-619 - inet/filter/OUTPUT -j limit-619 - inet6/filter/OUTPUT -j limit-619 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-619 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-619 inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-619 -m limit --limit 1/second -j LOG inet6/filter/limit-619 -m limit --limit 1/second -j LOG -Filter 915 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 915 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-620 - inet6/filter/FORWARD -j limit-620 - inet/filter/INPUT -j limit-620 - inet6/filter/INPUT -j limit-620 - inet/filter/OUTPUT -j limit-620 - inet6/filter/OUTPUT -j limit-620 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-620 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-620 inet/filter/limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-620 -j ACCEPT + inet6/filter/limit-620 -j ACCEPT -Filter 916 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-621 - inet6/filter/FORWARD -j limit-621 - inet/filter/INPUT -j limit-621 - inet6/filter/INPUT -j limit-621 - inet/filter/OUTPUT -j limit-621 - inet6/filter/OUTPUT -j limit-621 - inet/filter/limit-621 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-621 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 917 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-622 - inet6/filter/FORWARD -j limit-622 - inet/filter/INPUT -j limit-622 - inet6/filter/INPUT -j limit-622 - inet/filter/OUTPUT -j limit-622 - inet6/filter/OUTPUT -j limit-622 +Filter 916 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 917 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-622 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-622 inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 918 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +Filter 918 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-623 - inet6/filter/FORWARD -j limit-623 - inet/filter/INPUT -j limit-623 - inet6/filter/INPUT -j limit-623 - inet/filter/OUTPUT -j limit-623 - inet6/filter/OUTPUT -j limit-623 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-623 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-623 inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set -Filter 919 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 919 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-624 - inet6/filter/FORWARD -j limit-624 - inet/filter/INPUT -j limit-624 - inet6/filter/INPUT -j limit-624 - inet/filter/OUTPUT -j limit-624 - inet6/filter/OUTPUT -j limit-624 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-624 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-624 inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-44 - inet6/filter/FORWARD -j logaccept-final-44 - inet/filter/INPUT -j logaccept-final-44 - inet6/filter/INPUT -j logaccept-final-44 - inet/filter/OUTPUT -j logaccept-final-44 - inet6/filter/OUTPUT -j logaccept-final-44 - inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-44 -j ACCEPT - inet6/filter/logaccept-final-44 -j ACCEPT + inet/filter/limit-624 -m limit --limit 1/second -j LOG + inet6/filter/limit-624 -m limit --limit 1/second -j LOG + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 920 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +Filter 920 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-625 - inet6/filter/FORWARD -j limit-625 - inet/filter/INPUT -j limit-625 - inet6/filter/INPUT -j limit-625 - inet/filter/OUTPUT -j limit-625 - inet6/filter/OUTPUT -j limit-625 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-625 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-625 inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 921 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 921 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-626 - inet6/filter/FORWARD -j limit-626 - inet/filter/INPUT -j limit-626 - inet6/filter/INPUT -j limit-626 - inet/filter/OUTPUT -j limit-626 - inet6/filter/OUTPUT -j limit-626 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-626 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-626 inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 922 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +Filter 922 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-627 - inet6/filter/FORWARD -j limit-627 - inet/filter/INPUT -j limit-627 - inet6/filter/INPUT -j limit-627 - inet/filter/OUTPUT -j limit-627 - inet6/filter/OUTPUT -j limit-627 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-627 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-627 inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set -Filter 923 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +Filter 923 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-628 - inet6/filter/FORWARD -j limit-628 - inet/filter/INPUT -j limit-628 - inet6/filter/INPUT -j limit-628 - inet/filter/OUTPUT -j limit-628 - inet6/filter/OUTPUT -j limit-628 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-628 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-628 inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-628 -j ACCEPT + inet6/filter/limit-628 -j ACCEPT + +Filter 924 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 924 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-629 - inet6/filter/FORWARD -j limit-629 - inet/filter/INPUT -j limit-629 - inet6/filter/INPUT -j limit-629 - inet/filter/OUTPUT -j limit-629 - inet6/filter/OUTPUT -j limit-629 - inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-629 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 925 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-630 - inet6/filter/FORWARD -j limit-630 - inet/filter/INPUT -j limit-630 - inet6/filter/INPUT -j limit-630 - inet/filter/OUTPUT -j limit-630 - inet6/filter/OUTPUT -j limit-630 +Filter 925 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-630 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-630 inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-45 - inet6/filter/FORWARD -j logaccept-final-45 - inet/filter/INPUT -j logaccept-final-45 - inet6/filter/INPUT -j logaccept-final-45 - inet/filter/OUTPUT -j logaccept-final-45 - inet6/filter/OUTPUT -j logaccept-final-45 - inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-45 -j ACCEPT - inet6/filter/logaccept-final-45 -j ACCEPT + inet/filter/limit-630 -m limit --limit 1/second -j LOG + inet6/filter/limit-630 -m limit --limit 1/second -j LOG + inet/filter/limit-630 -j ACCEPT + inet6/filter/limit-630 -j ACCEPT -Filter 926 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +Filter 926 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-631 - inet6/filter/FORWARD -j limit-631 - inet/filter/INPUT -j limit-631 - inet6/filter/INPUT -j limit-631 - inet/filter/OUTPUT -j limit-631 - inet6/filter/OUTPUT -j limit-631 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-631 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-631 inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-631 -m limit --limit 1/second -j LOG inet6/filter/limit-631 -m limit --limit 1/second -j LOG -Filter 927 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +Filter 927 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-632 - inet6/filter/FORWARD -j limit-632 - inet/filter/INPUT -j limit-632 - inet6/filter/INPUT -j limit-632 - inet/filter/OUTPUT -j limit-632 - inet6/filter/OUTPUT -j limit-632 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-632 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-632 inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-632 -j ACCEPT + inet6/filter/limit-632 -j ACCEPT + +Filter 928 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 928 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-633 - inet6/filter/FORWARD -j limit-633 - inet/filter/INPUT -j limit-633 - inet6/filter/INPUT -j limit-633 - inet/filter/OUTPUT -j limit-633 - inet6/filter/OUTPUT -j limit-633 - inet/filter/limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 929 {"flow-limit":{"interval":5,"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-634 - inet6/filter/FORWARD -j limit-634 - inet/filter/INPUT -j limit-634 - inet6/filter/INPUT -j limit-634 - inet/filter/OUTPUT -j limit-634 - inet6/filter/OUTPUT -j limit-634 +Filter 929 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-634 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-634 inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 930 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +Filter 930 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-635 - inet6/filter/FORWARD -j limit-635 - inet/filter/INPUT -j limit-635 - inet6/filter/INPUT -j limit-635 - inet/filter/OUTPUT -j limit-635 - inet6/filter/OUTPUT -j limit-635 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-635 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-635 inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 931 {"flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 931 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-636 - inet6/filter/FORWARD -j limit-636 - inet/filter/INPUT -j limit-636 - inet6/filter/INPUT -j limit-636 - inet/filter/OUTPUT -j limit-636 - inet6/filter/OUTPUT -j limit-636 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-636 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-636 inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-46 - inet6/filter/FORWARD -j logaccept-final-46 - inet/filter/INPUT -j logaccept-final-46 - inet6/filter/INPUT -j logaccept-final-46 - inet/filter/OUTPUT -j logaccept-final-46 - inet6/filter/OUTPUT -j logaccept-final-46 - inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-46 -j ACCEPT - inet6/filter/logaccept-final-46 -j ACCEPT + inet/filter/limit-636 -m limit --limit 1/second -j LOG + inet6/filter/limit-636 -m limit --limit 1/second -j LOG + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 932 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +Filter 932 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-637 - inet6/filter/FORWARD -j limit-637 - inet/filter/INPUT -j limit-637 - inet6/filter/INPUT -j limit-637 - inet/filter/OUTPUT -j limit-637 - inet6/filter/OUTPUT -j limit-637 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-637 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-637 inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 933 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 933 {"conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-638 - inet6/filter/FORWARD -j limit-638 - inet/filter/INPUT -j limit-638 - inet6/filter/INPUT -j limit-638 - inet/filter/OUTPUT -j limit-638 - inet6/filter/OUTPUT -j limit-638 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-638 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-638 inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 934 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +Filter 934 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-639 - inet6/filter/FORWARD -j limit-639 - inet/filter/INPUT -j limit-639 - inet6/filter/INPUT -j limit-639 - inet/filter/OUTPUT -j limit-639 - inet6/filter/OUTPUT -j limit-639 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-639 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-639 inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 935 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 935 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-640 - inet6/filter/FORWARD -j limit-640 - inet/filter/INPUT -j limit-640 - inet6/filter/INPUT -j limit-640 - inet/filter/OUTPUT -j limit-640 - inet6/filter/OUTPUT -j limit-640 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-640 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-640 inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 936 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +Filter 936 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-641 - inet6/filter/FORWARD -j limit-641 - inet/filter/INPUT -j limit-641 - inet6/filter/INPUT -j limit-641 - inet/filter/OUTPUT -j limit-641 - inet6/filter/OUTPUT -j limit-641 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-641 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-641 inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 937 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 937 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-642 - inet6/filter/FORWARD -j limit-642 - inet/filter/INPUT -j limit-642 - inet6/filter/INPUT -j limit-642 - inet/filter/OUTPUT -j limit-642 - inet6/filter/OUTPUT -j limit-642 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-642 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-642 inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-47 - inet6/filter/FORWARD -j logaccept-final-47 - inet/filter/INPUT -j logaccept-final-47 - inet6/filter/INPUT -j logaccept-final-47 - inet/filter/OUTPUT -j logaccept-final-47 - inet6/filter/OUTPUT -j logaccept-final-47 - inet/filter/logaccept-final-47 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-47 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-47 -j ACCEPT - inet6/filter/logaccept-final-47 -j ACCEPT + inet/filter/limit-642 -m limit --limit 1/second -j LOG + inet6/filter/limit-642 -m limit --limit 1/second -j LOG + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 938 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +Filter 938 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-643 - inet6/filter/FORWARD -j limit-643 - inet/filter/INPUT -j limit-643 - inet6/filter/INPUT -j limit-643 - inet/filter/OUTPUT -j limit-643 - inet6/filter/OUTPUT -j limit-643 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-643 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-643 inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 939 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 939 {"conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-644 - inet6/filter/FORWARD -j limit-644 - inet/filter/INPUT -j limit-644 - inet6/filter/INPUT -j limit-644 - inet/filter/OUTPUT -j limit-644 - inet6/filter/OUTPUT -j limit-644 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-644 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-644 inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 940 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +Filter 940 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-645 - inet6/filter/FORWARD -j limit-645 - inet/filter/INPUT -j limit-645 - inet6/filter/INPUT -j limit-645 - inet/filter/OUTPUT -j limit-645 - inet6/filter/OUTPUT -j limit-645 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-645 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-645 inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 941 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +Filter 941 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-646 - inet6/filter/FORWARD -j limit-646 - inet/filter/INPUT -j limit-646 - inet6/filter/INPUT -j limit-646 - inet/filter/OUTPUT -j limit-646 - inet6/filter/OUTPUT -j limit-646 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-646 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-646 inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-646 -j ACCEPT + inet6/filter/limit-646 -j ACCEPT + +Filter 942 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 942 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-647 - inet6/filter/FORWARD -j limit-647 - inet/filter/INPUT -j limit-647 - inet6/filter/INPUT -j limit-647 - inet/filter/OUTPUT -j limit-647 - inet6/filter/OUTPUT -j limit-647 - inet/filter/limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 943 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-648 - inet6/filter/FORWARD -j limit-648 - inet/filter/INPUT -j limit-648 - inet6/filter/INPUT -j limit-648 - inet/filter/OUTPUT -j limit-648 - inet6/filter/OUTPUT -j limit-648 +Filter 943 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-648 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-648 inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-48 - inet6/filter/FORWARD -j logaccept-final-48 - inet/filter/INPUT -j logaccept-final-48 - inet6/filter/INPUT -j logaccept-final-48 - inet/filter/OUTPUT -j logaccept-final-48 - inet6/filter/OUTPUT -j logaccept-final-48 - inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-48 -j ACCEPT - inet6/filter/logaccept-final-48 -j ACCEPT + inet/filter/limit-648 -m limit --limit 1/second -j LOG + inet6/filter/limit-648 -m limit --limit 1/second -j LOG + inet/filter/limit-648 -j ACCEPT + inet6/filter/limit-648 -j ACCEPT -Filter 944 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 944 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-649 - inet6/filter/FORWARD -j limit-649 - inet/filter/INPUT -j limit-649 - inet6/filter/INPUT -j limit-649 - inet/filter/OUTPUT -j limit-649 - inet6/filter/OUTPUT -j limit-649 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-649 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-649 inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-649 -m limit --limit 1/second -j LOG inet6/filter/limit-649 -m limit --limit 1/second -j LOG -Filter 945 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 945 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-650 - inet6/filter/FORWARD -j limit-650 - inet/filter/INPUT -j limit-650 - inet6/filter/INPUT -j limit-650 - inet/filter/OUTPUT -j limit-650 - inet6/filter/OUTPUT -j limit-650 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-650 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-650 inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-650 -j ACCEPT + inet6/filter/limit-650 -j ACCEPT + +Filter 946 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 946 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-651 - inet6/filter/FORWARD -j limit-651 - inet/filter/INPUT -j limit-651 - inet6/filter/INPUT -j limit-651 - inet/filter/OUTPUT -j limit-651 - inet6/filter/OUTPUT -j limit-651 - inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 947 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-652 - inet6/filter/FORWARD -j limit-652 - inet/filter/INPUT -j limit-652 - inet6/filter/INPUT -j limit-652 - inet/filter/OUTPUT -j limit-652 - inet6/filter/OUTPUT -j limit-652 +Filter 947 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-652 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-652 inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 948 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +Filter 948 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-653 - inet6/filter/FORWARD -j limit-653 - inet/filter/INPUT -j limit-653 - inet6/filter/INPUT -j limit-653 - inet/filter/OUTPUT -j limit-653 - inet6/filter/OUTPUT -j limit-653 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-653 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-653 inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 949 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 949 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-654 - inet6/filter/FORWARD -j limit-654 - inet/filter/INPUT -j limit-654 - inet6/filter/INPUT -j limit-654 - inet/filter/OUTPUT -j limit-654 - inet6/filter/OUTPUT -j limit-654 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-654 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-654 inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-49 - inet6/filter/FORWARD -j logaccept-final-49 - inet/filter/INPUT -j logaccept-final-49 - inet6/filter/INPUT -j logaccept-final-49 - inet/filter/OUTPUT -j logaccept-final-49 - inet6/filter/OUTPUT -j logaccept-final-49 - inet/filter/logaccept-final-49 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-49 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-49 -j ACCEPT - inet6/filter/logaccept-final-49 -j ACCEPT + inet/filter/limit-654 -m limit --limit 1/second -j LOG + inet6/filter/limit-654 -m limit --limit 1/second -j LOG + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 950 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +Filter 950 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-655 - inet6/filter/FORWARD -j limit-655 - inet/filter/INPUT -j limit-655 - inet6/filter/INPUT -j limit-655 - inet/filter/OUTPUT -j limit-655 - inet6/filter/OUTPUT -j limit-655 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-655 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-655 inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 951 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 951 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-656 - inet6/filter/FORWARD -j limit-656 - inet/filter/INPUT -j limit-656 - inet6/filter/INPUT -j limit-656 - inet/filter/OUTPUT -j limit-656 - inet6/filter/OUTPUT -j limit-656 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-656 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-656 inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 952 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +Filter 952 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-657 - inet6/filter/FORWARD -j limit-657 - inet/filter/INPUT -j limit-657 - inet6/filter/INPUT -j limit-657 - inet/filter/OUTPUT -j limit-657 - inet6/filter/OUTPUT -j limit-657 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-657 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-657 inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 953 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +Filter 953 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-658 - inet6/filter/FORWARD -j limit-658 - inet/filter/INPUT -j limit-658 - inet6/filter/INPUT -j limit-658 - inet/filter/OUTPUT -j limit-658 - inet6/filter/OUTPUT -j limit-658 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-658 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-658 inet/filter/limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-658 -j ACCEPT + inet6/filter/limit-658 -j ACCEPT + +Filter 954 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 954 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-659 - inet6/filter/FORWARD -j limit-659 - inet/filter/INPUT -j limit-659 - inet6/filter/INPUT -j limit-659 - inet/filter/OUTPUT -j limit-659 - inet6/filter/OUTPUT -j limit-659 - inet/filter/limit-659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 955 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-660 - inet6/filter/FORWARD -j limit-660 - inet/filter/INPUT -j limit-660 - inet6/filter/INPUT -j limit-660 - inet/filter/OUTPUT -j limit-660 - inet6/filter/OUTPUT -j limit-660 +Filter 955 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-660 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-660 inet/filter/limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-50 - inet6/filter/FORWARD -j logaccept-final-50 - inet/filter/INPUT -j logaccept-final-50 - inet6/filter/INPUT -j logaccept-final-50 - inet/filter/OUTPUT -j logaccept-final-50 - inet6/filter/OUTPUT -j logaccept-final-50 - inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-50 -j ACCEPT - inet6/filter/logaccept-final-50 -j ACCEPT + inet/filter/limit-660 -m limit --limit 1/second -j LOG + inet6/filter/limit-660 -m limit --limit 1/second -j LOG + inet/filter/limit-660 -j ACCEPT + inet6/filter/limit-660 -j ACCEPT -Filter 956 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +Filter 956 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-661 - inet6/filter/FORWARD -j limit-661 - inet/filter/INPUT -j limit-661 - inet6/filter/INPUT -j limit-661 - inet/filter/OUTPUT -j limit-661 - inet6/filter/OUTPUT -j limit-661 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-661 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-661 inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-661 -m limit --limit 1/second -j LOG inet6/filter/limit-661 -m limit --limit 1/second -j LOG -Filter 957 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +Filter 957 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-662 - inet6/filter/FORWARD -j limit-662 - inet/filter/INPUT -j limit-662 - inet6/filter/INPUT -j limit-662 - inet/filter/OUTPUT -j limit-662 - inet6/filter/OUTPUT -j limit-662 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-662 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-662 inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-662 -j ACCEPT + inet6/filter/limit-662 -j ACCEPT -Filter 958 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-663 - inet6/filter/FORWARD -j limit-663 - inet/filter/INPUT -j limit-663 - inet6/filter/INPUT -j limit-663 - inet/filter/OUTPUT -j limit-663 - inet6/filter/OUTPUT -j limit-663 - inet/filter/limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 959 {"flow-limit":{"interval":5,"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-664 - inet6/filter/FORWARD -j limit-664 - inet/filter/INPUT -j limit-664 - inet6/filter/INPUT -j limit-664 - inet/filter/OUTPUT -j limit-664 - inet6/filter/OUTPUT -j limit-664 +Filter 958 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 959 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-664 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-664 inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 960 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +Filter 960 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-665 - inet6/filter/FORWARD -j limit-665 - inet/filter/INPUT -j limit-665 - inet6/filter/INPUT -j limit-665 - inet/filter/OUTPUT -j limit-665 - inet6/filter/OUTPUT -j limit-665 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-665 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-665 inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set -Filter 961 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 961 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-666 - inet6/filter/FORWARD -j limit-666 - inet/filter/INPUT -j limit-666 - inet6/filter/INPUT -j limit-666 - inet/filter/OUTPUT -j limit-666 - inet6/filter/OUTPUT -j limit-666 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-666 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-666 inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-51 - inet6/filter/FORWARD -j logaccept-final-51 - inet/filter/INPUT -j logaccept-final-51 - inet6/filter/INPUT -j logaccept-final-51 - inet/filter/OUTPUT -j logaccept-final-51 - inet6/filter/OUTPUT -j logaccept-final-51 - inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-51 -j ACCEPT - inet6/filter/logaccept-final-51 -j ACCEPT + inet/filter/limit-666 -m limit --limit 1/second -j LOG + inet6/filter/limit-666 -m limit --limit 1/second -j LOG + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 962 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +Filter 962 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-667 - inet6/filter/FORWARD -j limit-667 - inet/filter/INPUT -j limit-667 - inet6/filter/INPUT -j limit-667 - inet/filter/OUTPUT -j limit-667 - inet6/filter/OUTPUT -j limit-667 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-667 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-667 inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 963 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 963 {"conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-668 - inet6/filter/FORWARD -j limit-668 - inet/filter/INPUT -j limit-668 - inet6/filter/INPUT -j limit-668 - inet/filter/OUTPUT -j limit-668 - inet6/filter/OUTPUT -j limit-668 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-668 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-668 inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 964 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +Filter 964 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-669 - inet6/filter/FORWARD -j limit-669 - inet/filter/INPUT -j limit-669 - inet6/filter/INPUT -j limit-669 - inet/filter/OUTPUT -j limit-669 - inet6/filter/OUTPUT -j limit-669 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-669 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-669 inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set -Filter 965 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +Filter 965 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-670 - inet6/filter/FORWARD -j limit-670 - inet/filter/INPUT -j limit-670 - inet6/filter/INPUT -j limit-670 - inet/filter/OUTPUT -j limit-670 - inet6/filter/OUTPUT -j limit-670 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-670 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-670 inet/filter/limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-670 -j ACCEPT + inet6/filter/limit-670 -j ACCEPT + +Filter 966 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 966 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-671 - inet6/filter/FORWARD -j limit-671 - inet/filter/INPUT -j limit-671 - inet6/filter/INPUT -j limit-671 - inet/filter/OUTPUT -j limit-671 - inet6/filter/OUTPUT -j limit-671 - inet/filter/limit-671 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-671 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 967 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-672 - inet6/filter/FORWARD -j limit-672 - inet/filter/INPUT -j limit-672 - inet6/filter/INPUT -j limit-672 - inet/filter/OUTPUT -j limit-672 - inet6/filter/OUTPUT -j limit-672 +Filter 967 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-672 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-672 inet/filter/limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j logaccept-final-52 - inet6/filter/FORWARD -j logaccept-final-52 - inet/filter/INPUT -j logaccept-final-52 - inet6/filter/INPUT -j logaccept-final-52 - inet/filter/OUTPUT -j logaccept-final-52 - inet6/filter/OUTPUT -j logaccept-final-52 - inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-52 -j ACCEPT - inet6/filter/logaccept-final-52 -j ACCEPT + inet/filter/limit-672 -m limit --limit 1/second -j LOG + inet6/filter/limit-672 -m limit --limit 1/second -j LOG + inet/filter/limit-672 -j ACCEPT + inet6/filter/limit-672 -j ACCEPT -Filter 968 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 968 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-673 - inet6/filter/FORWARD -j limit-673 - inet/filter/INPUT -j limit-673 - inet6/filter/INPUT -j limit-673 - inet/filter/OUTPUT -j limit-673 - inet6/filter/OUTPUT -j limit-673 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-673 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-673 inet/filter/limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/limit-673 -m limit --limit 1/second -j LOG inet6/filter/limit-673 -m limit --limit 1/second -j LOG -Filter 969 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 969 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-674 - inet6/filter/FORWARD -j limit-674 - inet/filter/INPUT -j limit-674 - inet6/filter/INPUT -j limit-674 - inet/filter/OUTPUT -j limit-674 - inet6/filter/OUTPUT -j limit-674 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-674 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-674 inet/filter/limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-674 -j ACCEPT + inet6/filter/limit-674 -j ACCEPT + +Filter 970 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP -Filter 970 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-675 - inet6/filter/FORWARD -j limit-675 - inet/filter/INPUT -j limit-675 - inet6/filter/INPUT -j limit-675 - inet/filter/OUTPUT -j limit-675 - inet6/filter/OUTPUT -j limit-675 - inet/filter/limit-675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 971 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} -(filter-limit) - inet/filter/FORWARD -j limit-676 - inet6/filter/FORWARD -j limit-676 - inet/filter/INPUT -j limit-676 - inet6/filter/INPUT -j limit-676 - inet/filter/OUTPUT -j limit-676 - inet6/filter/OUTPUT -j limit-676 +Filter 971 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-676 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-676 inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 972 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +Filter 972 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-677 - inet6/filter/FORWARD -j limit-677 - inet/filter/INPUT -j limit-677 - inet6/filter/INPUT -j limit-677 - inet/filter/OUTPUT -j limit-677 - inet6/filter/OUTPUT -j limit-677 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-677 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-677 inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set -Filter 973 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 973 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-678 - inet6/filter/FORWARD -j limit-678 - inet/filter/INPUT -j limit-678 - inet6/filter/INPUT -j limit-678 - inet/filter/OUTPUT -j limit-678 - inet6/filter/OUTPUT -j limit-678 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-678 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-678 inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j logaccept-final-53 - inet6/filter/FORWARD -j logaccept-final-53 - inet/filter/INPUT -j logaccept-final-53 - inet6/filter/INPUT -j logaccept-final-53 - inet/filter/OUTPUT -j logaccept-final-53 - inet6/filter/OUTPUT -j logaccept-final-53 - inet/filter/logaccept-final-53 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-53 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-53 -j ACCEPT - inet6/filter/logaccept-final-53 -j ACCEPT + inet/filter/limit-678 -m limit --limit 1/second -j LOG + inet6/filter/limit-678 -m limit --limit 1/second -j LOG + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 974 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +Filter 974 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":true,"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-679 - inet6/filter/FORWARD -j limit-679 - inet/filter/INPUT -j limit-679 - inet6/filter/INPUT -j limit-679 - inet/filter/OUTPUT -j limit-679 - inet6/filter/OUTPUT -j limit-679 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-679 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-679 inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 975 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 975 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-680 - inet6/filter/FORWARD -j limit-680 - inet/filter/INPUT -j limit-680 - inet6/filter/INPUT -j limit-680 - inet/filter/OUTPUT -j limit-680 - inet6/filter/OUTPUT -j limit-680 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-680 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-680 inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set - inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 976 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +Filter 976 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"in":"_fw","log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-681 - inet6/filter/FORWARD -j limit-681 - inet/filter/INPUT -j limit-681 - inet6/filter/INPUT -j limit-681 - inet/filter/OUTPUT -j limit-681 - inet6/filter/OUTPUT -j limit-681 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-681 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-681 inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set -Filter 977 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +Filter 977 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-682 - inet6/filter/FORWARD -j limit-682 - inet/filter/INPUT -j limit-682 - inet6/filter/INPUT -j limit-682 - inet/filter/OUTPUT -j limit-682 - inet6/filter/OUTPUT -j limit-682 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-682 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-682 inet/filter/limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP inet6/filter/limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/FORWARD -j ACCEPT + inet/filter/limit-682 -j ACCEPT + inet6/filter/limit-682 -j ACCEPT + +Filter 978 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 979 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-684 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-684 + inet/filter/limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-684 -m limit --limit 1/second -j LOG + inet6/filter/limit-684 -m limit --limit 1/second -j LOG + inet/filter/limit-684 -j ACCEPT + inet6/filter/limit-684 -j ACCEPT + +Filter 980 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-685 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-685 + inet/filter/limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-685 -m limit --limit 1/second -j LOG + inet6/filter/limit-685 -m limit --limit 1/second -j LOG + +Filter 981 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-686 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-686 + inet/filter/limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-686 -j ACCEPT + inet6/filter/limit-686 -j ACCEPT + +Filter 982 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 983 {"conn-limit":150,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-688 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-688 + inet/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j ACCEPT + inet6/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j ACCEPT + inet/filter/limit-688 -m limit --limit 1/second -j LOG + inet6/filter/limit-688 -m limit --limit 1/second -j LOG + inet/filter/limit-688 -j DROP + inet6/filter/limit-688 -j DROP + +Filter 984 {"action":"pass","conn-limit":150,"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-689 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-689 + inet/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN + inet6/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN + inet/filter/limit-689 -m limit --limit 1/second -j LOG + inet6/filter/limit-689 -m limit --limit 1/second -j LOG + inet/filter/limit-689 -j DROP + inet6/filter/limit-689 -j DROP + +Filter 985 {"conn-limit":150,"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-690 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-690 + inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j logaccept-70 + inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j logaccept-70 + inet/filter/logaccept-70 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-70 -m limit --limit 1/second -j LOG + inet/filter/logaccept-70 -j ACCEPT + inet6/filter/logaccept-70 -j ACCEPT + inet/filter/limit-690 -m limit --limit 1/second -j LOG + inet6/filter/limit-690 -m limit --limit 1/second -j LOG + inet/filter/limit-690 -j DROP + inet6/filter/limit-690 -j DROP + +Filter 986 {"conn-limit":150,"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-691 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-691 + inet/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j ACCEPT + inet6/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j ACCEPT + inet/filter/limit-691 -m limit --limit 1/second -j LOG + inet6/filter/limit-691 -m limit --limit 1/second -j LOG + inet/filter/limit-691 -j DROP + inet6/filter/limit-691 -j DROP + +Filter 987 {"conn-limit":{"count":150},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-692 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-692 + inet/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j ACCEPT + inet6/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j ACCEPT + inet/filter/limit-692 -m limit --limit 1/second -j LOG + inet6/filter/limit-692 -m limit --limit 1/second -j LOG + inet/filter/limit-692 -j DROP + inet6/filter/limit-692 -j DROP + +Filter 988 {"action":"pass","conn-limit":{"count":150},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-693 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-693 + inet/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN + inet6/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN + inet/filter/limit-693 -m limit --limit 1/second -j LOG + inet6/filter/limit-693 -m limit --limit 1/second -j LOG + inet/filter/limit-693 -j DROP + inet6/filter/limit-693 -j DROP + +Filter 989 {"conn-limit":{"count":150},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-694 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-694 + inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j logaccept-71 + inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j logaccept-71 + inet/filter/logaccept-71 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-71 -m limit --limit 1/second -j LOG + inet/filter/logaccept-71 -j ACCEPT + inet6/filter/logaccept-71 -j ACCEPT + inet/filter/limit-694 -m limit --limit 1/second -j LOG + inet6/filter/limit-694 -m limit --limit 1/second -j LOG + inet/filter/limit-694 -j DROP + inet6/filter/limit-694 -j DROP + +Filter 990 {"conn-limit":{"count":150},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-695 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-695 + inet/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j ACCEPT + inet6/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j ACCEPT + inet/filter/limit-695 -m limit --limit 1/second -j LOG + inet6/filter/limit-695 -m limit --limit 1/second -j LOG + inet/filter/limit-695 -j DROP + inet6/filter/limit-695 -j DROP + +Filter 991 {"conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-696 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-696 + inet/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j ACCEPT + inet6/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j ACCEPT + inet/filter/limit-696 -j DROP + inet6/filter/limit-696 -j DROP + +Filter 992 {"action":"pass","conn-limit":{"count":150,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-697 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-697 + inet/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN + inet6/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN + inet/filter/limit-697 -j DROP + inet6/filter/limit-697 -j DROP + +Filter 993 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-698 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-698 + inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j logaccept-72 + inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j logaccept-72 + inet/filter/logaccept-72 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-72 -m limit --limit 1/second -j LOG + inet/filter/logaccept-72 -j ACCEPT + inet6/filter/logaccept-72 -j ACCEPT + inet/filter/limit-698 -j DROP + inet6/filter/limit-698 -j DROP + +Filter 994 {"conn-limit":{"count":150,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-699 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-699 + inet/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j ACCEPT + inet6/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j ACCEPT + inet/filter/limit-699 -j DROP + inet6/filter/limit-699 -j DROP + +Filter 995 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-700 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-700 + inet/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j ACCEPT + inet6/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j ACCEPT + inet/filter/limit-700 -j DROP + inet6/filter/limit-700 -j DROP + +Filter 996 {"action":"pass","conn-limit":{"count":150,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-701 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-701 + inet/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN + inet6/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN + inet/filter/limit-701 -j DROP + inet6/filter/limit-701 -j DROP + +Filter 997 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-702 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-702 + inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j logaccept-73 + inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j logaccept-73 + inet/filter/logaccept-73 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-73 -m limit --limit 1/second -j LOG + inet/filter/logaccept-73 -j ACCEPT + inet6/filter/logaccept-73 -j ACCEPT + inet/filter/limit-702 -j DROP + inet6/filter/limit-702 -j DROP + +Filter 998 {"conn-limit":{"count":150,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-703 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-703 + inet/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j ACCEPT + inet6/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j ACCEPT + inet/filter/limit-703 -j DROP + inet6/filter/limit-703 -j DROP + +Filter 999 {"conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-704 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-704 + inet/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j ACCEPT + inet6/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j ACCEPT + inet/filter/limit-704 -m limit --limit 1/second -j LOG + inet6/filter/limit-704 -m limit --limit 1/second -j LOG + inet/filter/limit-704 -j DROP + inet6/filter/limit-704 -j DROP + +Filter 1000 {"action":"pass","conn-limit":{"count":150,"interval":5},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-705 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-705 + inet/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN + inet6/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN + inet/filter/limit-705 -m limit --limit 1/second -j LOG + inet6/filter/limit-705 -m limit --limit 1/second -j LOG + inet/filter/limit-705 -j DROP + inet6/filter/limit-705 -j DROP + +Filter 1001 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-706 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-706 + inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j logaccept-74 + inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j logaccept-74 + inet/filter/logaccept-74 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-74 -m limit --limit 1/second -j LOG + inet/filter/logaccept-74 -j ACCEPT + inet6/filter/logaccept-74 -j ACCEPT + inet/filter/limit-706 -m limit --limit 1/second -j LOG + inet6/filter/limit-706 -m limit --limit 1/second -j LOG + inet/filter/limit-706 -j DROP + inet6/filter/limit-706 -j DROP + +Filter 1002 {"conn-limit":{"count":150,"interval":5},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-707 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-707 + inet/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j ACCEPT + inet6/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j ACCEPT + inet/filter/limit-707 -m limit --limit 1/second -j LOG + inet6/filter/limit-707 -m limit --limit 1/second -j LOG + inet/filter/limit-707 -j DROP + inet6/filter/limit-707 -j DROP + +Filter 1003 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-708 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-708 + inet/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j ACCEPT + inet6/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j ACCEPT + inet/filter/limit-708 -j DROP + inet6/filter/limit-708 -j DROP + +Filter 1004 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-709 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-709 + inet/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN + inet6/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN + inet/filter/limit-709 -j DROP + inet6/filter/limit-709 -j DROP + +Filter 1005 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-710 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-710 + inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j logaccept-75 + inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j logaccept-75 + inet/filter/logaccept-75 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-75 -m limit --limit 1/second -j LOG + inet/filter/logaccept-75 -j ACCEPT + inet6/filter/logaccept-75 -j ACCEPT + inet/filter/limit-710 -j DROP + inet6/filter/limit-710 -j DROP + +Filter 1006 {"conn-limit":{"count":150,"interval":5,"log":false},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-711 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-711 + inet/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j ACCEPT + inet6/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j ACCEPT + inet/filter/limit-711 -j DROP + inet6/filter/limit-711 -j DROP + +Filter 1007 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-712 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-712 + inet/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j ACCEPT + inet6/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j ACCEPT + inet/filter/limit-712 -j DROP + inet6/filter/limit-712 -j DROP + +Filter 1008 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-713 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-713 + inet/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN + inet6/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN + inet/filter/limit-713 -j DROP + inet6/filter/limit-713 -j DROP + +Filter 1009 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":true,"out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-714 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-714 + inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j logaccept-76 + inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j logaccept-76 + inet/filter/logaccept-76 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-76 -m limit --limit 1/second -j LOG + inet/filter/logaccept-76 -j ACCEPT + inet6/filter/logaccept-76 -j ACCEPT + inet/filter/limit-714 -j DROP + inet6/filter/limit-714 -j DROP + +Filter 1010 {"conn-limit":{"count":150,"interval":5,"log":"none"},"in":"_fw","log":"none","out":"B"} +(filter-limit) + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-715 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-715 + inet/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j ACCEPT + inet6/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j ACCEPT + inet/filter/limit-715 -j DROP + inet6/filter/limit-715 -j DROP + +Filter 1011 {"flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-716 + inet6/filter/FORWARD -j limit-716 + inet/filter/INPUT -j limit-716 + inet6/filter/INPUT -j limit-716 + inet/filter/OUTPUT -j limit-716 + inet6/filter/OUTPUT -j limit-716 + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 + inet/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet/filter/logdrop-229 -j DROP + inet6/filter/logdrop-229 -j DROP + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1012 {"action":"pass","flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-717 + inet6/filter/FORWARD -j limit-717 + inet/filter/INPUT -j limit-717 + inet6/filter/INPUT -j limit-717 + inet/filter/OUTPUT -j limit-717 + inet6/filter/OUTPUT -j limit-717 + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 + inet/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet/filter/logdrop-230 -j DROP + inet6/filter/logdrop-230 -j DROP + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1013 {"flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-718 + inet6/filter/FORWARD -j limit-718 + inet/filter/INPUT -j limit-718 + inet6/filter/INPUT -j limit-718 + inet/filter/OUTPUT -j limit-718 + inet6/filter/OUTPUT -j limit-718 + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 + inet/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet/filter/logdrop-231 -j DROP + inet6/filter/logdrop-231 -j DROP + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-0 + inet6/filter/FORWARD -j logaccept-final-0 + inet/filter/INPUT -j logaccept-final-0 + inet6/filter/INPUT -j logaccept-final-0 + inet/filter/OUTPUT -j logaccept-final-0 + inet6/filter/OUTPUT -j logaccept-final-0 + inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-0 -j ACCEPT + inet6/filter/logaccept-final-0 -j ACCEPT + +Filter 1014 {"action":"pass","flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-719 + inet6/filter/FORWARD -j limit-719 + inet/filter/INPUT -j limit-719 + inet6/filter/INPUT -j limit-719 + inet/filter/OUTPUT -j limit-719 + inet6/filter/OUTPUT -j limit-719 + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 + inet/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet/filter/logdrop-232 -j DROP + inet6/filter/logdrop-232 -j DROP + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1015 {"flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-720 + inet6/filter/FORWARD -j limit-720 + inet/filter/INPUT -j limit-720 + inet6/filter/INPUT -j limit-720 + inet/filter/OUTPUT -j limit-720 + inet6/filter/OUTPUT -j limit-720 + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 + inet/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-233 -j DROP + inet6/filter/logdrop-233 -j DROP + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1016 {"action":"pass","flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-721 + inet6/filter/FORWARD -j limit-721 + inet/filter/INPUT -j limit-721 + inet6/filter/INPUT -j limit-721 + inet/filter/OUTPUT -j limit-721 + inet6/filter/OUTPUT -j limit-721 + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 + inet/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet/filter/logdrop-234 -j DROP + inet6/filter/logdrop-234 -j DROP + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1017 {"flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-722 + inet6/filter/FORWARD -j limit-722 + inet/filter/INPUT -j limit-722 + inet6/filter/INPUT -j limit-722 + inet/filter/OUTPUT -j limit-722 + inet6/filter/OUTPUT -j limit-722 + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 + inet/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet/filter/logdrop-235 -j DROP + inet6/filter/logdrop-235 -j DROP + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1018 {"action":"pass","flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-723 + inet6/filter/FORWARD -j limit-723 + inet/filter/INPUT -j limit-723 + inet6/filter/INPUT -j limit-723 + inet/filter/OUTPUT -j limit-723 + inet6/filter/OUTPUT -j limit-723 + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 + inet/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet/filter/logdrop-236 -j DROP + inet6/filter/logdrop-236 -j DROP + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1019 {"flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-724 + inet6/filter/FORWARD -j limit-724 + inet/filter/INPUT -j limit-724 + inet6/filter/INPUT -j limit-724 + inet/filter/OUTPUT -j limit-724 + inet6/filter/OUTPUT -j limit-724 + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 + inet/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet/filter/logdrop-237 -j DROP + inet6/filter/logdrop-237 -j DROP + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-1 + inet6/filter/FORWARD -j logaccept-final-1 + inet/filter/INPUT -j logaccept-final-1 + inet6/filter/INPUT -j logaccept-final-1 + inet/filter/OUTPUT -j logaccept-final-1 + inet6/filter/OUTPUT -j logaccept-final-1 + inet/filter/logaccept-final-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-1 -j ACCEPT + inet6/filter/logaccept-final-1 -j ACCEPT + +Filter 1020 {"action":"pass","flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-725 + inet6/filter/FORWARD -j limit-725 + inet/filter/INPUT -j limit-725 + inet6/filter/INPUT -j limit-725 + inet/filter/OUTPUT -j limit-725 + inet6/filter/OUTPUT -j limit-725 + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 + inet/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet/filter/logdrop-238 -j DROP + inet6/filter/logdrop-238 -j DROP + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1021 {"flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-726 + inet6/filter/FORWARD -j limit-726 + inet/filter/INPUT -j limit-726 + inet6/filter/INPUT -j limit-726 + inet/filter/OUTPUT -j limit-726 + inet6/filter/OUTPUT -j limit-726 + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 + inet/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet/filter/logdrop-239 -j DROP + inet6/filter/logdrop-239 -j DROP + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1022 {"action":"pass","flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-727 + inet6/filter/FORWARD -j limit-727 + inet/filter/INPUT -j limit-727 + inet6/filter/INPUT -j limit-727 + inet/filter/OUTPUT -j limit-727 + inet6/filter/OUTPUT -j limit-727 + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 + inet/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet/filter/logdrop-240 -j DROP + inet6/filter/logdrop-240 -j DROP + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1023 {"flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-728 + inet6/filter/FORWARD -j limit-728 + inet/filter/INPUT -j limit-728 + inet6/filter/INPUT -j limit-728 + inet/filter/OUTPUT -j limit-728 + inet6/filter/OUTPUT -j limit-728 + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 + inet/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet/filter/logdrop-241 -j DROP + inet6/filter/logdrop-241 -j DROP + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1024 {"action":"pass","flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-729 + inet6/filter/FORWARD -j limit-729 + inet/filter/INPUT -j limit-729 + inet6/filter/INPUT -j limit-729 + inet/filter/OUTPUT -j limit-729 + inet6/filter/OUTPUT -j limit-729 + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 + inet/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet/filter/logdrop-242 -j DROP + inet6/filter/logdrop-242 -j DROP + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1025 {"flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-730 + inet6/filter/FORWARD -j limit-730 + inet/filter/INPUT -j limit-730 + inet6/filter/INPUT -j limit-730 + inet/filter/OUTPUT -j limit-730 + inet6/filter/OUTPUT -j limit-730 + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 + inet/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet/filter/logdrop-243 -j DROP + inet6/filter/logdrop-243 -j DROP + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-2 + inet6/filter/FORWARD -j logaccept-final-2 + inet/filter/INPUT -j logaccept-final-2 + inet6/filter/INPUT -j logaccept-final-2 + inet/filter/OUTPUT -j logaccept-final-2 + inet6/filter/OUTPUT -j logaccept-final-2 + inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-2 -j ACCEPT + inet6/filter/logaccept-final-2 -j ACCEPT + +Filter 1026 {"action":"pass","flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-731 + inet6/filter/FORWARD -j limit-731 + inet/filter/INPUT -j limit-731 + inet6/filter/INPUT -j limit-731 + inet/filter/OUTPUT -j limit-731 + inet6/filter/OUTPUT -j limit-731 + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 + inet/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet/filter/logdrop-244 -j DROP + inet6/filter/logdrop-244 -j DROP + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1027 {"flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-732 + inet6/filter/FORWARD -j limit-732 + inet/filter/INPUT -j limit-732 + inet6/filter/INPUT -j limit-732 + inet/filter/OUTPUT -j limit-732 + inet6/filter/OUTPUT -j limit-732 + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 + inet/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet/filter/logdrop-245 -j DROP + inet6/filter/logdrop-245 -j DROP + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1028 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-733 + inet6/filter/FORWARD -j limit-733 + inet/filter/INPUT -j limit-733 + inet6/filter/INPUT -j limit-733 + inet/filter/OUTPUT -j limit-733 + inet6/filter/OUTPUT -j limit-733 + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 + inet/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet/filter/logdrop-246 -j DROP + inet6/filter/logdrop-246 -j DROP + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1029 {"flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-734 + inet6/filter/FORWARD -j limit-734 + inet/filter/INPUT -j limit-734 + inet6/filter/INPUT -j limit-734 + inet/filter/OUTPUT -j limit-734 + inet6/filter/OUTPUT -j limit-734 + inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet/filter/logdrop-247 -j DROP + inet6/filter/logdrop-247 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1030 {"action":"pass","flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-735 + inet6/filter/FORWARD -j limit-735 + inet/filter/INPUT -j limit-735 + inet6/filter/INPUT -j limit-735 + inet/filter/OUTPUT -j limit-735 + inet6/filter/OUTPUT -j limit-735 + inet/filter/limit-735 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet6/filter/limit-735 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet/filter/logdrop-248 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG + inet/filter/logdrop-248 -j DROP + inet6/filter/logdrop-248 -j DROP + +Filter 1031 {"flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-736 + inet6/filter/FORWARD -j limit-736 + inet/filter/INPUT -j limit-736 + inet6/filter/INPUT -j limit-736 + inet/filter/OUTPUT -j limit-736 + inet6/filter/OUTPUT -j limit-736 + inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet/filter/logdrop-249 -j DROP + inet6/filter/logdrop-249 -j DROP + inet/filter/FORWARD -j logaccept-final-3 + inet6/filter/FORWARD -j logaccept-final-3 + inet/filter/INPUT -j logaccept-final-3 + inet6/filter/INPUT -j logaccept-final-3 + inet/filter/OUTPUT -j logaccept-final-3 + inet6/filter/OUTPUT -j logaccept-final-3 + inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-3 -j ACCEPT + inet6/filter/logaccept-final-3 -j ACCEPT + +Filter 1032 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-737 + inet6/filter/FORWARD -j limit-737 + inet/filter/INPUT -j limit-737 + inet6/filter/INPUT -j limit-737 + inet/filter/OUTPUT -j limit-737 + inet6/filter/OUTPUT -j limit-737 + inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet/filter/logdrop-250 -j DROP + inet6/filter/logdrop-250 -j DROP + inet/filter/limit-737 -m limit --limit 1/second -j LOG + inet6/filter/limit-737 -m limit --limit 1/second -j LOG + +Filter 1033 {"flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-738 + inet6/filter/FORWARD -j limit-738 + inet/filter/INPUT -j limit-738 + inet6/filter/INPUT -j limit-738 + inet/filter/OUTPUT -j limit-738 + inet6/filter/OUTPUT -j limit-738 + inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet/filter/logdrop-251 -j DROP + inet6/filter/logdrop-251 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1034 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-739 + inet6/filter/FORWARD -j limit-739 + inet/filter/INPUT -j limit-739 + inet6/filter/INPUT -j limit-739 + inet/filter/OUTPUT -j limit-739 + inet6/filter/OUTPUT -j limit-739 + inet/filter/limit-739 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet6/filter/limit-739 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet/filter/logdrop-252 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG + inet/filter/logdrop-252 -j DROP + inet6/filter/logdrop-252 -j DROP + +Filter 1035 {"flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-740 + inet6/filter/FORWARD -j limit-740 + inet/filter/INPUT -j limit-740 + inet6/filter/INPUT -j limit-740 + inet/filter/OUTPUT -j limit-740 + inet6/filter/OUTPUT -j limit-740 + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 + inet/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-253 -j DROP + inet6/filter/logdrop-253 -j DROP + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-741 + inet6/filter/FORWARD -j limit-741 + inet/filter/INPUT -j limit-741 + inet6/filter/INPUT -j limit-741 + inet/filter/OUTPUT -j limit-741 + inet6/filter/OUTPUT -j limit-741 + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 + inet/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet/filter/logdrop-254 -j DROP + inet6/filter/logdrop-254 -j DROP + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-742 + inet6/filter/FORWARD -j limit-742 + inet/filter/INPUT -j limit-742 + inet6/filter/INPUT -j limit-742 + inet/filter/OUTPUT -j limit-742 + inet6/filter/OUTPUT -j limit-742 + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 + inet/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet/filter/logdrop-255 -j DROP + inet6/filter/logdrop-255 -j DROP + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-4 + inet6/filter/FORWARD -j logaccept-final-4 + inet/filter/INPUT -j logaccept-final-4 + inet6/filter/INPUT -j logaccept-final-4 + inet/filter/OUTPUT -j logaccept-final-4 + inet6/filter/OUTPUT -j logaccept-final-4 + inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-4 -j ACCEPT + inet6/filter/logaccept-final-4 -j ACCEPT + +Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-743 + inet6/filter/FORWARD -j limit-743 + inet/filter/INPUT -j limit-743 + inet6/filter/INPUT -j limit-743 + inet/filter/OUTPUT -j limit-743 + inet6/filter/OUTPUT -j limit-743 + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 + inet/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet/filter/logdrop-256 -j DROP + inet6/filter/logdrop-256 -j DROP + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-744 + inet6/filter/FORWARD -j limit-744 + inet/filter/INPUT -j limit-744 + inet6/filter/INPUT -j limit-744 + inet/filter/OUTPUT -j limit-744 + inet6/filter/OUTPUT -j limit-744 + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 + inet/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet/filter/logdrop-257 -j DROP + inet6/filter/logdrop-257 -j DROP + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-745 + inet6/filter/FORWARD -j limit-745 + inet/filter/INPUT -j limit-745 + inet6/filter/INPUT -j limit-745 + inet/filter/OUTPUT -j limit-745 + inet6/filter/OUTPUT -j limit-745 + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 + inet/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet/filter/logdrop-258 -j DROP + inet6/filter/logdrop-258 -j DROP + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1041 {"flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-746 + inet6/filter/FORWARD -j limit-746 + inet/filter/INPUT -j limit-746 + inet6/filter/INPUT -j limit-746 + inet/filter/OUTPUT -j limit-746 + inet6/filter/OUTPUT -j limit-746 + inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet/filter/logdrop-259 -j DROP + inet6/filter/logdrop-259 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-747 + inet6/filter/FORWARD -j limit-747 + inet/filter/INPUT -j limit-747 + inet6/filter/INPUT -j limit-747 + inet/filter/OUTPUT -j limit-747 + inet6/filter/OUTPUT -j limit-747 + inet/filter/limit-747 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet6/filter/limit-747 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet/filter/logdrop-260 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG + inet/filter/logdrop-260 -j DROP + inet6/filter/logdrop-260 -j DROP + +Filter 1043 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-748 + inet6/filter/FORWARD -j limit-748 + inet/filter/INPUT -j limit-748 + inet6/filter/INPUT -j limit-748 + inet/filter/OUTPUT -j limit-748 + inet6/filter/OUTPUT -j limit-748 + inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet/filter/logdrop-261 -j DROP + inet6/filter/logdrop-261 -j DROP + inet/filter/FORWARD -j logaccept-final-5 + inet6/filter/FORWARD -j logaccept-final-5 + inet/filter/INPUT -j logaccept-final-5 + inet6/filter/INPUT -j logaccept-final-5 + inet/filter/OUTPUT -j logaccept-final-5 + inet6/filter/OUTPUT -j logaccept-final-5 + inet/filter/logaccept-final-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-5 -j ACCEPT + inet6/filter/logaccept-final-5 -j ACCEPT + +Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-749 + inet6/filter/FORWARD -j limit-749 + inet/filter/INPUT -j limit-749 + inet6/filter/INPUT -j limit-749 + inet/filter/OUTPUT -j limit-749 + inet6/filter/OUTPUT -j limit-749 + inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet/filter/logdrop-262 -j DROP + inet6/filter/logdrop-262 -j DROP + inet/filter/limit-749 -m limit --limit 1/second -j LOG + inet6/filter/limit-749 -m limit --limit 1/second -j LOG + +Filter 1045 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-750 + inet6/filter/FORWARD -j limit-750 + inet/filter/INPUT -j limit-750 + inet6/filter/INPUT -j limit-750 + inet/filter/OUTPUT -j limit-750 + inet6/filter/OUTPUT -j limit-750 + inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet/filter/logdrop-263 -j DROP + inet6/filter/logdrop-263 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-751 + inet6/filter/FORWARD -j limit-751 + inet/filter/INPUT -j limit-751 + inet6/filter/INPUT -j limit-751 + inet/filter/OUTPUT -j limit-751 + inet6/filter/OUTPUT -j limit-751 + inet/filter/limit-751 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 + inet6/filter/limit-751 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 + inet/filter/logdrop-264 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG + inet/filter/logdrop-264 -j DROP + inet6/filter/logdrop-264 -j DROP + +Filter 1047 {"flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-752 + inet6/filter/FORWARD -j limit-752 + inet/filter/INPUT -j limit-752 + inet6/filter/INPUT -j limit-752 + inet/filter/OUTPUT -j limit-752 + inet6/filter/OUTPUT -j limit-752 + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 + inet/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet/filter/logdrop-265 -j DROP + inet6/filter/logdrop-265 -j DROP + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1048 {"action":"pass","flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-753 + inet6/filter/FORWARD -j limit-753 + inet/filter/INPUT -j limit-753 + inet6/filter/INPUT -j limit-753 + inet/filter/OUTPUT -j limit-753 + inet6/filter/OUTPUT -j limit-753 + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 + inet/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet/filter/logdrop-266 -j DROP + inet6/filter/logdrop-266 -j DROP + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1049 {"flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-754 + inet6/filter/FORWARD -j limit-754 + inet/filter/INPUT -j limit-754 + inet6/filter/INPUT -j limit-754 + inet/filter/OUTPUT -j limit-754 + inet6/filter/OUTPUT -j limit-754 + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 + inet/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet/filter/logdrop-267 -j DROP + inet6/filter/logdrop-267 -j DROP + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-6 + inet6/filter/FORWARD -j logaccept-final-6 + inet/filter/INPUT -j logaccept-final-6 + inet6/filter/INPUT -j logaccept-final-6 + inet/filter/OUTPUT -j logaccept-final-6 + inet6/filter/OUTPUT -j logaccept-final-6 + inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-6 -j ACCEPT + inet6/filter/logaccept-final-6 -j ACCEPT + +Filter 1050 {"action":"pass","flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-755 + inet6/filter/FORWARD -j limit-755 + inet/filter/INPUT -j limit-755 + inet6/filter/INPUT -j limit-755 + inet/filter/OUTPUT -j limit-755 + inet6/filter/OUTPUT -j limit-755 + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 + inet/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet/filter/logdrop-268 -j DROP + inet6/filter/logdrop-268 -j DROP + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1051 {"flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-756 + inet6/filter/FORWARD -j limit-756 + inet/filter/INPUT -j limit-756 + inet6/filter/INPUT -j limit-756 + inet/filter/OUTPUT -j limit-756 + inet6/filter/OUTPUT -j limit-756 + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 + inet/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet/filter/logdrop-269 -j DROP + inet6/filter/logdrop-269 -j DROP + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1052 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-757 + inet6/filter/FORWARD -j limit-757 + inet/filter/INPUT -j limit-757 + inet6/filter/INPUT -j limit-757 + inet/filter/OUTPUT -j limit-757 + inet6/filter/OUTPUT -j limit-757 + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 + inet/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet/filter/logdrop-270 -j DROP + inet6/filter/logdrop-270 -j DROP + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1053 {"flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-758 + inet6/filter/FORWARD -j limit-758 + inet/filter/INPUT -j limit-758 + inet6/filter/INPUT -j limit-758 + inet/filter/OUTPUT -j limit-758 + inet6/filter/OUTPUT -j limit-758 + inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet/filter/logdrop-271 -j DROP + inet6/filter/logdrop-271 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1054 {"action":"pass","flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-759 + inet6/filter/FORWARD -j limit-759 + inet/filter/INPUT -j limit-759 + inet6/filter/INPUT -j limit-759 + inet/filter/OUTPUT -j limit-759 + inet6/filter/OUTPUT -j limit-759 + inet/filter/limit-759 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet6/filter/limit-759 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet/filter/logdrop-272 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-272 -m limit --limit 1/second -j LOG + inet/filter/logdrop-272 -j DROP + inet6/filter/logdrop-272 -j DROP + +Filter 1055 {"flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-760 + inet6/filter/FORWARD -j limit-760 + inet/filter/INPUT -j limit-760 + inet6/filter/INPUT -j limit-760 + inet/filter/OUTPUT -j limit-760 + inet6/filter/OUTPUT -j limit-760 + inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-273 -j DROP + inet6/filter/logdrop-273 -j DROP + inet/filter/FORWARD -j logaccept-final-7 + inet6/filter/FORWARD -j logaccept-final-7 + inet/filter/INPUT -j logaccept-final-7 + inet6/filter/INPUT -j logaccept-final-7 + inet/filter/OUTPUT -j logaccept-final-7 + inet6/filter/OUTPUT -j logaccept-final-7 + inet/filter/logaccept-final-7 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-7 -j ACCEPT + inet6/filter/logaccept-final-7 -j ACCEPT + +Filter 1056 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-761 + inet6/filter/FORWARD -j limit-761 + inet/filter/INPUT -j limit-761 + inet6/filter/INPUT -j limit-761 + inet/filter/OUTPUT -j limit-761 + inet6/filter/OUTPUT -j limit-761 + inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet/filter/logdrop-274 -j DROP + inet6/filter/logdrop-274 -j DROP + inet/filter/limit-761 -m limit --limit 1/second -j LOG + inet6/filter/limit-761 -m limit --limit 1/second -j LOG + +Filter 1057 {"flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-762 + inet6/filter/FORWARD -j limit-762 + inet/filter/INPUT -j limit-762 + inet6/filter/INPUT -j limit-762 + inet/filter/OUTPUT -j limit-762 + inet6/filter/OUTPUT -j limit-762 + inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet/filter/logdrop-275 -j DROP + inet6/filter/logdrop-275 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1058 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-763 + inet6/filter/FORWARD -j limit-763 + inet/filter/INPUT -j limit-763 + inet6/filter/INPUT -j limit-763 + inet/filter/OUTPUT -j limit-763 + inet6/filter/OUTPUT -j limit-763 + inet/filter/limit-763 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 + inet6/filter/limit-763 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 + inet/filter/logdrop-276 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-276 -m limit --limit 1/second -j LOG + inet/filter/logdrop-276 -j DROP + inet6/filter/logdrop-276 -j DROP + +Filter 1059 {"flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-764 + inet6/filter/FORWARD -j limit-764 + inet/filter/INPUT -j limit-764 + inet6/filter/INPUT -j limit-764 + inet/filter/OUTPUT -j limit-764 + inet6/filter/OUTPUT -j limit-764 + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 + inet/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet/filter/logdrop-277 -j DROP + inet6/filter/logdrop-277 -j DROP + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1060 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-765 + inet6/filter/FORWARD -j limit-765 + inet/filter/INPUT -j limit-765 + inet6/filter/INPUT -j limit-765 + inet/filter/OUTPUT -j limit-765 + inet6/filter/OUTPUT -j limit-765 + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 + inet/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet/filter/logdrop-278 -j DROP + inet6/filter/logdrop-278 -j DROP + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1061 {"flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-766 + inet6/filter/FORWARD -j limit-766 + inet/filter/INPUT -j limit-766 + inet6/filter/INPUT -j limit-766 + inet/filter/OUTPUT -j limit-766 + inet6/filter/OUTPUT -j limit-766 + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 + inet/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet/filter/logdrop-279 -j DROP + inet6/filter/logdrop-279 -j DROP + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-8 + inet6/filter/FORWARD -j logaccept-final-8 + inet/filter/INPUT -j logaccept-final-8 + inet6/filter/INPUT -j logaccept-final-8 + inet/filter/OUTPUT -j logaccept-final-8 + inet6/filter/OUTPUT -j logaccept-final-8 + inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-8 -j ACCEPT + inet6/filter/logaccept-final-8 -j ACCEPT + +Filter 1062 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-767 + inet6/filter/FORWARD -j limit-767 + inet/filter/INPUT -j limit-767 + inet6/filter/INPUT -j limit-767 + inet/filter/OUTPUT -j limit-767 + inet6/filter/OUTPUT -j limit-767 + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 + inet/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-280 -j DROP + inet6/filter/logdrop-280 -j DROP + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1063 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-768 + inet6/filter/FORWARD -j limit-768 + inet/filter/INPUT -j limit-768 + inet6/filter/INPUT -j limit-768 + inet/filter/OUTPUT -j limit-768 + inet6/filter/OUTPUT -j limit-768 + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 + inet/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-281 -j DROP + inet6/filter/logdrop-281 -j DROP + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1064 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-769 + inet6/filter/FORWARD -j limit-769 + inet/filter/INPUT -j limit-769 + inet6/filter/INPUT -j limit-769 + inet/filter/OUTPUT -j limit-769 + inet6/filter/OUTPUT -j limit-769 + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 + inet/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-282 -j DROP + inet6/filter/logdrop-282 -j DROP + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1065 {"flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-770 + inet6/filter/FORWARD -j limit-770 + inet/filter/INPUT -j limit-770 + inet6/filter/INPUT -j limit-770 + inet/filter/OUTPUT -j limit-770 + inet6/filter/OUTPUT -j limit-770 + inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -j DROP + inet6/filter/logdrop-283 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1066 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-771 + inet6/filter/FORWARD -j limit-771 + inet/filter/INPUT -j limit-771 + inet6/filter/INPUT -j limit-771 + inet/filter/OUTPUT -j limit-771 + inet6/filter/OUTPUT -j limit-771 + inet/filter/limit-771 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet6/filter/limit-771 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG + inet/filter/logdrop-284 -j DROP + inet6/filter/logdrop-284 -j DROP + +Filter 1067 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-772 + inet6/filter/FORWARD -j limit-772 + inet/filter/INPUT -j limit-772 + inet6/filter/INPUT -j limit-772 + inet/filter/OUTPUT -j limit-772 + inet6/filter/OUTPUT -j limit-772 + inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-285 -j DROP + inet6/filter/logdrop-285 -j DROP + inet/filter/FORWARD -j logaccept-final-9 + inet6/filter/FORWARD -j logaccept-final-9 + inet/filter/INPUT -j logaccept-final-9 + inet6/filter/INPUT -j logaccept-final-9 + inet/filter/OUTPUT -j logaccept-final-9 + inet6/filter/OUTPUT -j logaccept-final-9 + inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-9 -j ACCEPT + inet6/filter/logaccept-final-9 -j ACCEPT + +Filter 1068 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-773 + inet6/filter/FORWARD -j limit-773 + inet/filter/INPUT -j limit-773 + inet6/filter/INPUT -j limit-773 + inet/filter/OUTPUT -j limit-773 + inet6/filter/OUTPUT -j limit-773 + inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-286 -j DROP + inet6/filter/logdrop-286 -j DROP + inet/filter/limit-773 -m limit --limit 1/second -j LOG + inet6/filter/limit-773 -m limit --limit 1/second -j LOG + +Filter 1069 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-774 + inet6/filter/FORWARD -j limit-774 + inet/filter/INPUT -j limit-774 + inet6/filter/INPUT -j limit-774 + inet/filter/OUTPUT -j limit-774 + inet6/filter/OUTPUT -j limit-774 + inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-287 -j DROP + inet6/filter/logdrop-287 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1070 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-775 + inet6/filter/FORWARD -j limit-775 + inet/filter/INPUT -j limit-775 + inet6/filter/INPUT -j limit-775 + inet/filter/OUTPUT -j limit-775 + inet6/filter/OUTPUT -j limit-775 + inet/filter/limit-775 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288 + inet6/filter/limit-775 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288 + inet/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG + inet/filter/logdrop-288 -j DROP + inet6/filter/logdrop-288 -j DROP + +Filter 1071 {"flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-776 + inet6/filter/FORWARD -j limit-776 + inet/filter/INPUT -j limit-776 + inet6/filter/INPUT -j limit-776 + inet/filter/OUTPUT -j limit-776 + inet6/filter/OUTPUT -j limit-776 + inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-776 -m recent --name limit-776 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-776 -m recent --name limit-776 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1072 {"action":"pass","flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-777 + inet6/filter/FORWARD -j limit-777 + inet/filter/INPUT -j limit-777 + inet6/filter/INPUT -j limit-777 + inet/filter/OUTPUT -j limit-777 + inet6/filter/OUTPUT -j limit-777 + inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-777 -m recent --name limit-777 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-777 -m recent --name limit-777 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1073 {"flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-778 + inet6/filter/FORWARD -j limit-778 + inet/filter/INPUT -j limit-778 + inet6/filter/INPUT -j limit-778 + inet/filter/OUTPUT -j limit-778 + inet6/filter/OUTPUT -j limit-778 + inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-778 -m recent --name limit-778 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-778 -m recent --name limit-778 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-10 + inet6/filter/FORWARD -j logaccept-final-10 + inet/filter/INPUT -j logaccept-final-10 + inet6/filter/INPUT -j logaccept-final-10 + inet/filter/OUTPUT -j logaccept-final-10 + inet6/filter/OUTPUT -j logaccept-final-10 + inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-10 -j ACCEPT + inet6/filter/logaccept-final-10 -j ACCEPT + +Filter 1074 {"action":"pass","flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-779 + inet6/filter/FORWARD -j limit-779 + inet/filter/INPUT -j limit-779 + inet6/filter/INPUT -j limit-779 + inet/filter/OUTPUT -j limit-779 + inet6/filter/OUTPUT -j limit-779 + inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-779 -m recent --name limit-779 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-779 -m recent --name limit-779 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1075 {"flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-780 + inet6/filter/FORWARD -j limit-780 + inet/filter/INPUT -j limit-780 + inet6/filter/INPUT -j limit-780 + inet/filter/OUTPUT -j limit-780 + inet6/filter/OUTPUT -j limit-780 + inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-780 -m recent --name limit-780 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-780 -m recent --name limit-780 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1076 {"action":"pass","flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-781 + inet6/filter/FORWARD -j limit-781 + inet/filter/INPUT -j limit-781 + inet6/filter/INPUT -j limit-781 + inet/filter/OUTPUT -j limit-781 + inet6/filter/OUTPUT -j limit-781 + inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-781 -m recent --name limit-781 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-781 -m recent --name limit-781 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1077 {"flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-782 + inet6/filter/FORWARD -j limit-782 + inet/filter/INPUT -j limit-782 + inet6/filter/INPUT -j limit-782 + inet/filter/OUTPUT -j limit-782 + inet6/filter/OUTPUT -j limit-782 + inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-782 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-782 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1078 {"action":"pass","flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-783 + inet6/filter/FORWARD -j limit-783 + inet/filter/INPUT -j limit-783 + inet6/filter/INPUT -j limit-783 + inet/filter/OUTPUT -j limit-783 + inet6/filter/OUTPUT -j limit-783 + inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-783 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-783 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1079 {"flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-784 + inet6/filter/FORWARD -j limit-784 + inet/filter/INPUT -j limit-784 + inet6/filter/INPUT -j limit-784 + inet/filter/OUTPUT -j limit-784 + inet6/filter/OUTPUT -j limit-784 + inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-784 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-784 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-11 + inet6/filter/FORWARD -j logaccept-final-11 + inet/filter/INPUT -j logaccept-final-11 + inet6/filter/INPUT -j logaccept-final-11 + inet/filter/OUTPUT -j logaccept-final-11 + inet6/filter/OUTPUT -j logaccept-final-11 + inet/filter/logaccept-final-11 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-11 -j ACCEPT + inet6/filter/logaccept-final-11 -j ACCEPT + +Filter 1080 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-785 + inet6/filter/FORWARD -j limit-785 + inet/filter/INPUT -j limit-785 + inet6/filter/INPUT -j limit-785 + inet/filter/OUTPUT -j limit-785 + inet6/filter/OUTPUT -j limit-785 + inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-785 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-785 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1081 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-786 + inet6/filter/FORWARD -j limit-786 + inet/filter/INPUT -j limit-786 + inet6/filter/INPUT -j limit-786 + inet/filter/OUTPUT -j limit-786 + inet6/filter/OUTPUT -j limit-786 + inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-786 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-786 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1082 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-787 + inet6/filter/FORWARD -j limit-787 + inet/filter/INPUT -j limit-787 + inet6/filter/INPUT -j limit-787 + inet/filter/OUTPUT -j limit-787 + inet6/filter/OUTPUT -j limit-787 + inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-787 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-787 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1083 {"flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-788 + inet6/filter/FORWARD -j limit-788 + inet/filter/INPUT -j limit-788 + inet6/filter/INPUT -j limit-788 + inet/filter/OUTPUT -j limit-788 + inet6/filter/OUTPUT -j limit-788 + inet/filter/limit-788 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-788 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1084 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-789 + inet6/filter/FORWARD -j limit-789 + inet/filter/INPUT -j limit-789 + inet6/filter/INPUT -j limit-789 + inet/filter/OUTPUT -j limit-789 + inet6/filter/OUTPUT -j limit-789 + inet/filter/limit-789 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-789 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1085 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-790 + inet6/filter/FORWARD -j limit-790 + inet/filter/INPUT -j limit-790 + inet6/filter/INPUT -j limit-790 + inet/filter/OUTPUT -j limit-790 + inet6/filter/OUTPUT -j limit-790 + inet/filter/limit-790 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-790 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-12 + inet6/filter/FORWARD -j logaccept-final-12 + inet/filter/INPUT -j logaccept-final-12 + inet6/filter/INPUT -j logaccept-final-12 + inet/filter/OUTPUT -j logaccept-final-12 + inet6/filter/OUTPUT -j logaccept-final-12 + inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-12 -j ACCEPT + inet6/filter/logaccept-final-12 -j ACCEPT + +Filter 1086 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-791 + inet6/filter/FORWARD -j limit-791 + inet/filter/INPUT -j limit-791 + inet6/filter/INPUT -j limit-791 + inet/filter/OUTPUT -j limit-791 + inet6/filter/OUTPUT -j limit-791 + inet/filter/limit-791 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-791 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-791 -m limit --limit 1/second -j LOG + inet6/filter/limit-791 -m limit --limit 1/second -j LOG + +Filter 1087 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-792 + inet6/filter/FORWARD -j limit-792 + inet/filter/INPUT -j limit-792 + inet6/filter/INPUT -j limit-792 + inet/filter/OUTPUT -j limit-792 + inet6/filter/OUTPUT -j limit-792 + inet/filter/limit-792 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-792 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1088 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-793 + inet6/filter/FORWARD -j limit-793 + inet/filter/INPUT -j limit-793 + inet6/filter/INPUT -j limit-793 + inet/filter/OUTPUT -j limit-793 + inet6/filter/OUTPUT -j limit-793 + inet/filter/limit-793 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-793 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1089 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-794 + inet6/filter/FORWARD -j limit-794 + inet/filter/INPUT -j limit-794 + inet6/filter/INPUT -j limit-794 + inet/filter/OUTPUT -j limit-794 + inet6/filter/OUTPUT -j limit-794 + inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-794 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-794 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1090 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-795 + inet6/filter/FORWARD -j limit-795 + inet/filter/INPUT -j limit-795 + inet6/filter/INPUT -j limit-795 + inet/filter/OUTPUT -j limit-795 + inet6/filter/OUTPUT -j limit-795 + inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-795 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-795 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1091 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-796 + inet6/filter/FORWARD -j limit-796 + inet/filter/INPUT -j limit-796 + inet6/filter/INPUT -j limit-796 + inet/filter/OUTPUT -j limit-796 + inet6/filter/OUTPUT -j limit-796 + inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-796 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-796 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-13 + inet6/filter/FORWARD -j logaccept-final-13 + inet/filter/INPUT -j logaccept-final-13 + inet6/filter/INPUT -j logaccept-final-13 + inet/filter/OUTPUT -j logaccept-final-13 + inet6/filter/OUTPUT -j logaccept-final-13 + inet/filter/logaccept-final-13 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-13 -j ACCEPT + inet6/filter/logaccept-final-13 -j ACCEPT + +Filter 1092 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-797 + inet6/filter/FORWARD -j limit-797 + inet/filter/INPUT -j limit-797 + inet6/filter/INPUT -j limit-797 + inet/filter/OUTPUT -j limit-797 + inet6/filter/OUTPUT -j limit-797 + inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-797 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-797 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1093 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-798 + inet6/filter/FORWARD -j limit-798 + inet/filter/INPUT -j limit-798 + inet6/filter/INPUT -j limit-798 + inet/filter/OUTPUT -j limit-798 + inet6/filter/OUTPUT -j limit-798 + inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-798 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-798 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1094 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-799 + inet6/filter/FORWARD -j limit-799 + inet/filter/INPUT -j limit-799 + inet6/filter/INPUT -j limit-799 + inet/filter/OUTPUT -j limit-799 + inet6/filter/OUTPUT -j limit-799 + inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-799 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-799 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1095 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-800 + inet6/filter/FORWARD -j limit-800 + inet/filter/INPUT -j limit-800 + inet6/filter/INPUT -j limit-800 + inet/filter/OUTPUT -j limit-800 + inet6/filter/OUTPUT -j limit-800 + inet/filter/limit-800 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-800 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1096 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-801 + inet6/filter/FORWARD -j limit-801 + inet/filter/INPUT -j limit-801 + inet6/filter/INPUT -j limit-801 + inet/filter/OUTPUT -j limit-801 + inet6/filter/OUTPUT -j limit-801 + inet/filter/limit-801 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-801 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1097 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-802 + inet6/filter/FORWARD -j limit-802 + inet/filter/INPUT -j limit-802 + inet6/filter/INPUT -j limit-802 + inet/filter/OUTPUT -j limit-802 + inet6/filter/OUTPUT -j limit-802 + inet/filter/limit-802 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-802 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-14 + inet6/filter/FORWARD -j logaccept-final-14 + inet/filter/INPUT -j logaccept-final-14 + inet6/filter/INPUT -j logaccept-final-14 + inet/filter/OUTPUT -j logaccept-final-14 + inet6/filter/OUTPUT -j logaccept-final-14 + inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-14 -j ACCEPT + inet6/filter/logaccept-final-14 -j ACCEPT + +Filter 1098 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-803 + inet6/filter/FORWARD -j limit-803 + inet/filter/INPUT -j limit-803 + inet6/filter/INPUT -j limit-803 + inet/filter/OUTPUT -j limit-803 + inet6/filter/OUTPUT -j limit-803 + inet/filter/limit-803 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-803 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-803 -m limit --limit 1/second -j LOG + inet6/filter/limit-803 -m limit --limit 1/second -j LOG + +Filter 1099 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-804 + inet6/filter/FORWARD -j limit-804 + inet/filter/INPUT -j limit-804 + inet6/filter/INPUT -j limit-804 + inet/filter/OUTPUT -j limit-804 + inet6/filter/OUTPUT -j limit-804 + inet/filter/limit-804 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-804 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1100 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-805 + inet6/filter/FORWARD -j limit-805 + inet/filter/INPUT -j limit-805 + inet6/filter/INPUT -j limit-805 + inet/filter/OUTPUT -j limit-805 + inet6/filter/OUTPUT -j limit-805 + inet/filter/limit-805 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-805 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1101 {"flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-806 + inet6/filter/FORWARD -j limit-806 + inet/filter/INPUT -j limit-806 + inet6/filter/INPUT -j limit-806 + inet/filter/OUTPUT -j limit-806 + inet6/filter/OUTPUT -j limit-806 + inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-806 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-806 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1102 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-807 + inet6/filter/FORWARD -j limit-807 + inet/filter/INPUT -j limit-807 + inet6/filter/INPUT -j limit-807 + inet/filter/OUTPUT -j limit-807 + inet6/filter/OUTPUT -j limit-807 + inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-807 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-807 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1103 {"flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-808 + inet6/filter/FORWARD -j limit-808 + inet/filter/INPUT -j limit-808 + inet6/filter/INPUT -j limit-808 + inet/filter/OUTPUT -j limit-808 + inet6/filter/OUTPUT -j limit-808 + inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-808 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-808 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-15 + inet6/filter/FORWARD -j logaccept-final-15 + inet/filter/INPUT -j logaccept-final-15 + inet6/filter/INPUT -j logaccept-final-15 + inet/filter/OUTPUT -j logaccept-final-15 + inet6/filter/OUTPUT -j logaccept-final-15 + inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-15 -j ACCEPT + inet6/filter/logaccept-final-15 -j ACCEPT + +Filter 1104 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-809 + inet6/filter/FORWARD -j limit-809 + inet/filter/INPUT -j limit-809 + inet6/filter/INPUT -j limit-809 + inet/filter/OUTPUT -j limit-809 + inet6/filter/OUTPUT -j limit-809 + inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-809 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-809 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1105 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-810 + inet6/filter/FORWARD -j limit-810 + inet/filter/INPUT -j limit-810 + inet6/filter/INPUT -j limit-810 + inet/filter/OUTPUT -j limit-810 + inet6/filter/OUTPUT -j limit-810 + inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-810 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-810 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1106 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-811 + inet6/filter/FORWARD -j limit-811 + inet/filter/INPUT -j limit-811 + inet6/filter/INPUT -j limit-811 + inet/filter/OUTPUT -j limit-811 + inet6/filter/OUTPUT -j limit-811 + inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-811 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-811 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1107 {"flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-812 + inet6/filter/FORWARD -j limit-812 + inet/filter/INPUT -j limit-812 + inet6/filter/INPUT -j limit-812 + inet/filter/OUTPUT -j limit-812 + inet6/filter/OUTPUT -j limit-812 + inet/filter/limit-812 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-812 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1108 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-813 + inet6/filter/FORWARD -j limit-813 + inet/filter/INPUT -j limit-813 + inet6/filter/INPUT -j limit-813 + inet/filter/OUTPUT -j limit-813 + inet6/filter/OUTPUT -j limit-813 + inet/filter/limit-813 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-813 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1109 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-814 + inet6/filter/FORWARD -j limit-814 + inet/filter/INPUT -j limit-814 + inet6/filter/INPUT -j limit-814 + inet/filter/OUTPUT -j limit-814 + inet6/filter/OUTPUT -j limit-814 + inet/filter/limit-814 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-814 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-16 + inet6/filter/FORWARD -j logaccept-final-16 + inet/filter/INPUT -j logaccept-final-16 + inet6/filter/INPUT -j logaccept-final-16 + inet/filter/OUTPUT -j logaccept-final-16 + inet6/filter/OUTPUT -j logaccept-final-16 + inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-16 -j ACCEPT + inet6/filter/logaccept-final-16 -j ACCEPT + +Filter 1110 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-815 + inet6/filter/FORWARD -j limit-815 + inet/filter/INPUT -j limit-815 + inet6/filter/INPUT -j limit-815 + inet/filter/OUTPUT -j limit-815 + inet6/filter/OUTPUT -j limit-815 + inet/filter/limit-815 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-815 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-815 -m limit --limit 1/second -j LOG + inet6/filter/limit-815 -m limit --limit 1/second -j LOG + +Filter 1111 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-816 + inet6/filter/FORWARD -j limit-816 + inet/filter/INPUT -j limit-816 + inet6/filter/INPUT -j limit-816 + inet/filter/OUTPUT -j limit-816 + inet6/filter/OUTPUT -j limit-816 + inet/filter/limit-816 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-816 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1112 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-817 + inet6/filter/FORWARD -j limit-817 + inet/filter/INPUT -j limit-817 + inet6/filter/INPUT -j limit-817 + inet/filter/OUTPUT -j limit-817 + inet6/filter/OUTPUT -j limit-817 + inet/filter/limit-817 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-817 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1113 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-818 + inet6/filter/FORWARD -j limit-818 + inet/filter/INPUT -j limit-818 + inet6/filter/INPUT -j limit-818 + inet/filter/OUTPUT -j limit-818 + inet6/filter/OUTPUT -j limit-818 + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-818 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-818 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1114 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-819 + inet6/filter/FORWARD -j limit-819 + inet/filter/INPUT -j limit-819 + inet6/filter/INPUT -j limit-819 + inet/filter/OUTPUT -j limit-819 + inet6/filter/OUTPUT -j limit-819 + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-819 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-819 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1115 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-820 + inet6/filter/FORWARD -j limit-820 + inet/filter/INPUT -j limit-820 + inet6/filter/INPUT -j limit-820 + inet/filter/OUTPUT -j limit-820 + inet6/filter/OUTPUT -j limit-820 + inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-820 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-820 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-17 + inet6/filter/FORWARD -j logaccept-final-17 + inet/filter/INPUT -j logaccept-final-17 + inet6/filter/INPUT -j logaccept-final-17 + inet/filter/OUTPUT -j logaccept-final-17 + inet6/filter/OUTPUT -j logaccept-final-17 + inet/filter/logaccept-final-17 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-17 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-17 -j ACCEPT + inet6/filter/logaccept-final-17 -j ACCEPT + +Filter 1116 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-821 + inet6/filter/FORWARD -j limit-821 + inet/filter/INPUT -j limit-821 + inet6/filter/INPUT -j limit-821 + inet/filter/OUTPUT -j limit-821 + inet6/filter/OUTPUT -j limit-821 + inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-821 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-821 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1117 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-822 + inet6/filter/FORWARD -j limit-822 + inet/filter/INPUT -j limit-822 + inet6/filter/INPUT -j limit-822 + inet/filter/OUTPUT -j limit-822 + inet6/filter/OUTPUT -j limit-822 + inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-822 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-822 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1118 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-823 + inet6/filter/FORWARD -j limit-823 + inet/filter/INPUT -j limit-823 + inet6/filter/INPUT -j limit-823 + inet/filter/OUTPUT -j limit-823 + inet6/filter/OUTPUT -j limit-823 + inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-823 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-823 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1119 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-824 + inet6/filter/FORWARD -j limit-824 + inet/filter/INPUT -j limit-824 + inet6/filter/INPUT -j limit-824 + inet/filter/OUTPUT -j limit-824 + inet6/filter/OUTPUT -j limit-824 + inet/filter/limit-824 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-824 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1120 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-825 + inet6/filter/FORWARD -j limit-825 + inet/filter/INPUT -j limit-825 + inet6/filter/INPUT -j limit-825 + inet/filter/OUTPUT -j limit-825 + inet6/filter/OUTPUT -j limit-825 + inet/filter/limit-825 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-825 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1121 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-826 + inet6/filter/FORWARD -j limit-826 + inet/filter/INPUT -j limit-826 + inet6/filter/INPUT -j limit-826 + inet/filter/OUTPUT -j limit-826 + inet6/filter/OUTPUT -j limit-826 + inet/filter/limit-826 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-826 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-18 + inet6/filter/FORWARD -j logaccept-final-18 + inet/filter/INPUT -j logaccept-final-18 + inet6/filter/INPUT -j logaccept-final-18 + inet/filter/OUTPUT -j logaccept-final-18 + inet6/filter/OUTPUT -j logaccept-final-18 + inet/filter/logaccept-final-18 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-18 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-18 -j ACCEPT + inet6/filter/logaccept-final-18 -j ACCEPT + +Filter 1122 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-827 + inet6/filter/FORWARD -j limit-827 + inet/filter/INPUT -j limit-827 + inet6/filter/INPUT -j limit-827 + inet/filter/OUTPUT -j limit-827 + inet6/filter/OUTPUT -j limit-827 + inet/filter/limit-827 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-827 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-827 -m limit --limit 1/second -j LOG + inet6/filter/limit-827 -m limit --limit 1/second -j LOG + +Filter 1123 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-828 + inet6/filter/FORWARD -j limit-828 + inet/filter/INPUT -j limit-828 + inet6/filter/INPUT -j limit-828 + inet/filter/OUTPUT -j limit-828 + inet6/filter/OUTPUT -j limit-828 + inet/filter/limit-828 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-828 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1124 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-829 + inet6/filter/FORWARD -j limit-829 + inet/filter/INPUT -j limit-829 + inet6/filter/INPUT -j limit-829 + inet/filter/OUTPUT -j limit-829 + inet6/filter/OUTPUT -j limit-829 + inet/filter/limit-829 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-829 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1125 {"flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-830 + inet6/filter/FORWARD -j limit-830 + inet/filter/INPUT -j limit-830 + inet6/filter/INPUT -j limit-830 + inet/filter/OUTPUT -j limit-830 + inet6/filter/OUTPUT -j limit-830 + inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-830 -m recent --name limit-830 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-830 -m recent --name limit-830 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1126 {"action":"pass","flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-831 + inet6/filter/FORWARD -j limit-831 + inet/filter/INPUT -j limit-831 + inet6/filter/INPUT -j limit-831 + inet/filter/OUTPUT -j limit-831 + inet6/filter/OUTPUT -j limit-831 + inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-831 -m recent --name limit-831 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-831 -m recent --name limit-831 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1127 {"flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-832 + inet6/filter/FORWARD -j limit-832 + inet/filter/INPUT -j limit-832 + inet6/filter/INPUT -j limit-832 + inet/filter/OUTPUT -j limit-832 + inet6/filter/OUTPUT -j limit-832 + inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-832 -m recent --name limit-832 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-832 -m recent --name limit-832 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-19 + inet6/filter/FORWARD -j logaccept-final-19 + inet/filter/INPUT -j logaccept-final-19 + inet6/filter/INPUT -j logaccept-final-19 + inet/filter/OUTPUT -j logaccept-final-19 + inet6/filter/OUTPUT -j logaccept-final-19 + inet/filter/logaccept-final-19 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-19 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-19 -j ACCEPT + inet6/filter/logaccept-final-19 -j ACCEPT + +Filter 1128 {"action":"pass","flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-833 + inet6/filter/FORWARD -j limit-833 + inet/filter/INPUT -j limit-833 + inet6/filter/INPUT -j limit-833 + inet/filter/OUTPUT -j limit-833 + inet6/filter/OUTPUT -j limit-833 + inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-833 -m recent --name limit-833 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-833 -m recent --name limit-833 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1129 {"flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-834 + inet6/filter/FORWARD -j limit-834 + inet/filter/INPUT -j limit-834 + inet6/filter/INPUT -j limit-834 + inet/filter/OUTPUT -j limit-834 + inet6/filter/OUTPUT -j limit-834 + inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-834 -m recent --name limit-834 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-834 -m recent --name limit-834 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1130 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-835 + inet6/filter/FORWARD -j limit-835 + inet/filter/INPUT -j limit-835 + inet6/filter/INPUT -j limit-835 + inet/filter/OUTPUT -j limit-835 + inet6/filter/OUTPUT -j limit-835 + inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-835 -m recent --name limit-835 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-835 -m recent --name limit-835 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1131 {"flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-836 + inet6/filter/FORWARD -j limit-836 + inet/filter/INPUT -j limit-836 + inet6/filter/INPUT -j limit-836 + inet/filter/OUTPUT -j limit-836 + inet6/filter/OUTPUT -j limit-836 + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-836 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-836 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1132 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-837 + inet6/filter/FORWARD -j limit-837 + inet/filter/INPUT -j limit-837 + inet6/filter/INPUT -j limit-837 + inet/filter/OUTPUT -j limit-837 + inet6/filter/OUTPUT -j limit-837 + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-837 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-837 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1133 {"flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-838 + inet6/filter/FORWARD -j limit-838 + inet/filter/INPUT -j limit-838 + inet6/filter/INPUT -j limit-838 + inet/filter/OUTPUT -j limit-838 + inet6/filter/OUTPUT -j limit-838 + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-838 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-838 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-20 + inet6/filter/FORWARD -j logaccept-final-20 + inet/filter/INPUT -j logaccept-final-20 + inet6/filter/INPUT -j logaccept-final-20 + inet/filter/OUTPUT -j logaccept-final-20 + inet6/filter/OUTPUT -j logaccept-final-20 + inet/filter/logaccept-final-20 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-20 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-20 -j ACCEPT + inet6/filter/logaccept-final-20 -j ACCEPT + +Filter 1134 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-839 + inet6/filter/FORWARD -j limit-839 + inet/filter/INPUT -j limit-839 + inet6/filter/INPUT -j limit-839 + inet/filter/OUTPUT -j limit-839 + inet6/filter/OUTPUT -j limit-839 + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-839 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-839 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1135 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-840 + inet6/filter/FORWARD -j limit-840 + inet/filter/INPUT -j limit-840 + inet6/filter/INPUT -j limit-840 + inet/filter/OUTPUT -j limit-840 + inet6/filter/OUTPUT -j limit-840 + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-840 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-840 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1136 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-841 + inet6/filter/FORWARD -j limit-841 + inet/filter/INPUT -j limit-841 + inet6/filter/INPUT -j limit-841 + inet/filter/OUTPUT -j limit-841 + inet6/filter/OUTPUT -j limit-841 + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-841 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-841 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1137 {"flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-842 + inet6/filter/FORWARD -j limit-842 + inet/filter/INPUT -j limit-842 + inet6/filter/INPUT -j limit-842 + inet/filter/OUTPUT -j limit-842 + inet6/filter/OUTPUT -j limit-842 + inet/filter/limit-842 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-842 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1138 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-843 + inet6/filter/FORWARD -j limit-843 + inet/filter/INPUT -j limit-843 + inet6/filter/INPUT -j limit-843 + inet/filter/OUTPUT -j limit-843 + inet6/filter/OUTPUT -j limit-843 + inet/filter/limit-843 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-843 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1139 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-844 + inet6/filter/FORWARD -j limit-844 + inet/filter/INPUT -j limit-844 + inet6/filter/INPUT -j limit-844 + inet/filter/OUTPUT -j limit-844 + inet6/filter/OUTPUT -j limit-844 + inet/filter/limit-844 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-844 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-21 + inet6/filter/FORWARD -j logaccept-final-21 + inet/filter/INPUT -j logaccept-final-21 + inet6/filter/INPUT -j logaccept-final-21 + inet/filter/OUTPUT -j logaccept-final-21 + inet6/filter/OUTPUT -j logaccept-final-21 + inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-21 -j ACCEPT + inet6/filter/logaccept-final-21 -j ACCEPT + +Filter 1140 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-845 + inet6/filter/FORWARD -j limit-845 + inet/filter/INPUT -j limit-845 + inet6/filter/INPUT -j limit-845 + inet/filter/OUTPUT -j limit-845 + inet6/filter/OUTPUT -j limit-845 + inet/filter/limit-845 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-845 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-845 -m limit --limit 1/second -j LOG + inet6/filter/limit-845 -m limit --limit 1/second -j LOG + +Filter 1141 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-846 + inet6/filter/FORWARD -j limit-846 + inet/filter/INPUT -j limit-846 + inet6/filter/INPUT -j limit-846 + inet/filter/OUTPUT -j limit-846 + inet6/filter/OUTPUT -j limit-846 + inet/filter/limit-846 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-846 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1142 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-847 + inet6/filter/FORWARD -j limit-847 + inet/filter/INPUT -j limit-847 + inet6/filter/INPUT -j limit-847 + inet/filter/OUTPUT -j limit-847 + inet6/filter/OUTPUT -j limit-847 + inet/filter/limit-847 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-847 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1143 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-848 + inet6/filter/FORWARD -j limit-848 + inet/filter/INPUT -j limit-848 + inet6/filter/INPUT -j limit-848 + inet/filter/OUTPUT -j limit-848 + inet6/filter/OUTPUT -j limit-848 + inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-848 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-848 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1144 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-849 + inet6/filter/FORWARD -j limit-849 + inet/filter/INPUT -j limit-849 + inet6/filter/INPUT -j limit-849 + inet/filter/OUTPUT -j limit-849 + inet6/filter/OUTPUT -j limit-849 + inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-849 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-849 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1145 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-850 + inet6/filter/FORWARD -j limit-850 + inet/filter/INPUT -j limit-850 + inet6/filter/INPUT -j limit-850 + inet/filter/OUTPUT -j limit-850 + inet6/filter/OUTPUT -j limit-850 + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-850 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-850 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-22 + inet6/filter/FORWARD -j logaccept-final-22 + inet/filter/INPUT -j logaccept-final-22 + inet6/filter/INPUT -j logaccept-final-22 + inet/filter/OUTPUT -j logaccept-final-22 + inet6/filter/OUTPUT -j logaccept-final-22 + inet/filter/logaccept-final-22 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-22 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-22 -j ACCEPT + inet6/filter/logaccept-final-22 -j ACCEPT + +Filter 1146 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-851 + inet6/filter/FORWARD -j limit-851 + inet/filter/INPUT -j limit-851 + inet6/filter/INPUT -j limit-851 + inet/filter/OUTPUT -j limit-851 + inet6/filter/OUTPUT -j limit-851 + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-851 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-851 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1147 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-852 + inet6/filter/FORWARD -j limit-852 + inet/filter/INPUT -j limit-852 + inet6/filter/INPUT -j limit-852 + inet/filter/OUTPUT -j limit-852 + inet6/filter/OUTPUT -j limit-852 + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-852 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-852 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1148 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-853 + inet6/filter/FORWARD -j limit-853 + inet/filter/INPUT -j limit-853 + inet6/filter/INPUT -j limit-853 + inet/filter/OUTPUT -j limit-853 + inet6/filter/OUTPUT -j limit-853 + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-853 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-853 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1149 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-854 + inet6/filter/FORWARD -j limit-854 + inet/filter/INPUT -j limit-854 + inet6/filter/INPUT -j limit-854 + inet/filter/OUTPUT -j limit-854 + inet6/filter/OUTPUT -j limit-854 + inet/filter/limit-854 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-854 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1150 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-855 + inet6/filter/FORWARD -j limit-855 + inet/filter/INPUT -j limit-855 + inet6/filter/INPUT -j limit-855 + inet/filter/OUTPUT -j limit-855 + inet6/filter/OUTPUT -j limit-855 + inet/filter/limit-855 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-855 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1151 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-856 + inet6/filter/FORWARD -j limit-856 + inet/filter/INPUT -j limit-856 + inet6/filter/INPUT -j limit-856 + inet/filter/OUTPUT -j limit-856 + inet6/filter/OUTPUT -j limit-856 + inet/filter/limit-856 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-856 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-23 + inet6/filter/FORWARD -j logaccept-final-23 + inet/filter/INPUT -j logaccept-final-23 + inet6/filter/INPUT -j logaccept-final-23 + inet/filter/OUTPUT -j logaccept-final-23 + inet6/filter/OUTPUT -j logaccept-final-23 + inet/filter/logaccept-final-23 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-23 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-23 -j ACCEPT + inet6/filter/logaccept-final-23 -j ACCEPT + +Filter 1152 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-857 + inet6/filter/FORWARD -j limit-857 + inet/filter/INPUT -j limit-857 + inet6/filter/INPUT -j limit-857 + inet/filter/OUTPUT -j limit-857 + inet6/filter/OUTPUT -j limit-857 + inet/filter/limit-857 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-857 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-857 -m limit --limit 1/second -j LOG + inet6/filter/limit-857 -m limit --limit 1/second -j LOG + +Filter 1153 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-858 + inet6/filter/FORWARD -j limit-858 + inet/filter/INPUT -j limit-858 + inet6/filter/INPUT -j limit-858 + inet/filter/OUTPUT -j limit-858 + inet6/filter/OUTPUT -j limit-858 + inet/filter/limit-858 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-858 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1154 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-859 + inet6/filter/FORWARD -j limit-859 + inet/filter/INPUT -j limit-859 + inet6/filter/INPUT -j limit-859 + inet/filter/OUTPUT -j limit-859 + inet6/filter/OUTPUT -j limit-859 + inet/filter/limit-859 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-859 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1155 {"flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-860 + inet6/filter/FORWARD -j limit-860 + inet/filter/INPUT -j limit-860 + inet6/filter/INPUT -j limit-860 + inet/filter/OUTPUT -j limit-860 + inet6/filter/OUTPUT -j limit-860 + inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-860 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-860 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1156 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-861 + inet6/filter/FORWARD -j limit-861 + inet/filter/INPUT -j limit-861 + inet6/filter/INPUT -j limit-861 + inet/filter/OUTPUT -j limit-861 + inet6/filter/OUTPUT -j limit-861 + inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-861 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-861 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1157 {"flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-862 + inet6/filter/FORWARD -j limit-862 + inet/filter/INPUT -j limit-862 + inet6/filter/INPUT -j limit-862 + inet/filter/OUTPUT -j limit-862 + inet6/filter/OUTPUT -j limit-862 + inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-862 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-862 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-24 + inet6/filter/FORWARD -j logaccept-final-24 + inet/filter/INPUT -j logaccept-final-24 + inet6/filter/INPUT -j logaccept-final-24 + inet/filter/OUTPUT -j logaccept-final-24 + inet6/filter/OUTPUT -j logaccept-final-24 + inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-24 -j ACCEPT + inet6/filter/logaccept-final-24 -j ACCEPT + +Filter 1158 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-863 + inet6/filter/FORWARD -j limit-863 + inet/filter/INPUT -j limit-863 + inet6/filter/INPUT -j limit-863 + inet/filter/OUTPUT -j limit-863 + inet6/filter/OUTPUT -j limit-863 + inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-863 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-863 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1159 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-864 + inet6/filter/FORWARD -j limit-864 + inet/filter/INPUT -j limit-864 + inet6/filter/INPUT -j limit-864 + inet/filter/OUTPUT -j limit-864 + inet6/filter/OUTPUT -j limit-864 + inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-864 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-864 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1160 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-865 + inet6/filter/FORWARD -j limit-865 + inet/filter/INPUT -j limit-865 + inet6/filter/INPUT -j limit-865 + inet/filter/OUTPUT -j limit-865 + inet6/filter/OUTPUT -j limit-865 + inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-865 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-865 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1161 {"flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-866 + inet6/filter/FORWARD -j limit-866 + inet/filter/INPUT -j limit-866 + inet6/filter/INPUT -j limit-866 + inet/filter/OUTPUT -j limit-866 + inet6/filter/OUTPUT -j limit-866 + inet/filter/limit-866 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-866 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1162 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-867 + inet6/filter/FORWARD -j limit-867 + inet/filter/INPUT -j limit-867 + inet6/filter/INPUT -j limit-867 + inet/filter/OUTPUT -j limit-867 + inet6/filter/OUTPUT -j limit-867 + inet/filter/limit-867 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-867 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1163 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-868 + inet6/filter/FORWARD -j limit-868 + inet/filter/INPUT -j limit-868 + inet6/filter/INPUT -j limit-868 + inet/filter/OUTPUT -j limit-868 + inet6/filter/OUTPUT -j limit-868 + inet/filter/limit-868 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-868 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-25 + inet6/filter/FORWARD -j logaccept-final-25 + inet/filter/INPUT -j logaccept-final-25 + inet6/filter/INPUT -j logaccept-final-25 + inet/filter/OUTPUT -j logaccept-final-25 + inet6/filter/OUTPUT -j logaccept-final-25 + inet/filter/logaccept-final-25 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-25 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-25 -j ACCEPT + inet6/filter/logaccept-final-25 -j ACCEPT + +Filter 1164 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-869 + inet6/filter/FORWARD -j limit-869 + inet/filter/INPUT -j limit-869 + inet6/filter/INPUT -j limit-869 + inet/filter/OUTPUT -j limit-869 + inet6/filter/OUTPUT -j limit-869 + inet/filter/limit-869 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-869 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-869 -m limit --limit 1/second -j LOG + inet6/filter/limit-869 -m limit --limit 1/second -j LOG + +Filter 1165 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-870 + inet6/filter/FORWARD -j limit-870 + inet/filter/INPUT -j limit-870 + inet6/filter/INPUT -j limit-870 + inet/filter/OUTPUT -j limit-870 + inet6/filter/OUTPUT -j limit-870 + inet/filter/limit-870 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-870 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1166 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-871 + inet6/filter/FORWARD -j limit-871 + inet/filter/INPUT -j limit-871 + inet6/filter/INPUT -j limit-871 + inet/filter/OUTPUT -j limit-871 + inet6/filter/OUTPUT -j limit-871 + inet/filter/limit-871 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-871 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1167 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-872 + inet6/filter/FORWARD -j limit-872 + inet/filter/INPUT -j limit-872 + inet6/filter/INPUT -j limit-872 + inet/filter/OUTPUT -j limit-872 + inet6/filter/OUTPUT -j limit-872 + inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-872 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-872 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1168 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-873 + inet6/filter/FORWARD -j limit-873 + inet/filter/INPUT -j limit-873 + inet6/filter/INPUT -j limit-873 + inet/filter/OUTPUT -j limit-873 + inet6/filter/OUTPUT -j limit-873 + inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-873 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-873 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1169 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-874 + inet6/filter/FORWARD -j limit-874 + inet/filter/INPUT -j limit-874 + inet6/filter/INPUT -j limit-874 + inet/filter/OUTPUT -j limit-874 + inet6/filter/OUTPUT -j limit-874 + inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-874 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-874 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-26 + inet6/filter/FORWARD -j logaccept-final-26 + inet/filter/INPUT -j logaccept-final-26 + inet6/filter/INPUT -j logaccept-final-26 + inet/filter/OUTPUT -j logaccept-final-26 + inet6/filter/OUTPUT -j logaccept-final-26 + inet/filter/logaccept-final-26 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-26 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-26 -j ACCEPT + inet6/filter/logaccept-final-26 -j ACCEPT + +Filter 1170 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-875 + inet6/filter/FORWARD -j limit-875 + inet/filter/INPUT -j limit-875 + inet6/filter/INPUT -j limit-875 + inet/filter/OUTPUT -j limit-875 + inet6/filter/OUTPUT -j limit-875 + inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-875 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-875 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1171 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-876 + inet6/filter/FORWARD -j limit-876 + inet/filter/INPUT -j limit-876 + inet6/filter/INPUT -j limit-876 + inet/filter/OUTPUT -j limit-876 + inet6/filter/OUTPUT -j limit-876 + inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-876 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-876 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1172 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-877 + inet6/filter/FORWARD -j limit-877 + inet/filter/INPUT -j limit-877 + inet6/filter/INPUT -j limit-877 + inet/filter/OUTPUT -j limit-877 + inet6/filter/OUTPUT -j limit-877 + inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-877 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-877 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1173 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-878 + inet6/filter/FORWARD -j limit-878 + inet/filter/INPUT -j limit-878 + inet6/filter/INPUT -j limit-878 + inet/filter/OUTPUT -j limit-878 + inet6/filter/OUTPUT -j limit-878 + inet/filter/limit-878 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-878 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1174 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-879 + inet6/filter/FORWARD -j limit-879 + inet/filter/INPUT -j limit-879 + inet6/filter/INPUT -j limit-879 + inet/filter/OUTPUT -j limit-879 + inet6/filter/OUTPUT -j limit-879 + inet/filter/limit-879 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-879 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1175 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-880 + inet6/filter/FORWARD -j limit-880 + inet/filter/INPUT -j limit-880 + inet6/filter/INPUT -j limit-880 + inet/filter/OUTPUT -j limit-880 + inet6/filter/OUTPUT -j limit-880 + inet/filter/limit-880 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-880 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-27 + inet6/filter/FORWARD -j logaccept-final-27 + inet/filter/INPUT -j logaccept-final-27 + inet6/filter/INPUT -j logaccept-final-27 + inet/filter/OUTPUT -j logaccept-final-27 + inet6/filter/OUTPUT -j logaccept-final-27 + inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-27 -j ACCEPT + inet6/filter/logaccept-final-27 -j ACCEPT + +Filter 1176 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-881 + inet6/filter/FORWARD -j limit-881 + inet/filter/INPUT -j limit-881 + inet6/filter/INPUT -j limit-881 + inet/filter/OUTPUT -j limit-881 + inet6/filter/OUTPUT -j limit-881 + inet/filter/limit-881 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-881 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-881 -m limit --limit 1/second -j LOG + inet6/filter/limit-881 -m limit --limit 1/second -j LOG + +Filter 1177 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-882 + inet6/filter/FORWARD -j limit-882 + inet/filter/INPUT -j limit-882 + inet6/filter/INPUT -j limit-882 + inet/filter/OUTPUT -j limit-882 + inet6/filter/OUTPUT -j limit-882 + inet/filter/limit-882 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-882 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1178 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-883 + inet6/filter/FORWARD -j limit-883 + inet/filter/INPUT -j limit-883 + inet6/filter/INPUT -j limit-883 + inet/filter/OUTPUT -j limit-883 + inet6/filter/OUTPUT -j limit-883 + inet/filter/limit-883 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-883 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 1179 {"flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-884 + inet6/filter/FORWARD -j limit-884 + inet/filter/INPUT -j limit-884 + inet6/filter/INPUT -j limit-884 + inet/filter/OUTPUT -j limit-884 + inet6/filter/OUTPUT -j limit-884 + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-289 + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-289 + inet/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-289 -m limit --limit 1/second -j LOG + inet/filter/logdrop-289 -j DROP + inet6/filter/logdrop-289 -j DROP + inet/filter/limit-884 -m recent --name limit-884 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-884 -m recent --name limit-884 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1180 {"action":"pass","flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-885 + inet6/filter/FORWARD -j limit-885 + inet/filter/INPUT -j limit-885 + inet6/filter/INPUT -j limit-885 + inet/filter/OUTPUT -j limit-885 + inet6/filter/OUTPUT -j limit-885 + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-290 + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-290 + inet/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-290 -m limit --limit 1/second -j LOG + inet/filter/logdrop-290 -j DROP + inet6/filter/logdrop-290 -j DROP + inet/filter/limit-885 -m recent --name limit-885 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-885 -m recent --name limit-885 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1181 {"flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-886 + inet6/filter/FORWARD -j limit-886 + inet/filter/INPUT -j limit-886 + inet6/filter/INPUT -j limit-886 + inet/filter/OUTPUT -j limit-886 + inet6/filter/OUTPUT -j limit-886 + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-291 + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-291 + inet/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-291 -m limit --limit 1/second -j LOG + inet/filter/logdrop-291 -j DROP + inet6/filter/logdrop-291 -j DROP + inet/filter/limit-886 -m recent --name limit-886 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-886 -m recent --name limit-886 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-28 + inet6/filter/FORWARD -j logaccept-final-28 + inet/filter/INPUT -j logaccept-final-28 + inet6/filter/INPUT -j logaccept-final-28 + inet/filter/OUTPUT -j logaccept-final-28 + inet6/filter/OUTPUT -j logaccept-final-28 + inet/filter/logaccept-final-28 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-28 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-28 -j ACCEPT + inet6/filter/logaccept-final-28 -j ACCEPT + +Filter 1182 {"action":"pass","flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-887 + inet6/filter/FORWARD -j limit-887 + inet/filter/INPUT -j limit-887 + inet6/filter/INPUT -j limit-887 + inet/filter/OUTPUT -j limit-887 + inet6/filter/OUTPUT -j limit-887 + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-292 + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-292 + inet/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-292 -m limit --limit 1/second -j LOG + inet/filter/logdrop-292 -j DROP + inet6/filter/logdrop-292 -j DROP + inet/filter/limit-887 -m recent --name limit-887 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-887 -m recent --name limit-887 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1183 {"flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-888 + inet6/filter/FORWARD -j limit-888 + inet/filter/INPUT -j limit-888 + inet6/filter/INPUT -j limit-888 + inet/filter/OUTPUT -j limit-888 + inet6/filter/OUTPUT -j limit-888 + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-293 + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-293 + inet/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-293 -m limit --limit 1/second -j LOG + inet/filter/logdrop-293 -j DROP + inet6/filter/logdrop-293 -j DROP + inet/filter/limit-888 -m recent --name limit-888 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-888 -m recent --name limit-888 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1184 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-889 + inet6/filter/FORWARD -j limit-889 + inet/filter/INPUT -j limit-889 + inet6/filter/INPUT -j limit-889 + inet/filter/OUTPUT -j limit-889 + inet6/filter/OUTPUT -j limit-889 + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-294 + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-294 + inet/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-294 -m limit --limit 1/second -j LOG + inet/filter/logdrop-294 -j DROP + inet6/filter/logdrop-294 -j DROP + inet/filter/limit-889 -m recent --name limit-889 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-889 -m recent --name limit-889 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1185 {"flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-890 + inet6/filter/FORWARD -j limit-890 + inet/filter/INPUT -j limit-890 + inet6/filter/INPUT -j limit-890 + inet/filter/OUTPUT -j limit-890 + inet6/filter/OUTPUT -j limit-890 + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-295 + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-295 + inet/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-295 -m limit --limit 1/second -j LOG + inet/filter/logdrop-295 -j DROP + inet6/filter/logdrop-295 -j DROP + inet/filter/limit-890 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-890 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1186 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-891 + inet6/filter/FORWARD -j limit-891 + inet/filter/INPUT -j limit-891 + inet6/filter/INPUT -j limit-891 + inet/filter/OUTPUT -j limit-891 + inet6/filter/OUTPUT -j limit-891 + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-296 + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-296 + inet/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-296 -m limit --limit 1/second -j LOG + inet/filter/logdrop-296 -j DROP + inet6/filter/logdrop-296 -j DROP + inet/filter/limit-891 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-891 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1187 {"flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-892 + inet6/filter/FORWARD -j limit-892 + inet/filter/INPUT -j limit-892 + inet6/filter/INPUT -j limit-892 + inet/filter/OUTPUT -j limit-892 + inet6/filter/OUTPUT -j limit-892 + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-297 + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-297 + inet/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-297 -m limit --limit 1/second -j LOG + inet/filter/logdrop-297 -j DROP + inet6/filter/logdrop-297 -j DROP + inet/filter/limit-892 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-892 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-29 + inet6/filter/FORWARD -j logaccept-final-29 + inet/filter/INPUT -j logaccept-final-29 + inet6/filter/INPUT -j logaccept-final-29 + inet/filter/OUTPUT -j logaccept-final-29 + inet6/filter/OUTPUT -j logaccept-final-29 + inet/filter/logaccept-final-29 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-29 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-29 -j ACCEPT + inet6/filter/logaccept-final-29 -j ACCEPT + +Filter 1188 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-893 + inet6/filter/FORWARD -j limit-893 + inet/filter/INPUT -j limit-893 + inet6/filter/INPUT -j limit-893 + inet/filter/OUTPUT -j limit-893 + inet6/filter/OUTPUT -j limit-893 + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-298 + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-298 + inet/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-298 -m limit --limit 1/second -j LOG + inet/filter/logdrop-298 -j DROP + inet6/filter/logdrop-298 -j DROP + inet/filter/limit-893 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-893 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1189 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-894 + inet6/filter/FORWARD -j limit-894 + inet/filter/INPUT -j limit-894 + inet6/filter/INPUT -j limit-894 + inet/filter/OUTPUT -j limit-894 + inet6/filter/OUTPUT -j limit-894 + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-299 + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-299 + inet/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-299 -m limit --limit 1/second -j LOG + inet/filter/logdrop-299 -j DROP + inet6/filter/logdrop-299 -j DROP + inet/filter/limit-894 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-894 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1190 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-895 + inet6/filter/FORWARD -j limit-895 + inet/filter/INPUT -j limit-895 + inet6/filter/INPUT -j limit-895 + inet/filter/OUTPUT -j limit-895 + inet6/filter/OUTPUT -j limit-895 + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-300 + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-300 + inet/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-300 -m limit --limit 1/second -j LOG + inet/filter/logdrop-300 -j DROP + inet6/filter/logdrop-300 -j DROP + inet/filter/limit-895 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-895 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1191 {"flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-896 + inet6/filter/FORWARD -j limit-896 + inet/filter/INPUT -j limit-896 + inet6/filter/INPUT -j limit-896 + inet/filter/OUTPUT -j limit-896 + inet6/filter/OUTPUT -j limit-896 + inet/filter/limit-896 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet6/filter/limit-896 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-301 + inet/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-301 -m limit --limit 1/second -j LOG + inet/filter/logdrop-301 -j DROP + inet6/filter/logdrop-301 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1192 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-897 + inet6/filter/FORWARD -j limit-897 + inet/filter/INPUT -j limit-897 + inet6/filter/INPUT -j limit-897 + inet/filter/OUTPUT -j limit-897 + inet6/filter/OUTPUT -j limit-897 + inet/filter/limit-897 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet6/filter/limit-897 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302 + inet/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG + inet/filter/logdrop-302 -j DROP + inet6/filter/logdrop-302 -j DROP + +Filter 1193 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-898 + inet6/filter/FORWARD -j limit-898 + inet/filter/INPUT -j limit-898 + inet6/filter/INPUT -j limit-898 + inet/filter/OUTPUT -j limit-898 + inet6/filter/OUTPUT -j limit-898 + inet/filter/limit-898 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet6/filter/limit-898 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-303 + inet/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-303 -m limit --limit 1/second -j LOG + inet/filter/logdrop-303 -j DROP + inet6/filter/logdrop-303 -j DROP + inet/filter/FORWARD -j logaccept-final-30 + inet6/filter/FORWARD -j logaccept-final-30 + inet/filter/INPUT -j logaccept-final-30 + inet6/filter/INPUT -j logaccept-final-30 + inet/filter/OUTPUT -j logaccept-final-30 + inet6/filter/OUTPUT -j logaccept-final-30 + inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-30 -j ACCEPT + inet6/filter/logaccept-final-30 -j ACCEPT + +Filter 1194 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-899 + inet6/filter/FORWARD -j limit-899 + inet/filter/INPUT -j limit-899 + inet6/filter/INPUT -j limit-899 + inet/filter/OUTPUT -j limit-899 + inet6/filter/OUTPUT -j limit-899 + inet/filter/limit-899 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet6/filter/limit-899 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-304 + inet/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-304 -m limit --limit 1/second -j LOG + inet/filter/logdrop-304 -j DROP + inet6/filter/logdrop-304 -j DROP + inet/filter/limit-899 -m limit --limit 1/second -j LOG + inet6/filter/limit-899 -m limit --limit 1/second -j LOG + +Filter 1195 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-900 + inet6/filter/FORWARD -j limit-900 + inet/filter/INPUT -j limit-900 + inet6/filter/INPUT -j limit-900 + inet/filter/OUTPUT -j limit-900 + inet6/filter/OUTPUT -j limit-900 + inet/filter/limit-900 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet6/filter/limit-900 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-305 + inet/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-305 -m limit --limit 1/second -j LOG + inet/filter/logdrop-305 -j DROP + inet6/filter/logdrop-305 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1196 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-901 + inet6/filter/FORWARD -j limit-901 + inet/filter/INPUT -j limit-901 + inet6/filter/INPUT -j limit-901 + inet/filter/OUTPUT -j limit-901 + inet6/filter/OUTPUT -j limit-901 + inet/filter/limit-901 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306 + inet6/filter/limit-901 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306 + inet/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG + inet/filter/logdrop-306 -j DROP + inet6/filter/logdrop-306 -j DROP + +Filter 1197 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-902 + inet6/filter/FORWARD -j limit-902 + inet/filter/INPUT -j limit-902 + inet6/filter/INPUT -j limit-902 + inet/filter/OUTPUT -j limit-902 + inet6/filter/OUTPUT -j limit-902 + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-307 + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-307 + inet/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-307 -m limit --limit 1/second -j LOG + inet/filter/logdrop-307 -j DROP + inet6/filter/logdrop-307 -j DROP + inet/filter/limit-902 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-902 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1198 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-903 + inet6/filter/FORWARD -j limit-903 + inet/filter/INPUT -j limit-903 + inet6/filter/INPUT -j limit-903 + inet/filter/OUTPUT -j limit-903 + inet6/filter/OUTPUT -j limit-903 + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-308 + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-308 + inet/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-308 -m limit --limit 1/second -j LOG + inet/filter/logdrop-308 -j DROP + inet6/filter/logdrop-308 -j DROP + inet/filter/limit-903 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-903 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1199 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-904 + inet6/filter/FORWARD -j limit-904 + inet/filter/INPUT -j limit-904 + inet6/filter/INPUT -j limit-904 + inet/filter/OUTPUT -j limit-904 + inet6/filter/OUTPUT -j limit-904 + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-309 + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-309 + inet/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-309 -m limit --limit 1/second -j LOG + inet/filter/logdrop-309 -j DROP + inet6/filter/logdrop-309 -j DROP + inet/filter/limit-904 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-904 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-31 + inet6/filter/FORWARD -j logaccept-final-31 + inet/filter/INPUT -j logaccept-final-31 + inet6/filter/INPUT -j logaccept-final-31 + inet/filter/OUTPUT -j logaccept-final-31 + inet6/filter/OUTPUT -j logaccept-final-31 + inet/filter/logaccept-final-31 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-31 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-31 -j ACCEPT + inet6/filter/logaccept-final-31 -j ACCEPT + +Filter 1200 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-905 + inet6/filter/FORWARD -j limit-905 + inet/filter/INPUT -j limit-905 + inet6/filter/INPUT -j limit-905 + inet/filter/OUTPUT -j limit-905 + inet6/filter/OUTPUT -j limit-905 + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-310 + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-310 + inet/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-310 -m limit --limit 1/second -j LOG + inet/filter/logdrop-310 -j DROP + inet6/filter/logdrop-310 -j DROP + inet/filter/limit-905 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-905 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1201 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-906 + inet6/filter/FORWARD -j limit-906 + inet/filter/INPUT -j limit-906 + inet6/filter/INPUT -j limit-906 + inet/filter/OUTPUT -j limit-906 + inet6/filter/OUTPUT -j limit-906 + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-311 + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-311 + inet/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-311 -m limit --limit 1/second -j LOG + inet/filter/logdrop-311 -j DROP + inet6/filter/logdrop-311 -j DROP + inet/filter/limit-906 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-906 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1202 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-907 + inet6/filter/FORWARD -j limit-907 + inet/filter/INPUT -j limit-907 + inet6/filter/INPUT -j limit-907 + inet/filter/OUTPUT -j limit-907 + inet6/filter/OUTPUT -j limit-907 + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-312 + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-312 + inet/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-312 -m limit --limit 1/second -j LOG + inet/filter/logdrop-312 -j DROP + inet6/filter/logdrop-312 -j DROP + inet/filter/limit-907 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-907 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1203 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-908 + inet6/filter/FORWARD -j limit-908 + inet/filter/INPUT -j limit-908 + inet6/filter/INPUT -j limit-908 + inet/filter/OUTPUT -j limit-908 + inet6/filter/OUTPUT -j limit-908 + inet/filter/limit-908 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet6/filter/limit-908 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-313 + inet/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-313 -m limit --limit 1/second -j LOG + inet/filter/logdrop-313 -j DROP + inet6/filter/logdrop-313 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1204 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-909 + inet6/filter/FORWARD -j limit-909 + inet/filter/INPUT -j limit-909 + inet6/filter/INPUT -j limit-909 + inet/filter/OUTPUT -j limit-909 + inet6/filter/OUTPUT -j limit-909 + inet/filter/limit-909 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet6/filter/limit-909 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314 + inet/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG + inet/filter/logdrop-314 -j DROP + inet6/filter/logdrop-314 -j DROP + +Filter 1205 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-910 + inet6/filter/FORWARD -j limit-910 + inet/filter/INPUT -j limit-910 + inet6/filter/INPUT -j limit-910 + inet/filter/OUTPUT -j limit-910 + inet6/filter/OUTPUT -j limit-910 + inet/filter/limit-910 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet6/filter/limit-910 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-315 + inet/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-315 -m limit --limit 1/second -j LOG + inet/filter/logdrop-315 -j DROP + inet6/filter/logdrop-315 -j DROP + inet/filter/FORWARD -j logaccept-final-32 + inet6/filter/FORWARD -j logaccept-final-32 + inet/filter/INPUT -j logaccept-final-32 + inet6/filter/INPUT -j logaccept-final-32 + inet/filter/OUTPUT -j logaccept-final-32 + inet6/filter/OUTPUT -j logaccept-final-32 + inet/filter/logaccept-final-32 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-32 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-32 -j ACCEPT + inet6/filter/logaccept-final-32 -j ACCEPT + +Filter 1206 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-911 + inet6/filter/FORWARD -j limit-911 + inet/filter/INPUT -j limit-911 + inet6/filter/INPUT -j limit-911 + inet/filter/OUTPUT -j limit-911 + inet6/filter/OUTPUT -j limit-911 + inet/filter/limit-911 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet6/filter/limit-911 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-316 + inet/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-316 -m limit --limit 1/second -j LOG + inet/filter/logdrop-316 -j DROP + inet6/filter/logdrop-316 -j DROP + inet/filter/limit-911 -m limit --limit 1/second -j LOG + inet6/filter/limit-911 -m limit --limit 1/second -j LOG + +Filter 1207 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-912 + inet6/filter/FORWARD -j limit-912 + inet/filter/INPUT -j limit-912 + inet6/filter/INPUT -j limit-912 + inet/filter/OUTPUT -j limit-912 + inet6/filter/OUTPUT -j limit-912 + inet/filter/limit-912 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet6/filter/limit-912 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-317 + inet/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-317 -m limit --limit 1/second -j LOG + inet/filter/logdrop-317 -j DROP + inet6/filter/logdrop-317 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1208 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-913 + inet6/filter/FORWARD -j limit-913 + inet/filter/INPUT -j limit-913 + inet6/filter/INPUT -j limit-913 + inet/filter/OUTPUT -j limit-913 + inet6/filter/OUTPUT -j limit-913 + inet/filter/limit-913 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318 + inet6/filter/limit-913 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318 + inet/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG + inet/filter/logdrop-318 -j DROP + inet6/filter/logdrop-318 -j DROP + +Filter 1209 {"flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-914 + inet6/filter/FORWARD -j limit-914 + inet/filter/INPUT -j limit-914 + inet6/filter/INPUT -j limit-914 + inet/filter/OUTPUT -j limit-914 + inet6/filter/OUTPUT -j limit-914 + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-319 + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-319 + inet/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-319 -m limit --limit 1/second -j LOG + inet/filter/logdrop-319 -j DROP + inet6/filter/logdrop-319 -j DROP + inet/filter/limit-914 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-914 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1210 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-915 + inet6/filter/FORWARD -j limit-915 + inet/filter/INPUT -j limit-915 + inet6/filter/INPUT -j limit-915 + inet/filter/OUTPUT -j limit-915 + inet6/filter/OUTPUT -j limit-915 + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-320 + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-320 + inet/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-320 -m limit --limit 1/second -j LOG + inet/filter/logdrop-320 -j DROP + inet6/filter/logdrop-320 -j DROP + inet/filter/limit-915 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-915 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1211 {"flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-916 + inet6/filter/FORWARD -j limit-916 + inet/filter/INPUT -j limit-916 + inet6/filter/INPUT -j limit-916 + inet/filter/OUTPUT -j limit-916 + inet6/filter/OUTPUT -j limit-916 + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-321 + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-321 + inet/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-321 -m limit --limit 1/second -j LOG + inet/filter/logdrop-321 -j DROP + inet6/filter/logdrop-321 -j DROP + inet/filter/limit-916 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-916 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-33 + inet6/filter/FORWARD -j logaccept-final-33 + inet/filter/INPUT -j logaccept-final-33 + inet6/filter/INPUT -j logaccept-final-33 + inet/filter/OUTPUT -j logaccept-final-33 + inet6/filter/OUTPUT -j logaccept-final-33 + inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-33 -j ACCEPT + inet6/filter/logaccept-final-33 -j ACCEPT + +Filter 1212 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-917 + inet6/filter/FORWARD -j limit-917 + inet/filter/INPUT -j limit-917 + inet6/filter/INPUT -j limit-917 + inet/filter/OUTPUT -j limit-917 + inet6/filter/OUTPUT -j limit-917 + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-322 + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-322 + inet/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-322 -m limit --limit 1/second -j LOG + inet/filter/logdrop-322 -j DROP + inet6/filter/logdrop-322 -j DROP + inet/filter/limit-917 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-917 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1213 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-918 + inet6/filter/FORWARD -j limit-918 + inet/filter/INPUT -j limit-918 + inet6/filter/INPUT -j limit-918 + inet/filter/OUTPUT -j limit-918 + inet6/filter/OUTPUT -j limit-918 + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-323 + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-323 + inet/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-323 -m limit --limit 1/second -j LOG + inet/filter/logdrop-323 -j DROP + inet6/filter/logdrop-323 -j DROP + inet/filter/limit-918 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-918 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1214 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-919 + inet6/filter/FORWARD -j limit-919 + inet/filter/INPUT -j limit-919 + inet6/filter/INPUT -j limit-919 + inet/filter/OUTPUT -j limit-919 + inet6/filter/OUTPUT -j limit-919 + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-324 + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-324 + inet/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-324 -m limit --limit 1/second -j LOG + inet/filter/logdrop-324 -j DROP + inet6/filter/logdrop-324 -j DROP + inet/filter/limit-919 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-919 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1215 {"flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-920 + inet6/filter/FORWARD -j limit-920 + inet/filter/INPUT -j limit-920 + inet6/filter/INPUT -j limit-920 + inet/filter/OUTPUT -j limit-920 + inet6/filter/OUTPUT -j limit-920 + inet/filter/limit-920 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet6/filter/limit-920 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-325 + inet/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-325 -m limit --limit 1/second -j LOG + inet/filter/logdrop-325 -j DROP + inet6/filter/logdrop-325 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1216 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-921 + inet6/filter/FORWARD -j limit-921 + inet/filter/INPUT -j limit-921 + inet6/filter/INPUT -j limit-921 + inet/filter/OUTPUT -j limit-921 + inet6/filter/OUTPUT -j limit-921 + inet/filter/limit-921 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet6/filter/limit-921 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326 + inet/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG + inet/filter/logdrop-326 -j DROP + inet6/filter/logdrop-326 -j DROP + +Filter 1217 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-922 + inet6/filter/FORWARD -j limit-922 + inet/filter/INPUT -j limit-922 + inet6/filter/INPUT -j limit-922 + inet/filter/OUTPUT -j limit-922 + inet6/filter/OUTPUT -j limit-922 + inet/filter/limit-922 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet6/filter/limit-922 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-327 + inet/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-327 -m limit --limit 1/second -j LOG + inet/filter/logdrop-327 -j DROP + inet6/filter/logdrop-327 -j DROP + inet/filter/FORWARD -j logaccept-final-34 + inet6/filter/FORWARD -j logaccept-final-34 + inet/filter/INPUT -j logaccept-final-34 + inet6/filter/INPUT -j logaccept-final-34 + inet/filter/OUTPUT -j logaccept-final-34 + inet6/filter/OUTPUT -j logaccept-final-34 + inet/filter/logaccept-final-34 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-34 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-34 -j ACCEPT + inet6/filter/logaccept-final-34 -j ACCEPT + +Filter 1218 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-923 + inet6/filter/FORWARD -j limit-923 + inet/filter/INPUT -j limit-923 + inet6/filter/INPUT -j limit-923 + inet/filter/OUTPUT -j limit-923 + inet6/filter/OUTPUT -j limit-923 + inet/filter/limit-923 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet6/filter/limit-923 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-328 + inet/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-328 -m limit --limit 1/second -j LOG + inet/filter/logdrop-328 -j DROP + inet6/filter/logdrop-328 -j DROP + inet/filter/limit-923 -m limit --limit 1/second -j LOG + inet6/filter/limit-923 -m limit --limit 1/second -j LOG + +Filter 1219 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-924 + inet6/filter/FORWARD -j limit-924 + inet/filter/INPUT -j limit-924 + inet6/filter/INPUT -j limit-924 + inet/filter/OUTPUT -j limit-924 + inet6/filter/OUTPUT -j limit-924 + inet/filter/limit-924 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet6/filter/limit-924 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-329 + inet/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-329 -m limit --limit 1/second -j LOG + inet/filter/logdrop-329 -j DROP + inet6/filter/logdrop-329 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1220 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-925 + inet6/filter/FORWARD -j limit-925 + inet/filter/INPUT -j limit-925 + inet6/filter/INPUT -j limit-925 + inet/filter/OUTPUT -j limit-925 + inet6/filter/OUTPUT -j limit-925 + inet/filter/limit-925 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330 + inet6/filter/limit-925 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330 + inet/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG + inet/filter/logdrop-330 -j DROP + inet6/filter/logdrop-330 -j DROP + +Filter 1221 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-926 + inet6/filter/FORWARD -j limit-926 + inet/filter/INPUT -j limit-926 + inet6/filter/INPUT -j limit-926 + inet/filter/OUTPUT -j limit-926 + inet6/filter/OUTPUT -j limit-926 + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-331 + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-331 + inet/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-331 -m limit --limit 1/second -j LOG + inet/filter/logdrop-331 -j DROP + inet6/filter/logdrop-331 -j DROP + inet/filter/limit-926 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-926 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1222 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-927 + inet6/filter/FORWARD -j limit-927 + inet/filter/INPUT -j limit-927 + inet6/filter/INPUT -j limit-927 + inet/filter/OUTPUT -j limit-927 + inet6/filter/OUTPUT -j limit-927 + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-332 + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-332 + inet/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-332 -m limit --limit 1/second -j LOG + inet/filter/logdrop-332 -j DROP + inet6/filter/logdrop-332 -j DROP + inet/filter/limit-927 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-927 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1223 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-928 + inet6/filter/FORWARD -j limit-928 + inet/filter/INPUT -j limit-928 + inet6/filter/INPUT -j limit-928 + inet/filter/OUTPUT -j limit-928 + inet6/filter/OUTPUT -j limit-928 + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-333 + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-333 + inet/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-333 -m limit --limit 1/second -j LOG + inet/filter/logdrop-333 -j DROP + inet6/filter/logdrop-333 -j DROP + inet/filter/limit-928 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-928 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-35 + inet6/filter/FORWARD -j logaccept-final-35 + inet/filter/INPUT -j logaccept-final-35 + inet6/filter/INPUT -j logaccept-final-35 + inet/filter/OUTPUT -j logaccept-final-35 + inet6/filter/OUTPUT -j logaccept-final-35 + inet/filter/logaccept-final-35 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-35 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-35 -j ACCEPT + inet6/filter/logaccept-final-35 -j ACCEPT + +Filter 1224 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-929 + inet6/filter/FORWARD -j limit-929 + inet/filter/INPUT -j limit-929 + inet6/filter/INPUT -j limit-929 + inet/filter/OUTPUT -j limit-929 + inet6/filter/OUTPUT -j limit-929 + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-334 + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-334 + inet/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-334 -m limit --limit 1/second -j LOG + inet/filter/logdrop-334 -j DROP + inet6/filter/logdrop-334 -j DROP + inet/filter/limit-929 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-929 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1225 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-930 + inet6/filter/FORWARD -j limit-930 + inet/filter/INPUT -j limit-930 + inet6/filter/INPUT -j limit-930 + inet/filter/OUTPUT -j limit-930 + inet6/filter/OUTPUT -j limit-930 + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-335 + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-335 + inet/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-335 -m limit --limit 1/second -j LOG + inet/filter/logdrop-335 -j DROP + inet6/filter/logdrop-335 -j DROP + inet/filter/limit-930 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-930 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1226 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-931 + inet6/filter/FORWARD -j limit-931 + inet/filter/INPUT -j limit-931 + inet6/filter/INPUT -j limit-931 + inet/filter/OUTPUT -j limit-931 + inet6/filter/OUTPUT -j limit-931 + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-336 + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-336 + inet/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-336 -m limit --limit 1/second -j LOG + inet/filter/logdrop-336 -j DROP + inet6/filter/logdrop-336 -j DROP + inet/filter/limit-931 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-931 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1227 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-932 + inet6/filter/FORWARD -j limit-932 + inet/filter/INPUT -j limit-932 + inet6/filter/INPUT -j limit-932 + inet/filter/OUTPUT -j limit-932 + inet6/filter/OUTPUT -j limit-932 + inet/filter/limit-932 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet6/filter/limit-932 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-337 + inet/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-337 -m limit --limit 1/second -j LOG + inet/filter/logdrop-337 -j DROP + inet6/filter/logdrop-337 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1228 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-933 + inet6/filter/FORWARD -j limit-933 + inet/filter/INPUT -j limit-933 + inet6/filter/INPUT -j limit-933 + inet/filter/OUTPUT -j limit-933 + inet6/filter/OUTPUT -j limit-933 + inet/filter/limit-933 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet6/filter/limit-933 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338 + inet/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG + inet/filter/logdrop-338 -j DROP + inet6/filter/logdrop-338 -j DROP + +Filter 1229 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-934 + inet6/filter/FORWARD -j limit-934 + inet/filter/INPUT -j limit-934 + inet6/filter/INPUT -j limit-934 + inet/filter/OUTPUT -j limit-934 + inet6/filter/OUTPUT -j limit-934 + inet/filter/limit-934 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet6/filter/limit-934 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-339 + inet/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-339 -m limit --limit 1/second -j LOG + inet/filter/logdrop-339 -j DROP + inet6/filter/logdrop-339 -j DROP + inet/filter/FORWARD -j logaccept-final-36 + inet6/filter/FORWARD -j logaccept-final-36 + inet/filter/INPUT -j logaccept-final-36 + inet6/filter/INPUT -j logaccept-final-36 + inet/filter/OUTPUT -j logaccept-final-36 + inet6/filter/OUTPUT -j logaccept-final-36 + inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-36 -j ACCEPT + inet6/filter/logaccept-final-36 -j ACCEPT + +Filter 1230 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-935 + inet6/filter/FORWARD -j limit-935 + inet/filter/INPUT -j limit-935 + inet6/filter/INPUT -j limit-935 + inet/filter/OUTPUT -j limit-935 + inet6/filter/OUTPUT -j limit-935 + inet/filter/limit-935 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet6/filter/limit-935 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-340 + inet/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-340 -m limit --limit 1/second -j LOG + inet/filter/logdrop-340 -j DROP + inet6/filter/logdrop-340 -j DROP + inet/filter/limit-935 -m limit --limit 1/second -j LOG + inet6/filter/limit-935 -m limit --limit 1/second -j LOG + +Filter 1231 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-936 + inet6/filter/FORWARD -j limit-936 + inet/filter/INPUT -j limit-936 + inet6/filter/INPUT -j limit-936 + inet/filter/OUTPUT -j limit-936 + inet6/filter/OUTPUT -j limit-936 + inet/filter/limit-936 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet6/filter/limit-936 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-341 + inet/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-341 -m limit --limit 1/second -j LOG + inet/filter/logdrop-341 -j DROP + inet6/filter/logdrop-341 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1232 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-937 + inet6/filter/FORWARD -j limit-937 + inet/filter/INPUT -j limit-937 + inet6/filter/INPUT -j limit-937 + inet/filter/OUTPUT -j limit-937 + inet6/filter/OUTPUT -j limit-937 + inet/filter/limit-937 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342 + inet6/filter/limit-937 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342 + inet/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG + inet/filter/logdrop-342 -j DROP + inet6/filter/logdrop-342 -j DROP + +Filter 1233 {"flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-938 + inet6/filter/FORWARD -j limit-938 + inet/filter/INPUT -j limit-938 + inet6/filter/INPUT -j limit-938 + inet/filter/OUTPUT -j limit-938 + inet6/filter/OUTPUT -j limit-938 + inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-938 -m recent --name limit-938 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-938 -m recent --name limit-938 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1234 {"action":"pass","flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-939 + inet6/filter/FORWARD -j limit-939 + inet/filter/INPUT -j limit-939 + inet6/filter/INPUT -j limit-939 + inet/filter/OUTPUT -j limit-939 + inet6/filter/OUTPUT -j limit-939 + inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-939 -m recent --name limit-939 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-939 -m recent --name limit-939 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1235 {"flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-940 + inet6/filter/FORWARD -j limit-940 + inet/filter/INPUT -j limit-940 + inet6/filter/INPUT -j limit-940 + inet/filter/OUTPUT -j limit-940 + inet6/filter/OUTPUT -j limit-940 + inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-940 -m recent --name limit-940 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-940 -m recent --name limit-940 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-37 + inet6/filter/FORWARD -j logaccept-final-37 + inet/filter/INPUT -j logaccept-final-37 + inet6/filter/INPUT -j logaccept-final-37 + inet/filter/OUTPUT -j logaccept-final-37 + inet6/filter/OUTPUT -j logaccept-final-37 + inet/filter/logaccept-final-37 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-37 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-37 -j ACCEPT + inet6/filter/logaccept-final-37 -j ACCEPT + +Filter 1236 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-941 + inet6/filter/FORWARD -j limit-941 + inet/filter/INPUT -j limit-941 + inet6/filter/INPUT -j limit-941 + inet/filter/OUTPUT -j limit-941 + inet6/filter/OUTPUT -j limit-941 + inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-941 -m recent --name limit-941 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-941 -m recent --name limit-941 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1237 {"flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-942 + inet6/filter/FORWARD -j limit-942 + inet/filter/INPUT -j limit-942 + inet6/filter/INPUT -j limit-942 + inet/filter/OUTPUT -j limit-942 + inet6/filter/OUTPUT -j limit-942 + inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-942 -m recent --name limit-942 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-942 -m recent --name limit-942 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1238 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-943 + inet6/filter/FORWARD -j limit-943 + inet/filter/INPUT -j limit-943 + inet6/filter/INPUT -j limit-943 + inet/filter/OUTPUT -j limit-943 + inet6/filter/OUTPUT -j limit-943 + inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-943 -m recent --name limit-943 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-943 -m recent --name limit-943 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1239 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-944 + inet6/filter/FORWARD -j limit-944 + inet/filter/INPUT -j limit-944 + inet6/filter/INPUT -j limit-944 + inet/filter/OUTPUT -j limit-944 + inet6/filter/OUTPUT -j limit-944 + inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-944 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-944 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1240 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-945 + inet6/filter/FORWARD -j limit-945 + inet/filter/INPUT -j limit-945 + inet6/filter/INPUT -j limit-945 + inet/filter/OUTPUT -j limit-945 + inet6/filter/OUTPUT -j limit-945 + inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-945 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-945 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1241 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-946 + inet6/filter/FORWARD -j limit-946 + inet/filter/INPUT -j limit-946 + inet6/filter/INPUT -j limit-946 + inet/filter/OUTPUT -j limit-946 + inet6/filter/OUTPUT -j limit-946 + inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-946 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-946 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-38 + inet6/filter/FORWARD -j logaccept-final-38 + inet/filter/INPUT -j logaccept-final-38 + inet6/filter/INPUT -j logaccept-final-38 + inet/filter/OUTPUT -j logaccept-final-38 + inet6/filter/OUTPUT -j logaccept-final-38 + inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-38 -j ACCEPT + inet6/filter/logaccept-final-38 -j ACCEPT + +Filter 1242 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-947 + inet6/filter/FORWARD -j limit-947 + inet/filter/INPUT -j limit-947 + inet6/filter/INPUT -j limit-947 + inet/filter/OUTPUT -j limit-947 + inet6/filter/OUTPUT -j limit-947 + inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-947 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-947 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1243 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-948 + inet6/filter/FORWARD -j limit-948 + inet/filter/INPUT -j limit-948 + inet6/filter/INPUT -j limit-948 + inet/filter/OUTPUT -j limit-948 + inet6/filter/OUTPUT -j limit-948 + inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-948 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-948 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1244 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-949 + inet6/filter/FORWARD -j limit-949 + inet/filter/INPUT -j limit-949 + inet6/filter/INPUT -j limit-949 + inet/filter/OUTPUT -j limit-949 + inet6/filter/OUTPUT -j limit-949 + inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-949 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-949 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1245 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-950 + inet6/filter/FORWARD -j limit-950 + inet/filter/INPUT -j limit-950 + inet6/filter/INPUT -j limit-950 + inet/filter/OUTPUT -j limit-950 + inet6/filter/OUTPUT -j limit-950 + inet/filter/limit-950 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-950 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1246 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-951 + inet6/filter/FORWARD -j limit-951 + inet/filter/INPUT -j limit-951 + inet6/filter/INPUT -j limit-951 + inet/filter/OUTPUT -j limit-951 + inet6/filter/OUTPUT -j limit-951 + inet/filter/limit-951 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-951 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1247 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-952 + inet6/filter/FORWARD -j limit-952 + inet/filter/INPUT -j limit-952 + inet6/filter/INPUT -j limit-952 + inet/filter/OUTPUT -j limit-952 + inet6/filter/OUTPUT -j limit-952 + inet/filter/limit-952 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-952 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-39 + inet6/filter/FORWARD -j logaccept-final-39 + inet/filter/INPUT -j logaccept-final-39 + inet6/filter/INPUT -j logaccept-final-39 + inet/filter/OUTPUT -j logaccept-final-39 + inet6/filter/OUTPUT -j logaccept-final-39 + inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-39 -j ACCEPT + inet6/filter/logaccept-final-39 -j ACCEPT + +Filter 1248 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-953 + inet6/filter/FORWARD -j limit-953 + inet/filter/INPUT -j limit-953 + inet6/filter/INPUT -j limit-953 + inet/filter/OUTPUT -j limit-953 + inet6/filter/OUTPUT -j limit-953 + inet/filter/limit-953 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-953 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-953 -m limit --limit 1/second -j LOG + inet6/filter/limit-953 -m limit --limit 1/second -j LOG + +Filter 1249 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-954 + inet6/filter/FORWARD -j limit-954 + inet/filter/INPUT -j limit-954 + inet6/filter/INPUT -j limit-954 + inet/filter/OUTPUT -j limit-954 + inet6/filter/OUTPUT -j limit-954 + inet/filter/limit-954 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-954 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1250 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-955 + inet6/filter/FORWARD -j limit-955 + inet/filter/INPUT -j limit-955 + inet6/filter/INPUT -j limit-955 + inet/filter/OUTPUT -j limit-955 + inet6/filter/OUTPUT -j limit-955 + inet/filter/limit-955 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-955 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1251 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-956 + inet6/filter/FORWARD -j limit-956 + inet/filter/INPUT -j limit-956 + inet6/filter/INPUT -j limit-956 + inet/filter/OUTPUT -j limit-956 + inet6/filter/OUTPUT -j limit-956 + inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-956 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-956 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1252 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-957 + inet6/filter/FORWARD -j limit-957 + inet/filter/INPUT -j limit-957 + inet6/filter/INPUT -j limit-957 + inet/filter/OUTPUT -j limit-957 + inet6/filter/OUTPUT -j limit-957 + inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-957 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-957 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1253 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-958 + inet6/filter/FORWARD -j limit-958 + inet/filter/INPUT -j limit-958 + inet6/filter/INPUT -j limit-958 + inet/filter/OUTPUT -j limit-958 + inet6/filter/OUTPUT -j limit-958 + inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-958 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-958 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-40 + inet6/filter/FORWARD -j logaccept-final-40 + inet/filter/INPUT -j logaccept-final-40 + inet6/filter/INPUT -j logaccept-final-40 + inet/filter/OUTPUT -j logaccept-final-40 + inet6/filter/OUTPUT -j logaccept-final-40 + inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-40 -j ACCEPT + inet6/filter/logaccept-final-40 -j ACCEPT + +Filter 1254 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-959 + inet6/filter/FORWARD -j limit-959 + inet/filter/INPUT -j limit-959 + inet6/filter/INPUT -j limit-959 + inet/filter/OUTPUT -j limit-959 + inet6/filter/OUTPUT -j limit-959 + inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-959 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-959 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1255 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-960 + inet6/filter/FORWARD -j limit-960 + inet/filter/INPUT -j limit-960 + inet6/filter/INPUT -j limit-960 + inet/filter/OUTPUT -j limit-960 + inet6/filter/OUTPUT -j limit-960 + inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-960 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-960 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1256 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-961 + inet6/filter/FORWARD -j limit-961 + inet/filter/INPUT -j limit-961 + inet6/filter/INPUT -j limit-961 + inet/filter/OUTPUT -j limit-961 + inet6/filter/OUTPUT -j limit-961 + inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-961 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-961 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1257 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-962 + inet6/filter/FORWARD -j limit-962 + inet/filter/INPUT -j limit-962 + inet6/filter/INPUT -j limit-962 + inet/filter/OUTPUT -j limit-962 + inet6/filter/OUTPUT -j limit-962 + inet/filter/limit-962 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-962 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1258 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-963 + inet6/filter/FORWARD -j limit-963 + inet/filter/INPUT -j limit-963 + inet6/filter/INPUT -j limit-963 + inet/filter/OUTPUT -j limit-963 + inet6/filter/OUTPUT -j limit-963 + inet/filter/limit-963 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-963 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1259 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-964 + inet6/filter/FORWARD -j limit-964 + inet/filter/INPUT -j limit-964 + inet6/filter/INPUT -j limit-964 + inet/filter/OUTPUT -j limit-964 + inet6/filter/OUTPUT -j limit-964 + inet/filter/limit-964 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-964 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-41 + inet6/filter/FORWARD -j logaccept-final-41 + inet/filter/INPUT -j logaccept-final-41 + inet6/filter/INPUT -j logaccept-final-41 + inet/filter/OUTPUT -j logaccept-final-41 + inet6/filter/OUTPUT -j logaccept-final-41 + inet/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-41 -j ACCEPT + inet6/filter/logaccept-final-41 -j ACCEPT + +Filter 1260 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-965 + inet6/filter/FORWARD -j limit-965 + inet/filter/INPUT -j limit-965 + inet6/filter/INPUT -j limit-965 + inet/filter/OUTPUT -j limit-965 + inet6/filter/OUTPUT -j limit-965 + inet/filter/limit-965 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-965 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-965 -m limit --limit 1/second -j LOG + inet6/filter/limit-965 -m limit --limit 1/second -j LOG + +Filter 1261 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-966 + inet6/filter/FORWARD -j limit-966 + inet/filter/INPUT -j limit-966 + inet6/filter/INPUT -j limit-966 + inet/filter/OUTPUT -j limit-966 + inet6/filter/OUTPUT -j limit-966 + inet/filter/limit-966 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-966 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1262 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-967 + inet6/filter/FORWARD -j limit-967 + inet/filter/INPUT -j limit-967 + inet6/filter/INPUT -j limit-967 + inet/filter/OUTPUT -j limit-967 + inet6/filter/OUTPUT -j limit-967 + inet/filter/limit-967 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-967 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1263 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-968 + inet6/filter/FORWARD -j limit-968 + inet/filter/INPUT -j limit-968 + inet6/filter/INPUT -j limit-968 + inet/filter/OUTPUT -j limit-968 + inet6/filter/OUTPUT -j limit-968 + inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-968 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-968 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1264 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-969 + inet6/filter/FORWARD -j limit-969 + inet/filter/INPUT -j limit-969 + inet6/filter/INPUT -j limit-969 + inet/filter/OUTPUT -j limit-969 + inet6/filter/OUTPUT -j limit-969 + inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-969 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-969 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1265 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-970 + inet6/filter/FORWARD -j limit-970 + inet/filter/INPUT -j limit-970 + inet6/filter/INPUT -j limit-970 + inet/filter/OUTPUT -j limit-970 + inet6/filter/OUTPUT -j limit-970 + inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-970 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-970 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-42 + inet6/filter/FORWARD -j logaccept-final-42 + inet/filter/INPUT -j logaccept-final-42 + inet6/filter/INPUT -j logaccept-final-42 + inet/filter/OUTPUT -j logaccept-final-42 + inet6/filter/OUTPUT -j logaccept-final-42 + inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-42 -j ACCEPT + inet6/filter/logaccept-final-42 -j ACCEPT + +Filter 1266 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-971 + inet6/filter/FORWARD -j limit-971 + inet/filter/INPUT -j limit-971 + inet6/filter/INPUT -j limit-971 + inet/filter/OUTPUT -j limit-971 + inet6/filter/OUTPUT -j limit-971 + inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-971 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-971 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1267 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-972 + inet6/filter/FORWARD -j limit-972 + inet/filter/INPUT -j limit-972 + inet6/filter/INPUT -j limit-972 + inet/filter/OUTPUT -j limit-972 + inet6/filter/OUTPUT -j limit-972 + inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-972 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-972 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1268 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-973 + inet6/filter/FORWARD -j limit-973 + inet/filter/INPUT -j limit-973 + inet6/filter/INPUT -j limit-973 + inet/filter/OUTPUT -j limit-973 + inet6/filter/OUTPUT -j limit-973 + inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-973 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-973 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1269 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-974 + inet6/filter/FORWARD -j limit-974 + inet/filter/INPUT -j limit-974 + inet6/filter/INPUT -j limit-974 + inet/filter/OUTPUT -j limit-974 + inet6/filter/OUTPUT -j limit-974 + inet/filter/limit-974 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-974 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1270 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-975 + inet6/filter/FORWARD -j limit-975 + inet/filter/INPUT -j limit-975 + inet6/filter/INPUT -j limit-975 + inet/filter/OUTPUT -j limit-975 + inet6/filter/OUTPUT -j limit-975 + inet/filter/limit-975 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-975 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1271 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-976 + inet6/filter/FORWARD -j limit-976 + inet/filter/INPUT -j limit-976 + inet6/filter/INPUT -j limit-976 + inet/filter/OUTPUT -j limit-976 + inet6/filter/OUTPUT -j limit-976 + inet/filter/limit-976 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-976 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-43 + inet6/filter/FORWARD -j logaccept-final-43 + inet/filter/INPUT -j logaccept-final-43 + inet6/filter/INPUT -j logaccept-final-43 + inet/filter/OUTPUT -j logaccept-final-43 + inet6/filter/OUTPUT -j logaccept-final-43 + inet/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-43 -j ACCEPT + inet6/filter/logaccept-final-43 -j ACCEPT + +Filter 1272 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-977 + inet6/filter/FORWARD -j limit-977 + inet/filter/INPUT -j limit-977 + inet6/filter/INPUT -j limit-977 + inet/filter/OUTPUT -j limit-977 + inet6/filter/OUTPUT -j limit-977 + inet/filter/limit-977 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-977 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-977 -m limit --limit 1/second -j LOG + inet6/filter/limit-977 -m limit --limit 1/second -j LOG + +Filter 1273 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-978 + inet6/filter/FORWARD -j limit-978 + inet/filter/INPUT -j limit-978 + inet6/filter/INPUT -j limit-978 + inet/filter/OUTPUT -j limit-978 + inet6/filter/OUTPUT -j limit-978 + inet/filter/limit-978 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-978 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1274 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-979 + inet6/filter/FORWARD -j limit-979 + inet/filter/INPUT -j limit-979 + inet6/filter/INPUT -j limit-979 + inet/filter/OUTPUT -j limit-979 + inet6/filter/OUTPUT -j limit-979 + inet/filter/limit-979 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-979 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1275 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-980 + inet6/filter/FORWARD -j limit-980 + inet/filter/INPUT -j limit-980 + inet6/filter/INPUT -j limit-980 + inet/filter/OUTPUT -j limit-980 + inet6/filter/OUTPUT -j limit-980 + inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-980 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-980 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1276 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-981 + inet6/filter/FORWARD -j limit-981 + inet/filter/INPUT -j limit-981 + inet6/filter/INPUT -j limit-981 + inet/filter/OUTPUT -j limit-981 + inet6/filter/OUTPUT -j limit-981 + inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-981 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-981 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1277 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-982 + inet6/filter/FORWARD -j limit-982 + inet/filter/INPUT -j limit-982 + inet6/filter/INPUT -j limit-982 + inet/filter/OUTPUT -j limit-982 + inet6/filter/OUTPUT -j limit-982 + inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-982 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-982 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-44 + inet6/filter/FORWARD -j logaccept-final-44 + inet/filter/INPUT -j logaccept-final-44 + inet6/filter/INPUT -j logaccept-final-44 + inet/filter/OUTPUT -j logaccept-final-44 + inet6/filter/OUTPUT -j logaccept-final-44 + inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-44 -j ACCEPT + inet6/filter/logaccept-final-44 -j ACCEPT + +Filter 1278 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-983 + inet6/filter/FORWARD -j limit-983 + inet/filter/INPUT -j limit-983 + inet6/filter/INPUT -j limit-983 + inet/filter/OUTPUT -j limit-983 + inet6/filter/OUTPUT -j limit-983 + inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-983 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-983 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1279 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-984 + inet6/filter/FORWARD -j limit-984 + inet/filter/INPUT -j limit-984 + inet6/filter/INPUT -j limit-984 + inet/filter/OUTPUT -j limit-984 + inet6/filter/OUTPUT -j limit-984 + inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-984 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-984 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1280 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-985 + inet6/filter/FORWARD -j limit-985 + inet/filter/INPUT -j limit-985 + inet6/filter/INPUT -j limit-985 + inet/filter/OUTPUT -j limit-985 + inet6/filter/OUTPUT -j limit-985 + inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-985 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-985 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1281 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-986 + inet6/filter/FORWARD -j limit-986 + inet/filter/INPUT -j limit-986 + inet6/filter/INPUT -j limit-986 + inet/filter/OUTPUT -j limit-986 + inet6/filter/OUTPUT -j limit-986 + inet/filter/limit-986 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-986 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1282 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-987 + inet6/filter/FORWARD -j limit-987 + inet/filter/INPUT -j limit-987 + inet6/filter/INPUT -j limit-987 + inet/filter/OUTPUT -j limit-987 + inet6/filter/OUTPUT -j limit-987 + inet/filter/limit-987 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-987 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1283 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-988 + inet6/filter/FORWARD -j limit-988 + inet/filter/INPUT -j limit-988 + inet6/filter/INPUT -j limit-988 + inet/filter/OUTPUT -j limit-988 + inet6/filter/OUTPUT -j limit-988 + inet/filter/limit-988 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-988 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-45 + inet6/filter/FORWARD -j logaccept-final-45 + inet/filter/INPUT -j logaccept-final-45 + inet6/filter/INPUT -j logaccept-final-45 + inet/filter/OUTPUT -j logaccept-final-45 + inet6/filter/OUTPUT -j logaccept-final-45 + inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-45 -j ACCEPT + inet6/filter/logaccept-final-45 -j ACCEPT + +Filter 1284 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-989 + inet6/filter/FORWARD -j limit-989 + inet/filter/INPUT -j limit-989 + inet6/filter/INPUT -j limit-989 + inet/filter/OUTPUT -j limit-989 + inet6/filter/OUTPUT -j limit-989 + inet/filter/limit-989 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-989 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-989 -m limit --limit 1/second -j LOG + inet6/filter/limit-989 -m limit --limit 1/second -j LOG + +Filter 1285 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-990 + inet6/filter/FORWARD -j limit-990 + inet/filter/INPUT -j limit-990 + inet6/filter/INPUT -j limit-990 + inet/filter/OUTPUT -j limit-990 + inet6/filter/OUTPUT -j limit-990 + inet/filter/limit-990 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-990 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1286 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-991 + inet6/filter/FORWARD -j limit-991 + inet/filter/INPUT -j limit-991 + inet6/filter/INPUT -j limit-991 + inet/filter/OUTPUT -j limit-991 + inet6/filter/OUTPUT -j limit-991 + inet/filter/limit-991 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-991 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1287 {"flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-992 + inet6/filter/FORWARD -j limit-992 + inet/filter/INPUT -j limit-992 + inet6/filter/INPUT -j limit-992 + inet/filter/OUTPUT -j limit-992 + inet6/filter/OUTPUT -j limit-992 + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-992 -m recent --name limit-992 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-992 -m recent --name limit-992 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1288 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-993 + inet6/filter/FORWARD -j limit-993 + inet/filter/INPUT -j limit-993 + inet6/filter/INPUT -j limit-993 + inet/filter/OUTPUT -j limit-993 + inet6/filter/OUTPUT -j limit-993 + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-993 -m recent --name limit-993 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-993 -m recent --name limit-993 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1289 {"flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-994 + inet6/filter/FORWARD -j limit-994 + inet/filter/INPUT -j limit-994 + inet6/filter/INPUT -j limit-994 + inet/filter/OUTPUT -j limit-994 + inet6/filter/OUTPUT -j limit-994 + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-994 -m recent --name limit-994 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-994 -m recent --name limit-994 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-46 + inet6/filter/FORWARD -j logaccept-final-46 + inet/filter/INPUT -j logaccept-final-46 + inet6/filter/INPUT -j logaccept-final-46 + inet/filter/OUTPUT -j logaccept-final-46 + inet6/filter/OUTPUT -j logaccept-final-46 + inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-46 -j ACCEPT + inet6/filter/logaccept-final-46 -j ACCEPT + +Filter 1290 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-995 + inet6/filter/FORWARD -j limit-995 + inet/filter/INPUT -j limit-995 + inet6/filter/INPUT -j limit-995 + inet/filter/OUTPUT -j limit-995 + inet6/filter/OUTPUT -j limit-995 + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-995 -m recent --name limit-995 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-995 -m recent --name limit-995 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1291 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-996 + inet6/filter/FORWARD -j limit-996 + inet/filter/INPUT -j limit-996 + inet6/filter/INPUT -j limit-996 + inet/filter/OUTPUT -j limit-996 + inet6/filter/OUTPUT -j limit-996 + inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-996 -m recent --name limit-996 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-996 -m recent --name limit-996 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1292 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-997 + inet6/filter/FORWARD -j limit-997 + inet/filter/INPUT -j limit-997 + inet6/filter/INPUT -j limit-997 + inet/filter/OUTPUT -j limit-997 + inet6/filter/OUTPUT -j limit-997 + inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-997 -m recent --name limit-997 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-997 -m recent --name limit-997 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1293 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-998 + inet6/filter/FORWARD -j limit-998 + inet/filter/INPUT -j limit-998 + inet6/filter/INPUT -j limit-998 + inet/filter/OUTPUT -j limit-998 + inet6/filter/OUTPUT -j limit-998 + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-998 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-998 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1294 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-999 + inet6/filter/FORWARD -j limit-999 + inet/filter/INPUT -j limit-999 + inet6/filter/INPUT -j limit-999 + inet/filter/OUTPUT -j limit-999 + inet6/filter/OUTPUT -j limit-999 + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-999 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-999 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1295 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1000 + inet6/filter/FORWARD -j limit-1000 + inet/filter/INPUT -j limit-1000 + inet6/filter/INPUT -j limit-1000 + inet/filter/OUTPUT -j limit-1000 + inet6/filter/OUTPUT -j limit-1000 + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1000 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1000 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-47 + inet6/filter/FORWARD -j logaccept-final-47 + inet/filter/INPUT -j logaccept-final-47 + inet6/filter/INPUT -j logaccept-final-47 + inet/filter/OUTPUT -j logaccept-final-47 + inet6/filter/OUTPUT -j logaccept-final-47 + inet/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-47 -j ACCEPT + inet6/filter/logaccept-final-47 -j ACCEPT + +Filter 1296 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1001 + inet6/filter/FORWARD -j limit-1001 + inet/filter/INPUT -j limit-1001 + inet6/filter/INPUT -j limit-1001 + inet/filter/OUTPUT -j limit-1001 + inet6/filter/OUTPUT -j limit-1001 + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1001 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1001 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1297 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1002 + inet6/filter/FORWARD -j limit-1002 + inet/filter/INPUT -j limit-1002 + inet6/filter/INPUT -j limit-1002 + inet/filter/OUTPUT -j limit-1002 + inet6/filter/OUTPUT -j limit-1002 + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1002 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1002 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1298 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1003 + inet6/filter/FORWARD -j limit-1003 + inet/filter/INPUT -j limit-1003 + inet6/filter/INPUT -j limit-1003 + inet/filter/OUTPUT -j limit-1003 + inet6/filter/OUTPUT -j limit-1003 + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1003 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1003 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1299 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1004 + inet6/filter/FORWARD -j limit-1004 + inet/filter/INPUT -j limit-1004 + inet6/filter/INPUT -j limit-1004 + inet/filter/OUTPUT -j limit-1004 + inet6/filter/OUTPUT -j limit-1004 + inet/filter/limit-1004 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1004 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1300 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1005 + inet6/filter/FORWARD -j limit-1005 + inet/filter/INPUT -j limit-1005 + inet6/filter/INPUT -j limit-1005 + inet/filter/OUTPUT -j limit-1005 + inet6/filter/OUTPUT -j limit-1005 + inet/filter/limit-1005 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1005 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1301 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1006 + inet6/filter/FORWARD -j limit-1006 + inet/filter/INPUT -j limit-1006 + inet6/filter/INPUT -j limit-1006 + inet/filter/OUTPUT -j limit-1006 + inet6/filter/OUTPUT -j limit-1006 + inet/filter/limit-1006 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1006 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-48 + inet6/filter/FORWARD -j logaccept-final-48 + inet/filter/INPUT -j logaccept-final-48 + inet6/filter/INPUT -j logaccept-final-48 + inet/filter/OUTPUT -j logaccept-final-48 + inet6/filter/OUTPUT -j logaccept-final-48 + inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-48 -j ACCEPT + inet6/filter/logaccept-final-48 -j ACCEPT + +Filter 1302 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1007 + inet6/filter/FORWARD -j limit-1007 + inet/filter/INPUT -j limit-1007 + inet6/filter/INPUT -j limit-1007 + inet/filter/OUTPUT -j limit-1007 + inet6/filter/OUTPUT -j limit-1007 + inet/filter/limit-1007 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1007 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1007 -m limit --limit 1/second -j LOG + inet6/filter/limit-1007 -m limit --limit 1/second -j LOG + +Filter 1303 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1008 + inet6/filter/FORWARD -j limit-1008 + inet/filter/INPUT -j limit-1008 + inet6/filter/INPUT -j limit-1008 + inet/filter/OUTPUT -j limit-1008 + inet6/filter/OUTPUT -j limit-1008 + inet/filter/limit-1008 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1008 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1304 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1009 + inet6/filter/FORWARD -j limit-1009 + inet/filter/INPUT -j limit-1009 + inet6/filter/INPUT -j limit-1009 + inet/filter/OUTPUT -j limit-1009 + inet6/filter/OUTPUT -j limit-1009 + inet/filter/limit-1009 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1009 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1305 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-1010 + inet6/filter/FORWARD -j limit-1010 + inet/filter/INPUT -j limit-1010 + inet6/filter/INPUT -j limit-1010 + inet/filter/OUTPUT -j limit-1010 + inet6/filter/OUTPUT -j limit-1010 + inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1010 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1010 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1306 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-1011 + inet6/filter/FORWARD -j limit-1011 + inet/filter/INPUT -j limit-1011 + inet6/filter/INPUT -j limit-1011 + inet/filter/OUTPUT -j limit-1011 + inet6/filter/OUTPUT -j limit-1011 + inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1011 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1011 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1307 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1012 + inet6/filter/FORWARD -j limit-1012 + inet/filter/INPUT -j limit-1012 + inet6/filter/INPUT -j limit-1012 + inet/filter/OUTPUT -j limit-1012 + inet6/filter/OUTPUT -j limit-1012 + inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1012 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1012 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-49 + inet6/filter/FORWARD -j logaccept-final-49 + inet/filter/INPUT -j logaccept-final-49 + inet6/filter/INPUT -j logaccept-final-49 + inet/filter/OUTPUT -j logaccept-final-49 + inet6/filter/OUTPUT -j logaccept-final-49 + inet/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-49 -j ACCEPT + inet6/filter/logaccept-final-49 -j ACCEPT + +Filter 1308 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1013 + inet6/filter/FORWARD -j limit-1013 + inet/filter/INPUT -j limit-1013 + inet6/filter/INPUT -j limit-1013 + inet/filter/OUTPUT -j limit-1013 + inet6/filter/OUTPUT -j limit-1013 + inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1013 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1013 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 1309 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1014 + inet6/filter/FORWARD -j limit-1014 + inet/filter/INPUT -j limit-1014 + inet6/filter/INPUT -j limit-1014 + inet/filter/OUTPUT -j limit-1014 + inet6/filter/OUTPUT -j limit-1014 + inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1014 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1014 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1310 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1015 + inet6/filter/FORWARD -j limit-1015 + inet/filter/INPUT -j limit-1015 + inet6/filter/INPUT -j limit-1015 + inet/filter/OUTPUT -j limit-1015 + inet6/filter/OUTPUT -j limit-1015 + inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1015 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1015 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 1311 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1016 + inet6/filter/FORWARD -j limit-1016 + inet/filter/INPUT -j limit-1016 + inet6/filter/INPUT -j limit-1016 + inet/filter/OUTPUT -j limit-1016 + inet6/filter/OUTPUT -j limit-1016 + inet/filter/limit-1016 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1016 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1312 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1017 + inet6/filter/FORWARD -j limit-1017 + inet/filter/INPUT -j limit-1017 + inet6/filter/INPUT -j limit-1017 + inet/filter/OUTPUT -j limit-1017 + inet6/filter/OUTPUT -j limit-1017 + inet/filter/limit-1017 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1017 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1313 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1018 + inet6/filter/FORWARD -j limit-1018 + inet/filter/INPUT -j limit-1018 + inet6/filter/INPUT -j limit-1018 + inet/filter/OUTPUT -j limit-1018 + inet6/filter/OUTPUT -j limit-1018 + inet/filter/limit-1018 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1018 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-50 + inet6/filter/FORWARD -j logaccept-final-50 + inet/filter/INPUT -j logaccept-final-50 + inet6/filter/INPUT -j logaccept-final-50 + inet/filter/OUTPUT -j logaccept-final-50 + inet6/filter/OUTPUT -j logaccept-final-50 + inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-50 -j ACCEPT + inet6/filter/logaccept-final-50 -j ACCEPT + +Filter 1314 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1019 + inet6/filter/FORWARD -j limit-1019 + inet/filter/INPUT -j limit-1019 + inet6/filter/INPUT -j limit-1019 + inet/filter/OUTPUT -j limit-1019 + inet6/filter/OUTPUT -j limit-1019 + inet/filter/limit-1019 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1019 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1019 -m limit --limit 1/second -j LOG + inet6/filter/limit-1019 -m limit --limit 1/second -j LOG + +Filter 1315 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1020 + inet6/filter/FORWARD -j limit-1020 + inet/filter/INPUT -j limit-1020 + inet6/filter/INPUT -j limit-1020 + inet/filter/OUTPUT -j limit-1020 + inet6/filter/OUTPUT -j limit-1020 + inet/filter/limit-1020 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1020 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT inet6/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 978 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-683 - inet6/filter/FORWARD -j limit-683 - inet/filter/INPUT -j limit-683 - inet6/filter/INPUT -j limit-683 - inet/filter/OUTPUT -j limit-683 - inet6/filter/OUTPUT -j limit-683 - inet/filter/limit-683 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-683 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 979 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-684 - inet6/filter/FORWARD -j limit-684 - inet/filter/INPUT -j limit-684 - inet6/filter/INPUT -j limit-684 - inet/filter/OUTPUT -j limit-684 - inet6/filter/OUTPUT -j limit-684 - inet/filter/limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP +Filter 1316 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1021 + inet6/filter/FORWARD -j limit-1021 + inet/filter/INPUT -j limit-1021 + inet6/filter/INPUT -j limit-1021 + inet/filter/OUTPUT -j limit-1021 + inet6/filter/OUTPUT -j limit-1021 + inet/filter/limit-1021 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1021 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1317 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1022 + inet6/filter/FORWARD -j limit-1022 + inet/filter/INPUT -j limit-1022 + inet6/filter/INPUT -j limit-1022 + inet/filter/OUTPUT -j limit-1022 + inet6/filter/OUTPUT -j limit-1022 + inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1022 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1022 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1318 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1023 + inet6/filter/FORWARD -j limit-1023 + inet/filter/INPUT -j limit-1023 + inet6/filter/INPUT -j limit-1023 + inet/filter/OUTPUT -j limit-1023 + inet6/filter/OUTPUT -j limit-1023 + inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1023 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1023 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1319 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1024 + inet6/filter/FORWARD -j limit-1024 + inet/filter/INPUT -j limit-1024 + inet6/filter/INPUT -j limit-1024 + inet/filter/OUTPUT -j limit-1024 + inet6/filter/OUTPUT -j limit-1024 + inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1024 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1024 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-51 + inet6/filter/FORWARD -j logaccept-final-51 + inet/filter/INPUT -j logaccept-final-51 + inet6/filter/INPUT -j logaccept-final-51 + inet/filter/OUTPUT -j logaccept-final-51 + inet6/filter/OUTPUT -j logaccept-final-51 + inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-51 -j ACCEPT + inet6/filter/logaccept-final-51 -j ACCEPT + +Filter 1320 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1025 + inet6/filter/FORWARD -j limit-1025 + inet/filter/INPUT -j limit-1025 + inet6/filter/INPUT -j limit-1025 + inet/filter/OUTPUT -j limit-1025 + inet6/filter/OUTPUT -j limit-1025 + inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1025 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1025 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1321 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1026 + inet6/filter/FORWARD -j limit-1026 + inet/filter/INPUT -j limit-1026 + inet6/filter/INPUT -j limit-1026 + inet/filter/OUTPUT -j limit-1026 + inet6/filter/OUTPUT -j limit-1026 + inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1026 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1026 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1322 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1027 + inet6/filter/FORWARD -j limit-1027 + inet/filter/INPUT -j limit-1027 + inet6/filter/INPUT -j limit-1027 + inet/filter/OUTPUT -j limit-1027 + inet6/filter/OUTPUT -j limit-1027 + inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1027 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1027 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 1323 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1028 + inet6/filter/FORWARD -j limit-1028 + inet/filter/INPUT -j limit-1028 + inet6/filter/INPUT -j limit-1028 + inet/filter/OUTPUT -j limit-1028 + inet6/filter/OUTPUT -j limit-1028 + inet/filter/limit-1028 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1028 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1324 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1029 + inet6/filter/FORWARD -j limit-1029 + inet/filter/INPUT -j limit-1029 + inet6/filter/INPUT -j limit-1029 + inet/filter/OUTPUT -j limit-1029 + inet6/filter/OUTPUT -j limit-1029 + inet/filter/limit-1029 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1029 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1325 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1030 + inet6/filter/FORWARD -j limit-1030 + inet/filter/INPUT -j limit-1030 + inet6/filter/INPUT -j limit-1030 + inet/filter/OUTPUT -j limit-1030 + inet6/filter/OUTPUT -j limit-1030 + inet/filter/limit-1030 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1030 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-52 + inet6/filter/FORWARD -j logaccept-final-52 + inet/filter/INPUT -j logaccept-final-52 + inet6/filter/INPUT -j logaccept-final-52 + inet/filter/OUTPUT -j logaccept-final-52 + inet6/filter/OUTPUT -j logaccept-final-52 + inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-52 -j ACCEPT + inet6/filter/logaccept-final-52 -j ACCEPT + +Filter 1326 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1031 + inet6/filter/FORWARD -j limit-1031 + inet/filter/INPUT -j limit-1031 + inet6/filter/INPUT -j limit-1031 + inet/filter/OUTPUT -j limit-1031 + inet6/filter/OUTPUT -j limit-1031 + inet/filter/limit-1031 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1031 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1031 -m limit --limit 1/second -j LOG + inet6/filter/limit-1031 -m limit --limit 1/second -j LOG + +Filter 1327 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1032 + inet6/filter/FORWARD -j limit-1032 + inet/filter/INPUT -j limit-1032 + inet6/filter/INPUT -j limit-1032 + inet/filter/OUTPUT -j limit-1032 + inet6/filter/OUTPUT -j limit-1032 + inet/filter/limit-1032 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1032 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1328 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1033 + inet6/filter/FORWARD -j limit-1033 + inet/filter/INPUT -j limit-1033 + inet6/filter/INPUT -j limit-1033 + inet/filter/OUTPUT -j limit-1033 + inet6/filter/OUTPUT -j limit-1033 + inet/filter/limit-1033 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1033 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1329 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1034 + inet6/filter/FORWARD -j limit-1034 + inet/filter/INPUT -j limit-1034 + inet6/filter/INPUT -j limit-1034 + inet/filter/OUTPUT -j limit-1034 + inet6/filter/OUTPUT -j limit-1034 + inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1034 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1034 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1330 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-1035 + inet6/filter/FORWARD -j limit-1035 + inet/filter/INPUT -j limit-1035 + inet6/filter/INPUT -j limit-1035 + inet/filter/OUTPUT -j limit-1035 + inet6/filter/OUTPUT -j limit-1035 + inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1035 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1035 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1331 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1036 + inet6/filter/FORWARD -j limit-1036 + inet/filter/INPUT -j limit-1036 + inet6/filter/INPUT -j limit-1036 + inet/filter/OUTPUT -j limit-1036 + inet6/filter/OUTPUT -j limit-1036 + inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1036 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1036 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-53 + inet6/filter/FORWARD -j logaccept-final-53 + inet/filter/INPUT -j logaccept-final-53 + inet6/filter/INPUT -j logaccept-final-53 + inet/filter/OUTPUT -j logaccept-final-53 + inet6/filter/OUTPUT -j logaccept-final-53 + inet/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-53 -j ACCEPT + inet6/filter/logaccept-final-53 -j ACCEPT + +Filter 1332 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1037 + inet6/filter/FORWARD -j limit-1037 + inet/filter/INPUT -j limit-1037 + inet6/filter/INPUT -j limit-1037 + inet/filter/OUTPUT -j limit-1037 + inet6/filter/OUTPUT -j limit-1037 + inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1037 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1037 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 1333 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1038 + inet6/filter/FORWARD -j limit-1038 + inet/filter/INPUT -j limit-1038 + inet6/filter/INPUT -j limit-1038 + inet/filter/OUTPUT -j limit-1038 + inet6/filter/OUTPUT -j limit-1038 + inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1038 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1038 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1334 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1039 + inet6/filter/FORWARD -j limit-1039 + inet/filter/INPUT -j limit-1039 + inet6/filter/INPUT -j limit-1039 + inet/filter/OUTPUT -j limit-1039 + inet6/filter/OUTPUT -j limit-1039 + inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1039 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-1039 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 1335 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1040 + inet6/filter/FORWARD -j limit-1040 + inet/filter/INPUT -j limit-1040 + inet6/filter/INPUT -j limit-1040 + inet/filter/OUTPUT -j limit-1040 + inet6/filter/OUTPUT -j limit-1040 + inet/filter/limit-1040 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1040 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 1336 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-1041 + inet6/filter/FORWARD -j limit-1041 + inet/filter/INPUT -j limit-1041 + inet6/filter/INPUT -j limit-1041 + inet/filter/OUTPUT -j limit-1041 + inet6/filter/OUTPUT -j limit-1041 + inet/filter/limit-1041 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1041 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1337 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1042 + inet6/filter/FORWARD -j limit-1042 + inet/filter/INPUT -j limit-1042 + inet6/filter/INPUT -j limit-1042 + inet/filter/OUTPUT -j limit-1042 + inet6/filter/OUTPUT -j limit-1042 + inet/filter/limit-1042 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1042 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/FORWARD -j logaccept-final-54 inet6/filter/FORWARD -j logaccept-final-54 inet/filter/INPUT -j logaccept-final-54 @@ -12402,29 +16050,29 @@ Filter 979 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/logaccept-final-54 -j ACCEPT inet6/filter/logaccept-final-54 -j ACCEPT -Filter 980 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +Filter 1338 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-685 - inet6/filter/FORWARD -j limit-685 - inet/filter/INPUT -j limit-685 - inet6/filter/INPUT -j limit-685 - inet/filter/OUTPUT -j limit-685 - inet6/filter/OUTPUT -j limit-685 - inet/filter/limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-685 -m limit --limit 1/second -j LOG - inet6/filter/limit-685 -m limit --limit 1/second -j LOG + inet/filter/FORWARD -j limit-1043 + inet6/filter/FORWARD -j limit-1043 + inet/filter/INPUT -j limit-1043 + inet6/filter/INPUT -j limit-1043 + inet/filter/OUTPUT -j limit-1043 + inet6/filter/OUTPUT -j limit-1043 + inet/filter/limit-1043 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1043 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-1043 -m limit --limit 1/second -j LOG + inet6/filter/limit-1043 -m limit --limit 1/second -j LOG -Filter 981 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +Filter 1339 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-686 - inet6/filter/FORWARD -j limit-686 - inet/filter/INPUT -j limit-686 - inet6/filter/INPUT -j limit-686 - inet/filter/OUTPUT -j limit-686 - inet6/filter/OUTPUT -j limit-686 - inet/filter/limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j limit-1044 + inet6/filter/FORWARD -j limit-1044 + inet/filter/INPUT -j limit-1044 + inet6/filter/INPUT -j limit-1044 + inet/filter/OUTPUT -j limit-1044 + inet6/filter/OUTPUT -j limit-1044 + inet/filter/limit-1044 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1044 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12432,31 +16080,31 @@ Filter 981 {"flow-limit":{"addr":"dest","interval":5,"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 982 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-687 - inet6/filter/FORWARD -j limit-687 - inet/filter/INPUT -j limit-687 - inet6/filter/INPUT -j limit-687 - inet/filter/OUTPUT -j limit-687 - inet6/filter/OUTPUT -j limit-687 - inet/filter/limit-687 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-687 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 983 {"flow-limit":150} -(filter-limit) - inet/filter/FORWARD -j limit-688 - inet6/filter/FORWARD -j limit-688 - inet/filter/INPUT -j limit-688 - inet6/filter/INPUT -j limit-688 - inet/filter/OUTPUT -j limit-688 - inet6/filter/OUTPUT -j limit-688 - inet/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j RETURN - inet6/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j RETURN - inet/filter/limit-688 -m limit --limit 1/second -j LOG - inet6/filter/limit-688 -m limit --limit 1/second -j LOG - inet/filter/limit-688 -j DROP - inet6/filter/limit-688 -j DROP +Filter 1340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-1045 + inet6/filter/FORWARD -j limit-1045 + inet/filter/INPUT -j limit-1045 + inet6/filter/INPUT -j limit-1045 + inet/filter/OUTPUT -j limit-1045 + inet6/filter/OUTPUT -j limit-1045 + inet/filter/limit-1045 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-1045 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 1341 {"flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-1046 + inet6/filter/FORWARD -j limit-1046 + inet/filter/INPUT -j limit-1046 + inet6/filter/INPUT -j limit-1046 + inet/filter/OUTPUT -j limit-1046 + inet6/filter/OUTPUT -j limit-1046 + inet/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1046 -j RETURN + inet6/filter/limit-1046 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1046 -j RETURN + inet/filter/limit-1046 -m limit --limit 1/second -j LOG + inet6/filter/limit-1046 -m limit --limit 1/second -j LOG + inet/filter/limit-1046 -j DROP + inet6/filter/limit-1046 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12464,35 +16112,35 @@ Filter 983 {"flow-limit":150} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 984 {"action":"pass","flow-limit":150} +Filter 1342 {"action":"pass","flow-limit":150} (filter-limit) - inet/filter/FORWARD -j limit-689 - inet6/filter/FORWARD -j limit-689 - inet/filter/INPUT -j limit-689 - inet6/filter/INPUT -j limit-689 - inet/filter/OUTPUT -j limit-689 - inet6/filter/OUTPUT -j limit-689 - inet/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN - inet6/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN - inet/filter/limit-689 -m limit --limit 1/second -j LOG - inet6/filter/limit-689 -m limit --limit 1/second -j LOG - inet/filter/limit-689 -j DROP - inet6/filter/limit-689 -j DROP + inet/filter/FORWARD -j limit-1047 + inet6/filter/FORWARD -j limit-1047 + inet/filter/INPUT -j limit-1047 + inet6/filter/INPUT -j limit-1047 + inet/filter/OUTPUT -j limit-1047 + inet6/filter/OUTPUT -j limit-1047 + inet/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1047 -j RETURN + inet6/filter/limit-1047 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1047 -j RETURN + inet/filter/limit-1047 -m limit --limit 1/second -j LOG + inet6/filter/limit-1047 -m limit --limit 1/second -j LOG + inet/filter/limit-1047 -j DROP + inet6/filter/limit-1047 -j DROP -Filter 985 {"flow-limit":150,"log":true} +Filter 1343 {"flow-limit":150,"log":true} (filter-limit) - inet/filter/FORWARD -j limit-690 - inet6/filter/FORWARD -j limit-690 - inet/filter/INPUT -j limit-690 - inet6/filter/INPUT -j limit-690 - inet/filter/OUTPUT -j limit-690 - inet6/filter/OUTPUT -j limit-690 - inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j RETURN - inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j RETURN - inet/filter/limit-690 -m limit --limit 1/second -j LOG - inet6/filter/limit-690 -m limit --limit 1/second -j LOG - inet/filter/limit-690 -j DROP - inet6/filter/limit-690 -j DROP + inet/filter/FORWARD -j limit-1048 + inet6/filter/FORWARD -j limit-1048 + inet/filter/INPUT -j limit-1048 + inet6/filter/INPUT -j limit-1048 + inet/filter/OUTPUT -j limit-1048 + inet6/filter/OUTPUT -j limit-1048 + inet/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1048 -j RETURN + inet6/filter/limit-1048 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1048 -j RETURN + inet/filter/limit-1048 -m limit --limit 1/second -j LOG + inet6/filter/limit-1048 -m limit --limit 1/second -j LOG + inet/filter/limit-1048 -j DROP + inet6/filter/limit-1048 -j DROP inet/filter/FORWARD -j logaccept-final-55 inet6/filter/FORWARD -j logaccept-final-55 inet/filter/INPUT -j logaccept-final-55 @@ -12504,20 +16152,20 @@ Filter 985 {"flow-limit":150,"log":true} inet/filter/logaccept-final-55 -j ACCEPT inet6/filter/logaccept-final-55 -j ACCEPT -Filter 986 {"flow-limit":150,"log":"none"} +Filter 1344 {"flow-limit":150,"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-691 - inet6/filter/FORWARD -j limit-691 - inet/filter/INPUT -j limit-691 - inet6/filter/INPUT -j limit-691 - inet/filter/OUTPUT -j limit-691 - inet6/filter/OUTPUT -j limit-691 - inet/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j RETURN - inet6/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j RETURN - inet/filter/limit-691 -m limit --limit 1/second -j LOG - inet6/filter/limit-691 -m limit --limit 1/second -j LOG - inet/filter/limit-691 -j DROP - inet6/filter/limit-691 -j DROP + inet/filter/FORWARD -j limit-1049 + inet6/filter/FORWARD -j limit-1049 + inet/filter/INPUT -j limit-1049 + inet6/filter/INPUT -j limit-1049 + inet/filter/OUTPUT -j limit-1049 + inet6/filter/OUTPUT -j limit-1049 + inet/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1049 -j RETURN + inet6/filter/limit-1049 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1049 -j RETURN + inet/filter/limit-1049 -m limit --limit 1/second -j LOG + inet6/filter/limit-1049 -m limit --limit 1/second -j LOG + inet/filter/limit-1049 -j DROP + inet6/filter/limit-1049 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12525,20 +16173,20 @@ Filter 986 {"flow-limit":150,"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 987 {"flow-limit":{"count":150}} +Filter 1345 {"flow-limit":{"count":150}} (filter-limit) - inet/filter/FORWARD -j limit-692 - inet6/filter/FORWARD -j limit-692 - inet/filter/INPUT -j limit-692 - inet6/filter/INPUT -j limit-692 - inet/filter/OUTPUT -j limit-692 - inet6/filter/OUTPUT -j limit-692 - inet/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j RETURN - inet6/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j RETURN - inet/filter/limit-692 -m limit --limit 1/second -j LOG - inet6/filter/limit-692 -m limit --limit 1/second -j LOG - inet/filter/limit-692 -j DROP - inet6/filter/limit-692 -j DROP + inet/filter/FORWARD -j limit-1050 + inet6/filter/FORWARD -j limit-1050 + inet/filter/INPUT -j limit-1050 + inet6/filter/INPUT -j limit-1050 + inet/filter/OUTPUT -j limit-1050 + inet6/filter/OUTPUT -j limit-1050 + inet/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1050 -j RETURN + inet6/filter/limit-1050 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1050 -j RETURN + inet/filter/limit-1050 -m limit --limit 1/second -j LOG + inet6/filter/limit-1050 -m limit --limit 1/second -j LOG + inet/filter/limit-1050 -j DROP + inet6/filter/limit-1050 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12546,35 +16194,35 @@ Filter 987 {"flow-limit":{"count":150}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 988 {"action":"pass","flow-limit":{"count":150}} +Filter 1346 {"action":"pass","flow-limit":{"count":150}} (filter-limit) - inet/filter/FORWARD -j limit-693 - inet6/filter/FORWARD -j limit-693 - inet/filter/INPUT -j limit-693 - inet6/filter/INPUT -j limit-693 - inet/filter/OUTPUT -j limit-693 - inet6/filter/OUTPUT -j limit-693 - inet/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN - inet6/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN - inet/filter/limit-693 -m limit --limit 1/second -j LOG - inet6/filter/limit-693 -m limit --limit 1/second -j LOG - inet/filter/limit-693 -j DROP - inet6/filter/limit-693 -j DROP + inet/filter/FORWARD -j limit-1051 + inet6/filter/FORWARD -j limit-1051 + inet/filter/INPUT -j limit-1051 + inet6/filter/INPUT -j limit-1051 + inet/filter/OUTPUT -j limit-1051 + inet6/filter/OUTPUT -j limit-1051 + inet/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1051 -j RETURN + inet6/filter/limit-1051 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1051 -j RETURN + inet/filter/limit-1051 -m limit --limit 1/second -j LOG + inet6/filter/limit-1051 -m limit --limit 1/second -j LOG + inet/filter/limit-1051 -j DROP + inet6/filter/limit-1051 -j DROP -Filter 989 {"flow-limit":{"count":150},"log":true} +Filter 1347 {"flow-limit":{"count":150},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-694 - inet6/filter/FORWARD -j limit-694 - inet/filter/INPUT -j limit-694 - inet6/filter/INPUT -j limit-694 - inet/filter/OUTPUT -j limit-694 - inet6/filter/OUTPUT -j limit-694 - inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j RETURN - inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j RETURN - inet/filter/limit-694 -m limit --limit 1/second -j LOG - inet6/filter/limit-694 -m limit --limit 1/second -j LOG - inet/filter/limit-694 -j DROP - inet6/filter/limit-694 -j DROP + inet/filter/FORWARD -j limit-1052 + inet6/filter/FORWARD -j limit-1052 + inet/filter/INPUT -j limit-1052 + inet6/filter/INPUT -j limit-1052 + inet/filter/OUTPUT -j limit-1052 + inet6/filter/OUTPUT -j limit-1052 + inet/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1052 -j RETURN + inet6/filter/limit-1052 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1052 -j RETURN + inet/filter/limit-1052 -m limit --limit 1/second -j LOG + inet6/filter/limit-1052 -m limit --limit 1/second -j LOG + inet/filter/limit-1052 -j DROP + inet6/filter/limit-1052 -j DROP inet/filter/FORWARD -j logaccept-final-56 inet6/filter/FORWARD -j logaccept-final-56 inet/filter/INPUT -j logaccept-final-56 @@ -12586,20 +16234,20 @@ Filter 989 {"flow-limit":{"count":150},"log":true} inet/filter/logaccept-final-56 -j ACCEPT inet6/filter/logaccept-final-56 -j ACCEPT -Filter 990 {"flow-limit":{"count":150},"log":"none"} +Filter 1348 {"flow-limit":{"count":150},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-695 - inet6/filter/FORWARD -j limit-695 - inet/filter/INPUT -j limit-695 - inet6/filter/INPUT -j limit-695 - inet/filter/OUTPUT -j limit-695 - inet6/filter/OUTPUT -j limit-695 - inet/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j RETURN - inet6/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j RETURN - inet/filter/limit-695 -m limit --limit 1/second -j LOG - inet6/filter/limit-695 -m limit --limit 1/second -j LOG - inet/filter/limit-695 -j DROP - inet6/filter/limit-695 -j DROP + inet/filter/FORWARD -j limit-1053 + inet6/filter/FORWARD -j limit-1053 + inet/filter/INPUT -j limit-1053 + inet6/filter/INPUT -j limit-1053 + inet/filter/OUTPUT -j limit-1053 + inet6/filter/OUTPUT -j limit-1053 + inet/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1053 -j RETURN + inet6/filter/limit-1053 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1053 -j RETURN + inet/filter/limit-1053 -m limit --limit 1/second -j LOG + inet6/filter/limit-1053 -m limit --limit 1/second -j LOG + inet/filter/limit-1053 -j DROP + inet6/filter/limit-1053 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12607,50 +16255,50 @@ Filter 990 {"flow-limit":{"count":150},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 991 {"flow-limit":{"count":150,"log":false}} +Filter 1349 {"flow-limit":{"count":150,"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-696 - inet6/filter/FORWARD -j limit-696 - inet/filter/INPUT -j limit-696 - inet6/filter/INPUT -j limit-696 - inet/filter/OUTPUT -j limit-696 - inet6/filter/OUTPUT -j limit-696 - inet/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j RETURN - inet6/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j RETURN - inet/filter/limit-696 -j DROP - inet6/filter/limit-696 -j DROP + inet/filter/FORWARD -j limit-1054 + inet6/filter/FORWARD -j limit-1054 + inet/filter/INPUT -j limit-1054 + inet6/filter/INPUT -j limit-1054 + inet/filter/OUTPUT -j limit-1054 + inet6/filter/OUTPUT -j limit-1054 + inet/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1054 -j RETURN + inet6/filter/limit-1054 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1054 -j RETURN + inet/filter/limit-1054 -j DROP + inet6/filter/limit-1054 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT inet6/filter/INPUT -j ACCEPT inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 992 {"action":"pass","flow-limit":{"count":150,"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-697 - inet6/filter/FORWARD -j limit-697 - inet/filter/INPUT -j limit-697 - inet6/filter/INPUT -j limit-697 - inet/filter/OUTPUT -j limit-697 - inet6/filter/OUTPUT -j limit-697 - inet/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN - inet6/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN - inet/filter/limit-697 -j DROP - inet6/filter/limit-697 -j DROP + inet6/filter/OUTPUT -j ACCEPT -Filter 993 {"flow-limit":{"count":150,"log":false},"log":true} +Filter 1350 {"action":"pass","flow-limit":{"count":150,"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-698 - inet6/filter/FORWARD -j limit-698 - inet/filter/INPUT -j limit-698 - inet6/filter/INPUT -j limit-698 - inet/filter/OUTPUT -j limit-698 - inet6/filter/OUTPUT -j limit-698 - inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j RETURN - inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j RETURN - inet/filter/limit-698 -j DROP - inet6/filter/limit-698 -j DROP + inet/filter/FORWARD -j limit-1055 + inet6/filter/FORWARD -j limit-1055 + inet/filter/INPUT -j limit-1055 + inet6/filter/INPUT -j limit-1055 + inet/filter/OUTPUT -j limit-1055 + inet6/filter/OUTPUT -j limit-1055 + inet/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1055 -j RETURN + inet6/filter/limit-1055 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1055 -j RETURN + inet/filter/limit-1055 -j DROP + inet6/filter/limit-1055 -j DROP + +Filter 1351 {"flow-limit":{"count":150,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-1056 + inet6/filter/FORWARD -j limit-1056 + inet/filter/INPUT -j limit-1056 + inet6/filter/INPUT -j limit-1056 + inet/filter/OUTPUT -j limit-1056 + inet6/filter/OUTPUT -j limit-1056 + inet/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1056 -j RETURN + inet6/filter/limit-1056 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1056 -j RETURN + inet/filter/limit-1056 -j DROP + inet6/filter/limit-1056 -j DROP inet/filter/FORWARD -j logaccept-final-57 inet6/filter/FORWARD -j logaccept-final-57 inet/filter/INPUT -j logaccept-final-57 @@ -12662,18 +16310,18 @@ Filter 993 {"flow-limit":{"count":150,"log":false},"log" inet/filter/logaccept-final-57 -j ACCEPT inet6/filter/logaccept-final-57 -j ACCEPT -Filter 994 {"flow-limit":{"count":150,"log":false},"log":"none"} +Filter 1352 {"flow-limit":{"count":150,"log":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-699 - inet6/filter/FORWARD -j limit-699 - inet/filter/INPUT -j limit-699 - inet6/filter/INPUT -j limit-699 - inet/filter/OUTPUT -j limit-699 - inet6/filter/OUTPUT -j limit-699 - inet/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j RETURN - inet6/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j RETURN - inet/filter/limit-699 -j DROP - inet6/filter/limit-699 -j DROP + inet/filter/FORWARD -j limit-1057 + inet6/filter/FORWARD -j limit-1057 + inet/filter/INPUT -j limit-1057 + inet6/filter/INPUT -j limit-1057 + inet/filter/OUTPUT -j limit-1057 + inet6/filter/OUTPUT -j limit-1057 + inet/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1057 -j RETURN + inet6/filter/limit-1057 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1057 -j RETURN + inet/filter/limit-1057 -j DROP + inet6/filter/limit-1057 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12681,18 +16329,18 @@ Filter 994 {"flow-limit":{"count":150,"log":false},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 995 {"flow-limit":{"count":150,"log":"none"}} +Filter 1353 {"flow-limit":{"count":150,"log":"none"}} (filter-limit) - inet/filter/FORWARD -j limit-700 - inet6/filter/FORWARD -j limit-700 - inet/filter/INPUT -j limit-700 - inet6/filter/INPUT -j limit-700 - inet/filter/OUTPUT -j limit-700 - inet6/filter/OUTPUT -j limit-700 - inet/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j RETURN - inet6/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j RETURN - inet/filter/limit-700 -j DROP - inet6/filter/limit-700 -j DROP + inet/filter/FORWARD -j limit-1058 + inet6/filter/FORWARD -j limit-1058 + inet/filter/INPUT -j limit-1058 + inet6/filter/INPUT -j limit-1058 + inet/filter/OUTPUT -j limit-1058 + inet6/filter/OUTPUT -j limit-1058 + inet/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1058 -j RETURN + inet6/filter/limit-1058 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1058 -j RETURN + inet/filter/limit-1058 -j DROP + inet6/filter/limit-1058 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12700,31 +16348,31 @@ Filter 995 {"flow-limit":{"count":150,"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 996 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +Filter 1354 {"action":"pass","flow-limit":{"count":150,"log":"none"}} (filter-limit) - inet/filter/FORWARD -j limit-701 - inet6/filter/FORWARD -j limit-701 - inet/filter/INPUT -j limit-701 - inet6/filter/INPUT -j limit-701 - inet/filter/OUTPUT -j limit-701 - inet6/filter/OUTPUT -j limit-701 - inet/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN - inet6/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN - inet/filter/limit-701 -j DROP - inet6/filter/limit-701 -j DROP + inet/filter/FORWARD -j limit-1059 + inet6/filter/FORWARD -j limit-1059 + inet/filter/INPUT -j limit-1059 + inet6/filter/INPUT -j limit-1059 + inet/filter/OUTPUT -j limit-1059 + inet6/filter/OUTPUT -j limit-1059 + inet/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1059 -j RETURN + inet6/filter/limit-1059 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1059 -j RETURN + inet/filter/limit-1059 -j DROP + inet6/filter/limit-1059 -j DROP -Filter 997 {"flow-limit":{"count":150,"log":"none"},"log":true} +Filter 1355 {"flow-limit":{"count":150,"log":"none"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-702 - inet6/filter/FORWARD -j limit-702 - inet/filter/INPUT -j limit-702 - inet6/filter/INPUT -j limit-702 - inet/filter/OUTPUT -j limit-702 - inet6/filter/OUTPUT -j limit-702 - inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j RETURN - inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j RETURN - inet/filter/limit-702 -j DROP - inet6/filter/limit-702 -j DROP + inet/filter/FORWARD -j limit-1060 + inet6/filter/FORWARD -j limit-1060 + inet/filter/INPUT -j limit-1060 + inet6/filter/INPUT -j limit-1060 + inet/filter/OUTPUT -j limit-1060 + inet6/filter/OUTPUT -j limit-1060 + inet/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1060 -j RETURN + inet6/filter/limit-1060 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1060 -j RETURN + inet/filter/limit-1060 -j DROP + inet6/filter/limit-1060 -j DROP inet/filter/FORWARD -j logaccept-final-58 inet6/filter/FORWARD -j logaccept-final-58 inet/filter/INPUT -j logaccept-final-58 @@ -12736,18 +16384,18 @@ Filter 997 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/logaccept-final-58 -j ACCEPT inet6/filter/logaccept-final-58 -j ACCEPT -Filter 998 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +Filter 1356 {"flow-limit":{"count":150,"log":"none"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-703 - inet6/filter/FORWARD -j limit-703 - inet/filter/INPUT -j limit-703 - inet6/filter/INPUT -j limit-703 - inet/filter/OUTPUT -j limit-703 - inet6/filter/OUTPUT -j limit-703 - inet/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j RETURN - inet6/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j RETURN - inet/filter/limit-703 -j DROP - inet6/filter/limit-703 -j DROP + inet/filter/FORWARD -j limit-1061 + inet6/filter/FORWARD -j limit-1061 + inet/filter/INPUT -j limit-1061 + inet6/filter/INPUT -j limit-1061 + inet/filter/OUTPUT -j limit-1061 + inet6/filter/OUTPUT -j limit-1061 + inet/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1061 -j RETURN + inet6/filter/limit-1061 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1061 -j RETURN + inet/filter/limit-1061 -j DROP + inet6/filter/limit-1061 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12755,20 +16403,20 @@ Filter 998 {"flow-limit":{"count":150,"log":"none"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 999 {"flow-limit":{"count":150,"interval":5}} +Filter 1357 {"flow-limit":{"count":150,"interval":5}} (filter-limit) - inet/filter/FORWARD -j limit-704 - inet6/filter/FORWARD -j limit-704 - inet/filter/INPUT -j limit-704 - inet6/filter/INPUT -j limit-704 - inet/filter/OUTPUT -j limit-704 - inet6/filter/OUTPUT -j limit-704 - inet/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j RETURN - inet6/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j RETURN - inet/filter/limit-704 -m limit --limit 1/second -j LOG - inet6/filter/limit-704 -m limit --limit 1/second -j LOG - inet/filter/limit-704 -j DROP - inet6/filter/limit-704 -j DROP + inet/filter/FORWARD -j limit-1062 + inet6/filter/FORWARD -j limit-1062 + inet/filter/INPUT -j limit-1062 + inet6/filter/INPUT -j limit-1062 + inet/filter/OUTPUT -j limit-1062 + inet6/filter/OUTPUT -j limit-1062 + inet/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1062 -j RETURN + inet6/filter/limit-1062 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1062 -j RETURN + inet/filter/limit-1062 -m limit --limit 1/second -j LOG + inet6/filter/limit-1062 -m limit --limit 1/second -j LOG + inet/filter/limit-1062 -j DROP + inet6/filter/limit-1062 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12776,35 +16424,35 @@ Filter 999 {"flow-limit":{"count":150,"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1000 {"action":"pass","flow-limit":{"count":150,"interval":5}} +Filter 1358 {"action":"pass","flow-limit":{"count":150,"interval":5}} (filter-limit) - inet/filter/FORWARD -j limit-705 - inet6/filter/FORWARD -j limit-705 - inet/filter/INPUT -j limit-705 - inet6/filter/INPUT -j limit-705 - inet/filter/OUTPUT -j limit-705 - inet6/filter/OUTPUT -j limit-705 - inet/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN - inet6/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN - inet/filter/limit-705 -m limit --limit 1/second -j LOG - inet6/filter/limit-705 -m limit --limit 1/second -j LOG - inet/filter/limit-705 -j DROP - inet6/filter/limit-705 -j DROP + inet/filter/FORWARD -j limit-1063 + inet6/filter/FORWARD -j limit-1063 + inet/filter/INPUT -j limit-1063 + inet6/filter/INPUT -j limit-1063 + inet/filter/OUTPUT -j limit-1063 + inet6/filter/OUTPUT -j limit-1063 + inet/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1063 -j RETURN + inet6/filter/limit-1063 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1063 -j RETURN + inet/filter/limit-1063 -m limit --limit 1/second -j LOG + inet6/filter/limit-1063 -m limit --limit 1/second -j LOG + inet/filter/limit-1063 -j DROP + inet6/filter/limit-1063 -j DROP -Filter 1001 {"flow-limit":{"count":150,"interval":5},"log":true} +Filter 1359 {"flow-limit":{"count":150,"interval":5},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-706 - inet6/filter/FORWARD -j limit-706 - inet/filter/INPUT -j limit-706 - inet6/filter/INPUT -j limit-706 - inet/filter/OUTPUT -j limit-706 - inet6/filter/OUTPUT -j limit-706 - inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j RETURN - inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j RETURN - inet/filter/limit-706 -m limit --limit 1/second -j LOG - inet6/filter/limit-706 -m limit --limit 1/second -j LOG - inet/filter/limit-706 -j DROP - inet6/filter/limit-706 -j DROP + inet/filter/FORWARD -j limit-1064 + inet6/filter/FORWARD -j limit-1064 + inet/filter/INPUT -j limit-1064 + inet6/filter/INPUT -j limit-1064 + inet/filter/OUTPUT -j limit-1064 + inet6/filter/OUTPUT -j limit-1064 + inet/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1064 -j RETURN + inet6/filter/limit-1064 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1064 -j RETURN + inet/filter/limit-1064 -m limit --limit 1/second -j LOG + inet6/filter/limit-1064 -m limit --limit 1/second -j LOG + inet/filter/limit-1064 -j DROP + inet6/filter/limit-1064 -j DROP inet/filter/FORWARD -j logaccept-final-59 inet6/filter/FORWARD -j logaccept-final-59 inet/filter/INPUT -j logaccept-final-59 @@ -12816,20 +16464,20 @@ Filter 1001 {"flow-limit":{"count":150,"interval":5},"log inet/filter/logaccept-final-59 -j ACCEPT inet6/filter/logaccept-final-59 -j ACCEPT -Filter 1002 {"flow-limit":{"count":150,"interval":5},"log":"none"} +Filter 1360 {"flow-limit":{"count":150,"interval":5},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-707 - inet6/filter/FORWARD -j limit-707 - inet/filter/INPUT -j limit-707 - inet6/filter/INPUT -j limit-707 - inet/filter/OUTPUT -j limit-707 - inet6/filter/OUTPUT -j limit-707 - inet/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j RETURN - inet6/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j RETURN - inet/filter/limit-707 -m limit --limit 1/second -j LOG - inet6/filter/limit-707 -m limit --limit 1/second -j LOG - inet/filter/limit-707 -j DROP - inet6/filter/limit-707 -j DROP + inet/filter/FORWARD -j limit-1065 + inet6/filter/FORWARD -j limit-1065 + inet/filter/INPUT -j limit-1065 + inet6/filter/INPUT -j limit-1065 + inet/filter/OUTPUT -j limit-1065 + inet6/filter/OUTPUT -j limit-1065 + inet/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1065 -j RETURN + inet6/filter/limit-1065 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1065 -j RETURN + inet/filter/limit-1065 -m limit --limit 1/second -j LOG + inet6/filter/limit-1065 -m limit --limit 1/second -j LOG + inet/filter/limit-1065 -j DROP + inet6/filter/limit-1065 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12837,18 +16485,18 @@ Filter 1002 {"flow-limit":{"count":150,"interval":5},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1003 {"flow-limit":{"count":150,"interval":5,"log":false}} +Filter 1361 {"flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-708 - inet6/filter/FORWARD -j limit-708 - inet/filter/INPUT -j limit-708 - inet6/filter/INPUT -j limit-708 - inet/filter/OUTPUT -j limit-708 - inet6/filter/OUTPUT -j limit-708 - inet/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j RETURN - inet6/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j RETURN - inet/filter/limit-708 -j DROP - inet6/filter/limit-708 -j DROP + inet/filter/FORWARD -j limit-1066 + inet6/filter/FORWARD -j limit-1066 + inet/filter/INPUT -j limit-1066 + inet6/filter/INPUT -j limit-1066 + inet/filter/OUTPUT -j limit-1066 + inet6/filter/OUTPUT -j limit-1066 + inet/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1066 -j RETURN + inet6/filter/limit-1066 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1066 -j RETURN + inet/filter/limit-1066 -j DROP + inet6/filter/limit-1066 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12856,31 +16504,31 @@ Filter 1003 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1004 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +Filter 1362 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-709 - inet6/filter/FORWARD -j limit-709 - inet/filter/INPUT -j limit-709 - inet6/filter/INPUT -j limit-709 - inet/filter/OUTPUT -j limit-709 - inet6/filter/OUTPUT -j limit-709 - inet/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN - inet6/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN - inet/filter/limit-709 -j DROP - inet6/filter/limit-709 -j DROP + inet/filter/FORWARD -j limit-1067 + inet6/filter/FORWARD -j limit-1067 + inet/filter/INPUT -j limit-1067 + inet6/filter/INPUT -j limit-1067 + inet/filter/OUTPUT -j limit-1067 + inet6/filter/OUTPUT -j limit-1067 + inet/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1067 -j RETURN + inet6/filter/limit-1067 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1067 -j RETURN + inet/filter/limit-1067 -j DROP + inet6/filter/limit-1067 -j DROP -Filter 1005 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +Filter 1363 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-710 - inet6/filter/FORWARD -j limit-710 - inet/filter/INPUT -j limit-710 - inet6/filter/INPUT -j limit-710 - inet/filter/OUTPUT -j limit-710 - inet6/filter/OUTPUT -j limit-710 - inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j RETURN - inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j RETURN - inet/filter/limit-710 -j DROP - inet6/filter/limit-710 -j DROP + inet/filter/FORWARD -j limit-1068 + inet6/filter/FORWARD -j limit-1068 + inet/filter/INPUT -j limit-1068 + inet6/filter/INPUT -j limit-1068 + inet/filter/OUTPUT -j limit-1068 + inet6/filter/OUTPUT -j limit-1068 + inet/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1068 -j RETURN + inet6/filter/limit-1068 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1068 -j RETURN + inet/filter/limit-1068 -j DROP + inet6/filter/limit-1068 -j DROP inet/filter/FORWARD -j logaccept-final-60 inet6/filter/FORWARD -j logaccept-final-60 inet/filter/INPUT -j logaccept-final-60 @@ -12892,18 +16540,18 @@ Filter 1005 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-60 -j ACCEPT inet6/filter/logaccept-final-60 -j ACCEPT -Filter 1006 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +Filter 1364 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-711 - inet6/filter/FORWARD -j limit-711 - inet/filter/INPUT -j limit-711 - inet6/filter/INPUT -j limit-711 - inet/filter/OUTPUT -j limit-711 - inet6/filter/OUTPUT -j limit-711 - inet/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j RETURN - inet6/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j RETURN - inet/filter/limit-711 -j DROP - inet6/filter/limit-711 -j DROP + inet/filter/FORWARD -j limit-1069 + inet6/filter/FORWARD -j limit-1069 + inet/filter/INPUT -j limit-1069 + inet6/filter/INPUT -j limit-1069 + inet/filter/OUTPUT -j limit-1069 + inet6/filter/OUTPUT -j limit-1069 + inet/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1069 -j RETURN + inet6/filter/limit-1069 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1069 -j RETURN + inet/filter/limit-1069 -j DROP + inet6/filter/limit-1069 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12911,18 +16559,18 @@ Filter 1006 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1007 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 1365 {"flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) - inet/filter/FORWARD -j limit-712 - inet6/filter/FORWARD -j limit-712 - inet/filter/INPUT -j limit-712 - inet6/filter/INPUT -j limit-712 - inet/filter/OUTPUT -j limit-712 - inet6/filter/OUTPUT -j limit-712 - inet/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j RETURN - inet6/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j RETURN - inet/filter/limit-712 -j DROP - inet6/filter/limit-712 -j DROP + inet/filter/FORWARD -j limit-1070 + inet6/filter/FORWARD -j limit-1070 + inet/filter/INPUT -j limit-1070 + inet6/filter/INPUT -j limit-1070 + inet/filter/OUTPUT -j limit-1070 + inet6/filter/OUTPUT -j limit-1070 + inet/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1070 -j RETURN + inet6/filter/limit-1070 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1070 -j RETURN + inet/filter/limit-1070 -j DROP + inet6/filter/limit-1070 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12930,31 +16578,31 @@ Filter 1007 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1008 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +Filter 1366 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} (filter-limit) - inet/filter/FORWARD -j limit-713 - inet6/filter/FORWARD -j limit-713 - inet/filter/INPUT -j limit-713 - inet6/filter/INPUT -j limit-713 - inet/filter/OUTPUT -j limit-713 - inet6/filter/OUTPUT -j limit-713 - inet/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN - inet6/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN - inet/filter/limit-713 -j DROP - inet6/filter/limit-713 -j DROP + inet/filter/FORWARD -j limit-1071 + inet6/filter/FORWARD -j limit-1071 + inet/filter/INPUT -j limit-1071 + inet6/filter/INPUT -j limit-1071 + inet/filter/OUTPUT -j limit-1071 + inet6/filter/OUTPUT -j limit-1071 + inet/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1071 -j RETURN + inet6/filter/limit-1071 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1071 -j RETURN + inet/filter/limit-1071 -j DROP + inet6/filter/limit-1071 -j DROP -Filter 1009 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +Filter 1367 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-714 - inet6/filter/FORWARD -j limit-714 - inet/filter/INPUT -j limit-714 - inet6/filter/INPUT -j limit-714 - inet/filter/OUTPUT -j limit-714 - inet6/filter/OUTPUT -j limit-714 - inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j RETURN - inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j RETURN - inet/filter/limit-714 -j DROP - inet6/filter/limit-714 -j DROP + inet/filter/FORWARD -j limit-1072 + inet6/filter/FORWARD -j limit-1072 + inet/filter/INPUT -j limit-1072 + inet6/filter/INPUT -j limit-1072 + inet/filter/OUTPUT -j limit-1072 + inet6/filter/OUTPUT -j limit-1072 + inet/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1072 -j RETURN + inet6/filter/limit-1072 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1072 -j RETURN + inet/filter/limit-1072 -j DROP + inet6/filter/limit-1072 -j DROP inet/filter/FORWARD -j logaccept-final-61 inet6/filter/FORWARD -j logaccept-final-61 inet/filter/INPUT -j logaccept-final-61 @@ -12966,18 +16614,18 @@ Filter 1009 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/logaccept-final-61 -j ACCEPT inet6/filter/logaccept-final-61 -j ACCEPT -Filter 1010 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +Filter 1368 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-715 - inet6/filter/FORWARD -j limit-715 - inet/filter/INPUT -j limit-715 - inet6/filter/INPUT -j limit-715 - inet/filter/OUTPUT -j limit-715 - inet6/filter/OUTPUT -j limit-715 - inet/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j RETURN - inet6/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j RETURN - inet/filter/limit-715 -j DROP - inet6/filter/limit-715 -j DROP + inet/filter/FORWARD -j limit-1073 + inet6/filter/FORWARD -j limit-1073 + inet/filter/INPUT -j limit-1073 + inet6/filter/INPUT -j limit-1073 + inet/filter/OUTPUT -j limit-1073 + inet6/filter/OUTPUT -j limit-1073 + inet/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-1073 -j RETURN + inet6/filter/limit-1073 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-1073 -j RETURN + inet/filter/limit-1073 -j DROP + inet6/filter/limit-1073 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -12985,18 +16633,18 @@ Filter 1010 {"flow-limit":{"count":150,"interval":5,"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 1011 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 1369 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-716 - inet6/filter/INPUT -i eth0 -j limit-716 - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 - inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 - inet/filter/logdrop-229 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG - inet/filter/logdrop-229 -j DROP - inet6/filter/logdrop-229 -j DROP - inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1074 + inet6/filter/INPUT -i eth0 -j limit-1074 + inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-343 + inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-343 + inet/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-343 -m limit --limit 1/second -j LOG + inet/filter/logdrop-343 -j DROP + inet6/filter/logdrop-343 -j DROP + inet/filter/limit-1074 -m recent --name limit-1074 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1074 -m recent --name limit-1074 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13004,35 +16652,35 @@ Filter 1011 {"flow-limit":1,"in":"A","no-track":true,"out inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1012 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +Filter 1370 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-717 - inet6/filter/INPUT -i eth0 -j limit-717 - inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 - inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 - inet/filter/logdrop-230 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG - inet/filter/logdrop-230 -j DROP - inet6/filter/logdrop-230 -j DROP - inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1075 + inet6/filter/INPUT -i eth0 -j limit-1075 + inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-344 + inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-344 + inet/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-344 -m limit --limit 1/second -j LOG + inet/filter/logdrop-344 -j DROP + inet6/filter/logdrop-344 -j DROP + inet/filter/limit-1075 -m recent --name limit-1075 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1075 -m recent --name limit-1075 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1013 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1371 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-718 - inet6/filter/INPUT -i eth0 -j limit-718 - inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 - inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 - inet/filter/logdrop-231 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG - inet/filter/logdrop-231 -j DROP - inet6/filter/logdrop-231 -j DROP - inet/filter/limit-718 -m limit --limit 1/second -j LOG - inet6/filter/limit-718 -m limit --limit 1/second -j LOG - inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1076 + inet6/filter/INPUT -i eth0 -j limit-1076 + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-345 + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-345 + inet/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-345 -m limit --limit 1/second -j LOG + inet/filter/logdrop-345 -j DROP + inet6/filter/logdrop-345 -j DROP + inet/filter/limit-1076 -m limit --limit 1/second -j LOG + inet6/filter/limit-1076 -m limit --limit 1/second -j LOG + inet/filter/limit-1076 -m recent --name limit-1076 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1076 -m recent --name limit-1076 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13040,33 +16688,33 @@ Filter 1013 {"flow-limit":1,"in":"A","log":true,"no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1014 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1372 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-719 - inet6/filter/INPUT -i eth0 -j limit-719 - inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 - inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 - inet/filter/logdrop-232 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG - inet/filter/logdrop-232 -j DROP - inet6/filter/logdrop-232 -j DROP - inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1077 + inet6/filter/INPUT -i eth0 -j limit-1077 + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-346 + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-346 + inet/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-346 -m limit --limit 1/second -j LOG + inet/filter/logdrop-346 -j DROP + inet6/filter/logdrop-346 -j DROP + inet/filter/limit-1077 -m recent --name limit-1077 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1077 -m recent --name limit-1077 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1015 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1373 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-720 - inet6/filter/INPUT -i eth0 -j limit-720 - inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 - inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 - inet/filter/logdrop-233 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG - inet/filter/logdrop-233 -j DROP - inet6/filter/logdrop-233 -j DROP - inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1078 + inet6/filter/INPUT -i eth0 -j limit-1078 + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-347 + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-347 + inet/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-347 -m limit --limit 1/second -j LOG + inet/filter/logdrop-347 -j DROP + inet6/filter/logdrop-347 -j DROP + inet/filter/limit-1078 -m recent --name limit-1078 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1078 -m recent --name limit-1078 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13074,33 +16722,33 @@ Filter 1015 {"flow-limit":1,"in":"A","log":"none","no-tra inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1016 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1374 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-721 - inet6/filter/INPUT -i eth0 -j limit-721 - inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 - inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 - inet/filter/logdrop-234 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG - inet/filter/logdrop-234 -j DROP - inet6/filter/logdrop-234 -j DROP - inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1079 + inet6/filter/INPUT -i eth0 -j limit-1079 + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-348 + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-348 + inet/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-348 -m limit --limit 1/second -j LOG + inet/filter/logdrop-348 -j DROP + inet6/filter/logdrop-348 -j DROP + inet/filter/limit-1079 -m recent --name limit-1079 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1079 -m recent --name limit-1079 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1017 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 1375 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-722 - inet6/filter/INPUT -i eth0 -j limit-722 - inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 - inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 - inet/filter/logdrop-235 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG - inet/filter/logdrop-235 -j DROP - inet6/filter/logdrop-235 -j DROP - inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1080 + inet6/filter/INPUT -i eth0 -j limit-1080 + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-349 + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-349 + inet/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-349 -m limit --limit 1/second -j LOG + inet/filter/logdrop-349 -j DROP + inet6/filter/logdrop-349 -j DROP + inet/filter/limit-1080 -m recent --name limit-1080 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1080 -m recent --name limit-1080 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13108,35 +16756,35 @@ Filter 1017 {"flow-limit":{},"in":"A","no-track":true,"ou inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1018 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +Filter 1376 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-723 - inet6/filter/INPUT -i eth0 -j limit-723 - inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 - inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 - inet/filter/logdrop-236 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG - inet/filter/logdrop-236 -j DROP - inet6/filter/logdrop-236 -j DROP - inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1081 + inet6/filter/INPUT -i eth0 -j limit-1081 + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-350 + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-350 + inet/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-350 -m limit --limit 1/second -j LOG + inet/filter/logdrop-350 -j DROP + inet6/filter/logdrop-350 -j DROP + inet/filter/limit-1081 -m recent --name limit-1081 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1081 -m recent --name limit-1081 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1019 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1377 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-724 - inet6/filter/INPUT -i eth0 -j limit-724 - inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 - inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 - inet/filter/logdrop-237 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG - inet/filter/logdrop-237 -j DROP - inet6/filter/logdrop-237 -j DROP - inet/filter/limit-724 -m limit --limit 1/second -j LOG - inet6/filter/limit-724 -m limit --limit 1/second -j LOG - inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1082 + inet6/filter/INPUT -i eth0 -j limit-1082 + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-351 + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-351 + inet/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-351 -m limit --limit 1/second -j LOG + inet/filter/logdrop-351 -j DROP + inet6/filter/logdrop-351 -j DROP + inet/filter/limit-1082 -m limit --limit 1/second -j LOG + inet6/filter/limit-1082 -m limit --limit 1/second -j LOG + inet/filter/limit-1082 -m recent --name limit-1082 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1082 -m recent --name limit-1082 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13144,33 +16792,33 @@ Filter 1019 {"flow-limit":{},"in":"A","log":true,"no-trac inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1020 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1378 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-725 - inet6/filter/INPUT -i eth0 -j limit-725 - inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 - inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 - inet/filter/logdrop-238 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG - inet/filter/logdrop-238 -j DROP - inet6/filter/logdrop-238 -j DROP - inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1083 + inet6/filter/INPUT -i eth0 -j limit-1083 + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-352 + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-352 + inet/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-352 -m limit --limit 1/second -j LOG + inet/filter/logdrop-352 -j DROP + inet6/filter/logdrop-352 -j DROP + inet/filter/limit-1083 -m recent --name limit-1083 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1083 -m recent --name limit-1083 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1021 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1379 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-726 - inet6/filter/INPUT -i eth0 -j limit-726 - inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 - inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 - inet/filter/logdrop-239 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG - inet/filter/logdrop-239 -j DROP - inet6/filter/logdrop-239 -j DROP - inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1084 + inet6/filter/INPUT -i eth0 -j limit-1084 + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-353 + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-353 + inet/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-353 -m limit --limit 1/second -j LOG + inet/filter/logdrop-353 -j DROP + inet6/filter/logdrop-353 -j DROP + inet/filter/limit-1084 -m recent --name limit-1084 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1084 -m recent --name limit-1084 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13178,33 +16826,33 @@ Filter 1021 {"flow-limit":{},"in":"A","log":"none","no-tr inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1022 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1380 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-727 - inet6/filter/INPUT -i eth0 -j limit-727 - inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 - inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 - inet/filter/logdrop-240 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG - inet/filter/logdrop-240 -j DROP - inet6/filter/logdrop-240 -j DROP - inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1085 + inet6/filter/INPUT -i eth0 -j limit-1085 + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-354 + inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-354 + inet/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-354 -m limit --limit 1/second -j LOG + inet/filter/logdrop-354 -j DROP + inet6/filter/logdrop-354 -j DROP + inet/filter/limit-1085 -m recent --name limit-1085 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1085 -m recent --name limit-1085 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1023 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1381 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-728 - inet6/filter/INPUT -i eth0 -j limit-728 - inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 - inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 - inet/filter/logdrop-241 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG - inet/filter/logdrop-241 -j DROP - inet6/filter/logdrop-241 -j DROP - inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1086 + inet6/filter/INPUT -i eth0 -j limit-1086 + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-355 + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-355 + inet/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-355 -m limit --limit 1/second -j LOG + inet/filter/logdrop-355 -j DROP + inet6/filter/logdrop-355 -j DROP + inet/filter/limit-1086 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1086 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13212,35 +16860,35 @@ Filter 1023 {"flow-limit":{"name":"A"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1024 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1382 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-729 - inet6/filter/INPUT -i eth0 -j limit-729 - inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 - inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 - inet/filter/logdrop-242 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG - inet/filter/logdrop-242 -j DROP - inet6/filter/logdrop-242 -j DROP - inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1087 + inet6/filter/INPUT -i eth0 -j limit-1087 + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-356 + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-356 + inet/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-356 -m limit --limit 1/second -j LOG + inet/filter/logdrop-356 -j DROP + inet6/filter/logdrop-356 -j DROP + inet/filter/limit-1087 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1087 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1025 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1383 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-730 - inet6/filter/INPUT -i eth0 -j limit-730 - inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 - inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 - inet/filter/logdrop-243 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG - inet/filter/logdrop-243 -j DROP - inet6/filter/logdrop-243 -j DROP - inet/filter/limit-730 -m limit --limit 1/second -j LOG - inet6/filter/limit-730 -m limit --limit 1/second -j LOG - inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1088 + inet6/filter/INPUT -i eth0 -j limit-1088 + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-357 + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-357 + inet/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-357 -m limit --limit 1/second -j LOG + inet/filter/logdrop-357 -j DROP + inet6/filter/logdrop-357 -j DROP + inet/filter/limit-1088 -m limit --limit 1/second -j LOG + inet6/filter/limit-1088 -m limit --limit 1/second -j LOG + inet/filter/limit-1088 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1088 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13248,33 +16896,33 @@ Filter 1025 {"flow-limit":{"name":"A"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1026 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1384 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-731 - inet6/filter/INPUT -i eth0 -j limit-731 - inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 - inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 - inet/filter/logdrop-244 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG - inet/filter/logdrop-244 -j DROP - inet6/filter/logdrop-244 -j DROP - inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1089 + inet6/filter/INPUT -i eth0 -j limit-1089 + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-358 + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-358 + inet/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-358 -m limit --limit 1/second -j LOG + inet/filter/logdrop-358 -j DROP + inet6/filter/logdrop-358 -j DROP + inet/filter/limit-1089 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1089 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1027 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1385 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-732 - inet6/filter/INPUT -i eth0 -j limit-732 - inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 - inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 - inet/filter/logdrop-245 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG - inet/filter/logdrop-245 -j DROP - inet6/filter/logdrop-245 -j DROP - inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1090 + inet6/filter/INPUT -i eth0 -j limit-1090 + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-359 + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-359 + inet/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-359 -m limit --limit 1/second -j LOG + inet/filter/logdrop-359 -j DROP + inet6/filter/logdrop-359 -j DROP + inet/filter/limit-1090 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1090 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13282,33 +16930,33 @@ Filter 1027 {"flow-limit":{"name":"A"},"in":"A","log":"no inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1028 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1386 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-733 - inet6/filter/INPUT -i eth0 -j limit-733 - inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 - inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 - inet/filter/logdrop-246 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG - inet/filter/logdrop-246 -j DROP - inet6/filter/logdrop-246 -j DROP - inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1091 + inet6/filter/INPUT -i eth0 -j limit-1091 + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-360 + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-360 + inet/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-360 -m limit --limit 1/second -j LOG + inet/filter/logdrop-360 -j DROP + inet6/filter/logdrop-360 -j DROP + inet/filter/limit-1091 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-1091 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1029 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1387 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-734 - inet6/filter/INPUT -i eth0 -j limit-734 - inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 - inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 - inet/filter/logdrop-247 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG - inet/filter/logdrop-247 -j DROP - inet6/filter/logdrop-247 -j DROP - inet/filter/limit-734 -j ACCEPT - inet6/filter/limit-734 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1092 + inet6/filter/INPUT -i eth0 -j limit-1092 + inet/filter/limit-1092 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-361 + inet6/filter/limit-1092 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-361 + inet/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-361 -m limit --limit 1/second -j LOG + inet/filter/logdrop-361 -j DROP + inet6/filter/logdrop-361 -j DROP + inet/filter/limit-1092 -j ACCEPT + inet6/filter/limit-1092 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13316,31 +16964,31 @@ Filter 1029 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1030 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} -(filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 - inet/filter/logdrop-248 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG - inet/filter/logdrop-248 -j DROP - inet6/filter/logdrop-248 -j DROP +Filter 1388 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-362 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-362 + inet/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-362 -m limit --limit 1/second -j LOG + inet/filter/logdrop-362 -j DROP + inet6/filter/logdrop-362 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1031 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1389 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-736 - inet6/filter/INPUT -i eth0 -j limit-736 - inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 - inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 - inet/filter/logdrop-249 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG - inet/filter/logdrop-249 -j DROP - inet6/filter/logdrop-249 -j DROP - inet/filter/limit-736 -m limit --limit 1/second -j LOG - inet6/filter/limit-736 -m limit --limit 1/second -j LOG - inet/filter/limit-736 -j ACCEPT - inet6/filter/limit-736 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1094 + inet6/filter/INPUT -i eth0 -j limit-1094 + inet/filter/limit-1094 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-363 + inet6/filter/limit-1094 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-363 + inet/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-363 -m limit --limit 1/second -j LOG + inet/filter/logdrop-363 -j DROP + inet6/filter/logdrop-363 -j DROP + inet/filter/limit-1094 -m limit --limit 1/second -j LOG + inet6/filter/limit-1094 -m limit --limit 1/second -j LOG + inet/filter/limit-1094 -j ACCEPT + inet6/filter/limit-1094 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13348,33 +16996,33 @@ Filter 1031 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1032 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1390 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-737 - inet6/filter/INPUT -i eth0 -j limit-737 - inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 - inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 - inet/filter/logdrop-250 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG - inet/filter/logdrop-250 -j DROP - inet6/filter/logdrop-250 -j DROP - inet/filter/limit-737 -m limit --limit 1/second -j LOG - inet6/filter/limit-737 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1095 + inet6/filter/INPUT -i eth0 -j limit-1095 + inet/filter/limit-1095 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-364 + inet6/filter/limit-1095 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-364 + inet/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-364 -m limit --limit 1/second -j LOG + inet/filter/logdrop-364 -j DROP + inet6/filter/logdrop-364 -j DROP + inet/filter/limit-1095 -m limit --limit 1/second -j LOG + inet6/filter/limit-1095 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1033 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1391 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-738 - inet6/filter/INPUT -i eth0 -j limit-738 - inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 - inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 - inet/filter/logdrop-251 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG - inet/filter/logdrop-251 -j DROP - inet6/filter/logdrop-251 -j DROP - inet/filter/limit-738 -j ACCEPT - inet6/filter/limit-738 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1096 + inet6/filter/INPUT -i eth0 -j limit-1096 + inet/filter/limit-1096 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-365 + inet6/filter/limit-1096 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-365 + inet/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-365 -m limit --limit 1/second -j LOG + inet/filter/logdrop-365 -j DROP + inet6/filter/logdrop-365 -j DROP + inet/filter/limit-1096 -j ACCEPT + inet6/filter/limit-1096 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13382,29 +17030,29 @@ Filter 1033 {"flow-limit":{"name":"A","update":false},"in inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1034 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1392 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 - inet/filter/logdrop-252 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG - inet/filter/logdrop-252 -j DROP - inet6/filter/logdrop-252 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-366 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-366 + inet/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-366 -m limit --limit 1/second -j LOG + inet/filter/logdrop-366 -j DROP + inet6/filter/logdrop-366 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1035 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1393 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-740 - inet6/filter/INPUT -i eth0 -j limit-740 - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 - inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 - inet/filter/logdrop-253 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG - inet/filter/logdrop-253 -j DROP - inet6/filter/logdrop-253 -j DROP - inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1098 + inet6/filter/INPUT -i eth0 -j limit-1098 + inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-367 + inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-367 + inet/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-367 -m limit --limit 1/second -j LOG + inet/filter/logdrop-367 -j DROP + inet6/filter/logdrop-367 -j DROP + inet/filter/limit-1098 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1098 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13412,35 +17060,35 @@ Filter 1035 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1036 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +Filter 1394 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-741 - inet6/filter/INPUT -i eth0 -j limit-741 - inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 - inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 - inet/filter/logdrop-254 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG - inet/filter/logdrop-254 -j DROP - inet6/filter/logdrop-254 -j DROP - inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1099 + inet6/filter/INPUT -i eth0 -j limit-1099 + inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-368 + inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-368 + inet/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-368 -m limit --limit 1/second -j LOG + inet/filter/logdrop-368 -j DROP + inet6/filter/logdrop-368 -j DROP + inet/filter/limit-1099 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1099 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1395 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-742 - inet6/filter/INPUT -i eth0 -j limit-742 - inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 - inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 - inet/filter/logdrop-255 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG - inet/filter/logdrop-255 -j DROP - inet6/filter/logdrop-255 -j DROP - inet/filter/limit-742 -m limit --limit 1/second -j LOG - inet6/filter/limit-742 -m limit --limit 1/second -j LOG - inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1100 + inet6/filter/INPUT -i eth0 -j limit-1100 + inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-369 + inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-369 + inet/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-369 -m limit --limit 1/second -j LOG + inet/filter/logdrop-369 -j DROP + inet6/filter/logdrop-369 -j DROP + inet/filter/limit-1100 -m limit --limit 1/second -j LOG + inet6/filter/limit-1100 -m limit --limit 1/second -j LOG + inet/filter/limit-1100 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1100 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13448,33 +17096,33 @@ Filter 1037 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1038 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1396 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-743 - inet6/filter/INPUT -i eth0 -j limit-743 - inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 - inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 - inet/filter/logdrop-256 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG - inet/filter/logdrop-256 -j DROP - inet6/filter/logdrop-256 -j DROP - inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1101 + inet6/filter/INPUT -i eth0 -j limit-1101 + inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-370 + inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-370 + inet/filter/logdrop-370 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-370 -m limit --limit 1/second -j LOG + inet/filter/logdrop-370 -j DROP + inet6/filter/logdrop-370 -j DROP + inet/filter/limit-1101 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1101 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1397 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-744 - inet6/filter/INPUT -i eth0 -j limit-744 - inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 - inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 - inet/filter/logdrop-257 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG - inet/filter/logdrop-257 -j DROP - inet6/filter/logdrop-257 -j DROP - inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1102 + inet6/filter/INPUT -i eth0 -j limit-1102 + inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-371 + inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-371 + inet/filter/logdrop-371 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-371 -m limit --limit 1/second -j LOG + inet/filter/logdrop-371 -j DROP + inet6/filter/logdrop-371 -j DROP + inet/filter/limit-1102 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-1102 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13482,33 +17130,33 @@ Filter 1039 {"flow-limit":{"addr":"dest","name":"A"},"in" inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1040 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1398 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-745 - inet6/filter/INPUT -i eth0 -j limit-745 - inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 - inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 - inet/filter/logdrop-258 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG - inet/filter/logdrop-258 -j DROP - inet6/filter/logdrop-258 -j DROP - inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/INPUT -i eth0 -j limit-1103 + inet6/filter/INPUT -i eth0 -j limit-1103 + inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-372 + inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-372 + inet/filter/logdrop-372 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-372 -m limit --limit 1/second -j LOG + inet/filter/logdrop-372 -j DROP + inet6/filter/logdrop-372 -j DROP + inet/filter/limit-1103 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-1103 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1041 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1399 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-746 - inet6/filter/INPUT -i eth0 -j limit-746 - inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 - inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 - inet/filter/logdrop-259 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG - inet/filter/logdrop-259 -j DROP - inet6/filter/logdrop-259 -j DROP - inet/filter/limit-746 -j ACCEPT - inet6/filter/limit-746 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1104 + inet6/filter/INPUT -i eth0 -j limit-1104 + inet/filter/limit-1104 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-373 + inet6/filter/limit-1104 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-373 + inet/filter/logdrop-373 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-373 -m limit --limit 1/second -j LOG + inet/filter/logdrop-373 -j DROP + inet6/filter/logdrop-373 -j DROP + inet/filter/limit-1104 -j ACCEPT + inet6/filter/limit-1104 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13516,31 +17164,31 @@ Filter 1041 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1042 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +Filter 1400 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 - inet/filter/logdrop-260 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG - inet/filter/logdrop-260 -j DROP - inet6/filter/logdrop-260 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-374 + inet/filter/logdrop-374 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-374 -m limit --limit 1/second -j LOG + inet/filter/logdrop-374 -j DROP + inet6/filter/logdrop-374 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1043 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1401 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-748 - inet6/filter/INPUT -i eth0 -j limit-748 - inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 - inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 - inet/filter/logdrop-261 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG - inet/filter/logdrop-261 -j DROP - inet6/filter/logdrop-261 -j DROP - inet/filter/limit-748 -m limit --limit 1/second -j LOG - inet6/filter/limit-748 -m limit --limit 1/second -j LOG - inet/filter/limit-748 -j ACCEPT - inet6/filter/limit-748 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1106 + inet6/filter/INPUT -i eth0 -j limit-1106 + inet/filter/limit-1106 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-375 + inet6/filter/limit-1106 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-375 + inet/filter/logdrop-375 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-375 -m limit --limit 1/second -j LOG + inet/filter/logdrop-375 -j DROP + inet6/filter/logdrop-375 -j DROP + inet/filter/limit-1106 -m limit --limit 1/second -j LOG + inet6/filter/limit-1106 -m limit --limit 1/second -j LOG + inet/filter/limit-1106 -j ACCEPT + inet6/filter/limit-1106 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13548,33 +17196,33 @@ Filter 1043 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1044 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1402 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-749 - inet6/filter/INPUT -i eth0 -j limit-749 - inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 - inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 - inet/filter/logdrop-262 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG - inet/filter/logdrop-262 -j DROP - inet6/filter/logdrop-262 -j DROP - inet/filter/limit-749 -m limit --limit 1/second -j LOG - inet6/filter/limit-749 -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1107 + inet6/filter/INPUT -i eth0 -j limit-1107 + inet/filter/limit-1107 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-376 + inet6/filter/limit-1107 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-376 + inet/filter/logdrop-376 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-376 -m limit --limit 1/second -j LOG + inet/filter/logdrop-376 -j DROP + inet6/filter/logdrop-376 -j DROP + inet/filter/limit-1107 -m limit --limit 1/second -j LOG + inet6/filter/limit-1107 -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1045 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1403 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-750 - inet6/filter/INPUT -i eth0 -j limit-750 - inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 - inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 - inet/filter/logdrop-263 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG - inet/filter/logdrop-263 -j DROP - inet6/filter/logdrop-263 -j DROP - inet/filter/limit-750 -j ACCEPT - inet6/filter/limit-750 -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1108 + inet6/filter/INPUT -i eth0 -j limit-1108 + inet/filter/limit-1108 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-377 + inet6/filter/limit-1108 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-377 + inet/filter/logdrop-377 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-377 -m limit --limit 1/second -j LOG + inet/filter/logdrop-377 -j DROP + inet6/filter/logdrop-377 -j DROP + inet/filter/limit-1108 -j ACCEPT + inet6/filter/limit-1108 -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13582,29 +17230,29 @@ Filter 1045 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1046 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1404 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 - inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 - inet/filter/logdrop-264 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG - inet/filter/logdrop-264 -j DROP - inet6/filter/logdrop-264 -j DROP + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-378 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-378 + inet/filter/logdrop-378 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-378 -m limit --limit 1/second -j LOG + inet/filter/logdrop-378 -j DROP + inet6/filter/logdrop-378 -j DROP inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1047 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1405 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-752 - inet6/filter/INPUT -i eth0 -j limit-752 - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 - inet/filter/logdrop-265 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG - inet/filter/logdrop-265 -j DROP - inet6/filter/logdrop-265 -j DROP - inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1110 + inet6/filter/INPUT -i eth0 -j limit-1110 + inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-379 + inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-379 + inet/filter/logdrop-379 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-379 -m limit --limit 1/second -j LOG + inet/filter/logdrop-379 -j DROP + inet6/filter/logdrop-379 -j DROP + inet/filter/limit-1110 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1110 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13612,35 +17260,35 @@ Filter 1047 {"flow-limit":{"name":"C"},"in":"A","no-track inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1048 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +Filter 1406 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-753 - inet6/filter/INPUT -i eth0 -j limit-753 - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 - inet/filter/logdrop-266 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG - inet/filter/logdrop-266 -j DROP - inet6/filter/logdrop-266 -j DROP - inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set - inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/INPUT -i eth0 -j limit-1111 + inet6/filter/INPUT -i eth0 -j limit-1111 + inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-380 + inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-380 + inet/filter/logdrop-380 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-380 -m limit --limit 1/second -j LOG + inet/filter/logdrop-380 -j DROP + inet6/filter/logdrop-380 -j DROP + inet/filter/limit-1111 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-1111 -m recent --name user:C --rsource --mask fe00:: --set inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1049 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1407 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-754 - inet6/filter/INPUT -i eth0 -j limit-754 - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 - inet/filter/logdrop-267 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG - inet/filter/logdrop-267 -j DROP - inet6/filter/logdrop-267 -j DROP - inet/filter/limit-754 -m limit --limit 1/second -j LOG - inet6/filter/limit-754 -m limit --limit 1/second -j LOG - inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1112 + inet6/filter/INPUT -i eth0 -j limit-1112 + inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-381 + inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-381 + inet/filter/logdrop-381 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-381 -m limit --limit 1/second -j LOG + inet/filter/logdrop-381 -j DROP + inet6/filter/logdrop-381 -j DROP + inet/filter/limit-1112 -m limit --limit 1/second -j LOG + inet6/filter/limit-1112 -m limit --limit 1/second -j LOG + inet/filter/limit-1112 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-1112 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet/raw/OUTPUT -o eth0 -j CT --notrack @@ -13648,33 +17296,33 @@ Filter 1049 {"flow-limit":{"name":"C"},"in":"A","log":tru inet/filter/OUTPUT -o eth0 -j ACCEPT inet6/filter/OUTPUT -o eth0 -j ACCEPT -Filter 1050 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +Filter 1408 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-755 - inet6/filter/INPUT -i eth0 -j limit-755 - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 - inet/filter/logdrop-268 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG - inet/filter/logdrop-268 -j DROP - inet6/filter/logdrop-268 -j DROP - inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/filter/INPUT -i eth0 -j limit-1113 + inet6/filter/INPUT -i eth0 -j limit-1113 + inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-382 + inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-382 + inet/filter/logdrop-382 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-382 -m limit --limit 1/second -j LOG + inet/filter/logdrop-382 -j DROP + inet6/filter/logdrop-382 -j DROP + inet/filter/limit-1113 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-1113 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack -Filter 1051 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +Filter 1409 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/INPUT -i eth0 -j limit-756 - inet6/filter/INPUT -i eth0 -j limit-756 - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 - inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 - inet/filter/logdrop-269 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG - inet/filter/logdrop-269 -j DROP - inet6/filter/logdrop-269 -j DROP - inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT - inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/filter/INPUT -i eth0 -j limit-1114 + inet6/filter/INPUT -i eth0 -j limit-1114 + inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-383 + inet6/filter/limit-1114 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-383 + inet/filter/logdrop-383 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-383 -m limit --limit 1/second -j LOG + inet/filter/logdrop-383 -j DROP + inet6/filter/logdrop-383 -j DROP + inet/filter/limit-1114 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-111